last executing test programs: 5.694714417s ago: executing program 0 (id=1190): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) r12 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="53f8a81b133d", 0x0, 0x0, 0x10060, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000440)="800095", 0x3) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r15 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r15, 0x1, &(0x7f0000000040)='secret\x00', &(0x7f0000000100)='AQAA8/dB\x0f\xffp/\x8eN\xbf\xa7\xeb\x9eAAA=AAAAA\x00'/41, 0x0) write$tun(r14, &(0x7f0000000500)=ANY=[@ANYBLOB="08000800070303000200140007004518002800000000082f907800000000ffffffff81006559", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d2e931bf5ae5c4224767a2ad9f891d4aef1be52503d737a041fe6c9ed9b0a38707b185809a692820ef15ce0577eb00cff67a93cae90e15ee01009811a69f483add481b863d6c8cf64516d9aaab661d7d5f15645d37cf5e16386bcccf77d664d79b204c1c554122b596747cb0b1d700"/124], 0x36) ioctl$FIDEDUPERANGE(r13, 0xc0189436, &(0x7f0000000180)={0x7, 0x1, 0x1, 0x0, 0x0, [{{r11}, 0x7}]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@dontfrag={{0x10, 0x29, 0x3e, 0xff}}], 0x10}}], 0x1, 0x4000000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'wm\x00'}, 0x9) 4.146755194s ago: executing program 0 (id=1201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0xffb4, r4, 0x100, 0x4, 0x2, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x2, 0x5}}, 0x20) r10 = accept4$alg(r8, 0x0, 0x0, 0x0) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000100)="3be5902e693a", 0x6}, {&(0x7f0000000300)="10854a3b45187b4c622bff", 0xffde}], 0x2) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000000)={&(0x7f0000000c40)={{@host, 0x1}, {@hyper, 0x7}, 0x400, "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"}, 0x418, 0x2}) sendmsg$nl_netfilter(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000180)={0x1c, 0x6a, 0x0, 0x401, 0x0, 0x0, {}, [@typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r11 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) 4.098622029s ago: executing program 1 (id=1202): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write(r1, &(0x7f0000000340), 0x11000) (fail_nth: 29) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.807420013s ago: executing program 4 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}}, 0x24004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) pread64(r2, &(0x7f0000002840)=""/4101, 0x1005, 0x800100ab8e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) pread64(r2, &(0x7f0000000340)=""/69, 0x45, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0xfffe, 0xffffffffffffffff, &(0x7f0000000040)="98", 0x17060bb3c, 0x1000000, 0x0, 0x10}]) 3.674770506s ago: executing program 1 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x6000}, @val={0x1, 0x3, 0xe447, 0x1, 0x4, 0x2}, @ipv6=@generic={0x7, 0x6, "034ecc", 0x0, 0x11, 0x0, @empty, @remote}}, 0x36) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f901024301090212"], 0x0) write(r1, 0x0, 0x0) 3.601698963s ago: executing program 2 (id=1206): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9, 0xfffffffe, 0x2, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x1}, {0x7c}, {0x3, 0xfd, 0x40}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x2}]}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a000000029"], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x820c, 0x1000, 0x1, 0xfffffffe}, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$inet6(0xa, 0x3, 0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="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"], 0x7f0}, 0x1, 0x0, 0x0, 0x200480c0}, 0x0) 3.454519688s ago: executing program 4 (id=1207): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000000, 0x800, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440), 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'veth0_to_batadv\x00', @random="d976f308c05c"}) write$tun(r10, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6559, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x9}}}}, 0x36) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004b80), 0x0, 0x4000000) 3.437091335s ago: executing program 0 (id=1208): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002e00a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8004, 0x0, 0x19) 3.342238581s ago: executing program 2 (id=1209): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0}) syz_usb_connect$uac2(0x3, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x1, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0xa, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffe, 0x0, 0x8, "a9bfd6"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x6c59dd17bbd51518, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x6, 0x5}, @as_header={0x10, 0x24, 0x1, 0x4, 0x8, 0x3, 0x3, 0x9, 0x8, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x3, 0x1, {0x8, 0x25, 0x1, 0x83, 0x5f, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x3, 0x80, 0xd, "cfb2bbb056731d60b8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x49b9, 0x1, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7f}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xf, 0x25, 0x9, 0x3b}, @as_header={0x10, 0x24, 0x1, 0x6, 0xf, 0x2, 0x5, 0x1, 0x8, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x2a2607f467c8ca8a, 0x8, 0x4, 0x9, {0x8, 0x25, 0x1, 0x180, 0x0, 0xe4, 0x6}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x7, 0x9, 0x8, 0xa0}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x6, [{0xbb, &(0x7f0000000200)=@string={0xbb, 0x3, "9fdb162d0f5fbaa1563d0371f28fbe0bd411938a73e820d252b70cab3bb49438718bc2cddd86373f15e23225497f062f086a39f5523bb39584c7142f9cacd2ed5c71da92e7a2161a296c9816ea4469184f48ec89e6f8334e00d044a7b1f08fdcf8d74e072ee5500af2f11b3a2635688be2676fd6f377863942a4a22e1a97bd67dcb863cc83c5864918a8256e1fb9d25b05e55fccf3e741114753a9134b499384cd403d52ba93f7d5750853ece176dd7ea91fb3531bb3f7a4d6"}}, {0x2b, &(0x7f0000000340)=@string={0x2b, 0x3, "ef110a0e1e754b1ffa5c9349b63c3d5fba93b3c7e626f6f1897411226e50cdeaa6d51af51658098202"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) 3.291423289s ago: executing program 0 (id=1210): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f008100142603600e12080005007f3704d373000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d1684683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x14040090) 3.153651117s ago: executing program 0 (id=1211): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x7, 0x0, 0xfffff00c}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d00000001b0001000000000000000000ac141425000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027e5d9ca00080008000800000000000c0015005d07350000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 3.136108834s ago: executing program 3 (id=1212): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000010c000840000300000000000000", @ANYRES32=0x0, @ANYBLOB="fa91837da4b5f31a24001280110001006272696467655f736c617665000000000c0005800500050001000000140003006272696467655f736c6176655f300000"], 0x58}}, 0x4040) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r2 = open_tree(r1, &(0x7f0000000080)='\x00', 0x81901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x70, 0x20000}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)={0x20, 0x15, 0x4, "210200dd"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0xa, 0x0, 0x101}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x20, 0xa, 0x0, 0x5, 0x7f, {0x1c609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40092}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_CAP_HYPERV_VP_INDEX(r5, 0x4068aea3, &(0x7f00000001c0)) 3.047208824s ago: executing program 0 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x6000}, @val={0x1, 0x3, 0xe447, 0x1, 0x4, 0x2}, @ipv6=@generic={0x7, 0x6, "034ecc", 0x0, 0x11, 0x0, @empty, @remote}}, 0x36) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f90102430109"], 0x0) write(r1, &(0x7f0000000400)="00008847", 0x4) 2.051232343s ago: executing program 1 (id=1214): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004e80), 0x200000, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000002c0)={0x9, 0xc, 0x0, 0x8000000000000001, 0x1d01}) 2.040468855s ago: executing program 4 (id=1215): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000300000008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}}, 0x0) 1.904019053s ago: executing program 4 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000440), 0x80) socket$unix(0x1, 0x2, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x2, @win={{0x8, 0x0, 0x7ff, 0x50323234}, 0x9, 0x0, 0x0, 0xffffd01c, 0x0, 0x8}}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000240)={0x40, r9, 0x1, 0x70bd23, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019200)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0xffe0, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x5, 0x20000000, 0x61}}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 1.87331473s ago: executing program 1 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}}, 0x24004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) pread64(r2, &(0x7f0000002840)=""/4101, 0x1005, 0x800100ab8e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) pread64(r2, &(0x7f0000000340)=""/69, 0x45, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0xfffe, 0xffffffffffffffff, &(0x7f0000000040)="98", 0x17060bb3c, 0x1000000, 0x0, 0x10}]) 1.81670309s ago: executing program 1 (id=1218): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x27cb, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x757, 0xa00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x11, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x10, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x41, 0x6}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x42080) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x101, 0x11, 0x5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x0, 0x1, 0x2, {0x2, 0x24aa5b920eb86df2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180), 0x1, 0x1, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0xffffffff, 0x6, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x68, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@generic={0x9d, 0xd, "c899c7796b7a88577f72d8"}]}}}}}) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}], 0x40}}], 0x2, 0x0) 1.563619345s ago: executing program 2 (id=1219): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @rdma_dest={0x18, 0x114, 0x2, {0xaef, 0x4}}], 0x44}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000100)={0xe, 0x3, 0x1, {0x5, 0x9964, 0x3, 0x100}}) listen(r2, 0x5) r3 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x401, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10, 0x200040]}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) io_setup(0x5, &(0x7f0000000240)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x5) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r9, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) 1.510223467s ago: executing program 3 (id=1220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) (async) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f00000003c0)=""/121, 0x79}], 0x7}, 0x0) (async, rerun: 64) personality(0x87bf5ac905ea0f7f) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/22, 0xffffffffff408000, 0x1000, 0x10, 0x3}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x34, 0x19, 0x400, 0xffffffff, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x4, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.128714653s ago: executing program 4 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000300000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYBLOB='\b\x00\n'], 0x4c}}, 0x800) 1.095804526s ago: executing program 2 (id=1222): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0000fe04be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8004, 0x0, 0x19) 1.022260726s ago: executing program 2 (id=1223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 64) fsopen(&(0x7f0000000140)='tmpfs\x00', 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 64) mount$fuse(0xf6ffffff, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x400, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000100)=[0x4], 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB="0c00990008000000370000000400870004008e00"], 0x30}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x292}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) (async) madvise(&(0x7f000030e000/0x2000)=nil, 0x2000, 0x10) (async) timer_getoverrun(0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) (async, rerun: 32) r8 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x2}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x2}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r9, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e28, 0x2}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r8, 0x0, 0x0) (async) unshare(0x40400) (async) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000010c0)=[{&(0x7f0000000000)="43bfc257b5b2ccce6bd1162a7a91267c77888f35ad46708e9d65f542c6a2da791bfd3e53628685af37c6d0b25b5e269aec6d1931911f301506767771e0c995ef43d2b47e10a2145f14961041b6947ba99008b0c9c86ba3fd1c1c33bfaf7fe56a65431106c30f3fc83066652ec28fe5d4661a72bcba70c5aae38cf28cbe", 0x7d}, {&(0x7f0000001100)="3c765c45e3cc665c7f8321e801c404deeb5081222e7b305d26233f658e55c941cdcc2a7d6f9afd205a51353bbc47a01300000000005005020519f1d8483c57e553ab36a1604ee4d6b2f3289a909caa7bdb5f0285d81a0431da530f1d8e6bcc2f71", 0x61}, {&(0x7f0000001180)="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", 0x10e0}], 0x3) 1.020738363s ago: executing program 4 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x6000}, @val={0x1, 0x3, 0xe447, 0x1, 0x4, 0x2}, @ipv6=@generic={0x7, 0x6, "034ecc", 0x0, 0x11, 0x0, @empty, @remote}}, 0x36) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f901024301090212"], 0x0) write(r1, 0x0, 0x0) 898.073053ms ago: executing program 2 (id=1225): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r1, &(0x7f0000001c00)=[{{&(0x7f0000000280)=@nfc={0x27, r3, 0x0, 0x3}, 0x80, &(0x7f0000001740)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="cebaa9137081e654c78cd0ad49deaef004eea836e2d516e25980e62e2338ffdce73e24a98b7e10eb1c551801058aef48191ee1b74e4ca78647b7f9910959997977b93d82bfe4362d010d857f5fd358316d5304bfe50a1f76c27e0a7318dcb7c20d7e939d9385cbdd4e796526da04f85d1909fd0eccc811155907f6374323199bf4a01a35b055a77f00addc107dad0df122eabdf58a5993", 0x97}, {&(0x7f0000001580)="4d2678ad1dbeb0051d16d2bb1748f66609e187757e5ef621f31f77deed2c5114a6d62e4b5b295b2b31b8ce1ceac74ecb0ddbac386a2782912710142be0fb0c75c1382e4fb6fe599683157600180c3426f6f8d90fbfee184814c3f48fd671afceb77d96cdd0ea388b558d716c61e281790965b604a18a4e5ed7b4332fcd9ecd0e6ab95d5454113075f6af6c4bb52999e01c599b365da2cee818395317f38aeb7cc82f6fdbcab64c39dca15b73c35a", 0xae}, {&(0x7f0000001640)="77e07410abbb7713f2dba13e6f4a091c34ed75505252882b2f80e1f6b9e3b31a7ae339e172836ba71cc793336095f7f7a14d001cc5bb9573414ff616521a3b675e5087138da1b8e6b3b5681531256fd9163a9cf2e776267839ea12ddd1405c07761791b888fcda485bb6b7aa59151e9d79b0976a85d73326f2442b9e15cac5db5d4f280826865df7dbd04d50539653faf5baf233d173a7d8935840826f2409f64d19c7f1f11c3e3dd5e91f0465aa01da5d470b82f14575d89811273dd6cd7542be2b33beb8a992860b4045940d13a03b8d836a24c1e5a021578ed20a22bf26a8d909bec8ad6b66a9e52b4ac3", 0xec}], 0x4, &(0x7f0000001780)=[{0x54, 0x10b, 0xf61, "2f875ad018952086de47837e68ef0445fa06ddfedb75720bdf66658a8473c1f605fb1ab766129c665540fbbf0d0597c4503acae23db2e315c9b1a814339ad77e4fb6adf9fd2c3c"}, {0x6c, 0x116, 0x0, "0a14cc70b7e9018b46df3aa597eb96173fabee38e993cd5f3a7be65e440a889f504ad02053ce53c5069077dbe18294f9d37a45787da9f4848fd441f2ba5641f81dc1fd1e8068c4fdc6a193a83177cc5000726377a2c7e355bc309d63eceb"}, {0xb0, 0x111, 0x8, "f63a550f900068fbccb4e261d2c56a781239955077ff548eeb734c7109875c1ae4da4a55272a0de3d9217ce8c5ee91a7530db136826fce1798815ed729c0bd2143ef7b20e64457f7d50190cf7fb71a0ea7949409059932f6fe3ed866e5650abe6a9d10efd551e6c7740f42b4e016fd593d3d19beb3415fc41466d315ba66ad97ca36aa2b58bbc05e3057237d731085e4b1c9e1684a8e6269cc7edc69d8f7f3956e"}, {0xbc, 0x32f1863ebe5b7e81, 0x800, "e5c894bd025ad11547d55ae0215bdfdcae3ae51fe766ab66403ac46c536ac5b45a3440d730aeac3e6f14e229f1ca1c92789a6fb019021691e9d1a95b33841f4da593f665b5ac55481147a8f2bfd9899e1395af5a7c356a8776cabdccde26e846ffb3be827c3e950bc63b5a7d1a692d93f93d4a42ab392cda7b16151f54c6d09c9a12ade377dbb61aa2787ea336d31736daf9c0054e2ca00a7605dff2208ece789e1ab1d96081c4653febaa02f8"}, {0xb4, 