last executing test programs: 9.326502605s ago: executing program 1 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.047131333s ago: executing program 1 (id=649): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x644}], 0x1, 0x7f) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0xe, 0xffffffff, 0x7}]}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000004f80)=@vmx={0x109, 0x0, 0x2080, {0x3000, 0x20000, {}, 0x0, 0x6}, {"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", "74485c02cc3d2feede8f343ae164753039c041dc8e83cbb16678625e308951b919ec42532b0ddebf7bd568e938d258f3ee00d3c529fa5056f3c4ba54a8a4a57e03b62d308475e0403e0169eae259f614fdb3572e19dacebbff87a37f3fadc45c37fa5c0ada4ad4777018737d1a633402cb48311c00a365ea9d15d383e5a9a1b8510350d8e353ba46ab94629d2c9d865b5ab0142faa11b9b3b75a010c3fa12fb17b7f22889d64516b98ecb1d3d5abdd1a9065ea3c61b75a381ca3fc72833aeb3ce266350618d35206a9fd47328077a3407f75b965a36f422cb7ccf0cdd3320bc89f8d43f54db8ad280d988f31e4bd2e0b349207c746737eaec5763673e460d3fc1ca92e147c0c0076b5ee01ef09015936e5ff2a722b0f30b853de48db22251fff8db43f5aff7cfda61aa8a30acc52547fc4f1ba86d65c5cff8a8fd4f14292d647e41fd91a8926f5ce0a92a217b47cb4a01eb1fe44da0badaa18e63df95ebd492401e4f19c351a77b4915d14dc0903ffd196bdb3bae0841dabd83c3bd336d2eb8d2b1d52e351cf1d13d2556bec6c3773cbc8326a5b1e029a9a0d5501e8615e8a2693097c32cf504806c94bd6292a0e9c273bdb7418bcd6dcab07fde463d85b0ae7a273adbfa7a6bcaf62f59d9ceb5b90ddf23424571022f6e03e4b06c96ae14d25ed4655c30be46ab30ad742380a4733782ec29fcb17b0c42a18ec98d39143679cf6021e1866eb78d734417a7a90fe94ff1f7d63252a3f2f552f61d5629c4834e144a83dbf47753770fa1169a9d7581b2d2f913048d1019c35a993d20803435696eaf879060c03c1fc133773db22f0dd29064129e87bb4cb810afa8b3a4c211f5ed4ee82e542c1802001ccdd2cf4bb44655bbc18bdd810dec8bf439880402573a58ec5d98dffe37bdda12610d78ca9149111b67682f563efd0ff43d99c763fe441577287d9ea38950d9d0c488d6ccb15d7ef6bd42298e54f62914e4cc37a7affc60d5ed630d490ae630d905ac5357882458d13e1e143d3ed86196a45507a3fec8aaf538ed46c3fcc0899f20361cb7620ee559fc2d5e59381cf0475702eeadd1cde56495304b553127c8450083cd003c6a28833e5844d6c044b293bea77c2c37f0ba360fdd9df8fe29e975c18a152691b66ec0c48ca023dc2ef1e231f0239093dd85c3ac5c25099480fb45759483f7627b76ae71422352180cefd8aec61dd11fade823d272813eddfdab2c34d69822844457ed47b37249cc1fc1da7e786d0fe8897bada810a775fe63b24becd28553267057cd5a9f967196ca2d26f31a379a45e9046b1d52880393efa7daa5bbfd9709ea28b7c736cca866db084519da5a249d418d6c00291d553c6d37f3c2688ff4db0d1b29a8af482b7e17d802063b03122e4bab958db144c9ef2ef21b4789a5263a14a15d5e698509f0e1d51a0bb4e37f4a12f8a7dda9e4afe5058abaf7d6d134db578e93debc6b275fbb83833b3fed96def21326626df8e81ca29e5e6538c38afec7740c7b80dfbd57021ea9e268383a08f09ac42cf53ae6df0cdc6605c29496c816b9bfb06dd7314c360fc4d2bea8ca6121eb989ff7a0eaef8b40f77057d5f7111195ce663516842430f3b8725eab2b60988eebb93c2ac5b0