last executing test programs: 21.940570793s ago: executing program 2 (id=3442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00003ab000/0x1000)=nil, &(0x7f00003a3000/0xc00000)=nil, &(0x7f000084e000/0x3000)=nil, &(0x7f0000858000/0x3000)=nil, &(0x7f000056b000/0x2000)=nil, &(0x7f0000628000/0x2000)=nil, &(0x7f0000945000/0x2000)=nil, &(0x7f0000dcb000/0x2000)=nil, &(0x7f000098c000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000574000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.819950645s ago: executing program 2 (id=3443): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/llc/socket\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x5e25069485b97a13, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0x0, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x0, 0x37, 0x1}]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002abd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="08003b0000fc3f0005002a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0xfffffcb1, &(0x7f0000000240)=0x100) recvmmsg(r6, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)=""/108}, {&(0x7f00000004c0)=""/88}, {&(0x7f0000000540)=""/60}, {&(0x7f00000005c0)=""/4096}, {&(0x7f00000015c0)=""/187}], 0x0, &(0x7f0000001700)=""/151}, 0xa272}, {{&(0x7f0000001940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001840)=""/200}, {&(0x7f0000002000)=""/191}, {&(0x7f0000001a00)=""/155}, {&(0x7f0000001ac0)=""/111}, {&(0x7f0000001b40)=""/230}, {&(0x7f0000001c40)=""/108}, {&(0x7f0000001cc0)=""/27}], 0x0, &(0x7f0000001d80)=""/71}, 0xfffffffb}, {{&(0x7f0000001e00)=@x25, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001e80)=""/108}, {&(0x7f0000001f00)=""/113}, {&(0x7f0000001f80)=""/79}, {&(0x7f0000002100)=""/227}, {&(0x7f0000002200)=""/246}, {&(0x7f0000002300)=""/151}], 0x0, &(0x7f0000002440)=""/248}, 0x7}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002540)=""/22}], 0x0, &(0x7f00000025c0)=""/104}, 0x2}], 0x10158, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='=', 0x11}]) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c678e6f75705f69663d8ded090cdf24cd1204938d0564d796398de8110fabc39d9a11fca9e3af9660fbba095c794530195d42184eecb2a5de317017c5d4eba1f6698caf527e36a1d1630d54f0cddfb2bee1a99a77104b2befae22a141be91778fe6377dbff423645963f6fcc7dfe21477137d3237d2de4e2b64841a495cc6a75cb5765003b88bae029dbb6d09163fc4094a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) mmap(&(0x7f00009ee000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x7a, 0x0, 0x0) 18.892997464s ago: executing program 2 (id=3450): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xffffffffffffffff, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r3 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) r4 = eventfd2(0xffffffff, 0x40000) write$eventfd(r4, &(0x7f0000000080)=0xffffffff00000000, 0x8) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x4}) read$eventfd(r4, &(0x7f0000000040), 0x8) syz_emit_ethernet(0x32, &(0x7f0000000180)={@broadcast, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r9}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r7) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @loopback, 0x3}, 0x1c) 17.167686898s ago: executing program 2 (id=3461): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 17.074724329s ago: executing program 2 (id=3462): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x20000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000200)=0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x5}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16.621633095s ago: executing program 2 (id=3465): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000001c0)={0x23c, 0x7d, 0x0, {{0x500, 0xfb, 0x0, 0x200003, {0x10}, 0x8400000, 0x0, 0x4, 0x1282, 0x29, '\x04nodev\x05c\x14\x00\x00\x00\x00\x00\x00\x00\x81\b\x00\x00\x00\x00\x001\xff\v', 0xfffffffffffffe6a, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\x045\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x88\x06\xb4\x94\xe1', 0x12, '\x00\x00\x00\xadk\xa9p\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\x83\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\a9\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x1c27, &(0x7f0000000180)={0x0, 0xb2b6, 0x10, 0x0, 0x10c}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4, 0x0, r1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x341f, 0x604d, 0x53, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0xff70) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 13.553825769s ago: executing program 0 (id=3477): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f00000001c0)=""/239, 0xef}) (async) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) listen(r2, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000340)={0xf0f03f, 0x6e}) (async) r5 = syz_open_dev$cec(0x0, 0x0, 0x208480) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a8435021406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000907800c2"], 0x0) (rerun: 32) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000380)) 10.340007304s ago: executing program 0 (id=3487): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect$uac3(0x4, 0xd8, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x5, 0x10, 0x7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x1b, 0x8}, [@processing_unit={0x11, 0x24, 0x9, 0x4, 0x5, [0x1, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xa, 0xb, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x5, 0xfe, {0xa, 0x25, 0x25, 0x8, 0x42, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x81, 0x1, 0x2, 0x2, "a50ad1", "2ff8bb"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xe, 0x5, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa8, 0x1, 0xf7, 0x3, "f0b1f2", "12"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x48c2, 0x18, 0x9, 0xe}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xd5, 0xc, 0x4, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x8, 0x3, {0xa, 0x25, 0x25, 0xffffff80, 0x40, 0xffff}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x4, 0x0, 0x6e, 0xff, 0x7e}, 0x178, &(0x7f0000000300)={0x5, 0xf, 0x178, 0x5, [@generic={0x74, 0x10, 0x3, "ee0efd9cf85997ae17532033f3f8f0d6f9463e504ebf66cb9f6f9cb4bdb55cb398322ce440a201eb832fefa0a714cc7182312fd8ac9a77201230df5499733ed4c08c8baf2928e2a5954ca26275ff772a3a8f29b4032d5c653ed2b374097e98cce3509e97b90b158c547f30a462b3cd7570"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x4, 0x89, 0xbc1, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0xf00, 0xa194, [0xff0000, 0xff0000, 0x3fc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x8c, 0xf595, 0x4}, @generic={0xd1, 0x10, 0xa, "a50489937357b34c26f3c1dd24737204d9a6d112e6d2cb543b9239cecc47c4e88d955f204406a1caa3a1f50d722dc12979d4ef6af38a00a7424714bba84c442512933552127075574d622e110a5a8ae8f9abb58a0ec8b859d0c2637dbc92efe9c8eec37fa80ecb75460c1a70788a86f5b18e0cad1ec73309706721be5352c6b829b02f89006f039d720d30062800f67e1451560487988b70b00c3d038f30e4a4f8d2779856bab9303f91dc36d89246e2df223953b6cde0ef3f468eaf7e3bf6e8e00915187b1b106d0cbfaa1a8e15"}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x447}}, {0x35, &(0x7f00000004c0)=@string={0x35, 0x3, "fdffd1173b051bd278f954e3ca952944104d2c4b508873cc363a9b83c84fc0cf11b4403d0a1f6ea581c2eaeed33b6e865f121b"}}, {0x70, &(0x7f0000000500)=@string={0x70, 0x3, "1434a478fcc7b7f01d099745cadc9562f771b477b7308938cfdd348c45ca5a6694e5627b1f4870c570cd94a4eea8286c102274ac1fac15f80d69c6f37f4b9dee47e4983f6f21e66a0ff3e715b1f8a4d9f89b02d048b64124d8b3cec0518cb92ee742609ddad3c841bf6e36e213b7"}}]}) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x20, 0x9, 0x37, {0x37, 0x31, "075a2a9bb2b9f00fabb23e7eb23758d8a3188b71693466ec24e3efe1fd901ae00dcddb780de5f81d2e2fb7bc17c50147490f3c8777"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x61, 0x2, 0x0, "8431e6be", "5503878c"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0xa, 0x4, 0x4, 0xf, 0x401}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000780)={0x0, 0x18, 0x26, "8cee564fb777853d405ba38b8ce24a875857e20e04820f3e7715ed23e591768f35b674c24c9c"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x98}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000940)={0x40, 0xb, 0x2, "7ca2"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0xc}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000000a40)={0x40, 0x19, 0x2, 'M6'}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x65}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x81}}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 7.10118516s ago: executing program 0 (id=3493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905", @ANYRES16], 0x0) 6.484597202s ago: executing program 4 (id=3500): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x12000000, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.751684784s ago: executing program 4 (id=3502): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xc}, {0x3c, 0x0, 0x0, 0x200}, {0x6, 0x8}]}) 4.716463863s ago: executing program 3 (id=3509): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 4.603751777s ago: executing program 3 (id=3510): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @ldst={0x1, 0x2, 0x6, 0x0, 0x0, 0x30, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x37}, @alu={0x4, 0x0, 0x4, 0x9, 0x0, 0x8, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) unshare(0x24040400) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r5}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) (async) close_range(r3, r6, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0) eventfd(0x1ff) (async) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x1009, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80a41, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 4.361933444s ago: executing program 4 (id=3513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x1010000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 3.95638946s ago: executing program 0 (id=3514): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100022300010000001402000200f049185b1dc31c08ac055a02400001020301090224000101058004090400090103010206092103"], 0x0) 3.716586692s ago: executing program 1 (id=3515): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = landlock_create_ruleset(&(0x7f0000000000)={0x8260, 0xc, 0x0, 0x200, 0x9, 0x1}, 0x30, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x10, r1}, 0x0) 3.560471967s ago: executing program 4 (id=3516): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x2, 0xfffffff9, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x1ff, 0x2}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000004d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004d00)={&(0x7f0000000400)=ANY=[@ANYBLOB="c82200001200000427bd7000fc060000000793f84e224e20feffffff070000000600000001000080070000002afcffffff2000000004000000", @ANYRES32=r2, @ANYBLOB="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"], 0x22c8}}, 0x8001) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x1c000, 0x20000000, 0x4, 0x7fffffff, 0x4, 0x2, 0x80}}) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CHANGE_FD(r9, 0x4c05, 0xffffffffffffffff) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30008011) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2a, 0x0, &(0x7f0000000280)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee93", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffa}, 0x50) r10 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000040)=0x85) write$tun(r0, 0x0, 0x37) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) close_range(r8, r4, 0x0) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r11, 0x8004af81, &(0x7f0000000040)) syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r10], 0x0) 3.444029186s ago: executing program 3 (id=3517): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000fcd20001a004e230000050021000100000008001800ac1414bb060003000700000005002200"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x4010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x0) 3.188913373s ago: executing program 1 (id=3518): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (fail_nth: 2) 2.853326365s ago: executing program 1 (id=3519): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.63710998s ago: executing program 1 (id=3520): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000"], 0x130}, 0x1, 0x0, 0x0, 0x4008000}, 0x8880) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000055aaffffffffffff00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.604809639s ago: executing program 3 (id=3521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x1, 0x4, {0x2, @struct={0x1, 0x4}, 0x0, 0x81, 0xc38f, 0xd, 0x10, 0x4, 0xc0, @struct={0x4, 0x8}, 0xfff, 0x1, [0x8000, 0x7fff, 0x5, 0xd5a5, 0x7, 0x4]}, {0x3, @usage=0x3, 0x0, 0x959, 0x6, 0xa, 0x3, 0x6, 0x9, @usage=0x57, 0xf, 0x7, [0x6, 0xfff, 0x10, 0x7, 0x7, 0x2]}, {0x2b000000, @struct={0x5, 0x10}, 0x0, 0x8, 0xab, 0x8, 0x1000, 0x401, 0x56, @usage=0x7, 0x8, 0x4, [0x7, 0x6, 0x4, 0x2, 0x7ff7, 0x4]}, {0x0, 0x80, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900004f08000300", @ANYRES32=r2, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 2.436974368s ago: executing program 3 (id=3522): r0 = socket(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) ppoll(&(0x7f0000000180)=[{r1, 0x8189}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x7, 0xe8, 0x6}, 0x10) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000000c0)={0x2dc, r0, 0x3e, {0x0, 0x2af}, 0x9}, 0x1) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1, 0x16}]}, 0x90}, 0x1, 0x7}, 0x0) 2.37665458s ago: executing program 1 (id=3523): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xc}, {0x3c, 0x0, 0x0, 0x200}, {0x6, 0x8}]}) 2.243091029s ago: executing program 3 (id=3524): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xc85a, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff2, 0xb}, {0x4, 0x5}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8850}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r11 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="45b11b354df1ecd5aed212b84d08"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r11, 0x0, 0x0, 0x6983, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r11, {0x11}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r14, @ANYBLOB, @ANYRES64=r13], 0x20) 1.936473969s ago: executing program 4 (id=3525): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xc1ffffff, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.109458171s ago: executing program 32 (id=3465): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000001c0)={0x23c, 0x7d, 0x0, {{0x500, 0xfb, 0x0, 0x200003, {0x10}, 0x8400000, 0x0, 0x4, 0x1282, 0x29, '\x04nodev\x05c\x14\x00\x00\x00\x00\x00\x00\x00\x81\b\x00\x00\x00\x00\x001\xff\v', 0xfffffffffffffe6a, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\x045\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x88\x06\xb4\x94\xe1', 0x12, '\x00\x00\x00\xadk\xa9p\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\x83\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\a9\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x1c27, &(0x7f0000000180)={0x0, 0xb2b6, 0x10, 0x0, 0x10c}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4, 0x0, r1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x341f, 0x604d, 0x53, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0xff70) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.09397021s ago: executing program 4 (id=3527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x10000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 902.554748ms ago: executing program 1 (id=3528): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r2, 0x0, r2, &(0x7f00000003c0)='./mnt\x00', 0x2) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, 0x0) r3 = syz_io_uring_setup(0xd7, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "39527290266490607a54e0aeca6210b8"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_io_uring_setup(0x6aed, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x4, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)=0x2) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001c00)=""/4088, 0xff8}], 0x1) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)=0x0) timer_settime(r13, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x2, 0x1, 0x84) 652.46076ms ago: executing program 0 (id=3529): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@mcast2, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400804, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}, @tfcpad={0x8, 