0x104, 0xfffffffe, "304370ff6c41fc0399a41eb350f1a85035695ffa67af9cc61e05d8e2fa5f95a890be641feabd3fdcd3831419fd741cd6761c6acbf627c71ba96a6f05b6c540a52991bdeac49d9672895fd63b18ed292eac7b4b57ff1ed10120f1a7fa228dde45d73edb56fbd8c1f278148f261ba773b1fd048afe3635a8779770fef17f45e14716ee6498d7eac749cec2d0534d65c4a588652fb36f00f5d736a71f3c45ef51ed34a75ee79eae"}, {0x24, 0x109, 0x2b7c00, "ae473b155379c413f31a778e5b352df75fe1ab3ceec1da"}, {0x5c, 0x3a, 0x96, "045e0f73850a83e7916fc87e169a4bbafebe4e7c35ec908df60387fe6450fdc9ae24bca713b5915566a8e676b6db11319d467abb9919d0a4a685d25b73b9b2068bf6be028e9b47d07b424d381be39762"}, {0xe4, 0x0, 0x992, "fda14994699c91a457097994021bce1440cd86f646d2c37816994bce453e5c88bc299c037cd7941d41d828ddfe7f9342c06641d3b1171d4be5373c4b92873702f0bcceee7c5926ab5a5cc5d2cc6cbe62bb5559b31b881d54afbb61ae2bd579583116b453a040c2573f148b0df9f6d98750a9fbaedb9fcb642197170599c38f887f437e8ac0ae1701dc5081c8d4e9566bbd78dc63a170552baa72bf328a8c708526f714f25a45ab9edbdc2d7f15b9da1842b7009f8ae4fac4c420da53942e3a628858a0395f4fad18cbb19f730657b3cf66244d97fd7d"}], 0x444}}], 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x1}, 0x7}}}, 0x7) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000040)=0x404, 0x4) 596.382124ms ago: executing program 3 (id=1226): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @local}}, 0x3, 0x7, 0x4, 0x401, 0x20, 0x8436, 0x2}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @local}}, 0x3, 0x7, 0x4, 0x401, 0x20, 0x8436, 0x2}, &(0x7f00000001c0)=0x9c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffff", 0x9) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffff", 0x9) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0xc) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="010000003da7258f69bede425a893b834db6ffd874b95fd6437094cb29475e83e4b252376c0c0821b0d023cf19571840c710b8c070ae1b64f4bf984b5d8dec9359596f01e49432d22d850d16bf8f9c336a35"]) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r5, 0x8, 0x10, 0xfa, 0xd33}, &(0x7f00000000c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r5, 0x8, 0x10, 0xfa, 0xd33}, &(0x7f00000000c0)=0x18) 379.455451ms ago: executing program 3 (id=1227): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f00000007c0)={&(0x7f0000000800)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a003a0200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100"], 0xf4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000200006"], 0x84}}, 0x0) 157.344966ms ago: executing program 3 (id=1228): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x3, 0x3, 0x1003, 0x6, 0xd, 0x7, 0x1}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 58.477507ms ago: executing program 1 (id=1229): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000400)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\vL'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1230): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14010000160001000000000000000000fc010000000000000000000000000002ac1414bb000000000008000000000000000000ff000000000000200004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004c36c000000ac1414bb0000000000000000000000000200000000000000ffffffffffffffff0000000000000000fbffffffffffffff000000000000000000000000000000000300000040000000000000000000000009000000000000000000000000000000000000000000000001000000000000000000000000000000000000f54ca5a80002000010020000000000000004000000050000000c000800080022000017000008000b00040000000c0008f1"], 0x114}}, 0x0) kernel console output (not intermixed with test programs): 0 [ 216.998787][ T8255] ? aa_sock_msg_perm+0xf1/0x1b0 [ 216.998818][ T8255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.998836][ T8255] sock_sendmsg_nosec+0x13a/0x180 [ 216.998859][ T8255] ____sys_sendmsg+0x54e/0x850 [ 216.998882][ T8255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.998914][ T8255] ___sys_sendmsg+0x2a5/0x360 [ 216.998931][ T8255] ? __lock_acquire+0x683/0x2cf0 [ 216.998954][ T8255] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.998970][ T8255] ? get_pid_task+0x20/0x1f0 [ 216.998990][ T8255] ? get_pid_task+0x20/0x1f0 [ 216.999007][ T8255] ? get_pid_task+0x20/0x1f0 [ 216.999052][ T8255] ? __fget_files+0x2a/0x420 [ 216.999072][ T8255] ? __fget_files+0x3a2/0x420 [ 216.999100][ T8255] __sys_sendmsg+0x177/0x240 [ 216.999119][ T8255] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.999153][ T8255] __do_fast_syscall_32+0x23e/0x6f0 [ 216.999175][ T8255] ? do_fast_syscall_32+0x33/0x70 [ 216.999195][ T8255] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.999214][ T8255] ? asm_int80_emulation+0x1a/0x20 [ 216.999230][ T8255] ? do_int80_emulation+0x29f/0x550 [ 216.999255][ T8255] do_fast_syscall_32+0x33/0x70 [ 216.999276][ T8255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.999295][ T8255] RIP: 0023:0xf707f0ec [ 216.999309][ T8255] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 216.999324][ T8255] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 216.999342][ T8255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 216.999359][ T8255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.999369][ T8255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.999378][ T8255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.999389][ T8255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.999413][ T8255] [ 217.322268][ T5675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.334401][ T5675] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 217.342814][ T5675] usb 3-1: media controller created [ 217.349625][ T5675] dvb-usb: bulk message failed: -22 (8/0) [ 217.355737][ T5675] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 217.368019][ T5675] dvb-usb: MAC address reading failed. [ 217.390508][ T8261] netlink: 'syz.0.770': attribute type 5 has an invalid length. [ 217.405810][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.491243][ T5675] DVB: Unable to find symbol stb0899_attach() [ 217.509595][ T5675] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 217.583639][ T5682] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 217.591565][ T5675] rc_core: IR keymap rc-tt-1500 not found [ 217.598020][ T5675] Registered IR keymap rc-empty [ 217.604228][ T5675] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 217.616277][ T5675] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input28 [ 217.631370][ T5675] dvb-usb: schedule remote query interval to 100 msecs. [ 217.639528][ T5675] pctv452e: pctv452e_power_ctrl: 0 [ 217.639528][ T5675] [ 217.647257][ T5675] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 217.660250][ T5675] usb 3-1: USB disconnect, device number 24 [ 217.693654][ T2168] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 217.746364][ T5682] usb 5-1: Using ep0 maxpacket: 8 [ 217.758577][ T5682] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 217.765618][ T5706] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 217.781514][ T5682] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.810638][ T5682] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.824518][ T5675] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 217.840747][ T5682] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.854490][ T5682] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.869903][ T2168] usb 4-1: Using ep0 maxpacket: 32 [ 217.879566][ T5682] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.892021][ T5682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.901230][ T2168] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 217.912540][ T5706] usb 1-1: device descriptor read/64, error -71 [ 217.913263][ T2168] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.940202][ T2168] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 217.951914][ T2168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.989090][ T2168] usb 4-1: config 0 descriptor?? [ 218.145453][ T8272] IPVS: Error connecting to the multicast addr [ 218.169948][ T5682] usb 5-1: usb_control_msg returned -32 [ 218.173893][ T5706] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 218.175709][ T5682] usbtmc 5-1:16.0: can't read capabilities [ 218.323595][ T5706] usb 1-1: device descriptor read/64, error -71 [ 218.410279][ T2168] usbhid 4-1:0.0: can't add hid device: -32 [ 218.417419][ T2168] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 218.444066][ T5706] usb usb1-port1: attempt power cycle [ 218.595677][ T187] usb 4-1: USB disconnect, device number 18 [ 218.645971][ T8281] openvswitch: netlink: Missing key (keys=40, expected=100) [ 218.752749][ T29] audit: type=1800 audit(1786153095.570:115): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.776" name="/" dev="fuse" ino=1 res=0 errno=0 [ 218.783999][ T5706] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 218.834639][ T5706] usb 1-1: device descriptor read/8, error -71 [ 218.897199][ T8291] loop4: detected capacity change from 0 to 7 [ 218.906079][ T29] audit: type=1326 audit(1786153095.730:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.4.768" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x0 [ 218.932057][ T8291] Dev loop4: unable to read RDB block 7 [ 218.937805][ T8291] loop4: AHDI p3 [ 218.941711][ T8291] loop4: partition table partially beyond EOD, truncated [ 219.055029][ T8289] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.065090][ T2168] IPVS: starting estimator thread 0... [ 219.084333][ T5706] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 219.124960][ T5706] usb 1-1: device descriptor read/8, error -71 [ 219.183637][ T8296] IPVS: using max 57 ests per chain, 136800 per kthread [ 219.233896][ T5706] usb usb1-port1: unable to enumerate USB device [ 220.194188][ T5682] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 220.353617][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 220.361085][ T5682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.371961][ T5682] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.383696][ T5682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.397059][ T5682] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 220.409162][ T5682] usb 4-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3 [ 220.417952][ T5682] usb 4-1: Product: ဌ [ 220.423671][ T5682] usb 4-1: Manufacturer: syz [ 220.428525][ T5682] usb 4-1: SerialNumber: ⢇鍣ꓭ菊ꮋᲈ적ꥇ碑⁅ㅪᒙ릇䷖歉錢蜿꣙ﶁ拁ꣅﮝ궳뎸䃈ᯰꐀ䒔䎾ꃃݝףּ᭩現쑛퍷挈鈺⍔䎃接塔䇥띎Ꭼ毦≝油筳繲ॱ㚉昣扸篾┊輨粀섌꿴該礸┄셚嘩䬝ꅽฯ㟂奝曑榖썖ჷ祽ࣧ蔁툫䃅땿궉阪 [ 220.475194][ T5706] usb 5-1: USB disconnect, device number 29 [ 220.733162][ T5682] usb 4-1: 0:1 : does not exist [ 220.762869][ T5682] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 220.813976][ T5682] usb 4-1: 6:0: cannot get min/max values for control 2 (id 6) [ 220.830565][ T5682] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 220.907815][ T5682] usb 4-1: [6] FU [PCM Capture Volume] ch = 1, val = 0/1/1 [ 220.929738][ T8320] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[8320] [ 220.956433][ T5682] usb 4-1: 6:0: failed to get current value for ch 1 (-71) [ 221.001297][ T5682] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 221.038204][ T5682] usb 4-1: 6:0: failed to get current value for ch 1 (-71) [ 221.065461][ T5682] usb 4-1: unit 3 not found! [ 221.228488][ T5682] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 221.277071][ T5682] usb 4-1: USB disconnect, device number 19 [ 221.345335][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.453803][ T5675] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 221.623608][ T5675] usb 1-1: Using ep0 maxpacket: 8 [ 221.646070][ T5675] usb 1-1: config 2 has an invalid interface number: 241 but max is 0 [ 221.664749][ T5675] usb 1-1: config 2 has no interface number 0 [ 221.690287][ T5675] usb 1-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.719696][ T5675] usb 1-1: config 2 interface 241 has no altsetting 0 [ 221.741878][ T5675] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 221.752900][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.765376][ T5675] usb 1-1: Product: syz [ 221.774441][ T5675] usb 1-1: Manufacturer: syz [ 221.789399][ T5675] usb 1-1: SerialNumber: syz [ 221.794306][ T2168] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 221.808672][ T5675] ti_usb_3410_5052 1-1:2.241: TI USB 3410 1 port adapter converter detected [ 221.827110][ T5675] ti_usb_3410_5052 1-1:2.241: missing endpoints [ 221.974164][ T2168] usb 2-1: Using ep0 maxpacket: 8 [ 221.987048][ T2168] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.006792][ T2168] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.032123][ T2168] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 222.045606][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.062001][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.064585][ T2168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.100755][ T2168] usb 2-1: Product: syz [ 222.109927][ T2168] usb 2-1: Manufacturer: syz [ 222.120691][ T2168] usb 2-1: SerialNumber: syz [ 222.590479][ T187] usb 1-1: USB disconnect, device number 35 [ 222.853602][ T5675] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 222.900393][ T2168] usb 2-1: USB disconnect, device number 33 [ 222.911383][ T8351] netlink: 136 bytes leftover after parsing attributes in process `syz.3.797'. [ 222.930021][ T8351] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.946479][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.006414][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 223.055047][ T5675] usb 5-1: Using ep0 maxpacket: 8 [ 223.068208][ T5675] usb 5-1: config 9 has an invalid interface number: 213 but max is 1 [ 223.085967][ T5675] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 223.102096][ T5675] usb 5-1: config 9 has an invalid interface number: 110 but max is 1 [ 223.110971][ T5675] usb 5-1: config 9 has no interface number 0 [ 223.117185][ T5675] usb 5-1: config 9 has no interface number 1 [ 223.123314][ T5675] usb 5-1: config 9 interface 213 altsetting 21 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 223.140589][ T5675] usb 5-1: config 9 interface 213 altsetting 21 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 223.144484][ T10] usb 3-1: device descriptor read/64, error -71 [ 223.155071][ T5675] usb 5-1: config 9 interface 213 altsetting 21 endpoint 0x8E has an invalid bInterval 133, changing to 11 [ 223.179906][ T5675] usb 5-1: config 9 interface 213 altsetting 21 endpoint 0x8E has invalid maxpacket 16783, setting to 1024 [ 223.199171][ T5675] usb 5-1: config 9 interface 213 altsetting 21 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 223.220954][ T5675] usb 5-1: config 9 interface 213 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 223.245126][ T5675] usb 5-1: config 9 interface 213 altsetting 21 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 223.258790][ T8360] netlink: 'syz.0.801': attribute type 4 has an invalid length. [ 223.267565][ T5675] usb 5-1: config 9 interface 213 altsetting 21 has a duplicate endpoint with address 0xE, skipping [ 223.285579][ T8360] netlink: 'syz.0.801': attribute type 4 has an invalid length. [ 223.300925][ T5675] usb 5-1: config 9 interface 213 altsetting 21 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 223.333850][ T5675] usb 5-1: config 9 interface 213 has no altsetting 0 [ 223.340986][ T5675] usb 5-1: config 9 interface 110 has no altsetting 0 [ 223.352857][ T5675] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0116, bcdDevice=bd.e2 [ 223.368720][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.387490][ T5675] usb 5-1: Product: 㲫뙔ጟꎛヨ杇龎멚소ተ붅څ硾䨩È㼫ꆂ伎쾴搐헸嬋磰੨㉙ሓ䘁馚ᤢ㯳ꖈ⛖냂갺倬䊾埲⸿큻뽥泛氛ꆞ辦矐웵㬥䥲ｨ砄䧝蛮༃銎ꉺ蚾╩著﹨滧皪했짤躗ะ略磑맬扷 [ 223.413609][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 223.428013][ T5675] usb 5-1: Manufacturer: 眼걊䂏桊ꀩ炢ⷕ궕ᒩ䌛⫔ꍭ綯轊奂煶寖暵嘞嘑 [ 223.456654][ T5675] usb 5-1: SerialNumber: syz [ 223.512612][ T8367] loop4: detected capacity change from 0 to 7 [ 223.534965][ T8367] Dev loop4: unable to read RDB block 7 [ 223.540895][ T8367] loop4: unable to read partition table [ 223.548738][ T8367] loop4: partition table beyond EOD, truncated [ 223.563462][ T8367] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 223.570147][ T8369] FAULT_INJECTION: forcing a failure. [ 223.570147][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.587236][ T10] usb 3-1: device descriptor read/64, error -71 [ 223.603656][ T8369] CPU: 1 UID: 0 PID: 8369 Comm: syz.1.