0x16, 0x90000000}]}, 0x140}}, 0x44050) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000001c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000085) 0s ago: executing program 0 (id=3530): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (fail_nth: 3) kernel console output (not intermixed with test programs): stream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1058.322784][T17121] loop5: detected capacity change from 0 to 7 [ 1058.331436][T17121] Dev loop5: unable to read RDB block 7 [ 1058.337939][T17121] loop5: unable to read partition table [ 1058.344115][T17121] loop5: partition table beyond EOD, truncated [ 1058.350513][T17121] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1058.428691][T17124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3116'. [ 1058.459030][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 1058.483886][T17123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3116'. [ 1058.513620][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 1058.731505][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'. [ 1058.849588][T13112] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1059.050626][T13112] usb 4-1: Using ep0 maxpacket: 16 [ 1059.065640][T13112] usb 4-1: config 12 has an invalid interface number: 214 but max is 1 [ 1059.074664][T13112] usb 4-1: config 12 has an invalid interface number: 103 but max is 1 [ 1059.083647][T13112] usb 4-1: config 12 has no interface number 0 [ 1059.090847][T13112] usb 4-1: config 12 has no interface number 1 [ 1059.098937][T13112] usb 4-1: config 12 interface 214 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1059.113262][T13112] usb 4-1: config 12 interface 103 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1059.125181][T13112] usb 4-1: config 12 interface 103 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1059.138731][T13112] usb 4-1: config 12 interface 103 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1059.151418][T13112] usb 4-1: config 12 interface 103 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 8 [ 1059.162820][T13112] usb 4-1: config 12 interface 214 has no altsetting 0 [ 1059.171351][T13112] usb 4-1: config 12 interface 103 has no altsetting 0 [ 1059.182653][T13112] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=a8.01 [ 1059.193820][T13112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.201968][T13112] usb 4-1: Product: 痼੘髵ȷ陞쵻쇅퀇藬ꬿ張ﲂ牞簤ꘌᆝ욁ᐖᴱ㸅ؽ燝툥䜽臣ᕮ諒캖纎懾阎駗Ⅾમ挖姖珑緖뎼섐ⲍ犥࣠둤徛咒⻞㚼ꛊῂ㼩倉㵉㺮ቂ鎅맿ⲉ개྄帹ꧤ咧抄༟瑠綞⹃铂ꓑ陠乺ᯅ戜鶁眥瓂᮸໫좨㴥⪲륄僨㪠䧥ⶼ왖릱苦䟥䢳됌 [ 1059.239158][T13112] usb 4-1: Manufacturer: 蠭䒧ᝣ窓b篲慼䒾鰗끪Ḏ㼥薨잊䎳ⶥٿ㣸ꕬ놪췊㛩彵光㍀䶴ᜥ槵灶⮗瘦衒䝏㊣됫ꝣ퓚ᑂ熉肉撓鰖窋䅐嬀㢰া㼮技ቐ⋑ᗦ䍳効僒绡캽Ȑ䂥沩቉憽綎⽶䐽堨㚞翀虭䜶魯訯今࣐꫺ᙢዟ⹋᛼徍庂睇鳲獳퍣㯻䵥쁎桝ᅦ蓖偟釴䊒悧썌ꕉ箕埂恰ꡇ᳚洂↪⫺壪瓁ٲ [ 1059.275768][T13112] usb 4-1: SerialNumber: 홺➂楲﯁对︽Ẳ။ὶ獉抒᭍㿜贏ꢅ嫞ঽꘜ䱋遉䈯㤛괳夬ƃ堭Ⲿ욼衮渆੺빭ₐ䳬飉౫⾻䃢鳗 [ 1059.291818][T13095] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1059.306900][T17130] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1059.329931][T13105] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1059.429762][T13113] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1059.452549][T13095] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1059.463614][T13095] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1059.473887][T13095] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1059.480576][T13105] usb 2-1: Using ep0 maxpacket: 32 [ 1059.483049][T13095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.492094][T13105] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.510277][T13105] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1059.512724][T17128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1059.519849][T13105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.535446][T13095] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1059.545394][T13105] usb 2-1: Product: syz [ 1059.569626][T13113] usb 3-1: device descriptor read/64, error -71 [ 1059.576804][T13105] usb 2-1: Manufacturer: syz [ 1059.582090][T13105] usb 2-1: SerialNumber: syz [ 1059.634770][T13105] usb 2-1: config 0 descriptor?? [ 1059.657464][T13105] asix 2-1:0.0: probe with driver asix failed with error -22 [ 1059.746319][T17144] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3123'. [ 1059.761997][T13095] usb 5-1: USB disconnect, device number 98 [ 1059.829620][T13113] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1059.864819][T13112] usb 4-1: USB disconnect, device number 54 [ 1059.959826][T13113] usb 3-1: device descriptor read/64, error -71 [ 1059.976239][T16636] udevd[16636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.214/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1060.099881][T13113] usb usb3-port1: attempt power cycle [ 1060.439619][T13113] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1060.460182][T13113] usb 3-1: device descriptor read/8, error -71 [ 1060.479701][T13112] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1060.633305][T13112] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1060.661296][T13112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1060.689666][T13112] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1060.709586][T13113] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1060.717344][T13112] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1060.734717][T13112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.750079][T13113] usb 3-1: device descriptor read/8, error -71 [ 1060.757377][T13112] usb 4-1: config 0 descriptor?? [ 1060.770511][T17151] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1060.806894][T17153] loop5: detected capacity change from 0 to 7 [ 1060.816992][T17153] Dev loop5: unable to read RDB block 7 [ 1060.823241][T17153] loop5: unable to read partition table [ 1060.829257][T17153] loop5: partition table beyond EOD, truncated [ 1060.835782][T17153] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1060.879980][T13113] usb usb3-port1: unable to enumerate USB device [ 1061.206644][T13112] dragonrise 0003:0079:0011.003A: unknown global tag 0xc [ 1061.229510][T13112] dragonrise 0003:0079:0011.003A: item 0 4 1 12 parsing failed [ 1061.239272][T13112] dragonrise 0003:0079:0011.003A: parse failed [ 1061.254238][T13112] dragonrise 0003:0079:0011.003A: probe with driver dragonrise failed with error -22 [ 1061.329607][T13113] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1061.405275][T13112] usb 4-1: USB disconnect, device number 55 [ 1061.511993][T13113] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1061.523453][T13113] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.533903][T13113] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1061.543173][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.558316][T13113] hub 5-1:4.0: USB hub found [ 1061.758257][T13113] hub 5-1:4.0: 2 ports detected [ 1061.763404][T13113] usb 5-1: selecting invalid altsetting 1 [ 1061.769201][T13113] hub 5-1:4.0: Using single TT (err -22) [ 1062.000055][ T9] usb 2-1: USB disconnect, device number 59 [ 1062.098250][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.105360][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.145691][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 1062.164748][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 1062.173914][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3132'. [ 1062.639617][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1062.689705][T13105] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1062.792085][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1062.803780][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1062.812981][T13113] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 1062.815412][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1062.830930][T13105] usb 4-1: device descriptor read/64, error -71 [ 1062.835425][T13113] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 1062.845241][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.859271][T17171] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1062.874694][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1063.092129][T13105] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1063.182798][T13112] usb 3-1: USB disconnect, device number 14 [ 1063.239706][T13105] usb 4-1: device descriptor read/64, error -71 [ 1063.303173][T17178] netlink: 'syz.1.3136': attribute type 14 has an invalid length. [ 1063.380001][T13105] usb usb4-port1: attempt power cycle [ 1063.549639][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1063.699553][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1063.706454][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1063.715005][ T9] usb 2-1: config 0 has no interface number 0 [ 1063.721367][T13105] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1063.729096][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1063.741530][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1063.754027][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1063.763620][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.772700][ T9] usb 2-1: Product: syz [ 1063.777046][T13105] usb 4-1: device descriptor read/8, error -71 [ 1063.783569][ T9] usb 2-1: Manufacturer: syz [ 1063.788511][ T9] usb 2-1: SerialNumber: syz [ 1063.796510][ T9] usb 2-1: config 0 descriptor?? [ 1063.802219][T17181] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1063.809842][T17181] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1064.030536][T13105] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1064.049398][T17178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1064.064667][T13105] usb 4-1: device descriptor read/8, error -71 [ 1064.080179][T17178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1064.130398][T17188] syzkaller0: entered promiscuous mode [ 1064.145361][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 1064.145393][ T30] audit: type=1326 audit(1784428949.285:12294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.4.3140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x0 [ 1064.149592][T17188] syzkaller0: entered allmulticast mode [ 1064.193715][ T5706] usb 5-1: USB disconnect, device number 99 [ 1064.195335][T17188] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1064.200532][T13105] usb usb4-port1: unable to enumerate USB device [ 1064.297759][T17188] input: syz0 as /devices/virtual/input/input74 [ 1064.319979][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1064.448903][ T30] audit: type=1800 audit(1784428949.585:12295): pid=17196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3142" name="file0" dev="tmpfs" ino=103 res=0 errno=0 [ 1064.522497][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1064.543065][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1064.564269][ T9] asix 2-1:0.34: probe with driver asix failed with error -61 [ 1064.613132][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1064.630269][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1064.992767][ T30] audit: type=1326 audit(1784428950.135:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.066641][ T30] audit: type=1326 audit(1784428950.135:12297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.128134][ T30] audit: type=1326 audit(1784428950.135:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.204020][ T30] audit: type=1326 audit(1784428950.135:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.275614][ T30] audit: type=1326 audit(1784428950.135:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.394876][ T30] audit: type=1326 audit(1784428950.135:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.486423][ T30] audit: type=1326 audit(1784428950.135:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.577601][ T30] audit: type=1326 audit(1784428950.135:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.3144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x7ffc0000 [ 1065.889705][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1066.049636][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1066.057347][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1066.065804][ T9] usb 4-1: config 0 has no interface number 0 [ 1066.111208][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1066.124061][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.132321][ T9] usb 4-1: Product: syz [ 1066.136616][ T9] usb 4-1: Manufacturer: syz [ 1066.142588][ T9] usb 4-1: SerialNumber: syz [ 1066.152883][ T9] usb 4-1: config 0 descriptor?? [ 1066.175825][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1066.242147][T13112] usb 2-1: USB disconnect, device number 60 [ 1066.366090][T17218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.418665][T17218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.830110][ T5706] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1066.975735][T17233] netlink: 'syz.4.3154': attribute type 2 has an invalid length. [ 1066.985600][ T5706] usb 2-1: device descriptor read/64, error -71 [ 1067.019723][ T187] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1067.044018][T13113] IPVS: starting estimator thread 0... [ 1067.050333][T17233] IPVS: ip_vs_add_dest(): server weight less than zero [ 1067.169685][T17234] IPVS: using max 28 ests per chain, 67200 per kthread [ 1067.183368][ T187] usb 3-1: Using ep0 maxpacket: 16 [ 1067.201796][ T187] usb 3-1: config 0 has no interfaces? [ 1067.218545][ T187] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1067.243029][ T5706] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1067.259167][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.277740][ T187] usb 3-1: config 0 descriptor?? [ 1067.401927][ T5706] usb 2-1: device descriptor read/64, error -71 [ 1067.519002][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.530222][ T5706] usb usb2-port1: attempt power cycle [ 1067.541586][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.623665][ T187] usb 3-1: USB disconnect, device number 15 [ 1067.889807][ T5706] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1067.920543][ T5706] usb 2-1: device descriptor read/8, error -71 [ 1068.172732][ T5706] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1068.202118][ T5706] usb 2-1: device descriptor read/8, error -71 [ 1068.330129][ T5706] usb usb2-port1: unable to enumerate USB device [ 1068.349324][T17248] fuse: fd is not a fuse device [ 1068.491267][ T9] gspca_spca1528: reg_r err -71 [ 1068.506723][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1068.538531][ T9] usb 4-1: USB disconnect, device number 60 [ 1068.623026][T17242] loop3: detected capacity change from 0 to 7 [ 1068.689264][T17242] Dev loop3: unable to read RDB block 7 [ 1068.709089][T17242] loop3: unable to read partition table [ 1068.732301][T17242] loop3: partition table beyond EOD, truncated [ 1068.739027][T17242] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1068.789770][T13112] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 1068.961689][T13112] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1068.974762][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1068.998256][T13112] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1069.014041][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1069.049925][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1069.101320][T13112] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1069.109131][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1069.136030][T13112] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1069.167619][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1069.201548][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1069.228859][T13112] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1069.238986][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1069.262806][T13112] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1069.283073][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1069.311860][T13112] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1069.346004][T13112] usb 3-1: string descriptor 0 read error: -22 [ 1069.352745][T13112] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1069.386161][T13112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.415969][T13112] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1069.583425][T17258] binder: 17257:17258 ioctl c018620b 0 returned -14 [ 1069.662245][T13112] hid_parser_main: 26 callbacks suppressed [ 