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.603685][ T8369] Tainted: [L]=SOFTLOCKUP [ 223.603690][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.603700][ T8369] Call Trace: [ 223.603706][ T8369] [ 223.603714][ T8369] dump_stack_lvl+0xe8/0x150 [ 223.603742][ T8369] should_fail_ex+0x40c/0x560 [ 223.603777][ T8369] _copy_from_user+0x2d/0xb0 [ 223.603802][ T8369] get_compat_msghdr+0xb3/0x4c0 [ 223.603826][ T8369] ? __pfx_get_compat_msghdr+0x10/0x10 [ 223.603849][ T8369] ? kfree+0x4d/0x640 [ 223.603872][ T8369] ___sys_sendmsg+0x201/0x360 [ 223.603889][ T8369] ? __lock_acquire+0x683/0x2cf0 [ 223.603914][ T8369] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.603936][ T8369] ? kstrtoull+0x12f/0x1d0 [ 223.603991][ T8369] __sys_sendmmsg+0x2de/0x4d0 [ 223.604014][ T8369] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.604057][ T8369] ? fput+0xa0/0xd0 [ 223.604076][ T8369] ? ksys_write+0x242/0x270 [ 223.604107][ T8369] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 223.604129][ T8369] __do_fast_syscall_32+0x23e/0x6f0 [ 223.604153][ T8369] ? do_fast_syscall_32+0x33/0x70 [ 223.604173][ T8369] ? lockdep_hardirqs_on+0x7a/0x110 [ 223.604194][ T8369] ? asm_int80_emulation+0x1a/0x20 [ 223.604209][ T8369] ? do_int80_emulation+0x29f/0x550 [ 223.604231][ T8369] ? trace_irq_disable+0x3b/0x140 [ 223.604253][ T8369] do_fast_syscall_32+0x33/0x70 [ 223.604273][ T8369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.604291][ T8369] RIP: 0023:0xf700f0ec [ 223.604306][ T8369] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 223.604319][ T8369] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 223.604338][ T8369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002c40 [ 223.604349][ T8369] RDX: 0000000000000292 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.604359][ T8369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.604369][ T8369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.604379][ T8369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.604404][ T8369] [ 223.833110][ T10] usb usb3-port1: attempt power cycle [ 224.046353][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.134404][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.165570][ T2168] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 224.173609][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 224.194182][ T10] usb 3-1: device descriptor read/8, error -71 [ 224.333643][ T2168] usb 1-1: Using ep0 maxpacket: 8 [ 224.358151][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.369140][ T2168] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 224.375265][ T5706] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 224.396453][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.401587][ T2168] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.444814][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 224.452361][ T2168] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.466444][ T5675] kvaser_usb 5-1:9.213: error -ENODEV: Cannot get usb endpoint(s) [ 224.467135][ T8378] syzkaller0: entered promiscuous mode [ 224.492738][ T10] usb 3-1: device descriptor read/8, error -71 [ 224.507759][ T2168] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.518317][ T8378] syzkaller0: entered allmulticast mode [ 224.538711][ T2168] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.566154][ T5706] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 224.573582][ T2168] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.580064][ T5706] usb 4-1: config 0 has no interface number 0 [ 224.589336][ T2168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.625551][ T10] usb usb3-port1: unable to enumerate USB device [ 224.641513][ T5706] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 224.667038][ T5706] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 224.695008][ T5706] usb 4-1: config 0 interface 255 has no altsetting 0 [ 224.721398][ T5706] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 224.731687][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.740058][ T5706] usb 4-1: Product: syz [ 224.744464][ T5706] usb 4-1: Manufacturer: syz [ 224.749179][ T5706] usb 4-1: SerialNumber: syz [ 224.757771][ T5706] usb 4-1: config 0 descriptor?? [ 224.769317][ T5706] technisat-usb2: could not set alternate setting to 0 [ 224.839580][ T2168] usb 1-1: usb_control_msg returned -32 [ 224.857590][ T2168] usbtmc 1-1:16.0: can't read capabilities [ 224.969587][ T5706] technisat-usb2: firmware version: 0.0 [ 224.975649][ T5706] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 225.427057][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.448351][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.496801][ T5706] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 225.519871][ T5706] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 226.798679][ T5706] usb 4-1: USB disconnect, device number 20 [ 226.857079][ T5675] kvaser_usb 5-1:9.110: error -ENODEV: Cannot get usb endpoint(s) [ 226.902741][ T5675] usb 5-1: USB disconnect, device number 30 [ 227.085980][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 227.196097][ T8398] netlink: 'syz.4.813': attribute type 4 has an invalid length. [ 227.267759][ T8397] netlink: 'syz.4.813': attribute type 4 has an invalid length. [ 227.300264][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 227.310451][ T8402] netlink: 'syz.2.816': attribute type 5 has an invalid length. [ 227.318949][ T8402] netlink: 'syz.2.816': attribute type 8 has an invalid length. [ 227.327616][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 227.389535][ T8402] geneve3: entered promiscuous mode [ 227.406667][ T8402] geneve3: entered allmulticast mode [ 227.433674][ T86] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 59052 - 0 [ 227.478075][ T8407] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.819' resets device [ 227.494607][ T86] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 59052 - 0 [ 227.577552][ T86] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 59052 - 0 [ 227.654331][ T86] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 59052 - 0 [ 227.776870][ T29] audit: type=1326 audit(1786153104.600:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 227.822854][ T2168] usb 1-1: USB disconnect, device number 36 [ 227.845464][ T29] audit: type=1326 audit(1786153104.600:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 227.898200][ T29] audit: type=1326 audit(1786153104.620:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 227.927127][ T29] audit: type=1326 audit(1786153104.620:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 227.954935][ T29] audit: type=1326 audit(1786153104.620:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 227.981123][ T29] audit: type=1326 audit(1786153104.630:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 228.008209][ T29] audit: type=1326 audit(1786153104.630:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 228.034442][ T29] audit: type=1326 audit(1786153104.630:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 228.064488][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 228.095940][ T29] audit: type=1326 audit(1786153104.650:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 228.141918][ T8430] dummy0: left promiscuous mode [ 228.145601][ T8433] netlink: 'syz.0.827': attribute type 10 has an invalid length. [ 228.155573][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.827'. [ 228.165466][ T29] audit: type=1326 audit(1786153104.660:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.824" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 228.190760][ T8430] bridge1: port 1(dummy0) entered blocking state [ 228.203969][ T8430] bridge1: port 1(dummy0) entered disabled state [ 228.210585][ T8430] dummy0: entered allmulticast mode [ 228.217215][ T8430] dummy0: entered promiscuous mode [ 228.235628][ T8433] dummy0: left allmulticast mode [ 228.242320][ T8433] dummy0: left promiscuous mode [ 228.252781][ T8433] bridge1: port 1(dummy0) entered disabled state [ 228.467069][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 228.599958][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 228.792215][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 229.088754][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.114885][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.313605][ T5706] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 229.482988][ T5706] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 229.516056][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 229.539474][ T5706] usb 1-1: Product: syz [ 229.550106][ T5706] usb 1-1: SerialNumber: syz [ 229.577355][ T5706] usb 1-1: config 0 descriptor?? [ 230.234447][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 230.309714][ T5706] usb 1-1: USB disconnect, device number 37 [ 230.385509][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 230.408635][ T10] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.422384][ T8494] syzkaller0: entered promiscuous mode [ 230.430023][ T8494] syzkaller0: entered allmulticast mode [ 230.435909][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.468117][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 230.505563][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.546262][ T10] usb 4-1: config 0 descriptor?? [ 230.552534][ T8488] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 230.563807][ T8488] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 230.715992][ T8500] tipc: Enabled bearer , priority 0 [ 230.748991][ T8500] syzkaller0: entered promiscuous mode [ 230.763331][ T8500] syzkaller0: entered allmulticast mode [ 230.837350][ T8500] tipc: Resetting bearer [ 230.897639][ T8498] tipc: Resetting bearer [ 230.921046][ T8498] tipc: Disabling bearer [ 230.980399][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.994245][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.021898][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 231.075807][ T2168] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 231.254116][ T2168] usb 5-1: Using ep0 maxpacket: 8 [ 231.263463][ T2168] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.281388][ T2168] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.292390][ T2168] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.305705][ T2168] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 231.315289][ T2168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.323973][ T2168] usb 5-1: Product: syz [ 231.328367][ T2168] usb 5-1: Manufacturer: syz [ 231.333098][ T2168] usb 5-1: SerialNumber: syz [ 231.428267][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 231.442263][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 231.470270][ T10] usb 4-1: USB disconnect, device number 21 [ 231.582064][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.583657][ T5345] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 231.599251][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.614254][ T2168] usb 5-1: 0:1 : does not exist [ 231.621348][ T2168] usb 5-1: 0:2 : does not exist [ 231.662750][ T2168] usb 5-1: USB disconnect, device number 31 [ 231.720135][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.755895][ T5345] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.768015][ T5345] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.803601][ T5345] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.841382][ T5345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 231.851021][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.860927][ T5345] usb 1-1: Product: syz [ 231.865469][ T5345] usb 1-1: Manufacturer: syz [ 231.873690][ T5345] usb 1-1: SerialNumber: syz [ 231.923574][ T5345] hub 1-1:1.0: bad descriptor, ignoring hub [ 231.932122][ T5345] hub 1-1:1.0: probe with driver hub failed with error -5 [ 232.123881][ T5345] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 232.176447][ T5345] usb 1-1: USB disconnect, device number 38 [ 232.203356][ T8519] netlink: 136 bytes leftover after parsing attributes in process `syz.4.857'. [ 232.215324][ T8519] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 232.232647][ T5345] usblp0: removed [ 232.273766][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 232.433595][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 232.455158][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.483218][ T10] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 232.510955][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.534965][ T10] usb 4-1: Product: syz [ 232.545959][ T10] usb 4-1: Manufacturer: syz [ 232.550647][ T10] usb 4-1: SerialNumber: syz [ 232.570496][ T10] usb 4-1: config 0 descriptor?? [ 232.587676][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 232.620850][ T8533] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 232.631084][ T8533] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 232.786051][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 232.786068][ T29] audit: type=1800 audit(1786153109.610:180): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.862" name="/" dev="fuse" ino=1 res=0 errno=0 [ 232.812687][ T5345] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 232.820577][ T10] gspca_sunplus: reg_r err -32 [ 232.826157][ T29] audit: type=1326 audit(1786153109.610:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 232.851627][ T29] audit: type=1326 audit(1786153109.610:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 232.876263][ T29] audit: type=1326 audit(1786153109.610:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 232.900756][ T29] audit: type=1326 audit(1786153109.610:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 232.925683][ T29] audit: type=1326 audit(1786153109.610:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 232.950024][ T29] audit: type=1326 audit(1786153109.610:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 232.974435][ T29] audit: type=1326 audit(1786153109.610:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 232.999071][ T29] audit: type=1326 audit(1786153109.610:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 233.023747][ T29] audit: type=1326 audit(1786153109.610:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 233.049730][ T5345] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 233.059601][ T5345] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 233.071310][ T5345] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 233.081395][ T5345] usb 3-1: config 0 interface 0 has no altsetting 0 [ 233.090553][ T5345] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 233.099943][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.108315][ T5345] usb 3-1: Product: syz [ 233.112662][ T5345] usb 3-1: Manufacturer: syz [ 233.117412][ T5345] usb 3-1: SerialNumber: syz [ 233.124940][ T5345] usb 3-1: config 0 descriptor?? [ 233.337818][ T5345] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 233.351169][ T4964] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.363750][ T4964] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.377888][ T4964] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.388557][ T4964] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.451485][ T4964] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.478307][ T5616] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.540462][ T4964] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.567629][ T8531] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 233.582534][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.591772][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.617258][ T5706] usb 3-1: USB disconnect, device number 29 [ 233.843815][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 233.931066][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.856'. [ 234.239720][ T8565] netlink: 'syz.2.873': attribute type 10 has an invalid length. [ 235.179095][ T5675] usb 4-1: USB disconnect, device number 22 [ 235.294012][ T8580] sctp: [Deprecated]: syz.4.877 (pid 8580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.294012][ T8580] Use struct sctp_sack_info instead [ 235.508367][ T8587] ksmbd: Unknown IPC event: 1, ignore. [ 235.748684][ T8592] bond2: entered allmulticast mode [ 235.775286][ T8592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.832319][ T8595] syzkaller0: entered promiscuous mode [ 235.838603][ T8595] syzkaller0: entered allmulticast mode [ 235.862947][ T8595] tipc: Enabled bearer , priority 0 [ 235.876486][ T8594] tipc: Resetting bearer [ 235.978341][ T8594] tipc: Disabling bearer [ 236.274661][ T8623] FAULT_INJECTION: forcing a failure. [ 236.274661][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.298954][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.2.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.298995][ T8623] Tainted: [L]=SOFTLOCKUP [ 236.299001][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.299011][ T8623] Call Trace: [ 236.299018][ T8623] [ 236.299029][ T8623] dump_stack_lvl+0xe8/0x150 [ 236.299072][ T8623] should_fail_ex+0x40c/0x560 [ 236.299098][ T8623] _copy_from_iter+0x1d3/0x1660 [ 236.299120][ T8623] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 236.299147][ T8623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.299172][ T8623] ? __pfx__copy_from_iter+0x10/0x10 [ 236.299193][ T8623] ? __pfx___mutex_lock+0x10/0x10 [ 236.299222][ T8623] ? alloc_pages_mpol+0x24a/0x380 [ 236.299251][ T8623] copy_page_from_iter+0x219/0x2d0 [ 236.299275][ T8623] anon_pipe_write+0xc38/0x1c30 [ 236.299316][ T8623] ? __pfx_anon_pipe_write+0x10/0x10 [ 236.299344][ T8623] ? apparmor_file_permission+0x1f4/0x300 [ 236.299370][ T8623] ? bpf_lsm_file_permission+0x9/0x20 [ 236.299388][ T8623] ? security_file_permission+0x75/0x260 [ 236.299417][ T8623] vfs_write+0x612/0xba0 [ 236.299449][ T8623] ? __pfx_vfs_write+0x10/0x10 [ 236.299482][ T8623] ? __fget_files+0x2a/0x420 [ 236.299511][ T8623] ksys_write+0x150/0x270 [ 236.299537][ T8623] ? __pfx_ksys_write+0x10/0x10 [ 236.299570][ T8623] __do_fast_syscall_32+0x23e/0x6f0 [ 236.299594][ T8623] ? do_fast_syscall_32+0x33/0x70 [ 236.299614][ T8623] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.299634][ T8623] ? asm_int80_emulation+0x1a/0x20 [ 236.299650][ T8623] ? do_int80_emulation+0x29f/0x550 [ 236.299676][ T8623] do_fast_syscall_32+0x33/0x70 [ 236.299699][ T8623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.299726][ T8623] RIP: 0023:0xf6fdf0ec [ 236.299742][ T8623] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 236.299756][ T8623] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 236.299775][ T8623] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 236.299786][ T8623] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.299796][ T8623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.299805][ T8623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.299816][ T8623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.299842][ T8623] [ 236.713454][ T8625] netlink: Conntrack attr has 4 unknown bytes [ 236.741779][ T8625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.799022][ T8625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.892'. [ 237.244789][ T8645] syzkaller0: entered promiscuous mode [ 237.260961][ T8645] syzkaller0: entered allmulticast mode [ 237.303994][ T8645] tipc: Enabled bearer , priority 0 [ 237.317881][ T8644] tipc: Resetting bearer [ 237.377309][ T8644] tipc: Disabling bearer [ 237.396664][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 237.684723][ T8672] tipc: Enabled bearer , priority 10 [ 237.771515][ T10] IPVS: starting estimator thread 0... [ 237.786190][ T8678] FAULT_INJECTION: forcing a failure. [ 237.786190][ T8678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.851388][ T8678] CPU: 0 UID: 0 PID: 8678 Comm: syz.2.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.851416][ T8678] Tainted: [L]=SOFTLOCKUP [ 237.851422][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.851432][ T8678] Call Trace: [ 237.851439][ T8678] [ 237.851446][ T8678] dump_stack_lvl+0xe8/0x150 [ 237.851473][ T8678] should_fail_ex+0x40c/0x560 [ 237.851495][ T8678] _copy_to_iter+0x1e4/0x1810 [ 237.851514][ T8678] ? __free_frozen_pages+0x7b4/0xd10 [ 237.851544][ T8678] ? __pfx__copy_to_iter+0x10/0x10 [ 237.851561][ T8678] ? __free_frozen_pages+0x7ed/0xd10 [ 237.851587][ T8678] ? __folio_put+0x4b3/0x590 [ 237.851607][ T8678] copy_page_to_iter+0x23f/0x330 [ 237.851631][ T8678] pipe_to_user+0xa8/0x140 [ 237.851655][ T8678] __splice_from_pipe+0x346/0x900 [ 237.851688][ T8678] ? __pfx_pipe_to_user+0x10/0x10 [ 237.851714][ T8678] __se_sys_vmsplice+0x380/0x1660 [ 237.851732][ T8678] ? get_pid_task+0x20/0x1f0 [ 237.851760][ T8678] ? get_pid_task+0x20/0x1f0 [ 237.851779][ T8678] ? get_pid_task+0x20/0x1f0 [ 237.851795][ T8678] ? get_pid_task+0x20/0x1f0 [ 237.851814][ T8678] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 237.851858][ T8678] ? ksys_write+0x1e6/0x270 [ 237.851886][ T8678] ? __mutex_unlock_slowpath+0x731/0x900 [ 237.851910][ T8678] ? __fget_files+0x2a/0x420 [ 237.851965][ T8678] __do_fast_syscall_32+0x23e/0x6f0 [ 237.851987][ T8678] ? do_fast_syscall_32+0x33/0x70 [ 237.852006][ T8678] ? lockdep_hardirqs_on+0x7a/0x110 [ 237.852024][ T8678] ? asm_int80_emulation+0x1a/0x20 [ 237.852038][ T8678] ? do_int80_emulation+0x29f/0x550 [ 237.852056][ T8678] ? trace_irq_disable+0x3b/0x140 [ 237.852077][ T8678] do_fast_syscall_32+0x33/0x70 [ 237.852097][ T8678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.852117][ T8678] RIP: 0023:0xf6fdf0ec [ 237.852132][ T8678] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 237.852143][ T8678] RSP: 002b:00000000f53ac50c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 237.852160][ T8678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 237.852171][ T8678] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.852181][ T8678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.852189][ T8678] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.852197][ T8678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.852222][ T8678] [ 237.954311][ T8677] IPVS: using max 57 ests per chain, 136800 per kthread [ 238.116412][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.125029][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.134122][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.142991][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.152855][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.161255][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.168947][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.176712][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.184626][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.192901][ T5675] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.205606][ T5675] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 238.400735][ T8684] netlink: 136 bytes leftover after parsing attributes in process `syz.1.914'. [ 238.454161][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 238.480985][ T8682] fido_id[8682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 238.906568][ T8712] netlink: 'syz.4.925': attribute type 29 has an invalid length. [ 238.929026][ T8712] netlink: 'syz.4.925': attribute type 29 has an invalid length. [ 239.282186][ T8726] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5625] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[8726] [ 239.296734][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 239.320318][ T8728] FAULT_INJECTION: forcing a failure. [ 239.320318][ T8728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.360694][ T8728] CPU: 0 UID: 0 PID: 8728 Comm: syz.3.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.360723][ T8728] Tainted: [L]=SOFTLOCKUP [ 239.360730][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.360739][ T8728] Call Trace: [ 239.360746][ T8728] [ 239.360754][ T8728] dump_stack_lvl+0xe8/0x150 [ 239.360782][ T8728] should_fail_ex+0x40c/0x560 [ 239.360808][ T8728] copy_fpstate_to_sigframe+0xa12/0xd20 [ 239.360832][ T8728] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 239.360857][ T8728] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 239.360879][ T8728] ? ktime_get+0x45/0x220 [ 239.360900][ T8728] ? ktime_get+0x45/0x220 [ 239.360930][ T8728] ? fpu__alloc_mathframe+0xac/0x130 [ 239.360953][ T8728] get_sigframe+0x603/0x830 [ 239.360980][ T8728] ? __pfx_get_sigframe+0x10/0x10 [ 239.361011][ T8728] ia32_setup_rt_frame+0x110/0xae0 [ 239.361040][ T8728] ? _raw_spin_unlock_irq+0x2e/0x50 [ 239.361060][ T8728] ? get_signal+0x10dd/0x12c0 [ 239.361085][ T8728] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 239.361117][ T8728] arch_do_signal_or_restart+0x48e/0x860 [ 239.361140][ T8728] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 239.361187][ T8728] exit_to_user_mode_loop+0x104/0x730 [ 239.361207][ T8728] ? rcu_is_watching+0x15/0xb0 [ 239.361231][ T8728] ? do_fast_syscall_32+0x33/0x70 [ 239.361255][ T8728] __do_fast_syscall_32+0x45b/0x6f0 [ 239.361276][ T8728] ? do_fast_syscall_32+0x33/0x70 [ 239.361297][ T8728] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.361316][ T8728] ? asm_int80_emulation+0x1a/0x20 [ 239.361332][ T8728] ? do_int80_emulation+0x29f/0x550 [ 239.361352][ T8728] ? trace_irq_disable+0x3b/0x140 [ 239.361373][ T8728] do_fast_syscall_32+0x33/0x70 [ 239.361395][ T8728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.361415][ T8728] RIP: 0023:0xf6fdf0ea [ 239.361431][ T8728] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 239.361445][ T8728] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 239.361464][ T8728] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 0000000080000480 [ 239.361474][ T8728] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.361483][ T8728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.361492][ T8728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.361502][ T8728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.361525][ T8728] [ 239.423685][ T5675] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 239.790699][ T5675] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.801456][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.829910][ T5675] usb 3-1: config 0 descriptor?? [ 239.857674][ T5675] cp210x 3-1:0.0: cp210x converter detected [ 240.258309][ T5675] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 240.291703][ T5675] usb 3-1: cp210x converter now attached to ttyUSB0 [ 240.373642][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 240.517500][ T5345] usb 3-1: USB disconnect, device number 30 [ 240.553600][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 240.570201][ T8752] netlink: 'syz.1.936': attribute type 4 has an invalid length. [ 240.586827][ T5345] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.599803][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 240.623432][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.625202][ T8752] netlink: 'syz.1.936': attribute type 4 has an invalid length. [ 240.647248][ T5345] cp210x 3-1:0.0: device disconnected [ 240.655305][ T10] usb 5-1: Product: syz [ 240.668327][ T10] usb 5-1: Manufacturer: syz [ 240.679971][ T10] usb 5-1: SerialNumber: syz [ 240.692937][ T10] usb 5-1: config 0 descriptor?? [ 240.708884][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 240.905173][ T10] gspca_sonixj: reg_r err -32 [ 240.920980][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 241.063988][ T5706] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 241.228374][ T5706] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.237894][ T5675] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 241.249063][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.271270][ T5706] usb 1-1: config 0 descriptor?? [ 241.284192][ T5706] cp210x 1-1:0.0: cp210x converter detected [ 241.299364][ T8743] syz.3.933 (8743): drop_caches: 2 [ 241.363826][ T8761] FAULT_INJECTION: forcing a failure. [ 241.363826][ T8761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.378026][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.3.939 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.378064][ T8761] Tainted: [L]=SOFTLOCKUP [ 241.378070][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.378079][ T8761] Call Trace: [ 241.378086][ T8761] [ 241.378094][ T8761] dump_stack_lvl+0xe8/0x150 [ 241.378122][ T8761] should_fail_ex+0x40c/0x560 [ 241.378147][ T8761] _copy_from_user+0x2d/0xb0 [ 241.378171][ T8761] kstrtouint_from_user+0xd6/0x180 [ 241.378194][ T8761] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 241.378230][ T8761] proc_fail_nth_write+0x8e/0x210 [ 241.378254][ T8761] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.378284][ T8761] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.378305][ T8761] vfs_write+0x296/0xba0 [ 241.378338][ T8761] ? __pfx_vfs_write+0x10/0x10 [ 241.378368][ T8761] ? __fget_files+0x2a/0x420 [ 241.378393][ T8761] ? __fget_files+0x3a2/0x420 [ 241.378412][ T8761] ? __fget_files+0x2a/0x420 [ 241.378441][ T8761] ksys_write+0x150/0x270 [ 241.378466][ T8761] ? __pfx_ksys_write+0x10/0x10 [ 241.378496][ T8761] ? asm_int80_emulation+0x1a/0x20 [ 241.378518][ T8761] do_int80_emulation+0x19a/0x550 [ 241.378540][ T8761] ? trace_irq_disable+0x3b/0x140 [ 241.378562][ T8761] ? asm_int80_emulation+0x1a/0x20 [ 241.378578][ T8761] ? clear_bhb_loop+0x70/0xc0 [ 241.378594][ T8761] ? clear_bhb_loop+0x70/0xc0 [ 241.378615][ T8761] asm_int80_emulation+0x1a/0x20 [ 241.378632][ T8761] RIP: 0023:0xf71174eb [ 241.378648][ T8761] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 241.378662][ T8761] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 241.378680][ T8761] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 241.378692][ T8761] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.378701][ T8761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.378711][ T8761] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.378721][ T8761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.378748][ T8761] [ 241.646841][ T5675] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.660727][ T5675] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 241.672226][ T5675] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 80, setting to 64 [ 241.686243][ T5706] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 241.707843][ T5675] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.717004][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.725052][ T5675] usb 2-1: Product: syz [ 241.729696][ T5675] usb 2-1: Manufacturer: syz [ 241.734693][ T5675] usb 2-1: SerialNumber: syz [ 241.751585][ T5675] cdc_ncm 2-1:1.0: skipping garbage [ 241.830633][ T187] usb 5-1: USB disconnect, device number 32 [ 241.951559][ T8757] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 241.973169][ T8757] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 241.997590][ T5706] usb 1-1: cp210x converter now attached to ttyUSB0 [ 242.013215][ T8776] netlink: 'syz.4.944': attribute type 3 has an invalid length. [ 242.183892][ T5682] usb 1-1: USB disconnect, device number 39 [ 242.192543][ T5682] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.218688][ T5682] cp210x 1-1:0.0: device disconnected [ 242.329670][ T8784] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[8784] [ 242.626710][ T8757] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 242.644237][ T8757] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 242.883208][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 243.050991][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 243.333695][ T5682] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 243.515236][ T5682] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 243.541476][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.587360][ T5682] usb 1-1: config 0 descriptor?? [ 243.611828][ T5682] cp210x 1-1:0.0: cp210x converter detected [ 243.938993][ T8801] netlink: 'syz.4.952': attribute type 10 has an invalid length. [ 243.969100][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.952'. [ 243.990713][ T5675] cdc_ncm 2-1:1.0: bind() failure [ 244.012966][ T5682] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 244.029904][ T5675] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 244.063585][ T5706] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 244.078682][ T5675] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 244.089910][ T5682] usb 1-1: cp210x converter now attached to ttyUSB0 [ 244.118361][ T5675] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 244.151149][ T5675] usb 2-1: USB disconnect, device number 34 [ 244.204146][ T5706] usb 3-1: device descriptor read/64, error -71 [ 244.332010][ T8814] FAULT_INJECTION: forcing a failure. [ 244.332010][ T8814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.346908][ T8814] CPU: 0 UID: 0 PID: 8814 Comm: syz.3.