1069.662266][T13112] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1069.715057][T13112] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1069.928987][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 1069.961167][T17264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'. [ 1070.265684][T17270] input: syz0 as /devices/virtual/input/input75 [ 1070.349189][T13113] usb 3-1: USB disconnect, device number 16 [ 1070.389664][ T5690] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1070.571974][ T5690] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1070.605419][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.634181][ T5690] usb 4-1: config 0 descriptor?? [ 1070.992985][ T5706] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1071.150488][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 1071.177834][ T5706] usb 2-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 1071.210417][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1071.226703][ T5706] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1071.238324][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.253885][ T5706] usb 2-1: config 0 descriptor?? [ 1071.315864][T17268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.334874][T17268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.387705][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3165'. [ 1071.549601][ T187] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1071.636199][T17296] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3174'. [ 1071.702776][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1071.712091][ T187] usb 5-1: not running at top speed; connect to a high speed hub [ 1071.722742][ T187] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 1071.739598][ T187] usb 5-1: config 0 has no interface number 0 [ 1071.746417][ T187] usb 5-1: config 0 interface 175 has no altsetting 0 [ 1071.757093][ T5706] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1071.776293][ T187] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 1071.792770][ T5706] usb 2-1: USB disconnect, device number 65 [ 1071.801212][ T187] usb 5-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 1071.828863][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1071.836002][ T187] usb 5-1: Product: syz [ 1071.838781][T17298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1071.856065][ T187] usb 5-1: Manufacturer: syz [ 1071.887031][ T187] usb 5-1: SerialNumber: syz [ 1071.905545][ T187] usb 5-1: config 0 descriptor?? [ 1071.932008][ T5690] usb 4-1: Cannot set autoneg [ 1071.949647][ T5690] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1071.987450][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1071.987471][ T30] audit: type=1326 audit(1784428957.125:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17299 comm="syz.2.3176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7919de99 code=0x7ffc0000 [ 1072.031064][ T5690] usb 4-1: USB disconnect, device number 61 [ 1072.046116][ T30] audit: type=1326 audit(1784428957.165:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17299 comm="syz.2.3176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d7919de99 code=0x7ffc0000 [ 1072.105148][ T30] audit: type=1326 audit(1784428957.165:12318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17299 comm="syz.2.3176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7919de99 code=0x7ffc0000 [ 1072.152042][ T187] usb-storage 5-1:0.175: USB Mass Storage device detected [ 1072.176842][ T30] audit: type=1326 audit(1784428957.165:12319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17299 comm="syz.2.3176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d7919de99 code=0x7ffc0000 [ 1072.234392][ T30] audit: type=1326 audit(1784428957.165:12320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17299 comm="syz.2.3176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7919de99 code=0x7ffc0000 [ 1072.260542][ T30] audit: type=1326 audit(1784428957.165:12321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17299 comm="syz.2.3176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7919de99 code=0x7ffc0000 [ 1072.362725][ T187] usb 5-1: USB disconnect, device number 100 [ 1072.509882][ T5690] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1072.564190][T17317] loop5: detected capacity change from 0 to 7 [ 1072.615391][T17317] Dev loop5: unable to read RDB block 7 [ 1072.629670][T17317] loop5: unable to read partition table [ 1072.635895][T17317] loop5: partition table beyond EOD, truncated [ 1072.650122][T17317] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1072.682252][ T5690] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1072.703392][T17319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.713969][ T5690] usb 3-1: can't read configurations, error -61 [ 1072.872175][ T5690] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1072.943093][T17328] netlink: 'syz.1.3184': attribute type 10 has an invalid length. [ 1073.035086][T17328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1073.101068][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 1073.113401][T17328] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1073.126226][ T5690] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1073.144718][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 1073.154500][ T5690] usb 3-1: can't read configurations, error -61 [ 1073.168595][ T5690] usb usb3-port1: attempt power cycle [ 1073.514520][ T5690] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1073.563059][ T5690] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1073.589248][ T5690] usb 3-1: can't read configurations, error -61 [ 1073.739644][ T5690] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1073.773641][ T5690] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1073.793105][ T5690] usb 3-1: can't read configurations, error -61 [ 1073.802812][T17350] loop5: detected capacity change from 0 to 7 [ 1073.804403][ T5690] usb usb3-port1: unable to enumerate USB device [ 1073.824618][T17350] Dev loop5: unable to read RDB block 7 [ 1073.859724][T17350] loop5: unable to read partition table [ 1073.879774][T17350] loop5: partition table beyond EOD, truncated [ 1073.914083][T17350] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1074.079824][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3195'. [ 1074.139528][T17365] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1074.156428][T17359] geneve2: entered promiscuous mode [ 1074.170191][T17359] geneve2: entered allmulticast mode [ 1074.197639][T13750] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.223136][T13750] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.297558][T17365] loop9: detected capacity change from 0 to 2640 [ 1074.340899][T17365] buffer_io_error: 4 callbacks suppressed [ 1074.340920][T17365] Buffer I/O error on dev loop9, logical block 0, async page read [ 1074.494993][T17369] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1074.562295][T17369] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1074.562434][T17369] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1074.562527][T17369] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1074.562627][T17369] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 1074.562710][T17369] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 1074.562793][T17369] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 1074.562877][T17369] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 1074.562976][T17369] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 1074.702661][T13095] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1074.733089][T13304] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.733171][T13304] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.852075][T13095] usb 4-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 1074.852128][T13095] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1074.852159][T13095] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1074.852196][T13095] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1074.852223][T13095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.858121][T13095] usb 4-1: config 0 descriptor?? [ 1075.256035][T17379] tipc: Failed to obtain node identity [ 1075.256074][T17379] tipc: Enabling of bearer rejected, failed to enable media [ 1075.489660][ T187] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1075.644983][ T187] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1075.672680][ T187] usb 5-1: config 0 has no interface number 0 [ 1075.693560][ T187] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1075.719533][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.769583][ T187] usb 5-1: Product: syz [ 1075.782938][ T187] usb 5-1: Manufacturer: syz [ 1075.795528][ T187] usb 5-1: SerialNumber: syz [ 1075.821817][ T187] usb 5-1: config 0 descriptor?? [ 1076.084880][T17378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.086848][T17384] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1076.100883][T13095] appleir 0003:05AC:8243.003C: ignoring exceeding usage max [ 1076.113824][T17384] __nla_validate_parse: 3 callbacks suppressed [ 1076.113846][T17384] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3204'. [ 1076.124107][T13095] appleir 0003:05AC:8243.003C: ignoring exceeding usage max [ 1076.130042][T17378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.201805][ T5706] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1076.202884][T13095] input: HID 05ac:8243 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8243.003C/input/input76 [ 1076.309251][T17384] bond7: (slave dummy0): Releasing active interface [ 1076.401151][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 1076.425348][ T5706] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1076.436166][ T5706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1076.448097][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1076.478281][T13095] appleir 0003:05AC:8243.003C: input,hiddev0,hidraw0: USB HID v0.81 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 1076.506907][ T5706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1076.538373][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1076.564294][ T5706] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.567382][T13095] usb 4-1: USB disconnect, device number 62 [ 1076.667005][ T5706] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1076.714214][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.837236][T17388] fido_id[17388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1076.978270][ T5706] usb 2-1: GET_CAPABILITIES returned 0 [ 1077.007467][ T5706] usbtmc 2-1:16.0: can't read capabilities [ 1077.026603][ T187] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1077.058204][ T187] uvcvideo 5-1:0.64: No valid video chain found. [ 1077.096791][ T187] usb 5-1: USB disconnect, device number 101 [ 1077.188039][T17386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.228058][T17386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.276739][T17396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.281888][T17386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.330080][T17386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.366373][T17386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.378871][T17386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.389561][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1077.410417][T17386] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1077.443752][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1077.464559][T17401] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1077.475308][ T187] usb 2-1: USB disconnect, device number 66 [ 1077.647498][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 1077.673110][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 1077.851547][ T30] audit: type=1400 audit(1784428962.985:12322): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=17416 comm="syz.2.3212" [ 1077.906511][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 1077.947135][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 1078.079976][T13095] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1078.105173][T17430] openvswitch: netlink: Multiple metadata blocks provided [ 1078.140360][T17437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1078.178446][T17437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1078.211974][T17437] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1078.256672][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1078.266737][T17437] tipc: Started in network mode [ 1078.271836][T17437] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 1078.291210][T17437] tipc: Enabling of bearer rejected, failed to enable media [ 1078.337125][T13095] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1078.346729][T13095] usb 4-1: can't read configurations, error -71 [ 1078.489617][T17442] syzkaller0: entered promiscuous mode [ 1078.495765][T17442] syzkaller0: entered allmulticast mode [ 1078.935442][T17450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1078.971107][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1078.980497][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1079.412139][T17465] loop5: detected capacity change from 0 to 7 [ 1079.440109][T17465] Dev loop5: unable to read RDB block 7 [ 1079.453874][T17465] loop5: unable to read partition table [ 1079.472507][T17465] loop5: partition table beyond EOD, truncated [ 1079.487120][T17465] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1079.739626][ T187] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1079.803936][T17478] fuse: fd is not a fuse device [ 1079.919575][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 1079.934783][ T187] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1079.961699][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1079.998133][ T187] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1080.018581][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.033198][T17476] syzkaller0: entered promiscuous mode [ 1080.045260][ T187] usb 5-1: Product: syz [ 1080.054469][ T187] usb 5-1: Manufacturer: syz [ 1080.059184][T17476] syzkaller0: entered allmulticast mode [ 1080.066023][ T187] usb 5-1: SerialNumber: syz [ 1080.094971][ T187] usb 5-1: config 0 descriptor?? [ 1080.113179][ T187] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1080.133678][ T187] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1080.660783][T17505] loop5: detected capacity change from 0 to 7 [ 1080.676317][T17505] Dev loop5: unable to read RDB block 7 [ 1080.685893][T17505] loop5: unable to read partition table [ 1080.697377][T17495] fuse: Unknown parameter '0x0000000000000009' [ 1080.705011][T17505] loop5: partition table beyond EOD, truncated [ 1080.709596][T13110] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1080.726539][T17505] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1080.930854][T13110] usb 3-1: Using ep0 maxpacket: 8 [ 1080.949735][T13110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.968166][T13110] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1080.989900][T13110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.027405][T13110] usb 3-1: config 0 descriptor?? [ 1081.072038][T13110] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1081.257368][T13110] gspca_vc032x: reg_r err -32 [ 1081.271212][T13110] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1081.354441][ T30] audit: type=1326 audit(1784428966.495:12323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b799de99 code=0x7ffc0000 [ 1081.429546][ T30] audit: type=1326 audit(1784428966.535:12324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b799de99 code=0x7ffc0000 [ 1081.450455][ T187] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1081.513330][ T187] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1081.531556][ T30] audit: type=1326 audit(1784428966.535:12325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b799de99 code=0x7ffc0000 [ 1081.634321][ T30] audit: type=1326 audit(1784428966.535:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b799de99 code=0x7ffc0000 [ 1081.725835][ T187] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1081.756336][ T30] audit: type=1326 audit(1784428966.535:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25b799dc02 code=0x7ffc0000 [ 1081.833447][ T187] em28xx 5-1:0.0: No AC97 audio processor [ 1081.875683][ T30] audit: type=1326 audit(1784428966.535:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f25b799dc97 code=0x7ffc0000 [ 1082.037717][ T30] audit: type=1326 audit(1784428966.535:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f25b795ab91 code=0x7ffc0000 [ 1082.084915][T17530] __nla_validate_parse: 4 callbacks suppressed [ 1082.084931][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 1082.135048][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 1082.146178][ T30] audit: type=1326 audit(1784428966.535:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f25b799ec89 code=0x7ffc0000 [ 1082.246203][ T30] audit: type=1326 audit(1784428966.535:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f25b795abfb code=0x7ffc0000 [ 1082.457856][T13110] usb 3-1: USB disconnect, device number 21 [ 1082.987883][T17552] netlink: 'syz.0.3252': attribute type 3 has an invalid length. [ 1083.032869][T17552] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1083.045322][T17551] loop5: detected capacity change from 0 to 7 [ 1083.086626][T17551] Dev loop5: unable to read RDB block 7 [ 1083.115116][T17551] loop5: unable to read partition table [ 1083.148360][T17551] loop5: partition table beyond EOD, truncated [ 1083.185363][T17551] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1083.626279][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 1083.654020][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3258'. [ 1083.694739][ T5690] usb 5-1: USB disconnect, device number 102 [ 1083.742820][ T5690] em28xx 5-1:0.0: Disconnecting em28xx [ 1083.842315][ T5690] em28xx 5-1:0.0: Freeing device [ 1083.960973][T17581] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 1084.140493][T17581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1084.253425][T17584] bond9: (slave gretap1): making interface the new active one [ 1084.281175][T17584] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1084.364771][T17591] syzkaller0: entered promiscuous mode [ 1084.404093][T17591] syzkaller0: entered allmulticast mode [ 1084.504369][T17594] bridge1: entered promiscuous mode [ 1084.517399][T17594] bridge1: entered allmulticast mode [ 1085.013863][T13110] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1085.207157][T13110] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1085.224209][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 1085.229606][T13110] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1085.239222][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 1085.269765][T13110] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1085.279308][T13110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.316297][T17605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1085.345243][T13110] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1085.429808][T13112] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1085.489574][T13095] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1085.590546][T13112] usb 4-1: Using ep0 maxpacket: 8 [ 1085.597484][T13112] usb 4-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1085.608549][T13112] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.622395][T13112] usb 4-1: config 1 has no interface number 0 [ 1085.628570][T13112] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1085.641429][T13095] usb 2-1: device descriptor read/64, error -71 [ 1085.648318][T13112] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1085.659640][T13112] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1085.673273][T13112] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1085.679624][ T5690] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1085.690998][T13112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.691029][T13112] usb 4-1: Product: syz [ 1085.691048][T13112] usb 4-1: Manufacturer: syz [ 1085.691066][T13112] usb 4-1: SerialNumber: syz [ 1085.859603][ T5690] usb 3-1: Using ep0 maxpacket: 16 [ 1085.867590][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.879202][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.889696][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1085.889714][T13095] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1085.910510][ T5690] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1085.919819][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.944578][ T5690] usb 3-1: config 0 descriptor?? [ 1086.021094][T13095] usb 2-1: device descriptor read/64, error -71 [ 1086.085849][T13112] usb 4-1: USB disconnect, device number 65 [ 1086.140122][T13095] usb usb2-port1: attempt power cycle [ 1086.171180][T16650] udevd[16650]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1086.363130][ T5690] usbhid 3-1:0.0: can't add hid device: -71 [ 1086.376245][ T5690] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1086.395866][ T5690] usb 3-1: USB disconnect, device number 22 [ 1086.507733][T17633] syzkaller0: entered promiscuous mode [ 1086.513597][T17633] syzkaller0: entered allmulticast mode [ 1086.519599][T13095] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1086.529193][T17633] FAULT_INJECTION: forcing a failure. [ 1086.529193][T17633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.544724][T17633] CPU: 0 UID: 0 PID: 17633 Comm: syz.3.3277 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.544747][T17633] Tainted: [L]=SOFTLOCKUP [ 1086.544752][T17633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.544760][T17633] Call Trace: [ 1086.544766][T17633] [ 1086.544772][T17633] dump_stack_lvl+0xe8/0x150 [ 1086.544800][T17633] should_fail_ex+0x40c/0x560 [ 1086.544825][T17633] _copy_from_user+0x2d/0xb0 [ 1086.544844][T17633] __copy_msghdr+0x390/0x590 [ 1086.544864][T17633] ___sys_sendmsg+0x213/0x360 [ 1086.544880][T17633] ? __lock_acquire+0x683/0x2cf0 [ 1086.544901][T17633] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.544933][T17633] ? __fget_files+0x2a/0x420 [ 1086.544951][T17633] ? __fget_files+0x3a2/0x420 [ 1086.544971][T17633] __x64_sys_sendmsg+0x1b1/0x290 [ 1086.544985][T17633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.545008][T17633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.545023][T17633] do_syscall_64+0x174/0x580 [ 1086.545038][T17633] ? trace_irq_disable+0x3b/0x140 [ 1086.545056][T17633] ? clear_bhb_loop+0x40/0x90 [ 1086.545071][T17633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.545084][T17633] RIP: 0033:0x7f2f3219de99 [ 1086.545098][T17633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.545109][T17633] RSP: 002b:00007f2f33139028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.545124][T17633] RAX: ffffffffffffffda RBX: 00007f2f32425fa0 RCX: 00007f2f3219de99 [ 1086.545133][T17633] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1086.545142][T17633] RBP: 00007f2f33139090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.545150][T17633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.545158][T17633] R13: 00007f2f32426038 R14: 00007f2f32425fa0 R15: 00007f2f3254fa48 [ 1086.545177][T17633] [ 1086.550497][T13095] usb 2-1: device descriptor read/8, error -71 [ 1087.043184][T13095] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1087.080363][T13095] usb 2-1: device descriptor read/8, error -71 [ 1087.200275][T13095] usb usb2-port1: unable to enumerate USB device [ 1087.368478][T17650] syzkaller0: entered promiscuous mode [ 1087.384808][T17650] syzkaller0: entered allmulticast mode [ 1087.937837][T13095] usb 5-1: USB disconnect, device number 103 [ 1088.018899][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1088.038376][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1088.476431][T17680] FAULT_INJECTION: forcing a failure. [ 1088.476431][T17680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.490416][T17680] CPU: 0 UID: 0 PID: 17680 Comm: syz.0.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.490452][T17680] Tainted: [L]=SOFTLOCKUP [ 1088.490460][T17680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1088.490473][T17680] Call Trace: [ 1088.490482][T17680] [ 1088.490491][T17680] dump_stack_lvl+0xe8/0x150 [ 1088.490529][T17680] should_fail_ex+0x40c/0x560 [ 1088.490559][T17680] _copy_from_user+0x2d/0xb0 [ 1088.490590][T17680] ___sys_sendmsg+0x1c6/0x360 [ 1088.490610][T17680] ? __lock_acquire+0x683/0x2cf0 [ 1088.490642][T17680] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.490698][T17680] ? __fget_files+0x2a/0x420 [ 1088.490724][T17680] ? __fget_files+0x3a2/0x420 [ 1088.490761][T17680] __x64_sys_sendmsg+0x1b1/0x290 [ 1088.490785][T17680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1088.490825][T17680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.490848][T17680] do_syscall_64+0x174/0x580 [ 1088.490867][T17680] ? trace_irq_disable+0x3b/0x140 [ 1088.490893][T17680] ? clear_bhb_loop+0x40/0x90 [ 1088.490918][T17680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.490939][T17680] RIP: 0033:0x7f25b799de99 [ 1088.490960][T17680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.490977][T17680] RSP: 002b:00007f25b87c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.491001][T17680] RAX: ffffffffffffffda RBX: 00007f25b7c25fa0 RCX: 00007f25b799de99 [ 1088.491014][T17680] RDX: 000000002000c8d0 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1088.491028][T17680] RBP: 00007f25b87c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.491042][T17680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.491058][T17680] R13: 00007f25b7c26038 R14: 00007f25b7c25fa0 R15: 00007f25b7d4fa48 [ 1088.491090][T17680] [ 1088.790296][T17681] syzkaller0: entered promiscuous mode [ 1088.795973][T17681] syzkaller0: entered allmulticast mode [ 1088.844064][T17672] FAULT_INJECTION: forcing a failure. [ 1088.844064][T17672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.949634][T17672] CPU: 0 UID: 0 PID: 17672 Comm: syz.4.3289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.949670][T17672] Tainted: [L]=SOFTLOCKUP [ 1088.949679][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1088.949692][T17672] Call Trace: [ 1088.949701][T17672] [ 1088.949711][T17672] dump_stack_lvl+0xe8/0x150 [ 1088.949750][T17672] should_fail_ex+0x40c/0x560 [ 1088.949790][T17672] _copy_from_iter+0x1d3/0x1660 [ 1088.949818][T17672] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1088.949853][T17672] ? dev_get_by_index+0x22/0x2d0 [ 1088.949938][T17672] ? __pfx__copy_from_iter+0x10/0x10 [ 1088.949970][T17672] ? dev_get_by_index+0x22/0x2d0 [ 1088.949992][T17672] ? dev_get_by_index+0x22/0x2d0 [ 1088.950021][T17672] packet_sendmsg+0x2f1d/0x5040 [ 1088.950050][T17672] ? aa_label_sk_perm+0x532/0x6e0 [ 1088.950085][T17672] ? __lock_acquire+0x683/0x2cf0 [ 1088.950133][T17672] ? __lock_acquire+0x683/0x2cf0 [ 1088.950175][T17672] ? unwind_next_frame+0x8f/0x2550 [ 1088.950216][T17672] ? __pfx_packet_sendmsg+0x10/0x10 [ 1088.950253][T17672] ? __pfx_aa_sk_perm+0x10/0x10 [ 1088.950286][T17672] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1088.950313][T17672] ? __pfx_packet_sendmsg+0x10/0x10 [ 1088.950333][T17672] sock_sendmsg_nosec+0x13a/0x180 [ 1088.950363][T17672] ____sys_sendmsg+0x54e/0x850 [ 1088.950390][T17672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1088.950421][T17672] ? import_iovec+0x73/0xa0 [ 1088.950455][T17672] ___sys_sendmsg+0x2a5/0x360 [ 1088.950474][T17672] ? __lock_acquire+0x683/0x2cf0 [ 1088.950506][T17672] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.950563][T17672] ? __fget_files+0x2a/0x420 [ 1088.950589][T17672] ? __fget_files+0x3a2/0x420 [ 1088.950626][T17672] __x64_sys_sendmsg+0x1b1/0x290 [ 1088.950651][T17672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1088.950690][T17672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.950713][T17672] do_syscall_64+0x174/0x580 [ 1088.950734][T17672] ? trace_irq_disable+0x3b/0x140 [ 1088.950767][T17672] ? clear_bhb_loop+0x40/0x90 [ 1088.950792][T17672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.950813][T17672] RIP: 0033:0x7f305799de99 [ 1088.950832][T17672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.950851][T17672] RSP: 002b:00007f3055bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.950874][T17672] RAX: ffffffffffffffda RBX: 00007f3057c25fa0 RCX: 00007f305799de99 [ 1088.950889][T17672] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1088.950902][T17672] RBP: 00007f3055bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.950915][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.950928][T17672] R13: 00007f3057c26038 R14: 00007f3057c25fa0 R15: 00007f3057d4fa48 [ 1088.950960][T17672] [ 1089.329322][T17696] loop8: detected capacity change from 0 to 8 [ 1089.384437][T17696] Dev loop8: unable to read RDB block 8 [ 1089.390461][T17696] loop8: unable to read partition table [ 1089.396413][T17696] loop8: partition table beyond EOD, truncated [ 1089.418611][T17696] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1089.469614][ T5690] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1089.569981][T17701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1089.639589][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 1089.656362][ T5690] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1089.682796][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1089.728842][ T5690] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1089.761578][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.781842][ T5690] usb 2-1: Product: syz [ 1089.789285][ T5690] usb 2-1: Manufacturer: syz [ 1089.796735][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3298'. [ 1089.816119][ T5690] usb 2-1: SerialNumber: syz [ 1089.829704][ T187] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1089.841586][ T5690] usb 2-1: config 0 descriptor?? [ 1089.852247][T17706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3298'. [ 1089.868607][ T5690] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1089.878827][ T5690] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1090.009660][ T187] usb 5-1: Using ep0 maxpacket: 32 [ 1090.022470][ T187] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1090.055622][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1090.073518][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1090.084095][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1090.101558][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1090.123663][ T187] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1090.139626][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.161558][ T187] usb 5-1: Product: syz [ 1090.168927][ T187] usb 5-1: Manufacturer: syz [ 1090.186307][ T187] usb 5-1: SerialNumber: syz [ 1090.206515][ T187] usb 5-1: config 0 descriptor?? [ 1090.288108][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1090.429157][ T187] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1090.545318][ T5690] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1090.567529][ T5690] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1090.593512][ T5690] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1090.619626][ T5690] em28xx 2-1:0.0: No AC97 audio processor [ 1090.713983][T17704] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3296'. [ 1090.758940][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1090.858406][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.867633][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.876914][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.886927][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.917553][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.935204][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.950044][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.959855][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1090.966812][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1090.989251][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1090.998957][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.999202][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.015991][ T9] usb 3-1: Product: syz [ 1091.020597][ T9] usb 3-1: Manufacturer: syz [ 1091.025498][ T9] usb 3-1: SerialNumber: syz [ 1091.031917][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.039742][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.058921][ T9] usb 3-1: config 0 descriptor?? [ 1091.068842][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.087861][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.112097][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.142845][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.154088][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.165771][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.175604][ T187] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1091.181987][ T187] input input77: Timeout waiting for response from device. [ 1091.235837][ T187] usb 5-1: USB disconnect, device number 104 [ 1091.288296][ T9] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1091.345915][ T9] usb 3-1: USB disconnect, device number 23 [ 1091.478816][T17726] netlink: 'syz.3.3303': attribute type 9 has an invalid length. [ 1091.493616][T17728] FAULT_INJECTION: forcing a failure. [ 1091.493616][T17728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.507676][T17723] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1091.524363][T17728] CPU: 0 UID: 0 PID: 17728 Comm: syz.4.3304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1091.524398][T17728] Tainted: [L]=SOFTLOCKUP [ 1091.524406][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1091.524419][T17728] Call Trace: [ 1091.524429][T17728] [ 1091.524438][T17728] dump_stack_lvl+0xe8/0x150 [ 1091.524476][T17728] should_fail_ex+0x40c/0x560 [ 1091.524508][T17728] _copy_from_user+0x2d/0xb0 [ 1091.524541][T17728] __copy_msghdr+0x390/0x590 [ 1091.524570][T17728] ___sys_sendmsg+0x213/0x360 [ 1091.524590][T17728] ? __lock_acquire+0x683/0x2cf0 [ 1091.524623][T17728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1091.524680][T17728] ? __fget_files+0x2a/0x420 [ 1091.524707][T17728] ? __fget_files+0x3a2/0x420 [ 1091.524744][T17728] __x64_sys_sendmsg+0x1b1/0x290 [ 1091.524769][T17728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1091.524824][T17728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.524848][T17728] do_syscall_64+0x174/0x580 [ 1091.524868][T17728] ? trace_irq_disable+0x3b/0x140 [ 1091.524895][T17728] ? clear_bhb_loop+0x40/0x90 [ 1091.524920][T17728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.524941][T17728] RIP: 0033:0x7f305799de99 [ 1091.524961][T17728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.524984][T17728] RSP: 002b:00007f3055bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.525009][T17728] RAX: ffffffffffffffda RBX: 00007f3057c25fa0 RCX: 00007f305799de99 [ 1091.525024][T17728] RDX: 000000002000c8d0 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1091.525038][T17728] RBP: 00007f3055bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.525050][T17728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.525063][T17728] R13: 00007f3057c26038 R14: 00007f3057c25fa0 R15: 00007f3057d4fa48 [ 1091.525095][T17728] [ 1091.918439][T17732] loop2: detected capacity change from 0 to 7 [ 1092.021570][ T9] usb 2-1: USB disconnect, device number 71 [ 1092.028765][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 1092.036180][ T9] em28xx 2-1:0.0: Freeing device [ 1092.087956][T17732] Dev loop2: unable to read RDB block 7 [ 1092.131122][T17732] loop2: unable to read partition table [ 1092.151573][T17732] loop2: partition table beyond EOD, truncated [ 1092.184569][T17732] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1092.474090][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 1092.502925][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3309'. [ 1092.518456][T17734] syzkaller0: entered promiscuous mode [ 1092.532156][T17734] syzkaller0: entered allmulticast mode [ 1092.553549][T17734] FAULT_INJECTION: forcing a failure. [ 1092.553549][T17734] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.578192][T17734] CPU: 1 UID: 0 PID: 17734 Comm: syz.4.3306 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.578227][T17734] Tainted: [L]=SOFTLOCKUP [ 1092.578235][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1092.578248][T17734] Call Trace: [ 1092.578257][T17734] [ 1092.578266][T17734] dump_stack_lvl+0xe8/0x150 [ 1092.578303][T17734] should_fail_ex+0x40c/0x560 [ 1092.578334][T17734] should_failslab+0xa8/0x100 [ 1092.578367][T17734] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1092.578392][T17734] ? local_lock_release+0x9c/0x160 [ 1092.578424][T17734] ? __alloc_skb+0x1d7/0x7a0 [ 1092.578449][T17734] ? __alloc_skb+0x1d7/0x7a0 [ 1092.578482][T17734] __alloc_skb+0x1d7/0x7a0 [ 1092.578514][T17734] alloc_skb_with_frags+0xc6/0x760 [ 1092.578627][T17734] sock_alloc_send_pskb+0x878/0x990 [ 1092.578656][T17734] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1092.578691][T17734] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1092.578719][T17734] ? dev_get_by_index+0x22/0x2d0 [ 1092.578742][T17734] ? dev_get_by_index+0x22/0x2d0 [ 1092.578771][T17734] packet_sendmsg+0x3258/0x5040 [ 1092.578795][T17734] ? aa_label_sk_perm+0x532/0x6e0 [ 1092.578835][T17734] ? __lock_acquire+0x683/0x2cf0 [ 1092.578878][T17734] ? unwind_next_frame+0x8f/0x2550 [ 1092.578916][T17734] ? __pfx_packet_sendmsg+0x10/0x10 [ 1092.578951][T17734] ? __pfx_aa_sk_perm+0x10/0x10 [ 1092.578984][T17734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1092.579010][T17734] ? __pfx_packet_sendmsg+0x10/0x10 [ 1092.579032][T17734] sock_sendmsg_nosec+0x13a/0x180 [ 1092.579061][T17734] ____sys_sendmsg+0x54e/0x850 [ 1092.579085][T17734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1092.579122][T17734] ? import_iovec+0x73/0xa0 [ 1092.579153][T17734] ___sys_sendmsg+0x2a5/0x360 [ 1092.579171][T17734] ? __lock_acquire+0x683/0x2cf0 [ 1092.579200][T17734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1092.579257][T17734] ? __fget_files+0x2a/0x420 [ 1092.579283][T17734] ? __fget_files+0x3a2/0x420 [ 1092.579321][T17734] __x64_sys_sendmsg+0x1b1/0x290 [ 1092.579345][T17734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1092.579385][T17734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.579408][T17734] do_syscall_64+0x174/0x580 [ 1092.579429][T17734] ? trace_irq_disable+0x3b/0x140 [ 1092.579453][T17734] ? clear_bhb_loop+0x40/0x90 [ 1092.579477][T17734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.579497][T17734] RIP: 0033:0x7f305799de99 [ 1092.579518][T17734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.579536][T17734] RSP: 002b:00007f3055bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1092.579558][T17734] RAX: ffffffffffffffda RBX: 00007f3057c25fa0 RCX: 00007f305799de99 [ 1092.579573][T17734] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1092.579586][T17734] RBP: 00007f3055bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.579597][T17734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.579610][T17734] R13: 00007f3057c26038 R14: 00007f3057c25fa0 R15: 00007f3057d4fa48 [ 1092.579642][T17734] [ 1093.516298][T17754] loop5: detected capacity change from 0 to 7 [ 1093.558999][T17754] Dev loop5: unable to read RDB block 7 [ 1093.588464][T17754] loop5: unable to read partition table [ 1093.629904][T17754] loop5: partition table beyond EOD, truncated [ 1093.663549][T17754] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1093.944730][T17766] FAULT_INJECTION: forcing a failure. [ 1093.944730][T17766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.006972][T17766] CPU: 1 UID: 0 PID: 17766 Comm: syz.0.3316 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.007010][T17766] Tainted: [L]=SOFTLOCKUP [ 1094.007017][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1094.007030][T17766] Call Trace: [ 1094.007038][T17766] [ 1094.007049][T17766] dump_stack_lvl+0xe8/0x150 [ 1094.007087][T17766] should_fail_ex+0x40c/0x560 [ 1094.007118][T17766] _copy_from_user+0x2d/0xb0 [ 1094.007150][T17766] ____sys_sendmsg+0x303/0x850 [ 1094.007178][T17766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1094.007209][T17766] ? import_iovec+0x73/0xa0 [ 1094.007243][T17766] ___sys_sendmsg+0x2a5/0x360 [ 1094.007270][T17766] ? __lock_acquire+0x683/0x2cf0 [ 1094.007301][T17766] ? __pfx____sys_sendmsg+0x10/0x10 [ 1094.007358][T17766] ? __fget_files+0x2a/0x420 [ 1094.007384][T17766] ? __fget_files+0x3a2/0x420 [ 1094.007421][T17766] __x64_sys_sendmsg+0x1b1/0x290 [ 1094.007445][T17766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1094.007484][T17766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.007507][T17766] do_syscall_64+0x174/0x580 [ 1094.007528][T17766] ? trace_irq_disable+0x3b/0x140 [ 1094.007554][T17766] ? clear_bhb_loop+0x40/0x90 [ 1094.007579][T17766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.007600][T17766] RIP: 0033:0x7f25b799de99 [ 1094.007620][T17766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.007639][T17766] RSP: 002b:00007f25b87c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.007663][T17766] RAX: ffffffffffffffda RBX: 00007f25b7c25fa0 RCX: 00007f25b799de99 [ 1094.007678][T17766] RDX: 000000002000c8d0 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1094.007692][T17766] RBP: 00007f25b87c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.007705][T17766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.007717][T17766] R13: 00007f25b7c26038 R14: 00007f25b7c25fa0 R15: 00007f25b7d4fa48 [ 1094.007749][T17766] [ 1094.769399][T17758] syzkaller0: entered promiscuous mode [ 1094.775749][T17758] syzkaller0: entered allmulticast mode [ 1094.829687][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1095.019581][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1095.057681][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1095.079111][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1095.101408][ T9] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1095.101566][T17782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1095.146911][ T9] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1095.189634][ T9] usb 2-1: config 14 has no interface number 0 [ 1095.241098][ T9] usb 2-1: config 14 has no interface number 1 [ 1095.270389][ T9] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1095.293433][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 1095.348812][ T9] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1095.370016][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1095.381709][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1095.396116][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1095.407592][ T9] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.425878][ T9] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1095.434199][ T9] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1095.449250][ T9] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1095.467011][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.489860][ T9] usb 2-1: Product: syz [ 1095.505639][ T9] usb 2-1: Manufacturer: syz [ 1095.520708][ T9] usb 2-1: SerialNumber: syz [ 1095.736752][T17791] loop5: detected capacity change from 0 to 7 [ 1095.750029][T17787] syzkaller0: entered promiscuous mode [ 1095.767695][T17791] Dev loop5: unable to read RDB block 7 [ 1095.785051][T17791] loop5: AHDI p1 p4 [ 1095.794169][T17787] syzkaller0: entered allmulticast mode [ 1095.797004][T17791] loop5: partition table partially beyond EOD, truncated [ 1095.813121][T17791] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1095.950311][ T9] legousbtower 2-1:14.57: interrupt endpoints not found [ 1096.270806][T17804] FAULT_INJECTION: forcing a failure. [ 1096.270806][T17804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.284728][T17804] CPU: 0 UID: 0 PID: 17804 Comm: syz.2.3329 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.284758][T17804] Tainted: [L]=SOFTLOCKUP [ 1096.284765][T17804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1096.284775][T17804] Call Trace: [ 1096.284783][T17804] [ 1096.284790][T17804] dump_stack_lvl+0xe8/0x150 [ 1096.284826][T17804] should_fail_ex+0x40c/0x560 [ 1096.284853][T17804] _copy_to_user+0x31/0xb0 [ 1096.284880][T17804] simple_read_from_buffer+0xe1/0x170 [ 1096.284909][T17804] proc_fail_nth_read+0x1bb/0x230 [ 1096.284935][T17804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1096.284961][T17804] ? rw_verify_area+0x24a/0x4c0 [ 1096.284986][T17804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1096.285007][T17804] vfs_read+0x213/0xa80 [ 1096.285036][T17804] ? __pfx___mutex_lock+0x10/0x10 [ 1096.285054][T17804] ? __pfx_vfs_read+0x10/0x10 [ 1096.285080][T17804] ? __fget_files+0x2a/0x420 [ 1096.285105][T17804] ? __fget_files+0x3a2/0x420 [ 1096.285127][T17804] ? __fget_files+0x2a/0x420 [ 1096.285155][T17804] ksys_read+0x150/0x270 [ 1096.285182][T17804] ? __pfx_ksys_read+0x10/0x10 [ 1096.285222][T17804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.285241][T17804] do_syscall_64+0x174/0x580 [ 1096.285256][T17804] ? trace_irq_disable+0x3b/0x140 [ 1096.285277][T17804] ? clear_bhb_loop+0x40/0x90 [ 1096.285297][T17804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.285314][T17804] RIP: 0033:0x7f5d7915e6ce [ 1096.285331][T17804] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1096.285346][T17804] RSP: 002b:00007f5d7a11dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1096.285365][T17804] RAX: ffffffffffffffda RBX: 00007f5d7a11e6c0 RCX: 00007f5d7915e6ce [ 1096.285378][T17804] RDX: 000000000000000f RSI: 00007f5d7a11e0a0 RDI: 0000000000000005 [ 1096.285389][T17804] RBP: 00007f5d7a11e090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.285398][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.285408][T17804] R13: 00007f5d79426038 R14: 00007f5d79425fa0 R15: 00007f5d7954fa48 [ 1096.285436][T17804] [ 1096.619041][ T9] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1096.634307][ T9] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1096.827833][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'. [ 1096.841387][T17814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3333'. [ 1097.053405][T13110] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1097.067030][T17806] syzkaller0: entered promiscuous mode [ 1097.077508][T17806] syzkaller0: entered allmulticast mode [ 1097.097630][ T9] usb 2-1: USB disconnect, device number 72 [ 1097.097674][ C0] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 1097.138005][ T9] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1097.240057][T13110] usb 4-1: Using ep0 maxpacket: 16 [ 1097.252876][T13110] usb 4-1: config 0 has no interfaces? [ 1097.268107][T13110] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1097.297650][T13110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.338519][T13110] usb 4-1: config 0 descriptor?? [ 1097.636626][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1097.636646][ T30] audit: type=1326 audit(1784428982.775:12372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17797 comm="syz.3.