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.346927][ T8814] Tainted: [L]=SOFTLOCKUP [ 244.346930][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.346936][ T8814] Call Trace: [ 244.346941][ T8814] [ 244.346945][ T8814] dump_stack_lvl+0xe8/0x150 [ 244.346965][ T8814] should_fail_ex+0x40c/0x560 [ 244.346979][ T8814] prepare_alloc_pages+0x230/0x650 [ 244.346997][ T8814] __alloc_frozen_pages_noprof+0x12f/0x380 [ 244.347012][ T8814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 244.347028][ T8814] ? __pfx_policy_nodemask+0x10/0x10 [ 244.347041][ T8814] ? __folio_batch_add_and_move+0x11a/0xc50 [ 244.347052][ T8814] ? lock_acquire+0x106/0x350 [ 244.347068][ T8814] alloc_pages_mpol+0x212/0x380 [ 244.347085][ T8814] folio_alloc_mpol_noprof+0x39/0x160 [ 244.347100][ T8814] vma_alloc_folio_noprof+0xe1/0x1e0 [ 244.347116][ T8814] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 244.347135][ T8814] do_wp_page+0x1163/0x4c70 [ 244.347154][ T8814] ? __pfx_do_wp_page+0x10/0x10 [ 244.347162][ T8814] ? do_raw_spin_lock+0x12b/0x2f0 [ 244.347173][ T8814] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 244.347188][ T8814] handle_mm_fault+0x1490/0x3080 [ 244.347205][ T8814] ? handle_mm_fault+0xec/0x3080 [ 244.347219][ T8814] ? __pfx_handle_mm_fault+0x10/0x10 [ 244.347240][ T8814] ? __lock_acquire+0x683/0x2cf0 [ 244.347270][ T8814] ? lock_mm_and_find_vma+0xa7/0x340 [ 244.347292][ T8814] do_user_addr_fault+0x744/0x1340 [ 244.347325][ T8814] exc_page_fault+0x6a/0xc0 [ 244.347340][ T8814] asm_exc_page_fault+0x26/0x30 [ 244.347350][ T8814] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 244.347361][ T8814] Code: 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 244.347370][ T8814] RSP: 0018:ffffc90005137818 EFLAGS: 00050206 [ 244.347380][ T8814] RAX: ffffffff84d0e101 RBX: ffff888049d36000 RCX: 0000000000000500 [ 244.347387][ T8814] RDX: 0000000000000000 RSI: ffff888049d36b00 RDI: 000000008000e000 [ 244.347393][ T8814] RBP: ffffc90005137988 R08: ffff888049d36fff R09: 1ffff110093a6dff [ 244.347400][ T8814] R10: dffffc0000000000 R11: ffffed10093a6e00 R12: 1ffff92000a26fc3 [ 244.347406][ T8814] R13: 000000008000d500 R14: ffffc90005137e28 R15: 0000000000001000 [ 244.347416][ T8814] ? _copy_to_iter+0x161/0x1810 [ 244.347432][ T8814] _copy_to_iter+0x255/0x1810 [ 244.347444][ T8814] ? __free_frozen_pages+0x7b4/0xd10 [ 244.347462][ T8814] ? __pfx__copy_to_iter+0x10/0x10 [ 244.347473][ T8814] ? __free_frozen_pages+0x7ed/0xd10 [ 244.347488][ T8814] ? __folio_put+0x4b3/0x590 [ 244.347499][ T8814] copy_page_to_iter+0x23f/0x330 [ 244.347513][ T8814] pipe_to_user+0xa8/0x140 [ 244.347530][ T8814] __splice_from_pipe+0x346/0x900 [ 244.347549][ T8814] ? __pfx_pipe_to_user+0x10/0x10 [ 244.347565][ T8814] __se_sys_vmsplice+0x380/0x1660 [ 244.347578][ T8814] ? get_pid_task+0x20/0x1f0 [ 244.347596][ T8814] ? get_pid_task+0x20/0x1f0 [ 244.347608][ T8814] ? get_pid_task+0x20/0x1f0 [ 244.347619][ T8814] ? get_pid_task+0x20/0x1f0 [ 244.347631][ T8814] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 244.347656][ T8814] ? ksys_write+0x1e6/0x270 [ 244.347677][ T8814] ? __mutex_unlock_slowpath+0x731/0x900 [ 244.347702][ T8814] ? __fget_files+0x2a/0x420 [ 244.347753][ T8814] __do_fast_syscall_32+0x23e/0x6f0 [ 244.347776][ T8814] ? do_fast_syscall_32+0x33/0x70 [ 244.347793][ T8814] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.347804][ T8814] ? asm_int80_emulation+0x1a/0x20 [ 244.347813][ T8814] ? do_int80_emulation+0x29f/0x550 [ 244.347826][ T8814] ? trace_irq_disable+0x3b/0x140 [ 244.347840][ T8814] do_fast_syscall_32+0x33/0x70 [ 244.347854][ T8814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.347866][ T8814] RIP: 0023:0xf6fdf0ec [ 244.347875][ T8814] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 244.347883][ T8814] RSP: 002b:00000000f53ac50c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 244.347893][ T8814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 244.347900][ T8814] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.347905][ T8814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.347910][ T8814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.347915][ T8814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.347929][ T8814] [ 244.873673][ T5706] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 245.005990][ T5706] usb 3-1: device descriptor read/64, error -71 [ 245.113942][ T5706] usb usb3-port1: attempt power cycle [ 245.245935][ T8832] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[8832] [ 245.453634][ T5706] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 245.484464][ T5706] usb 3-1: device descriptor read/8, error -71 [ 245.733593][ T5706] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 245.764426][ T5706] usb 3-1: device descriptor read/8, error -71 [ 245.895196][ T5706] usb usb3-port1: unable to enumerate USB device [ 246.006985][ T5706] usb 1-1: USB disconnect, device number 40 [ 246.040043][ T5706] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.128357][ T5706] cp210x 1-1:0.0: device disconnected [ 246.219449][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 246.457647][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 246.471642][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 246.528694][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 246.553997][ T5706] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 246.719153][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.742746][ T5706] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 246.777795][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.839403][ T5706] usb 1-1: config 0 descriptor?? [ 247.051668][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.114875][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.165134][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 247.186522][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 247.201101][ T8860] bond0: left promiscuous mode [ 247.212311][ T8860] netlink: 'syz.0.975': attribute type 4 has an invalid length. [ 247.239724][ T8860] netlink: 152 bytes leftover after parsing attributes in process `syz.0.975'. [ 247.257920][ T8860] .`: renamed from bond0 [ 247.314629][ T5706] usbhid 1-1:0.0: can't add hid device: -71 [ 247.314697][ T5706] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 247.319656][ T5706] usb 1-1: USB disconnect, device number 41 [ 247.857475][ T8897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.989'. [ 247.879468][ T8893] netlink: 56 bytes leftover after parsing attributes in process `syz.3.987'. [ 247.879634][ T5621] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 247.967342][ T8901] syzkaller0: create flow: hash 2388147783 index 1 [ 248.031291][ T35] syzkaller0: tun_net_xmit 76 [ 248.047660][ T35] syzkaller0: tun_net_xmit 48 [ 248.054273][ T2168] syzkaller0: tun_net_xmit 76 [ 248.070369][ T8902] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5630] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[8902] [ 248.184714][ T5675] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 248.217064][ T8898] syzkaller0: delete flow: hash 2388147783 index 1 [ 248.344873][ T5675] usb 4-1: device descriptor read/64, error -71 [ 248.585859][ T5675] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 248.726739][ T5675] usb 4-1: device descriptor read/64, error -71 [ 248.849637][ T5675] usb usb4-port1: attempt power cycle [ 249.205479][ T5675] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 249.243413][ T5675] usb 4-1: device descriptor read/8, error -71 [ 249.453043][ T8914] trusted_key: encrypted_key: keyword 'new2똱,' not recognized [ 249.491873][ T5675] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 249.527500][ T5675] usb 4-1: device descriptor read/8, error -71 [ 249.645349][ T5675] usb usb4-port1: unable to enumerate USB device [ 249.890940][ T8922] netlink: 144 bytes leftover after parsing attributes in process `syz.1.995'. [ 251.293662][ T5675] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 251.479455][ T5675] usb 4-1: Using ep0 maxpacket: 16 [ 251.503537][ T5675] usb 4-1: config 3 has an invalid interface number: 20 but max is 0 [ 251.511945][ T5675] usb 4-1: config 3 has no interface number 0 [ 251.518543][ T5675] usb 4-1: config 3 interface 20 has no altsetting 0 [ 251.529510][ T5675] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 251.539012][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.547418][ T5675] usb 4-1: Product: syz [ 251.551864][ T5675] usb 4-1: Manufacturer: syz [ 251.556879][ T5675] usb 4-1: SerialNumber: syz [ 251.794966][ T5675] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.20/input/input30 [ 251.823647][ T4964] bcm5974 4-1:3.20: could not read from device [ 251.843276][ T4964] bcm5974 4-1:3.20: could not read from device [ 251.875755][ T4964] bcm5974 4-1:3.20: could not read from device [ 251.879320][ T5675] usb 4-1: USB disconnect, device number 27 [ 251.900437][ T4964] bcm5974 4-1:3.20: could not read from device [ 252.005838][ T5622] udevd[5622]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 252.051799][ T5622] udevd[5622]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 252.070411][ T5622] udevd[5622]: Error opening device "/dev/input/event4": No such file or directory [ 252.098954][ T5622] udevd[5622]: Unable to EVIOCGABS device "/dev/input/event4" [ 252.110111][ T5622] udevd[5622]: Unable to EVIOCGABS device "/dev/input/event4" [ 252.125210][ T5622] udevd[5622]: Unable to EVIOCGABS device "/dev/input/event4" [ 252.139006][ T5622] udevd[5622]: Unable to EVIOCGABS device "/dev/input/event4" [ 252.181932][ T5622] udevd[5622]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 252.230152][ T4979] udevd[4979]: worker [5622] terminated by signal 6 (Aborted) [ 252.248551][ T4979] udevd[4979]: worker [5622] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.20/input/input30/event4' [ 252.396222][ T8956] netlink: 'syz.2.1008': attribute type 4 has an invalid length. [ 252.441372][ T187] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 252.481376][ T8956] netlink: 'syz.2.1008': attribute type 4 has an invalid length. [ 252.607022][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 252.621202][ T187] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 252.636660][ T187] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.653746][ T187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.686185][ T187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.703950][ T5675] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 252.724667][ T187] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.763351][ T8975] __nla_validate_parse: 1 callbacks suppressed [ 252.763381][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 252.786952][ T187] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.797998][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.854473][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 252.864171][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 252.874996][ T8982] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1018'. [ 252.895876][ T5675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 252.920772][ T5675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 252.940978][ T5675] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 252.978686][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.003286][ T5675] usb 4-1: Product: syz [ 253.014010][ T5675] usb 4-1: Manufacturer: syz [ 253.028766][ T5675] usb 4-1: SerialNumber: syz [ 253.044905][ T5675] usb 4-1: config 0 descriptor?? [ 253.052420][ T8960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 253.062939][ T8960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 253.091815][ T187] usb 5-1: usb_control_msg returned -32 [ 253.098195][ T187] usbtmc 5-1:16.0: can't read capabilities [ 253.156686][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 253.290202][ T8960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 253.324446][ T8960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 253.454224][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 253.455377][ T8993] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1022'. [ 253.486252][ T8993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 253.556757][ T8996] bond0: entered promiscuous mode [ 253.564041][ T8996] bridge0: port 3(bond0) entered blocking state [ 253.592998][ T8996] bridge0: port 3(bond0) entered disabled state [ 253.625385][ T8996] bond0: entered allmulticast mode [ 253.786545][ T9002] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 253.812383][ T9005] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 253.847897][ T9006] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 254.038658][ T9005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.074510][ T5675] Error reading MAC address [ 254.088790][ T9007] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 254.091599][ T5675] usb 4-1: USB disconnect, device number 28 [ 254.132256][ T9007] bond1: entered allmulticast mode [ 254.572924][ T9034] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 254.713954][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 254.717365][ T9030] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 254.765124][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 254.876521][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 254.898362][ T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 254.938325][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 254.943197][ T9046] loop4: detected capacity change from 0 to 7 [ 254.986273][ T10] usb 1-1: config 220 has no interface number 2 [ 254.989429][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 255.007137][ T9046] Dev loop4: unable to read RDB block 7 [ 255.011310][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 255.015436][ T9046] loop4: unable to read partition table [ 255.045441][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 255.056964][ T9046] loop4: partition table beyond EOD, truncated [ 255.065925][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 255.080918][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 255.089296][ T9046] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 255.110423][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 255.126481][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.145265][ T10] usb 1-1: Product: syz [ 255.168358][ T10] usb 1-1: Manufacturer: syz [ 255.185370][ T10] usb 1-1: SerialNumber: syz [ 255.251821][ T5682] usb 5-1: USB disconnect, device number 33 [ 255.403983][ T9060] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 255.477913][ T9066] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 255.549080][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 255.573280][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 255.602972][ T10] usb 1-1: selecting invalid altsetting 0 [ 255.634938][ T2168] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 255.675842][ T10] usb 1-1: selecting invalid altsetting 0 [ 255.696014][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 255.727005][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.740011][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.770825][ T10] usb 1-1: USB disconnect, device number 42 [ 255.835513][ T2168] usb 4-1: Invalid ep0 maxpacket: 64 [ 255.985581][ T2168] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 256.143603][ T2168] usb 4-1: Invalid ep0 maxpacket: 64 [ 256.162574][ T2168] usb usb4-port1: attempt power cycle [ 256.257645][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 256.544437][ T2168] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 256.585256][ T2168] usb 4-1: Invalid ep0 maxpacket: 64 [ 256.734086][ T2168] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 256.774915][ T2168] usb 4-1: Invalid ep0 maxpacket: 64 [ 256.787101][ T9116] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 256.801323][ T2168] usb usb4-port1: unable to enumerate USB device [ 257.125518][ T9119] syzkaller0: entered promiscuous mode [ 257.138100][ T9119] syzkaller0: entered allmulticast mode [ 257.393633][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 257.616827][ T10] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 257.637742][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806997bc00: rx timeout, send abort [ 257.639901][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.782537][ T10] usb 2-1: selecting invalid altsetting 3 [ 257.800739][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 257.835463][ T10] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 257.906601][ T10] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 258.130343][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806997a000: rx timeout, send abort [ 258.147848][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806997bc00: abort rx timeout. Force session