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f3219de99 code=0x0 [ 1097.683373][T13110] usb 4-1: USB disconnect, device number 66 [ 1097.813241][T17831] loop5: detected capacity change from 0 to 7 [ 1097.826738][T17831] Dev loop5: unable to read RDB block 7 [ 1097.864501][T17831] loop5: AHDI p1 p4 [ 1097.878472][T17831] loop5: partition table partially beyond EOD, truncated [ 1097.899243][T17831] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1097.932779][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.979719][T13112] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1098.149633][T13112] usb 2-1: Using ep0 maxpacket: 32 [ 1098.174177][T13112] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1098.186875][T13112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.195954][T13112] usb 2-1: Product: syz [ 1098.206039][T13112] usb 2-1: Manufacturer: syz [ 1098.220159][T13112] usb 2-1: SerialNumber: syz [ 1098.248895][T13112] usb 2-1: config 0 descriptor?? [ 1098.270607][T13112] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1098.288353][T17838] loop5: detected capacity change from 0 to 7 [ 1098.297282][T17838] Dev loop5: unable to read RDB block 7 [ 1098.312392][T17838] loop5: unable to read partition table [ 1098.324841][T17838] loop5: partition table beyond EOD, truncated [ 1098.354357][T17838] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1098.480916][T17836] syzkaller0: entered promiscuous mode [ 1098.539611][T17836] syzkaller0: entered allmulticast mode [ 1098.761039][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1098.772658][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1099.206341][T17851] syzkaller0: entered promiscuous mode [ 1099.243244][T17851] syzkaller0: entered allmulticast mode [ 1099.679233][T17874] loop5: detected capacity change from 0 to 7 [ 1099.699407][T17874] Dev loop5: unable to read RDB block 7 [ 1099.711744][T17874] loop5: unable to read partition table [ 1099.740056][T17874] loop5: partition table beyond EOD, truncated [ 1099.759130][T17874] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1099.893553][T17873] syzkaller0: entered promiscuous mode [ 1099.911421][T17829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.949629][T17873] syzkaller0: entered allmulticast mode [ 1099.957823][T17829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.209330][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1100.232350][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1100.480848][T17885] syzkaller0: entered promiscuous mode [ 1100.496934][T17885] syzkaller0: entered allmulticast mode [ 1100.610778][T13112] gspca_ov534_9: reg_r err -71 [ 1100.771825][T17897] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1100.900815][T13112] gspca_ov534_9: Unknown sensor 0000 [ 1100.900925][T13112] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1100.956450][T13112] usb 2-1: USB disconnect, device number 73 [ 1100.972166][T13113] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1101.007767][T17906] FAULT_INJECTION: forcing a failure. [ 1101.007767][T17906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.021446][T17906] CPU: 1 UID: 0 PID: 17906 Comm: syz.3.3362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.021480][T17906] Tainted: [L]=SOFTLOCKUP [ 1101.021489][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1101.021502][T17906] Call Trace: [ 1101.021511][T17906] [ 1101.021520][T17906] dump_stack_lvl+0xe8/0x150 [ 1101.021559][T17906] should_fail_ex+0x40c/0x560 [ 1101.021588][T17906] _copy_from_iter+0x1d3/0x1660 [ 1101.021615][T17906] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1101.021647][T17906] ? __pfx_policy_nodemask+0x10/0x10 [ 1101.021676][T17906] ? unwind_next_frame+0x8f/0x2550 [ 1101.021698][T17906] ? __pfx__copy_from_iter+0x10/0x10 [ 1101.021726][T17906] ? alloc_pages_mpol+0x24a/0x380 [ 1101.021763][T17906] copy_page_from_iter+0x219/0x2d0 [ 1101.021795][T17906] tun_get_user+0x1bf1/0x4370 [ 1101.021912][T17906] ? tun_get_user+0x6e7/0x4370 [ 1101.021955][T17906] ? aa_file_perm+0x4ed/0x15f0 [ 1101.021978][T17906] ? __pfx_tun_get_user+0x10/0x10 [ 1101.022006][T17906] ? __lock_acquire+0x683/0x2cf0 [ 1101.022047][T17906] ? ref_tracker_alloc+0x341/0x4b0 [ 1101.022071][T17906] ? get_pid_task+0x20/0x1f0 [ 1101.022101][T17906] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1101.022129][T17906] ? tun_get+0x1c/0x2f0 [ 1101.022164][T17906] ? tun_get+0x1c/0x2f0 [ 1101.022196][T17906] ? tun_get+0x1c/0x2f0 [ 1101.022221][T17906] ? tun_get+0x1c/0x2f0 [ 1101.022252][T17906] tun_chr_write_iter+0x113/0x200 [ 1101.022280][T17906] vfs_write+0x612/0xba0 [ 1101.022321][T17906] ? __pfx_vfs_write+0x10/0x10 [ 1101.022361][T17906] ? __fget_files+0x2a/0x420 [ 1101.022401][T17906] ksys_write+0x150/0x270 [ 1101.022435][T17906] ? __pfx_ksys_write+0x10/0x10 [ 1101.022472][T17906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.022496][T17906] do_syscall_64+0x174/0x580 [ 1101.022517][T17906] ? trace_irq_disable+0x3b/0x140 [ 1101.022543][T17906] ? clear_bhb_loop+0x40/0x90 [ 1101.022568][T17906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.022588][T17906] RIP: 0033:0x7f2f3215e6ce [ 1101.022608][T17906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1101.022625][T17906] RSP: 002b:00007f2f33138fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1101.022648][T17906] RAX: ffffffffffffffda RBX: 00007f2f331396c0 RCX: 00007f2f3215e6ce [ 1101.022662][T17906] RDX: 000000000000002e RSI: 0000200000000100 RDI: 00000000000000c8 [ 1101.022676][T17906] RBP: 00007f2f33139090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.022689][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.022701][T17906] R13: 00007f2f32426038 R14: 00007f2f32425fa0 R15: 00007f2f3254fa48 [ 1101.022733][T17906] [ 1101.369684][T13113] usb 3-1: Using ep0 maxpacket: 16 [ 1101.377497][T13113] usb 3-1: config 0 has no interfaces? [ 1101.383163][T13113] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1101.392474][T13113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.455453][T13113] usb 3-1: config 0 descriptor?? [ 1101.647516][T17903] input: syz1 as /devices/virtual/input/input79 [ 1101.674102][ T30] audit: type=1326 audit(1784428986.815:12373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17877 comm="syz.2.3354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d7919de99 code=0x0 [ 1101.723293][ T9] usb 3-1: USB disconnect, device number 24 [ 1101.824208][T17921] syzkaller0: entered promiscuous mode [ 1101.830658][T17921] syzkaller0: entered allmulticast mode [ 1101.841187][T17911] syzkaller0: entered promiscuous mode [ 1101.846989][T17911] syzkaller0: entered allmulticast mode [ 1102.244610][T17925] loop5: detected capacity change from 0 to 7 [ 1102.263788][T17925] Dev loop5: unable to read RDB block 7 [ 1102.285901][T17925] loop5: unable to read partition table [ 1102.314266][T17925] loop5: partition table beyond EOD, truncated [ 1102.334240][T17925] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1102.489313][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1102.502351][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1102.549957][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1102.709622][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1102.717892][ T9] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1102.753664][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.784526][ T9] usb 5-1: config 1 has no interface number 0 [ 1102.816007][ T9] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1102.843238][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1102.874391][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1102.888347][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1102.903067][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.911342][ T9] usb 5-1: Product: syz [ 1102.915693][ T9] usb 5-1: Manufacturer: syz [ 1102.926509][ T9] usb 5-1: SerialNumber: syz [ 1103.296119][ T9] usb 5-1: USB disconnect, device number 105 [ 1105.132184][T15672] Bluetooth: hci4: command 0x0406 tx timeout [ 1107.452006][T17935] syz_tun: entered allmulticast mode [ 1107.472513][T17937] syz_tun: left allmulticast mode [ 1107.501193][T17943] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3370'. [ 1107.807380][T17945] syzkaller0: entered promiscuous mode [ 1107.853265][T17945] syzkaller0: entered allmulticast mode [ 1107.951226][T13113] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1108.091402][ T187] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1108.123595][T13113] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1108.141998][T13113] usb 2-1: config 1 has no interface number 0 [ 1108.158513][T13113] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1108.209316][T13113] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1108.238543][T13113] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.270250][T13113] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1108.271084][ T187] usb 5-1: Using ep0 maxpacket: 32 [ 1108.284342][T13113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.298766][T13113] usb 2-1: Product: syz [ 1108.309941][T13113] usb 2-1: Manufacturer: syz [ 1108.317283][T13113] usb 2-1: SerialNumber: syz [ 1108.328457][ T187] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 1108.373671][T17947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1108.373957][ T187] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1108.399912][ T187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1108.424361][ T187] usb 5-1: config 1 has no interface number 0 [ 1108.440325][ T187] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1108.463336][ T187] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1108.491104][ T187] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1108.509680][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.545311][ T187] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1108.591170][T17947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1108.748777][ T187] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1108.824839][T13095] usb 5-1: USB disconnect, device number 106 [ 1108.854945][T13095] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1109.182254][T13113] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1109.199966][ C1] sierra_net 2-1:1.7 wwan0: : unexpected notification bd! [ 1109.208713][ C1] sierra_net 2-1:1.7 wwan0: : unexpected notification 88! [ 1109.216132][ C1] sierra_net 2-1:1.7 wwan0: : unexpected notification 51! [ 1109.227719][T13112] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1109.309707][T13095] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1109.367216][T17970] xt_hashlimit: invalid rate [ 1109.399683][T13112] usb 3-1: Using ep0 maxpacket: 16 [ 1109.410773][T13113] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 1109.417627][T13110] sierra_net 2-1:1.7 wwan0: usb_control_msg failed, status -71 [ 1109.454336][T13095] usb 5-1: device descriptor read/64, error -71 [ 1109.463800][T13112] usb 3-1: config 0 has no interfaces? [ 1109.470525][T13113] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 1109.483416][T13112] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1109.506437][T13113] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 1109.516046][T13112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.530006][T13113] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 1109.555941][T13112] usb 3-1: config 0 descriptor?? [ 1109.578886][T13113] usb 2-1: USB disconnect, device number 74 [ 1109.625433][T13113] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 1109.681878][T13113] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1109.739535][T13095] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1109.818529][ T30] audit: type=1326 audit(1784428994.955:12374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.2.3378" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d7919de99 code=0x0 [ 1109.849352][T13112] usb 3-1: USB disconnect, device number 25 [ 1109.919844][T13095] usb 5-1: device descriptor read/64, error -71 [ 1109.940924][T17976] syzkaller0: entered promiscuous mode [ 1109.946957][T17976] syzkaller0: entered allmulticast mode [ 1110.045437][T13095] usb usb5-port1: attempt power cycle [ 1110.267572][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'. [ 1110.389563][T13095] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1110.446013][T13095] usb 5-1: device descriptor read/8, error -71 [ 1110.690042][T13095] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1110.717090][T13095] usb 5-1: device descriptor read/8, error -71 [ 1110.834929][T13095] usb usb5-port1: unable to enumerate USB device [ 1111.541811][T17993] xt_hashlimit: size too large, truncated to 1048576 [ 1112.073684][T18001] FAULT_INJECTION: forcing a failure. [ 1112.073684][T18001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.102864][T18001] CPU: 1 UID: 0 PID: 18001 Comm: syz.4.3387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.102901][T18001] Tainted: [L]=SOFTLOCKUP [ 1112.102910][T18001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1112.102923][T18001] Call Trace: [ 1112.102931][T18001] [ 1112.102941][T18001] dump_stack_lvl+0xe8/0x150 [ 1112.102979][T18001] should_fail_ex+0x40c/0x560 [ 1112.103009][T18001] _copy_to_user+0x31/0xb0 [ 1112.103043][T18001] simple_read_from_buffer+0xe1/0x170 [ 1112.103076][T18001] proc_fail_nth_read+0x1bb/0x230 [ 1112.103108][T18001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1112.103139][T18001] ? rw_verify_area+0x24a/0x4c0 [ 1112.103168][T18001] ? tun_chr_write_iter+0x18a/0x200 [ 1112.103195][T18001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1112.103221][T18001] vfs_read+0x213/0xa80 [ 1112.103257][T18001] ? __pfx___mutex_lock+0x10/0x10 [ 1112.103279][T18001] ? __pfx_vfs_read+0x10/0x10 [ 1112.103312][T18001] ? __fget_files+0x2a/0x420 [ 1112.103343][T18001] ? __fget_files+0x3a2/0x420 [ 1112.103368][T18001] ? __fget_files+0x2a/0x420 [ 1112.103407][T18001] ksys_read+0x150/0x270 [ 1112.103440][T18001] ? __pfx_ksys_read+0x10/0x10 [ 1112.103479][T18001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.103503][T18001] do_syscall_64+0x174/0x580 [ 1112.103521][T18001] ? trace_irq_disable+0x3b/0x140 [ 1112.103555][T18001] ? clear_bhb_loop+0x40/0x90 [ 1112.103581][T18001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.103601][T18001] RIP: 0033:0x7f305795e6ce [ 1112.103621][T18001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1112.103639][T18001] RSP: 002b:00007f3055bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1112.103662][T18001] RAX: ffffffffffffffda RBX: 00007f3055bf66c0 RCX: 00007f305795e6ce [ 1112.103677][T18001] RDX: 000000000000000f RSI: 00007f3055bf60a0 RDI: 0000000000000003 [ 1112.103690][T18001] RBP: 00007f3055bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.103703][T18001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.103715][T18001] R13: 00007f3057c26038 R14: 00007f3057c25fa0 R15: 00007f3057d4fa48 [ 1112.103748][T18001] [ 1112.701945][ T187] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1112.853203][ T187] usb 5-1: device descriptor read/64, error -71 [ 1113.137535][ T187] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1113.279617][ T187] usb 5-1: device descriptor read/64, error -71 [ 1113.390050][ T187] usb usb5-port1: attempt power cycle [ 1113.767733][ T187] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1113.841488][ T187] usb 5-1: device descriptor read/8, error -71 [ 1114.102011][ T187] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1114.155656][ T187] usb 5-1: device descriptor read/8, error -71 [ 1114.271136][ T187] usb usb5-port1: unable to enumerate USB device [ 1115.987671][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 1116.088594][T17984] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3384'. [ 1116.786265][T18035] netlink: 'syz.2.3399': attribute type 21 has an invalid length. [ 1116.808200][T18035] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3399'. [ 1116.838138][T18035] netlink: 'syz.2.3399': attribute type 4 has an invalid length. [ 1116.865412][T18035] netlink: 'syz.2.3399': attribute type 3 has an invalid length. [ 1116.889051][T18035] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3399'. [ 1116.983940][T18043] macvtap1: entered allmulticast mode [ 1117.005237][T18043] bond0: entered allmulticast mode [ 1117.035913][T18043] bond_slave_0: entered allmulticast mode [ 1117.055511][T18043] bond_slave_1: entered allmulticast mode [ 1117.074064][T18043] bond_slave_0: entered promiscuous mode [ 1117.082147][T18043] bond_slave_1: entered promiscuous mode [ 1117.100805][T18043] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1117.109281][T18043] bridge0: port 3(macvtap1) entered blocking state [ 1117.120303][T18043] bridge0: port 3(macvtap1) entered disabled state [ 1117.155449][T18043] bond0: left allmulticast mode [ 1117.161282][T18043] bond_slave_0: left allmulticast mode [ 1117.167910][T18043] bond_slave_1: left allmulticast mode [ 1117.240106][T13113] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1117.266091][T13112] bond_slave_0: left promiscuous mode [ 1117.273934][T13112] bond_slave_1: left promiscuous mode [ 1117.399892][T13113] usb 5-1: Using ep0 maxpacket: 16 [ 1117.408874][T13113] usb 5-1: config 0 has no interfaces? [ 1117.414599][T13113] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1117.450371][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.562247][T13113] usb 5-1: config 0 descriptor?? [ 1117.637628][T18054] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3406'. [ 1117.744364][T18056] syzkaller0: entered promiscuous mode [ 1117.764811][T18056] syzkaller0: entered allmulticast mode [ 1117.801867][ T30] audit: type=1326 audit(1784429002.945:12375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18015 comm="syz.4.3394" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x0 [ 1117.832374][T13112] usb 5-1: USB disconnect, device number 115 [ 1117.995320][T18063] vivid-000: disconnect [ 1118.013799][T18059] vivid-000: reconnect [ 1119.259620][T13113] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1119.433359][T13113] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1119.447431][T13113] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.484033][T13113] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1119.500583][T13113] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1119.508960][T13113] usb 