deactivation [ 258.589377][ T9159] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[9159] [ 258.639843][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806997a000: abort rx timeout. Force session deactivation [ 258.775985][ T5682] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 258.944724][ T5682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.956620][ T5682] usb 4-1: not running at top speed; connect to a high speed hub [ 258.981296][ T5682] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 259.007150][ T5682] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 259.042189][ T5682] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 259.053680][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.076798][ T5682] usb 4-1: Product: syz [ 259.092824][ T5682] usb 4-1: Manufacturer: syz [ 259.097936][ T5682] usb 4-1: SerialNumber: syz [ 259.380497][ T5682] usb 4-1: USB disconnect, device number 33 [ 260.062653][ T9169] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 260.079540][ T9169] __nla_validate_parse: 1 callbacks suppressed [ 260.092191][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 260.111826][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 260.414765][ T9178] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.1063' resets device [ 260.436978][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 260.449161][ T5706] usb 2-1: USB disconnect, device number 35 [ 260.635451][ T9181] validate_nla: 1 callbacks suppressed [ 260.635471][ T9181] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 260.703929][ T9182] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 261.088654][ T9167] ip6erspan0: entered allmulticast mode [ 261.603639][ T5706] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 261.616569][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1073'. [ 261.761821][ T9213] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5630] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[9213] [ 261.808609][ T5706] usb 1-1: device descriptor read/64, error -71 [ 262.013621][ T5682] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 262.113812][ T5706] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 262.206434][ T5682] usb 5-1: Using ep0 maxpacket: 32 [ 262.223852][ T5682] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 262.233458][ T5682] usb 5-1: config 0 has no interface number 0 [ 262.255056][ T5706] usb 1-1: device descriptor read/64, error -71 [ 262.256888][ T5682] usb 5-1: config 0 interface 12 has no altsetting 0 [ 262.307558][ T5682] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 262.324262][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.369841][ T5682] usb 5-1: Product: syz [ 262.384527][ T5682] usb 5-1: Manufacturer: syz [ 262.397923][ T5682] usb 5-1: SerialNumber: syz [ 262.398369][ T5706] usb usb1-port1: attempt power cycle [ 262.450391][ T5682] usb 5-1: config 0 descriptor?? [ 262.763588][ T5706] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 262.794390][ T5706] usb 1-1: device descriptor read/8, error -71 [ 262.878286][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.904329][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.043607][ T5706] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 263.078985][ T5706] usb 1-1: device descriptor read/8, error -71 [ 263.101889][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.117684][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.206381][ T5706] usb usb1-port1: unable to enumerate USB device [ 263.387669][ T9252] FAULT_INJECTION: forcing a failure. [ 263.387669][ T9252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.419543][ T9252] CPU: 0 UID: 0 PID: 9252 Comm: syz.3.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.419573][ T9252] Tainted: [L]=SOFTLOCKUP [ 263.419579][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.419589][ T9252] Call Trace: [ 263.419596][ T9252] [ 263.419603][ T9252] dump_stack_lvl+0xe8/0x150 [ 263.419631][ T9252] should_fail_ex+0x40c/0x560 [ 263.419654][ T9252] copy_fpstate_to_sigframe+0xa83/0xd20 [ 263.419676][ T9252] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 263.419699][ T9252] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 263.419739][ T9252] ? fpu__alloc_mathframe+0xac/0x130 [ 263.419761][ T9252] get_sigframe+0x603/0x830 [ 263.419788][ T9252] ? __pfx_get_sigframe+0x10/0x10 [ 263.419818][ T9252] ia32_setup_rt_frame+0x110/0xae0 [ 263.419847][ T9252] ? _raw_spin_unlock_irq+0x2e/0x50 [ 263.419866][ T9252] ? get_signal+0x10dd/0x12c0 [ 263.419891][ T9252] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 263.419932][ T9252] arch_do_signal_or_restart+0x48e/0x860 [ 263.419955][ T9252] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 263.419982][ T9252] ? __se_sys_splice+0x46e/0x490 [ 263.420015][ T9252] exit_to_user_mode_loop+0x104/0x730 [ 263.420036][ T9252] ? rcu_is_watching+0x15/0xb0 [ 263.420060][ T9252] ? do_fast_syscall_32+0x33/0x70 [ 263.420084][ T9252] __do_fast_syscall_32+0x45b/0x6f0 [ 263.420106][ T9252] ? do_fast_syscall_32+0x33/0x70 [ 263.420126][ T9252] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.420147][ T9252] ? asm_int80_emulation+0x1a/0x20 [ 263.420163][ T9252] ? do_int80_emulation+0x29f/0x550 [ 263.420184][ T9252] ? trace_irq_disable+0x3b/0x140 [ 263.420206][ T9252] do_fast_syscall_32+0x33/0x70 [ 263.420228][ T9252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.420248][ T9252] RIP: 0023:0xf6fdf0ea [ 263.420264][ T9252] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.420278][ T9252] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 263.420296][ T9252] RAX: 0000000000000139 RBX: 0000000000000004 RCX: 0000000000000000 [ 263.420307][ T9252] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000008efe [ 263.420325][ T9252] RBP: 000000000000000f R08: 0000000000000000 R09: 0000000000000000 [ 263.420335][ T9252] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.420345][ T9252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.420369][ T9252] [ 263.693615][ T5675] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 263.718984][ T5706] IPVS: starting estimator thread 0... [ 263.759822][ T5682] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 263.776774][ T5682] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 263.805162][ T5682] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 263.814727][ T9258] IPVS: using max 33 ests per chain, 79200 per kthread [ 263.833747][ T5682] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 263.868419][ T5682] usb 5-1: USB disconnect, device number 34 [ 263.874894][ T5675] usb 2-1: Using ep0 maxpacket: 8 [ 263.893069][ T5675] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.919968][ T5675] usb 2-1: config 2 has an invalid interface number: 76 but max is 0 [ 263.929899][ T5675] usb 2-1: config 2 has no interface number 0 [ 263.938101][ T5675] usb 2-1: config 2 interface 76 has no altsetting 0 [ 263.950034][ T5675] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 263.959226][ T9265] syzkaller0: entered promiscuous mode [ 263.965023][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.973124][ T9265] syzkaller0: entered allmulticast mode [ 263.978859][ T5675] usb 2-1: Product: syz [ 263.984228][ T5675] usb 2-1: Manufacturer: syz [ 263.988930][ T5675] usb 2-1: SerialNumber: syz [ 264.143781][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 264.212810][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.225422][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.262465][ T9270] FAULT_INJECTION: forcing a failure. [ 264.262465][ T9270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.283657][ T9270] CPU: 0 UID: 0 PID: 9270 Comm: syz.3.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.283687][ T9270] Tainted: [L]=SOFTLOCKUP [ 264.283693][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.283702][ T9270] Call Trace: [ 264.283709][ T9270] [ 264.283715][ T9270] dump_stack_lvl+0xe8/0x150 [ 264.283747][ T9270] should_fail_ex+0x40c/0x560 [ 264.283771][ T9270] copy_fpstate_to_sigframe+0xa12/0xd20 [ 264.283793][ T9270] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 264.283816][ T9270] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 264.283854][ T9270] ? fpu__alloc_mathframe+0xac/0x130 [ 264.283875][ T9270] get_sigframe+0x603/0x830 [ 264.283903][ T9270] ? __pfx_get_sigframe+0x10/0x10 [ 264.283934][ T9270] ia32_setup_rt_frame+0x110/0xae0 [ 264.283962][ T9270] ? _raw_spin_unlock_irq+0x2e/0x50 [ 264.283980][ T9270] ? get_signal+0x10dd/0x12c0 [ 264.284004][ T9270] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 264.284034][ T9270] arch_do_signal_or_restart+0x48e/0x860 [ 264.284054][ T9270] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 264.284079][ T9270] ? do_readv+0x2b1/0x2e0 [ 264.284102][ T9270] exit_to_user_mode_loop+0x104/0x730 [ 264.284120][ T9270] ? rcu_is_watching+0x15/0xb0 [ 264.284140][ T9270] ? asm_int80_emulation+0x1a/0x20 [ 264.284155][ T9270] ? asm_int80_emulation+0x1a/0x20 [ 264.284172][ T9270] do_int80_emulation+0x31a/0x550 [ 264.284193][ T9270] ? asm_int80_emulation+0x1a/0x20 [ 264.284206][ T9270] ? clear_bhb_loop+0x70/0xc0 [ 264.284219][ T9270] ? clear_bhb_loop+0x70/0xc0 [ 264.284238][ T9270] asm_int80_emulation+0x1a/0x20 [ 264.284253][ T9270] RIP: 0023:0xf6fdf0ea [ 264.284268][ T9270] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 264.284282][ T9270] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 264.284300][ T9270] RAX: 0000000000000091 RBX: 0000000000000004 RCX: 0000000080004500 [ 264.284312][ T9270] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.284322][ T9270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.284341][ T9270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 264.284351][ T9270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.284375][ T9270] [ 264.529941][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 264.537037][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 264.546078][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 264.559445][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 264.568554][ T10] usb 3-1: config 1 has no interface number 0 [ 264.575596][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.586759][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.596617][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 264.609739][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 264.618995][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.642431][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 264.667639][ T5675] go7007 2-1:2.76: Sensoray 2250 found [ 264.686355][ T5675] go7007 2-1:2.76: probe with driver go7007 failed with error -12 [ 264.712451][ T5675] usb 2-1: USB disconnect, device number 36 [ 264.839166][ T10] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 264.857459][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 264.867726][ T10] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 265.055187][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.068670][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.096975][ T9266] syzkaller0: entered promiscuous mode [ 265.106012][ T9266] syzkaller0: entered allmulticast mode [ 265.168007][ T5682] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 265.215610][ T5675] usb 3-1: USB disconnect, device number 35 [ 265.336846][ T5682] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.365192][ T5682] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.385524][ T5682] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.407193][ T5682] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 265.423709][ T187] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 265.433959][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.445803][ T5682] usb 5-1: Product: syz [ 265.450178][ T5682] usb 5-1: Manufacturer: syz [ 265.460919][ T5682] usb 5-1: SerialNumber: syz [ 265.479811][ T5682] hub 5-1:1.0: bad descriptor, ignoring hub [ 265.491223][ T5682] hub 5-1:1.0: probe with driver hub failed with error -5 [ 265.583581][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 265.590210][ T187] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 265.598430][ T187] usb 4-1: config 0 has no interface number 0 [ 265.604856][ T187] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 265.614677][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.628846][ T187] usb 4-1: config 0 descriptor?? [ 265.641701][ T187] usb-storage 4-1:0.99: USB Mass Storage device detected [ 265.654103][ T187] usb-storage 4-1:0.99: device ignored [ 265.829833][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1100'. [ 265.968093][ T187] usb 4-1: USB disconnect, device number 34 [ 266.213085][ T5682] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 266.257220][ T5682] usb 5-1: USB disconnect, device number 35 [ 266.267228][ T5682] usblp0: removed [ 266.663600][ T5675] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 266.738319][ T9317] bridge0: port 3(team0) entered disabled state [ 266.745188][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.752565][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.877689][ T5675] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 266.903333][ T5675] usb 2-1: config 0 has no interface number 0 [ 266.933472][ T5675] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 266.955651][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.972105][ T5675] usb 2-1: Product: syz [ 266.981557][ T5675] usb 2-1: Manufacturer: syz [ 266.996761][ T5675] usb 2-1: SerialNumber: syz [ 267.006397][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 267.022828][ T5675] usb 2-1: config 0 descriptor?? [ 267.033292][ T9317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.064505][ T9317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.384141][ T1089] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.402151][ T1089] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 59052 - 0 [ 267.465240][ T355] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.476351][ T355] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 59052 - 0 [ 267.488160][ T355] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.506032][ T355] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 59052 - 0 [ 267.517928][ T5675] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 267.522169][ T355] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.538899][ T5675] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 267.547059][ T355] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 59052 - 0 [ 267.564859][ T5675] asix 2-1:0.251: probe with driver asix failed with error -71 [ 267.588993][ T5675] usb 2-1: USB disconnect, device number 37 [ 267.598989][ T9337] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 267.659495][ T9336] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 267.694601][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 267.853672][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 267.867365][ T10] usb 1-1: no configurations [ 267.885248][ T10] usb 1-1: can't read configurations, error -22 [ 267.917401][ T9350] FAULT_INJECTION: forcing a failure. [ 267.917401][ T9350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.951542][ T9350] CPU: 1 UID: 0 PID: 9350 Comm: syz.1.