2-1: Product: syz [ 1119.560209][T18083] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3415'. [ 1119.569391][T13113] usb 2-1: Manufacturer: syz [ 1119.574610][T13113] usb 2-1: SerialNumber: syz [ 1119.583251][T13113] usb 2-1: config 0 descriptor?? [ 1119.599338][T13113] usb 2-1: selecting invalid altsetting 0 [ 1119.896293][T13113] usb 2-1: USB disconnect, device number 75 [ 1123.544170][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.550833][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.968748][T18069] batadv_slave_1: entered promiscuous mode [ 1124.975367][T18069] batadv_slave_1: left promiscuous mode [ 1125.606312][T18096] pim6reg: entered allmulticast mode [ 1125.751196][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 1125.784686][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 1126.483404][T18116] syz_tun: entered allmulticast mode [ 1126.504866][T18117] syz_tun: left allmulticast mode [ 1126.949958][T13112] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1127.043863][T18123] syzkaller0: entered promiscuous mode [ 1127.059649][T18123] syzkaller0: entered allmulticast mode [ 1127.089807][T13105] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1127.146230][T13112] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1127.171505][T13112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.202834][T13112] usb 3-1: Product: syz [ 1127.216053][T13112] usb 3-1: Manufacturer: syz [ 1127.235837][T13112] usb 3-1: SerialNumber: syz [ 1127.255036][T13112] usb 3-1: config 0 descriptor?? [ 1127.260391][T13105] usb 4-1: Using ep0 maxpacket: 16 [ 1127.267834][T13105] usb 4-1: config 0 has no interfaces? [ 1127.278558][T13112] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1127.282096][T13105] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1127.315679][T13105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.345210][T13105] usb 4-1: config 0 descriptor?? [ 1127.527845][T18120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.536939][T18120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.546475][T18120] xt_cgroup: invalid path, errno=-2 [ 1127.588438][ T30] audit: type=1326 audit(1784429012.725:12376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18110 comm="syz.3.3422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f3219de99 code=0x0 [ 1127.597370][T18120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.643531][T13105] usb 4-1: USB disconnect, device number 67 [ 1127.656308][T18120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.791713][T13112] sonixb 3-1:0.0: Error reading register 00: -110 [ 1127.952177][T18134] input: syz0 as /devices/virtual/input/input81 [ 1128.330800][T13105] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1128.415672][T13112] usb 3-1: USB disconnect, device number 26 [ 1128.581706][T13105] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 1128.590956][T13105] usb 5-1: config 0 has no interface number 0 [ 1128.597427][T13105] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1128.613524][T13105] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1128.644115][T13105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.658522][T13105] usb 5-1: Product: syz [ 1128.663097][T13105] usb 5-1: Manufacturer: syz [ 1128.667764][T13105] usb 5-1: SerialNumber: syz [ 1128.680802][T13105] usb 5-1: config 0 descriptor?? [ 1128.686922][T18135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1131.569529][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1133.590621][T13105] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ce:57:12:48:d2:84 [ 1133.644587][T18159] bridge0: Device is already in use. [ 1133.651425][T13105] usb 5-1: USB disconnect, device number 116 [ 1133.697013][T13105] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1134.100010][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3438'. [ 1134.421334][ T30] audit: type=1326 audit(1784429019.555:12377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18173 comm="syz.0.3440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25b799de99 code=0x0 [ 1134.628964][T18190] binder: 18178:18190 ioctl c00c6211 0 returned -14 [ 1134.778888][ T30] audit: type=1326 audit(1784429019.915:12378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1134.878509][ T30] audit: type=1326 audit(1784429019.915:12379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1134.935249][ T30] audit: type=1326 audit(1784429019.915:12380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1135.022708][ T30] audit: type=1326 audit(1784429019.915:12381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1135.108755][ T30] audit: type=1326 audit(1784429019.915:12382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1135.173977][ T30] audit: type=1326 audit(1784429019.915:12383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1135.260353][ T30] audit: type=1326 audit(1784429019.915:12384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1135.323594][ T30] audit: type=1326 audit(1784429019.915:12385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1135.380488][ T30] audit: type=1326 audit(1784429019.915:12386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18178 comm="syz.1.3441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b2a79de99 code=0x7ffc0000 [ 1135.425487][T18197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1135.432146][T18197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1135.497759][T18197] vhci_hcd vhci_hcd.0: Device attached [ 1135.713446][T18182] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1135.757279][T18182] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1135.764914][ T187] usb 38-1: SetAddress Request (14) to port 0 [ 1135.771537][ T187] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1135.795902][T18182] bond1 (unregistering): Released all slaves [ 1135.854000][T15672] Bluetooth: hci0: command 0x0406 tx timeout [ 1136.018914][T18194] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3444'. [ 1136.144127][T18198] vhci_hcd: connection reset by peer [ 1136.158851][T13748] vhci_hcd vhci_hcd.2: stop threads [ 1136.179755][T13748] vhci_hcd vhci_hcd.2: release socket [ 1136.192945][T13748] vhci_hcd vhci_hcd.2: disconnect device [ 1138.084124][T18227] netlink: 'syz.0.3452': attribute type 4 has an invalid length. [ 1138.168198][T18228] netlink: 'syz.0.3452': attribute type 4 has an invalid length. [ 1138.659093][T18244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3458'. [ 1138.711490][T13105] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1138.869818][T13105] usb 2-1: device descriptor read/64, error -71 [ 1139.141113][T13105] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1139.175949][T18249] x_tables: duplicate underflow at hook 2 [ 1139.309695][T13105] usb 2-1: device descriptor read/64, error -71 [ 1139.441754][T13105] usb usb2-port1: attempt power cycle [ 1139.790113][T13105] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1139.812335][T13113] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1139.838641][T18255] syzkaller0: entered promiscuous mode [ 1139.845452][T18255] syzkaller0: entered allmulticast mode [ 1139.853961][T13105] usb 2-1: device descriptor read/8, error -71 [ 1139.979592][T13113] usb 5-1: Using ep0 maxpacket: 8 [ 1139.994251][T13113] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.018609][T13113] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1140.062431][T13113] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1140.086649][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.099576][T13105] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1140.122883][T13113] usb 5-1: config 0 descriptor?? [ 1140.133553][T13105] usb 2-1: device descriptor read/8, error -71 [ 1140.261947][T13105] usb usb2-port1: unable to enumerate USB device [ 1140.445498][T18273] loop2: detected capacity change from 0 to 14 [ 1140.454778][T18273] Dev loop2: unable to read RDB block 14 [ 1140.461699][T18273] loop2: unable to read partition table [ 1140.467854][T18273] loop2: partition table beyond EOD, truncated [ 1140.475823][T18273] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1140.556949][T13113] betop 0003:11C2:2208.003D: unknown main item tag 0x2 [ 1140.569892][T13113] betop 0003:11C2:2208.003D: unknown main item tag 0x4 [ 1140.589632][T13113] betop 0003:11C2:2208.003D: reserved main item tag 0xd [ 1140.598278][T13113] betop 0003:11C2:2208.003D: unknown main item tag 0x1 [ 1140.619700][T13113] betop 0003:11C2:2208.003D: unknown main item tag 0x3 [ 1140.626757][T13113] betop 0003:11C2:2208.003D: unknown main item tag 0x1 [ 1140.646426][T13113] betop 0003:11C2:2208.003D: hidraw0: USB HID v80.09 Device [HID 11c2:2208] on usb-dummy_hcd.4-1/input0 [ 1140.669543][T13113] betop 0003:11C2:2208.003D: no inputs found [ 1140.739651][ T5690] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1140.800611][ T5624] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1140.810043][ T187] usb 38-1: device descriptor read/8, error -110 [ 1140.862550][T13095] usb 5-1: USB disconnect, device number 117 [ 1140.909581][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 1140.930827][ T5690] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1140.951653][ T5690] usb 4-1: config 0 has no interface number 0 [ 1140.962316][ T5690] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1140.972892][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.983755][ T5690] usb 4-1: Product: syz [ 1140.987980][ T5690] usb 4-1: Manufacturer: syz [ 1140.994448][ T5690] usb 4-1: SerialNumber: syz [ 1141.006762][ T5690] usb 4-1: config 0 descriptor?? [ 1141.200960][ T187] usb usb38-port1: attempt power cycle [ 1141.227358][ T5690] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 1141.271068][ T5690] usb 4-1: USB disconnect, device number 68 [ 1141.785805][ T187] usb usb38-port1: unable to enumerate USB device [ 1142.173047][T13095] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1142.373400][ T30] kauditd_printk_skb: 930 callbacks suppressed [ 1142.373422][ T30] audit: type=1326 audit(1784429027.505:13317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.0.3473" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25b799de99 code=0x0 [ 1142.424955][T13095] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1142.442965][T13095] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1142.473562][T13095] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.504129][T13095] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1142.518897][T13095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.544253][T13095] usb 4-1: Product: syz [ 1142.556214][T13095] usb 4-1: Manufacturer: syz [ 1142.592047][T13095] usb 4-1: SerialNumber: syz [ 1142.676947][T13095] usb 4-1: selecting invalid altsetting 1 [ 1142.694950][T13095] usb 4-1: unit 6 not found! [ 1143.088816][T18307] loop2: detected capacity change from 0 to 7 [ 1143.105777][T18307] Dev loop2: unable to read RDB block 7 [ 1143.112189][T18307] loop2: unable to read partition table [ 1143.122885][T18307] loop2: partition table beyond EOD, truncated [ 1143.134686][T18307] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1143.484503][T18292] input: syz0 as /devices/virtual/input/input82 [ 1143.526512][T18292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.582793][T18292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.982232][T13095] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1144.023272][T13095] usb 4-1: USB disconnect, device number 69 [ 1144.114491][T18121] udevd[18121]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.602281][T18316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1144.872397][T18310] block device autoloading is deprecated and will be removed. [ 1145.099666][ T5690] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1145.172800][T18323] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20000 [ 1145.274438][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 1146.187158][T18346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1147.299545][T18350] loop2: detected capacity change from 0 to 7 [ 1147.318794][T18350] Dev loop2: unable to read RDB block 7 [ 1147.331235][T18350] loop2: unable to read partition table [ 1147.344405][T18350] loop2: partition table beyond EOD, truncated [ 1147.360921][T18350] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1147.699588][T13113] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1147.869782][T13113] usb 5-1: Using ep0 maxpacket: 16 [ 1147.883106][T13113] usb 5-1: config 0 has no interfaces? [ 1147.898063][T13113] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1147.932947][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.977228][T13113] usb 5-1: config 0 descriptor?? [ 1148.224167][ T30] audit: type=1326 audit(1784429033.365:13318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.4.3488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x0 [ 1148.279154][T13113] usb 5-1: USB disconnect, device number 118 [ 1148.449579][ T187] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1148.528667][ T5690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1148.554234][ T5690] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1148.570650][ T5690] usb 2-1: can't read configurations, error -71 [ 1148.622166][ T187] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 439, setting to 64 [ 1148.634029][ T187] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1148.645379][ T187] usb 4-1: language id specifier not provided by device, defaulting to English [ 1148.662550][ T187] usb 4-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.40 [ 1148.672630][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.681148][ T187] usb 4-1: Manufacturer: 쭖홺թ❬ꜵ紆㽢́菶ꏝ꽴ᗵ⠧䈒ṇ뀟뀊촗雧̝앀梢鮓ຬ篬䏓뮧徍긵⹕꒎ꂋ⹭鸟爁ꉂ烶ㆷ䕹 [ 1148.697660][ T187] usb 4-1: SerialNumber: syz [ 1148.710995][T18353] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1148.919643][ T5690] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1148.979070][ T187] usbhid 4-1:1.0: can't add hid device: -71 [ 1149.000046][ T187] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1149.025277][ T187] usb 4-1: USB disconnect, device number 70 [ 1149.100244][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 1149.107950][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.125658][ T5690] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1149.173142][ T5690] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1149.208119][ T5690] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1149.242693][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.259878][ T5690] usb 2-1: Product: syz [ 1149.269575][ T5690] usb 2-1: Manufacturer: syz [ 1149.275749][ T5690] usb 2-1: SerialNumber: syz [ 1149.294652][ T5690] cdc_ncm 2-1:1.0: skipping garbage [ 1149.844007][T18372] loop9: detected capacity change from 0 to 524287999 [ 1149.875357][T18374] loop2: detected capacity change from 0 to 7 [ 1149.886679][T18374] Dev loop2: unable to read RDB block 7 [ 1149.896185][T18374] loop2: unable to read partition table [ 1149.904341][T18374] loop2: partition table beyond EOD, truncated [ 1149.914942][T18374] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1149.961946][ T4992] Dev loop2: unable to read RDB block 7 [ 1149.978678][ T4992] loop2: unable to read partition table [ 1150.007000][ T4992] loop2: partition table beyond EOD, truncated [ 1150.306919][T18355] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1150.342192][ T5690] cdc_ncm 2-1:1.0: bind() failure [ 1150.363250][T18377] syzkaller0: entered promiscuous mode [ 1150.381294][ T5690] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1150.397283][ T5690] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1150.413064][T18377] syzkaller0: entered allmulticast mode [ 1150.444416][ T5690] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1150.482975][ T5690] usb 2-1: USB disconnect, device number 81 [ 1150.909547][T13113] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1151.069822][T13113] usb 5-1: Using ep0 maxpacket: 16 [ 1151.095160][T13113] usb 5-1: config 0 has no interfaces? [ 1151.108129][T13113] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1151.133230][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.170587][T13113] usb 5-1: config 0 descriptor?? [ 1151.178645][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1151.325101][T18391] loop5: detected capacity change from 0 to 7 [ 1151.334993][T18391] Dev loop5: unable to read RDB block 7 [ 1151.341815][T18391] loop5: AHDI p1 p4 [ 1151.345981][T18391] loop5: partition table partially beyond EOD, truncated [ 1151.356801][T18391] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1151.422422][ T30] audit: type=1326 audit(1784429036.565:13319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18381 comm="syz.4.3502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f305799de99 code=0x0 [ 1151.471646][ T5690] usb 5-1: USB disconnect, device number 119 [ 1151.945475][T18409] loop2: detected capacity change from 0 to 7 [ 1151.964520][T18409] Dev loop2: unable to read RDB block 7 [ 1151.979584][T18409] loop2: unable to read partition table [ 1151.990805][T18409] loop2: partition table beyond EOD, truncated [ 1152.009694][T18409] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1152.039768][T13112] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1152.231519][T13112] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 1152.253311][T18411] syzkaller0: entered promiscuous mode [ 1152.279710][T13112] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1152.292658][T18411] syzkaller0: entered allmulticast mode [ 1152.320998][T13112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.351321][T13112] usb 4-1: Product: syz [ 1152.358940][T13112] usb 4-1: Manufacturer: syz [ 1152.367876][T13112] usb 4-1: SerialNumber: syz [ 1152.397615][T13112] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1152.456367][T13113] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1153.141268][T13112] usb 4-1: USB disconnect, device number 71 [ 1153.224791][T18424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1153.254810][T18422] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 1153.264614][T18422] batadv_slave_0: entered promiscuous mode [ 1153.272890][T18426] FAULT_INJECTION: forcing a failure. [ 1153.272890][T18426] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.287435][T18422] batadv_slave_0: left promiscuous mode [ 1153.299658][T18426] CPU: 0 UID: 0 PID: 18426 Comm: syz.1.3518 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.299691][T18426] Tainted: [L]=SOFTLOCKUP [ 1153.299699][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1153.299710][T18426] Call Trace: [ 1153.299718][T18426] [ 1153.299727][T18426] dump_stack_lvl+0xe8/0x150 [ 1153.299763][T18426] should_fail_ex+0x40c/0x560 [ 1153.299793][T18426] should_failslab+0xa8/0x100 [ 1153.299825][T18426] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1153.299849][T18426] ? dst_alloc+0x105/0x170 [ 1153.299873][T18426] ? dst_alloc+0x105/0x170 [ 1153.299895][T18426] ? fib_lookup+0x76/0x440 [ 1153.299925][T18426] dst_alloc+0x105/0x170 [ 1153.299950][T18426] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1153.299976][T18426] ? ip_route_output_key_hash_rcu+0x1371/0x2720 [ 1153.300008][T18426] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1153.300048][T18426] ip_route_output_key_hash+0x18d/0x2a0 [ 1153.300073][T18426] ? tomoyo_profile+0x11/0x50 [ 1153.300113][T18426] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1153.300145][T18426] ? tomoyo_supervisor+0x4d2/0x1560 [ 1153.300180][T18426] tcp_v4_connect+0x6fd/0x1950 [ 1153.300269][T18426] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1153.300292][T18426] ? aa_label_sk_perm+0x532/0x6e0 [ 1153.300321][T18426] ? tcp_v6_connect+0x6bc/0x1cf0 [ 1153.300380][T18426] tcp_v6_connect+0xcb1/0x1cf0 [ 1153.300411][T18426] ? __lock_acquire+0x683/0x2cf0 [ 1153.300441][T18426] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1153.300473][T18426] __inet_stream_connect+0x258/0xe00 [ 1153.300509][T18426] ? do_raw_spin_lock+0x12b/0x2f0 [ 1153.300528][T18426] ? lock_sock_nested+0x6a/0x100 [ 1153.300555][T18426] ? __pfx___inet_stream_connect+0x10/0x10 [ 1153.300585][T18426] ? inet_stream_connect+0x51/0xa0 [ 1153.300615][T18426] ? __local_bh_enable_ip+0xd0/0x130 [ 1153.300655][T18426] inet_stream_connect+0x66/0xa0 [ 1153.300687][T18426] __sys_connect+0x323/0x460 [ 1153.300719][T18426] ? __pfx___sys_connect+0x10/0x10 [ 1153.300758][T18426] ? __pfx_ksys_write+0x10/0x10 [ 1153.300794][T18426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.300816][T18426] __x64_sys_connect+0x7a/0x90 [ 1153.300844][T18426] do_syscall_64+0x174/0x580 [ 1153.300864][T18426] ? trace_irq_disable+0x3b/0x140 [ 1153.300890][T18426] ? clear_bhb_loop+0x40/0x90 [ 1153.300915][T18426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.300936][T18426] RIP: 0033:0x7f8b2a79de99 [ 1153.300957][T18426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.300977][T18426] RSP: 002b:00007f8b2b63e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1153.301000][T18426] RAX: ffffffffffffffda RBX: 00007f8b2aa25fa0 RCX: 00007f8b2a79de99 [ 1153.301014][T18426] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1153.301034][T18426] RBP: 00007f8b2b63e090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.301046][T18426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.301058][T18426] R13: 00007f8b2aa26038 R14: 00007f8b2aa25fa0 R15: 00007f8b2ab4fa48 [ 1153.301093][T18426] [ 1153.304749][T18422] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 1153.625206][T13113] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1153.632466][T13113] ath9k_htc: Failed to initialize the device [ 1153.642525][T13112] usb 4-1: ath9k_htc: USB layer deinitialized [ 1153.672822][T18428] program syz.4.3516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1153.799807][T18433] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3521'. [ 1153.837275][T18435] loop5: detected capacity change from 0 to 7 [ 1153.857562][T18435] Dev loop5: unable to read RDB block 7 [ 1153.872749][T18435] loop5: AHDI p1 p4 [ 1153.887041][T18435] loop5: partition table partially beyond EOD, truncated [ 1153.896420][T18435] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1154.290774][T13112] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1154.319940][T18442] syzkaller0: entered promiscuous mode [ 1154.325576][T18442] syzkaller0: entered allmulticast mode [ 1154.459596][T13112] usb 2-1: Using ep0 maxpacket: 16 [ 1154.480923][T13112] usb 2-1: config 0 has no interfaces? [ 1154.491753][T18446] loop2: detected capacity change from 0 to 7 [ 1154.500825][T13112] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1154.514490][T18446] Dev loop2: unable to read RDB block 7 [ 1154.529865][T13112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.531747][T18446] loop2: unable to read partition table [ 1154.560081][T18446] loop2: partition table beyond EOD, truncated [ 1154.562543][T13112] usb 2-1: config 0 descriptor?? [ 1154.578322][T18446] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1154.800111][ T30] audit: type=1326 audit(1784429039.945:13320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18439 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b2a79de99 code=0x0 [ 1154.864539][T13112] usb 2-1: USB disconnect, device number 82 [ 1155.506011][T15672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1155.527897][T15672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1155.539020][T15672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1155.551784][T18453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1155.565586][T18453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1156.442627][T18469] FAULT_INJECTION: forcing a failure. [ 1156.442627][T18469] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.458535][T18469] CPU: 0 UID: 0 PID: 18469 Comm: syz.0.3530 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.458572][T18469] Tainted: [L]=SOFTLOCKUP [ 1156.458580][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1156.458593][T18469] Call Trace: [ 1156.458602][T18469] [ 1156.458613][T18469] dump_stack_lvl+0xe8/0x150 [ 1156.458652][T18469] should_fail_ex+0x40c/0x560 [ 1156.458683][T18469] should_failslab+0xa8/0x100 [ 1156.458714][T18469] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1156.458738][T18469] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1156.458761][T18469] ? __inet_hash_connect+0x1631/0x25a0 [ 1156.458844][T18469] ? __inet_hash_connect+0x1631/0x25a0 [ 1156.458877][T18469] __inet_hash_connect+0x1631/0x25a0 [ 1156.458919][T18469] ? __inet_hash_connect+0x5ce/0x25a0 [ 1156.458952][T18469] ? __pfx___inet_hash_connect+0x10/0x10 [ 1156.458984][T18469] ? inet_hash_connect+0xf1/0x380 [ 1156.459014][T18469] tcp_v4_connect+0xcee/0x1950 [ 1156.459053][T18469] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1156.459076][T18469] ? aa_label_sk_perm+0x532/0x6e0 [ 1156.459108][T18469] ? tcp_v6_connect+0x6bc/0x1cf0 [ 1156.459135][T18469] tcp_v6_connect+0xcb1/0x1cf0 [ 1156.459168][T18469] ? __lock_acquire+0x683/0x2cf0 [ 1156.459199][T18469] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1156.459234][T18469] __inet_stream_connect+0x258/0xe00 [ 1156.459271][T18469] ? do_raw_spin_lock+0x12b/0x2f0 [ 1156.459292][T18469] ? lock_sock_nested+0x6a/0x100 [ 1156.459320][T18469] ? __pfx___inet_stream_connect+0x10/0x10 [ 1156.459353][T18469] ? inet_stream_connect+0x51/0xa0 [ 1156.459384][T18469] ? __local_bh_enable_ip+0xd0/0x130 [ 1156.459418][T18469] inet_stream_connect+0x66/0xa0 [ 1156.459449][T18469] __sys_connect+0x323/0x460 [ 1156.459478][T18469] ? __pfx___sys_connect+0x10/0x10 [ 1156.459527][T18469] ? __pfx_ksys_write+0x10/0x10 [ 1156.459564][T18469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.459588][T18469] __x64_sys_connect+0x7a/0x90 [ 1156.459617][T18469] do_syscall_64+0x174/0x580 [ 1156.459638][T18469] ? trace_irq_disable+0x3b/0x140 [ 1156.459664][T18469] ? clear_bhb_loop+0x40/0x90 [ 1156.459691][T18469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.459711][T18469] RIP: 0033:0x7f25b799de99 [ 1156.459734][T18469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.459752][T18469] RSP: 002b:00007f25b87c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1156.459776][T18469] RAX: ffffffffffffffda RBX: 00007f25b7c25fa0 RCX: 00007f25b799de99 [ 1156.459792][T18469] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1156.459805][T18469] RBP: 00007f25b87c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.459818][T18469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.459831][T18469] R13: 00007f25b7c26038 R14: 00007f25b7c25fa0 R15: 00007f25b7d4fa48 [ 1156.459865][T18469] [ 1157.193478][T13510] ------------[ cut here ]------------ [ 1157.199727][T13510] time_after(jiffies, timeout) [ 1157.199748][T13510] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x4d0/0x9a0, CPU#0: kworker/u8:16/13510 [ 1157.215202][T13510] Modules linked in: [ 1157.219685][T13510] CPU: 0 UID: 0 PID: 13510 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.231044][T13510] Tainted: [L]=SOFTLOCKUP [ 1157.235406][T13510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1157.245640][T13510] Workqueue: iou_exit io_ring_exit_work [ 1157.251403][T13510] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 1157.257258][T13510] Code: c6 05 4c 03 16 0f 01 48 c7 c7 e0 40 49 8c be 25 00 00 00 48 c7 c2 00 3c 49 8c e8 8b 82 77 00 e9 70 fe ff ff e8 f1 85 9b 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 1157.277023][T13510] RSP: 0018:ffffc9000ce87960 EFLAGS: 00010293 [ 1157.283245][T13510] RAX: ffffffff812aeb8f RBX: 0000000100014d26 RCX: ffff8880311a0000 [ 1157.291334][T13510] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 1157.299611][T13510] RBP: ffffc9000ce87af0 R08: ffffc9000ce878e7 R09: 1ffff920019d0f1c [ 1157.307684][T13510] R10: dffffc0000000000 R11: fffff520019d0f1d R12: dffffc0000000000 [ 1157.315742][T13510] R13: 0000000100014d20 R14: 0000000000002000 R15: ffff88804bdba000 [ 1157.323779][T13510] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 1157.332791][T13510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1157.339541][T13510] CR2: 0000200000166030 CR3: 000000004b632000 CR4: 00000000003526f0 [ 1157.347760][T13510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1157.355830][T13510] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1157.363879][T13510] Call Trace: [ 1157.367189][T13510] [ 1157.370320][T13510] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1157.375837][T13510] ? rcu_is_watching+0x15/0xb0 [ 1157.380653][T13510] ? process_scheduled_works+0xa20/0x14e0 [ 1157.386402][T13510] process_scheduled_works+0xa8e/0x14e0 [ 1157.392010][T13510] ? __pfx_process_scheduled_works+0x10/0x10 [ 1157.398015][T13510] ? assign_work+0x3cf/0x5d0 [ 1157.402739][T13510] worker_thread+0xa47/0xfb0 [ 1157.407391][T13510] ? __kthread_parkme+0x71/0x1f0 [ 1157.412424][T13510] kthread+0x388/0x470 [ 1157.416535][T13510] ? __pfx_worker_thread+0x10/0x10 [ 1157.421775][T13510] ? __pfx_kthread+0x10/0x10 [ 1157.426403][T13510] ret_from_fork+0x514/0xb70 [ 1157.431110][T13510] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.436293][T13510] ? __switch_to+0xc89/0x1420 [ 1157.441094][T13510] ? __pfx_kthread+0x10/0x10 [ 1157.445774][T13510] ret_from_fork_asm+0x1a/0x30 [ 1157.451309][T13510] [ 1157.454401][T13510] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1157.461721][T13510] CPU: 0 UID: 0 PID: 13510 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.472985][T13510] Tainted: [L]=SOFTLOCKUP [ 1157.477339][T13510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1157.487419][T13510] Workqueue: iou_exit io_ring_exit_work [ 1157.492983][T13510] Call Trace: [ 1157.496285][T13510] [ 1157.499239][T13510] vpanic+0x56c/0xa60 [ 1157.503315][T13510] ? __pfx__printk+0x10/0x10 [ 1157.507972][T13510] ? __pfx_vpanic+0x10/0x10 [ 1157.512524][T13510] ? is_bpf_text_address+0x292/0x2b0 [ 1157.517876][T13510] ? is_bpf_text_address+0x26/0x2b0 [ 1157.523205][T13510] panic+0xc5/0xd0 [ 1157.527037][T13510] ? __pfx_panic+0x10/0x10 [ 1157.531512][T13510] ? ret_from_fork_asm+0x1a/0x30 [ 1157.536463][T13510] __warn+0x315/0x4c0 [ 1157.540448][T13510] ? io_ring_exit_work+0x4d0/0x9a0 [ 1157.545559][T13510] ? io_ring_exit_work+0x4d0/0x9a0 [ 1157.550683][T13510] __report_bug+0x276/0x570 [ 1157.555251][T13510] ? io_ring_exit_work+0x4d0/0x9a0 [ 1157.560373][T13510] ? __pfx___report_bug+0x10/0x10 [ 1157.565431][T13510] ? trace_contention_end+0x3d/0x140 [ 1157.570743][T13510] ? __mutex_lock+0x30d/0x1550 [ 1157.575544][T13510] ? io_ring_exit_work+0x4d0/0x9a0 [ 1157.580660][T13510] report_bug+0x16a/0x220 [ 1157.585012][T13510] ? io_ring_exit_work+0x4d0/0x9a0 [ 1157.590129][T13510] ? io_ring_exit_work+0x4d2/0x9a0 [ 1157.595274][T13510] handle_bug+0x9c/0x200 [ 1157.599605][T13510] exc_invalid_op+0x1a/0x50 [ 1157.604235][T13510] asm_exc_invalid_op+0x1a/0x20 [ 1157.609139][T13510] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 1157.614877][T13510] Code: c6 05 4c 03 16 0f 01 48 c7 c7 e0 40 49 8c be 25 00 00 00 48 c7 c2 00 3c 49 8c e8 8b 82 77 00 e9 70 fe ff ff e8 f1 85 9b 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 1157.634501][T13510] RSP: 0018:ffffc9000ce87960 EFLAGS: 00010293 [ 1157.640594][T13510] RAX: ffffffff812aeb8f RBX: 0000000100014d26 RCX: ffff8880311a0000 [ 1157.648654][T13510] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 1157.656631][T13510] RBP: ffffc9000ce87af0 R08: ffffc9000ce878e7 R09: 1ffff920019d0f1c [ 1157.664649][T13510] R10: dffffc0000000000 R11: fffff520019d0f1d R12: dffffc0000000000 [ 1157.672723][T13510] R13: 0000000100014d20 R14: 0000000000002000 R15: ffff88804bdba000 [ 1157.680796][T13510] ? io_ring_exit_work+0x4cf/0x9a0 [ 1157.685926][T13510] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1157.691426][T13510] ? rcu_is_watching+0x15/0xb0 [ 1157.696197][T13510] ? process_scheduled_works+0xa20/0x14e0 [ 1157.701939][T13510] process_scheduled_works+0xa8e/0x14e0 [ 1157.707608][T13510] ? __pfx_process_scheduled_works+0x10/0x10 [ 1157.713715][T13510] ? assign_work+0x3cf/0x5d0 [ 1157.718326][T13510] worker_thread+0xa47/0xfb0 [ 1157.722957][T13510] ? __kthread_parkme+0x71/0x1f0 [ 1157.727929][T13510] kthread+0x388/0x470 [ 1157.732021][T13510] ? __pfx_worker_thread+0x10/0x10 [ 1157.737179][T13510] ? __pfx_kthread+0x10/0x10 [ 1157.741793][T13510] ret_from_fork+0x514/0xb70 [ 1157.746404][T13510] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.751573][T13510] ? __switch_to+0xc89/0x1420 [ 1157.756279][T13510] ? __pfx_kthread+0x10/0x10 [ 1157.760877][T13510] ret_from_fork_asm+0x1a/0x30 [ 1157.765778][T13510] [ 1157.769165][T13510] Kernel Offset: disabled [ 1157.773496][T13510] Rebooting in 86400 seconds..