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.951572][ T9350] Tainted: [L]=SOFTLOCKUP [ 267.951578][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.951588][ T9350] Call Trace: [ 267.951595][ T9350] [ 267.951603][ T9350] dump_stack_lvl+0xe8/0x150 [ 267.951631][ T9350] should_fail_ex+0x40c/0x560 [ 267.951656][ T9350] _copy_from_iter+0x1d3/0x1660 [ 267.951678][ T9350] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 267.951704][ T9350] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.951728][ T9350] ? __pfx__copy_from_iter+0x10/0x10 [ 267.951749][ T9350] ? __pfx___mutex_lock+0x10/0x10 [ 267.951778][ T9350] ? alloc_pages_mpol+0x24a/0x380 [ 267.951805][ T9350] copy_page_from_iter+0x219/0x2d0 [ 267.951830][ T9350] anon_pipe_write+0xc38/0x1c30 [ 267.951868][ T9350] ? __pfx_anon_pipe_write+0x10/0x10 [ 267.951893][ T9350] ? apparmor_file_permission+0x1f4/0x300 [ 267.951916][ T9350] ? bpf_lsm_file_permission+0x9/0x20 [ 267.951931][ T9350] ? security_file_permission+0x75/0x260 [ 267.951961][ T9350] vfs_write+0x612/0xba0 [ 267.951991][ T9350] ? __pfx_vfs_write+0x10/0x10 [ 267.952024][ T9350] ? __fget_files+0x2a/0x420 [ 267.952053][ T9350] ksys_write+0x150/0x270 [ 267.952078][ T9350] ? __pfx_ksys_write+0x10/0x10 [ 267.952110][ T9350] __do_fast_syscall_32+0x23e/0x6f0 [ 267.952130][ T9350] ? do_fast_syscall_32+0x33/0x70 [ 267.952148][ T9350] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.952166][ T9350] ? asm_int80_emulation+0x1a/0x20 [ 267.952181][ T9350] ? do_int80_emulation+0x29f/0x550 [ 267.952201][ T9350] ? trace_irq_disable+0x3b/0x140 [ 267.952223][ T9350] do_fast_syscall_32+0x33/0x70 [ 267.952245][ T9350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.952266][ T9350] RIP: 0023:0xf700f0ec [ 267.952281][ T9350] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 267.952295][ T9350] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 267.952313][ T9350] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 267.952324][ T9350] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.952335][ T9350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.952344][ T9350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.952355][ T9350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.952381][ T9350] [ 268.198463][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 268.219150][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 268.219166][ T29] audit: type=1326 audit(1786153145.030:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.249837][ T29] audit: type=1326 audit(1786153145.030:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.277101][ T29] audit: type=1326 audit(1786153145.030:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.311488][ T29] audit: type=1326 audit(1786153145.030:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.378145][ T29] audit: type=1326 audit(1786153145.040:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.414848][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 268.424010][ T10] usb 1-1: no configurations [ 268.428987][ T10] usb 1-1: can't read configurations, error -22 [ 268.450015][ T10] usb usb1-port1: attempt power cycle [ 268.490299][ T29] audit: type=1326 audit(1786153145.040:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.525766][ T29] audit: type=1326 audit(1786153145.040:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.552842][ T29] audit: type=1326 audit(1786153145.040:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.580203][ T29] audit: type=1326 audit(1786153145.040:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.621764][ T29] audit: type=1326 audit(1786153145.040:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 268.657296][ T9358] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1119'. [ 268.668279][ T9358] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.814024][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 268.849595][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 268.855839][ T10] usb 1-1: no configurations [ 268.866873][ T10] usb 1-1: can't read configurations, error -22 [ 268.958392][ T9373] netlink: 'syz.2.1124': attribute type 4 has an invalid length. [ 268.988439][ T9373] netlink: 'syz.2.1124': attribute type 4 has an invalid length. [ 269.018074][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 269.058447][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 269.068860][ T10] usb 1-1: no configurations [ 269.073705][ T10] usb 1-1: can't read configurations, error -22 [ 269.083711][ T10] usb usb1-port1: unable to enumerate USB device [ 269.963351][ T9400] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1130'. [ 270.033874][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 270.196338][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 80 [ 270.206384][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 270.218433][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.223589][ T5675] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 270.227677][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.243801][ T10] usb 4-1: Product: Ъ [ 270.247955][ T10] usb 4-1: Manufacturer: Ѓ [ 270.252466][ T10] usb 4-1: SerialNumber: 벜葸㐺ၼ꾙ﷹ푞᧩葫ʷ呤㼥ɴ蛫չ喔ᄤࡢ朋畲雨꺷溍薡䇞渨夵덆⪊◹䄳긳⫝그툳뿊藍䱀ﰹ턪緜箒洭札䰝畄岙쳋꼳٭撄퀐졆Ⱗ롴욁炗䏼檧Ͻ➮劔䉿ሄ⢒⹫〰伋⳩氝踪禶꿧ᖷ [ 270.402884][ T5675] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 270.412208][ T5675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.428502][ T5675] usb 5-1: config 0 has no interface number 0 [ 270.435336][ T5675] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 270.447317][ T5675] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 270.461924][ T5675] usb 5-1: config 0 interface 106 has no altsetting 0 [ 270.469103][ T5675] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 270.479536][ T5675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.496261][ T5675] usb 5-1: config 0 descriptor?? [ 270.545545][ T5675] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 270.690432][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.706549][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.756378][ T10] cdc_ncm 4-1:1.0: bind() failure [ 270.777920][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 270.786523][ T10] cdc_ncm 4-1:1.1: bind() failure [ 270.808528][ T10] usb 4-1: USB disconnect, device number 35 [ 270.933993][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 270.966734][ T5675] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 270.991012][ T9419] vlan2: entered promiscuous mode [ 271.004540][ T9419] veth0: entered promiscuous mode [ 271.143671][ T5675] usb 1-1: Using ep0 maxpacket: 32 [ 271.151563][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.174931][ T5675] usb 1-1: no configurations [ 271.186400][ T5675] usb 1-1: can't read configurations, error -22 [ 271.343688][ T5675] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 271.513642][ T5675] usb 1-1: Using ep0 maxpacket: 32 [ 271.534758][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.549773][ T5675] usb 1-1: no configurations [ 271.563748][ T5675] usb 1-1: can't read configurations, error -22 [ 271.584659][ T5675] usb usb1-port1: attempt power cycle [ 271.630680][ T12] usb 5-1: Failed to submit usb control message: -110 [ 271.653644][ T12] usb 5-1: unable to send the bmi data to the device: -110 [ 271.682058][ T12] usb 5-1: unable to get target info from device [ 271.692170][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1143'. [ 271.707505][ T12] usb 5-1: could not get target info (-110) [ 271.725984][ T12] usb 5-1: could not probe fw (-110) [ 271.954092][ T5675] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 271.984346][ T5675] usb 1-1: Using ep0 maxpacket: 32 [ 271.992813][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.010528][ T5675] usb 1-1: no configurations [ 272.018557][ T5675] usb 1-1: can't read configurations, error -22 [ 272.163619][ T5675] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 272.204367][ T5675] usb 1-1: Using ep0 maxpacket: 32 [ 272.212150][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.220527][ T5675] usb 1-1: no configurations [ 272.225400][ T5675] usb 1-1: can't read configurations, error -22 [ 272.232401][ T5675] usb usb1-port1: unable to enumerate USB device [ 272.336479][ T9442] 8021q: VLANs not supported on vxcan1 [ 272.410014][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 272.440165][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 272.628206][ T5621] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 273.027387][ T5675] usb 5-1: USB disconnect, device number 36 [ 273.794461][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'. [ 274.350226][ T9493] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[9493] [ 275.517499][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 275.517516][ T29] audit: type=1326 audit(1786153152.340:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.0.1164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x0 [ 276.173279][ T9530] FAULT_INJECTION: forcing a failure. [ 276.173279][ T9530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.202092][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.1.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.202120][ T9530] Tainted: [L]=SOFTLOCKUP [ 276.202126][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.202136][ T9530] Call Trace: [ 276.202143][ T9530] [ 276.202151][ T9530] dump_stack_lvl+0xe8/0x150 [ 276.202183][ T9530] should_fail_ex+0x40c/0x560 [ 276.202209][ T9530] _copy_from_user+0x2d/0xb0 [ 276.202240][ T9530] get_compat_msghdr+0xb3/0x4c0 [ 276.202263][ T9530] ? __pfx_get_compat_msghdr+0x10/0x10 [ 276.202287][ T9530] ? kfree+0x4d/0x640 [ 276.202309][ T9530] ___sys_sendmsg+0x201/0x360 [ 276.202327][ T9530] ? __lock_acquire+0x683/0x2cf0 [ 276.202344][ T9530] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.202356][ T9530] ? kstrtoull+0x12f/0x1d0 [ 276.202385][ T9530] __sys_sendmmsg+0x2de/0x4d0 [ 276.202398][ T9530] ? __pfx___sys_sendmmsg+0x10/0x10 [ 276.202421][ T9530] ? fput+0xa0/0xd0 [ 276.202433][ T9530] ? ksys_write+0x242/0x270 [ 276.202451][ T9530] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 276.202464][ T9530] __do_fast_syscall_32+0x23e/0x6f0 [ 276.202478][ T9530] ? do_fast_syscall_32+0x33/0x70 [ 276.202491][ T9530] ? lockdep_hardirqs_on+0x7a/0x110 [ 276.202502][ T9530] ? asm_int80_emulation+0x1a/0x20 [ 276.202512][ T9530] ? do_int80_emulation+0x29f/0x550 [ 276.202524][ T9530] ? trace_irq_disable+0x3b/0x140 [ 276.202538][ T9530] do_fast_syscall_32+0x33/0x70 [ 276.202551][ T9530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.202563][ T9530] RIP: 0023:0xf700f0ec [ 276.202572][ T9530] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 276.202580][ T9530] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 276.202591][ T9530] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004d00 [ 276.202598][ T9530] RDX: 0000000000000300 RSI: 0000000000000f1c RDI: 0000000000000000 [ 276.202604][ T9530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.202609][ T9530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.202615][ T9530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.202628][ T9530] [ 276.782381][ T9539] fuse: Unknown parameter '00000000000000000007' [ 277.344945][ T9554] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[9554] [ 277.896040][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 278.492589][ T9570] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5627] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[9570] [ 278.643679][ T5706] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 278.828993][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 278.842630][ T5706] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 278.852436][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.861085][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 278.896254][ T5706] usb 5-1: config 0 descriptor?? [ 279.043619][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 279.051029][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.062828][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.082960][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 279.093833][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.127361][ T10] usb 2-1: config 0 descriptor?? [ 279.265803][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 279.329728][ T5706] elecom 0003:056E:011C.0007: item fetching failed at offset 2/40 [ 279.349681][ T5706] elecom 0003:056E:011C.0007: probe with driver elecom failed with error -22 [ 279.571265][ T10] ft260 0003:0403:6030.0008: item fetching failed at offset 0/2 [ 279.583187][ T10] ft260 0003:0403:6030.0008: failed to parse HID [ 279.590564][ T10] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -22 [ 279.713668][ T5706] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 279.803640][ T5675] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 279.867784][ T5706] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 279.887272][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.901181][ T5706] usb 4-1: config 0 descriptor?? [ 279.913016][ T5706] cp210x 4-1:0.0: cp210x converter detected [ 279.964410][ T5675] usb 1-1: Using ep0 maxpacket: 16 [ 279.972873][ T5675] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 279.985014][ T5675] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 279.994380][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.002410][ T5675] usb 1-1: Product: syz [ 280.007328][ T5675] usb 1-1: Manufacturer: syz [ 280.011963][ T5675] usb 1-1: SerialNumber: syz [ 280.022080][ T5675] r8152-cfgselector 1-1: Unknown version 0x0000 [ 280.031802][ T5675] r8152-cfgselector 1-1: config 0 descriptor?? [ 280.203614][ T5690] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 280.245340][ T9585] bond0 (unregistering): left allmulticast mode [ 280.254887][ T9585] bridge0: port 3(bond0) entered disabled state [ 280.265465][ T9585] bond0 (unregistering): Released all slaves [ 280.299792][ T5675] r8152-cfgselector 1-1: Needed 2 retries to read version [ 280.307219][ T5675] r8152-cfgselector 1-1: Unknown version 0x0000 [ 280.315179][ T5706] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 280.316293][ T5675] r8152-cfgselector 1-1: No union descriptors [ 280.333032][ T5706] usb 4-1: cp210x converter now attached to ttyUSB0 [ 280.360284][ T5690] usb 3-1: device descriptor read/64, error -71 [ 280.517777][ T5706] r8152-cfgselector 1-1: USB disconnect, device number 55 [ 280.613710][ T5690] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 280.744053][ T5690] usb 3-1: device descriptor read/64, error -71 [ 280.853955][ T5690] usb usb3-port1: attempt power cycle [ 280.872645][ T5675] usb 5-1: USB disconnect, device number 37 [ 281.217137][ T5690] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 281.250503][ T5690] usb 3-1: device descriptor read/8, error -71 [ 281.504204][ T5690] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 281.525151][ T5690] usb 3-1: device descriptor read/8, error -71 [ 281.562290][ T5675] usb 2-1: USB disconnect, device number 38 [ 281.634054][ T5690] usb usb3-port1: unable to enumerate USB device [ 282.142451][ T9618] netlink: 'syz.1.1196': attribute type 4 has an invalid length. [ 282.187958][ T9618] netlink: 'syz.1.1196': attribute type 4 has an invalid length. [ 282.269246][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 282.326173][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 282.384319][ T5675] usb 4-1: USB disconnect, device number 36 [ 282.410337][ T5675] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.438033][ T5675] cp210x 4-1:0.0: device disconnected [ 282.617011][ T9628] netlink: 'syz.3.1200': attribute type 3 has an invalid length. [ 282.636799][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'. [ 282.661291][ T9628] FAULT_INJECTION: forcing a failure. [ 282.661291][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.685958][ T9628] CPU: 1 UID: 0 PID: 9628 Comm: syz.3.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.685985][ T9628] Tainted: [L]=SOFTLOCKUP [ 282.685990][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.685999][ T9628] Call Trace: [ 282.686006][ T9628] [ 282.686013][ T9628] dump_stack_lvl+0xe8/0x150 [ 282.686040][ T9628] should_fail_ex+0x40c/0x560 [ 282.686064][ T9628] _copy_to_user+0x31/0xb0 [ 282.686089][ T9628] simple_read_from_buffer+0xe1/0x170 [ 282.686128][ T9628] proc_fail_nth_read+0x1bb/0x230 [ 282.686154][ T9628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.686179][ T9628] ? rw_verify_area+0x24a/0x4c0 [ 282.686219][ T9628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.686241][ T9628] vfs_read+0x213/0xa80 [ 282.686270][ T9628] ? __pfx___mutex_lock+0x10/0x10 [ 282.686292][ T9628] ? __pfx_vfs_read+0x10/0x10 [ 282.686315][ T9628] ? __fget_files+0x2a/0x420 [ 282.686340][ T9628] ? __fget_files+0x3a2/0x420 [ 282.686358][ T9628] ? __fget_files+0x2a/0x420 [ 282.686385][ T9628] ksys_read+0x150/0x270 [ 282.686410][ T9628] ? __pfx_ksys_read+0x10/0x10 [ 282.686435][ T9628] ? asm_int80_emulation+0x1a/0x20 [ 282.686458][ T9628] do_int80_emulation+0x19a/0x550 [ 282.686479][ T9628] ? trace_irq_disable+0x3b/0x140 [ 282.686495][ T9628] ? asm_int80_emulation+0x1a/0x20 [ 282.686508][ T9628] ? clear_bhb_loop+0x70/0xc0 [ 282.686525][ T9628] ? clear_bhb_loop+0x70/0xc0 [ 282.686546][ T9628] asm_int80_emulation+0x1a/0x20 [ 282.686559][ T9628] RIP: 0023:0xf71174eb [ 282.686574][ T9628] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 282.686587][ T9628] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 282.686605][ T9628] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 282.686615][ T9628] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 282.686623][ T9628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.686633][ T9628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.686642][ T9628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.686666][ T9628] [ 282.688254][ T9632] FAULT_INJECTION: forcing a failure. [ 282.688254][ T9632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.950880][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 282.958029][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.1.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.958058][ T9632] Tainted: [L]=SOFTLOCKUP [ 282.958064][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.958074][ T9632] Call Trace: [ 282.958080][ T9632] [ 282.958087][ T9632] dump_stack_lvl+0xe8/0x150 [ 282.958115][ T9632] should_fail_ex+0x40c/0x560 [ 282.958139][ T9632] prepare_alloc_pages+0x230/0x650 [ 282.958168][ T9632] __alloc_frozen_pages_noprof+0x12f/0x380 [ 282.958193][ T9632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 282.958218][ T9632] ? __pfx_policy_nodemask+0x10/0x10 [ 282.958240][ T9632] ? __pfx___mutex_lock+0x10/0x10 [ 282.958268][ T9632] alloc_pages_mpol+0x212/0x380 [ 282.958294][ T9632] alloc_pages_noprof+0xac/0x2a0 [ 282.958318][ T9632] anon_pipe_write+0xe5e/0x1c30 [ 282.958358][ T9632] ? __pfx_anon_pipe_write+0x10/0x10 [ 282.958384][ T9632] ? apparmor_file_permission+0x1f4/0x300 [ 282.958407][ T9632] ? bpf_lsm_file_permission+0x9/0x20 [ 282.958433][ T9632] ? security_file_permission+0x75/0x260 [ 282.958462][ T9632] vfs_write+0x612/0xba0 [ 282.958493][ T9632] ? __pfx_vfs_write+0x10/0x10 [ 282.958524][ T9632] ? __fget_files+0x2a/0x420 [ 282.958553][ T9632] ksys_write+0x150/0x270 [ 282.958578][ T9632] ? __pfx_ksys_write+0x10/0x10 [ 282.958608][ T9632] __do_fast_syscall_32+0x23e/0x6f0 [ 282.958630][ T9632] ? do_fast_syscall_32+0x33/0x70 [ 282.958650][ T9632] ? lockdep_hardirqs_on+0x7a/0x110 [ 282.958669][ T9632] ? asm_int80_emulation+0x1a/0x20 [ 282.958685][ T9632] ? do_int80_emulation+0x29f/0x550 [ 282.958705][ T9632] ? trace_irq_disable+0x3b/0x140 [ 282.958727][ T9632] do_fast_syscall_32+0x33/0x70 [ 282.958749][ T9632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.958768][ T9632] RIP: 0023:0xf700f0ec [ 282.958783][ T9632] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 282.958797][ T9632] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 282.958815][ T9632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 282.958826][ T9632] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.958836][ T9632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.958845][ T9632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.958855][ T9632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.958880][ T9632] [ 283.235704][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 283.268025][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 283.374449][ T9651] netlink: 'syz.0.1208': attribute type 5 has an invalid length. [ 283.490142][ T9656] netlink: 'syz.0.1210': attribute type 15 has an invalid length. [ 283.501314][ T9656] netlink: 'syz.0.1210': attribute type 7 has an invalid length. [ 283.526699][ T9656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 283.573597][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 283.627255][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'. [ 283.663740][ T5675] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 283.747266][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 283.758226][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.772207][ T10] usb 2-1: config 0 has no interfaces? [ 283.781061][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 283.791262][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 283.800417][ T10] usb 2-1: Product: syz [ 283.804918][ T10] usb 2-1: Manufacturer: syz [ 283.809683][ T10] usb 2-1: SerialNumber: syz [ 283.819543][ T10] usb 2-1: config 0 descriptor?? [ 283.834414][ T5675] usb 3-1: Using ep0 maxpacket: 16 [ 283.855613][ T5675] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 283.876978][ T9663] veth0_to_batadv: entered allmulticast mode [ 283.883065][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.891932][ T5675] usb 3-1: Product: syz [ 283.896433][ T5690] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 283.909760][ T5675] usb 3-1: Manufacturer: syz [ 283.930134][ T5675] usb 3-1: SerialNumber: syz [ 283.940508][ T5675] usb 3-1: config 0 descriptor?? [ 283.949857][ T5675] usb 3-1: selecting invalid altsetting 1 [ 283.956800][ T5675] technisat-usb2: could not set alternate setting to 0 [ 284.030636][ T187] usb 2-1: USB disconnect, device number 39 [ 284.084676][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 284.098949][ T5690] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 284.121482][ T5690] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 284.131838][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.143317][ T5690] usb 4-1: Product: syz [ 284.151701][ T5675] technisat-usb2: firmware version: 0.0 [ 284.157530][ T5690] usb 4-1: Manufacturer: syz [ 284.164818][ T5675] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 284.173208][ T5690] usb 4-1: SerialNumber: syz [ 284.182346][ T5690] r8152-cfgselector 4-1: Unknown version 0x0000 [ 284.190100][ T5690] r8152-cfgselector 4-1: config 0 descriptor?? [ 284.233664][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 284.352701][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.363207][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.383920][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 284.391863][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 284.402297][ T10] usb 1-1: can't read configurations, error -61 [ 284.553632][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 284.592688][ T5675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.611713][ T5675] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 284.629162][ T187] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 284.643676][ T5675] usb 3-1: media controller created [ 284.664666][ T5675] technisat-usb2: i2c-error: out failed 53 = -22 [ 284.689700][ T5675] dvb-usb: MAC address reading failed. [ 284.715388][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 284.715712][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.734854][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 284.757948][ T10] usb 1-1: can't read configurations, error -61 [ 284.772801][ T10] usb usb1-port1: attempt power cycle [ 284.822142][ T5675] DVB: Unable to find symbol stv090x_attach() [ 284.840416][ T5675] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 284.965174][ T5675] rc_core: IR keymap rc-technisat-usb2 not found [ 284.973318][ T5675] Registered IR keymap rc-empty [ 284.979920][ T5675] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 284.996151][ T5675] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input32 [ 285.014033][ T5675] dvb-usb: schedule remote query interval to 100 msecs. [ 285.022243][ T5675] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 285.039034][ T5675] usb 3-1: USB disconnect, device number 40 [ 285.123877][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 285.138503][ T5675] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 285.164410][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 285.191296][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 285.210857][ T5682] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 285.219100][ T10] usb 1-1: can't read configurations, error -61 [ 285.363639][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 285.375129][ T5682] usb 2-1: config 1 interface 0 has no altsetting 0 [ 285.384404][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 285.392627][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 285.401044][ T10] usb 1-1: can't read configurations, error -61 [ 285.409699][ T5682] usb 2-1: string descriptor 0 read error: -22 [ 285.409773][ T10] usb usb1-port1: unable to enumerate USB device [ 285.416157][ T5682] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40 [ 285.453598][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.682682][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 285.884912][ T5682] hid_parser_main: 73 callbacks suppressed [ 285.884934][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.900061][ T5621] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 285.908945][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.916143][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.925725][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.936006][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.947050][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.953915][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.963623][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.974859][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 285.982950][ T5682] nti 0003:0757:0A00.0009: unknown main item tag 0x0 [ 286.023979][ T5706] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 286.078724][ T5682] nti 0003:0757:0A00.0009: hidraw0: USB HID vff.7f Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0 [ 286.121798][ T5682] usb 2-1: USB disconnect, device number 40 [ 286.184761][ T5706] usb 5-1: Using ep0 maxpacket: 8 [ 286.202474][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.221218][ T9708] fido_id[9708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 286.240364][ T5706] usb 5-1: config 0 has no interfaces? [ 286.253670][ T5706] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 286.281345][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 286.300755][ T5706] usb 5-1: Product: syz [ 286.309984][ T5706] usb 5-1: Manufacturer: syz [ 286.327997][ T5706] usb 5-1: SerialNumber: syz [ 286.351081][ T5706] usb 5-1: config 0 descriptor?? [ 286.409094][ T9713] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1227'. [ 286.443762][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1227'. [ 286.580224][ T5682] usb 5-1: USB disconnect, device number 38 [ 286.628900][ T9715] loop4: detected capacity change from 0 to 7 [ 286.647599][ T9715] Dev loop4: unable to read RDB block 7 [ 286.668319][ T9715] loop4: AHDI p3 [ 286.678503][ T9715] loop4: partition table partially beyond EOD, truncated [ 286.841427][ T9720] [ 286.843797][ T9720] ============================================ [ 286.850049][ T9720] WARNING: possible recursive locking detected [ 286.856192][ T9720] syzkaller #0 Tainted: G L [ 286.862323][ T9720] -------------------------------------------- [ 286.868455][ T9720] syz.1.1229/9720 is trying to acquire lock: [ 286.874439][ T9720] ffffffff8f624c30 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 286.884516][ T9720] [ 286.884516][ T9720] but task is already holding lock: [ 286.891859][ T9720] ffffffff8f624c30 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 286.901936][ T9720] [ 286.901936][ T9720] other info that might help us debug this: [ 286.910006][ T9720] Possible unsafe locking scenario: [ 286.910006][ T9720] [ 286.917467][ T9720] CPU0 [ 286.920732][ T9720] ---- [ 286.923998][ T9720] lock(qp_broker_list.mutex); [ 286.928845][ T9720] lock(qp_broker_list.mutex); [ 286.933684][ T9720] [ 286.933684][ T9720] *** DEADLOCK *** [ 286.933684][ T9720] [ 286.941816][ T9720] May be due to missing lock nesting notation [ 286.941816][ T9720] [ 286.950506][ T9720] 1 lock held by syz.1.1229/9720: [ 286.955524][ T9720] #0: ffffffff8f624c30 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 286.966141][ T9720] [ 286.966141][ T9720] stack backtrace: [ 286.972040][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.1.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.972059][ T9720] Tainted: [L]=SOFTLOCKUP [ 286.972062][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.972069][ T9720] Call Trace: [ 286.972076][ T9720] [ 286.972081][ T9720] dump_stack_lvl+0xe8/0x150 [ 286.972101][ T9720] print_deadlock_bug+0x279/0x290 [ 286.972124][ T9720] __lock_acquire+0x24df/0x2cf0 [ 286.972138][ T9720] ? kernel_text_address+0xa5/0xe0 [ 286.972154][ T9720] ? __kernel_text_address+0xd/0x30 [ 286.972168][ T9720] ? stack_depot_save_flags+0x28b/0x800 [ 286.972179][ T9720] ? lock_acquire+0x106/0x350 [ 286.972192][ T9720] ? vmci_qp_broker_detach+0xe9/0xec0 [ 286.972206][ T9720] lock_acquire+0x106/0x350 [ 286.972218][ T9720] ? vmci_qp_broker_detach+0xe9/0xec0 [ 286.972234][ T9720] __mutex_lock+0x19d/0x1550 [ 286.972248][ T9720] ? vmci_qp_broker_detach+0xe9/0xec0 [ 286.972265][ T9720] ? kasan_save_track+0x3e/0x80 [ 286.972278][ T9720] ? kasan_save_free_info+0x40/0x50 [ 286.972287][ T9720] ? __kasan_slab_free+0x5c/0x80 [ 286.972306][ T9720] ? kfree+0x1c5/0x640 [ 286.972322][ T9720] ? vmci_ctx_put+0x5ba/0xc00 [ 286.972331][ T9720] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 286.972341][ T9720] ? vmci_datagram_dispatch+0x450/0xc80 [ 286.972352][ T9720] ? vmci_qp_broker_detach+0x887/0xec0 [ 286.972365][ T9720] ? vmci_ctx_put+0x619/0xc00 [ 286.972374][ T9720] ? vmci_host_close+0x8e/0x140 [ 286.972386][ T9720] ? __fput+0x418/0xa50 [ 286.972398][ T9720] ? exit_to_user_mode_loop+0x1fa/0x730 [ 286.972409][ T9720] ? __do_fast_syscall_32+0x45b/0x6f0 [ 286.972422][ T9720] ? vmci_qp_broker_detach+0xe9/0xec0 [ 286.972435][ T9720] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.972447][ T9720] ? __pfx___mutex_lock+0x10/0x10 [ 286.972463][ T9720] vmci_qp_broker_detach+0xe9/0xec0 [ 286.972484][ T9720] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 286.972498][ T9720] ? kasan_quarantine_put+0xbb/0x1f0 [ 286.972508][ T9720] ? lockdep_hardirqs_on+0x7a/0x110 [ 286.972521][ T9720] ? kfree+0x1c5/0x640 [ 286.972530][ T9720] ? vmci_ctx_put+0x5ba/0xc00 [ 286.972539][ T9720] ? vmci_ctx_put+0x13e/0xc00 [ 286.972549][ T9720] vmci_ctx_put+0x619/0xc00 [ 286.972559][ T9720] ? vmci_ctx_put+0x13e/0xc00 [ 286.972569][ T9720] ? __pfx_vmci_ctx_put+0x10/0x10 [ 286.972579][ T9720] ? preempt_schedule_thunk+0x16/0x40 [ 286.972589][ T9720] ? preempt_schedule_common+0x82/0xd0 [ 286.972601][ T9720] ? preempt_schedule_thunk+0x16/0x40 [ 286.972617][ T9720] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 286.972630][ T9720] vmci_datagram_dispatch+0x450/0xc80 [ 286.972642][ T9720] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 286.972655][ T9720] vmci_qp_broker_detach+0x887/0xec0 [ 286.972671][ T9720] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 286.972684][ T9720] ? kasan_quarantine_put+0xbb/0x1f0 [ 286.972696][ T9720] ? kfree+0x1c5/0x640 [ 286.972705][ T9720] ? vmci_ctx_put+0x5ba/0xc00 [ 286.972714][ T9720] ? vmci_ctx_put+0x13e/0xc00 [ 286.972724][ T9720] vmci_ctx_put+0x619/0xc00 [ 286.972733][ T9720] ? vmci_ctx_put+0x13e/0xc00 [ 286.972743][ T9720] ? __pfx_vmci_ctx_put+0x10/0x10 [ 286.972756][ T9720] vmci_host_close+0x8e/0x140 [ 286.972769][ T9720] ? __pfx_vmci_host_close+0x10/0x10 [ 286.972782][ T9720] __fput+0x418/0xa50 [ 286.972795][ T9720] task_work_run+0x1d9/0x270 [ 286.972808][ T9720] ? __pfx_task_work_run+0x10/0x10 [ 286.972823][ T9720] exit_to_user_mode_loop+0x1fa/0x730 [ 286.972835][ T9720] ? rcu_is_watching+0x15/0xb0 [ 286.972848][ T9720] ? do_fast_syscall_32+0x33/0x70 [ 286.972861][ T9720] __do_fast_syscall_32+0x45b/0x6f0 [ 286.972875][ T9720] ? do_fast_syscall_32+0x33/0x70 [ 286.972887][ T9720] ? lockdep_hardirqs_on+0x7a/0x110 [ 286.972899][ T9720] ? irqentry_exit+0x10f/0x8f0 [ 286.972910][ T9720] ? trace_irq_disable+0x3b/0x140 [ 286.972922][ T9720] do_fast_syscall_32+0x33/0x70 [ 286.972943][ T9720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.972964][ T9720] RIP: 0023:0xf700f0ec [ 286.972979][ T9720] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 286.972996][ T9720] RSP: 002b:00000000f53dc50c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 286.973012][ T9720] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00000000ffffffff [ 286.973018][ T9720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.973029][ T9720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.973035][ T9720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.973041][ T9720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.973050][ T9720] [ 287.703679][ T5682] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 287.854918][ T5682] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 287.864191][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.873244][ T5682] usb 2-1: config 0 descriptor?? [ 287.879900][ T5682] cp210x 2-1:0.0: cp210x converter detected [ 288.283187][ T5682] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 288.294944][ T5682] usb 2-1: cp210x converter now attached to ttyUSB0