cbc0e8751bedeeb2cb728ea23530b14948fcef6c6d16bacc952fdf5dcb5fc281680d9464b549357cd65d26f9a50dd4bbb48f509e4a8e1f9ce73900e61b52e4aa66f7d627e9261e7ae30d5ee7edaa1b31b851718bd66ad72f33f968b2889d7fd9583a490f8f05a45b4f67030dad0773b6ff133fa50eeda36a4f8bd9caed0d0e6acac29992e28194ccb909b5f9f72839960e2a6f773f7e71214c3d6c06dc05660d9084993f8e9775cb27c3514476ab27b07e4942a36cecc24399bcacf9b254dc8de0a14edfff1faa48ee4a86f17b5e7303cf543378f4606664bd7b4ee00bb31869047b1048afbee53489b529e0d4de612f922f0faefc741df7db47a59bf42e14be1db6c54297853cd1cf694368696006f4a2bdf2d8a8ac71bc389f2eead73ec542449e7283f05479363343a121811d67df6130ac6a728668d354fa3fa98ad3ebd266e0c427366d0253e4c470b458551ef46c41764e84f90ea7f680a57f8f63988ee3f44e541139915786f1440858fa343a068f3d5337295b8d6faa846595b0ab536ed9b8eba2a5e79d83074300979573e9630fdc73fd071ee65a1519df075c5496de01ecc80724598e3c65e60b4f07738de5928ad43290c5c166cd510299408a46b29980cc488316d6f4e70b167ecc45ce62faacf3c37e59bd31961830d62b33888e7a4c0a4a294bcde3515a0b4b3312c3ec97a64036368de747b01787e9cceb13bdf08438627772d56be7b3267bb18516ccb7992d8ac18e2d7c93964893403f13c118b3c56d4f749875e85f8cb2188afb420961313cbac5ab21dbd3a8d26bfcf32068b1044079a77a79135064b00f081cd62f5312c251ddaad2c08dacef1e15eab544c6823c73abda1a7532eaa040ace18bd360bb6acbf62677665f1f681b8bac479ae3e29c7c9621ea96a439636a7c6fe2bf67f369b232dec683ed6e638c4fead14927c59a1b8201e3b90cf789128e1cf85f9db332ee539d77a5286ea8bed0cbc82ea219e9d6fc052879cb0e1a0cf78969e24e8fa9fbfd6652deb1f8237d3700810c9d8f85684b12c6f7801f591fc141a2fdf18b88bb4a97fb4f582600b130a34885c734e7abf1b5aaa9049e23118d696cf093f11524cb1c9218d1758b584f65b81b97983d350a6c67f395119716540e67f481b825d3a43213c4d86b4fca718f76625200f011ff5f504bbcb877439b9f222007ad885e6172b21ebf5482d4bd15c39b71fa980f339d141638e71ce602c898b82d6f3ebe2fe46939501a297582f1800e57610fd402297a2887d02cdffafcecf4055668f55ffb2c1a303f0d5f4cd340a6e6ae607c1627a3474835c38270ac2c4787bcbea8b3789299288c5b21a1720146a3aefcc435ea9ecbad7168ecf8e74af571e94335646bbfacdf60bec560565322ddf1359189706da5df598d97569a006d708a96a45e9537d0d6876bbdb69f438fb5f8bfe249870dd15a973d844f2645d36a09c5ad6d68830bab9ddebd683ff2edccec842bfbcff3ad3f4041c116a250650f6b1696f24c0280246b3cda9ee278b40edbd1719187836dc0139e528e6e271ca288477e09371f67c3a6755257498fb6587a24fb33cd6a75453b1607eb89dd6cb8fccc162ca030aa6ecc374c09d3d15c8d8aaeb356a5dcb8c61232b460d4faf13f842bd57f23f54dc15a3c29c31b659df855c0006fd91e7c7ef04e157c1302a3c9b8f03e26e8f820f42753d96d35f0e2c9b4205a72ddfdc583d8cd08132d5571f20e7ae2fabd40eddb159cf48930823ee81e55d9574ef263d642cb3b355315cb2647b3786050044b0442d5dd7227d338231aa618a6425e34d86fa9e9cabefed142f8d7038fb12c264ff3461e500744e7ed43e0c1b285d24e09c5aac636c222417d76e871825e9eb59552cd78c1a7beede494c351a9b933829f8d8afe1c31d07a3f87972c199cd6db93d0d4df05d6f3ee418a244933b3d013f5f6b7f2bbc44a23a77daef007c5e63beac083557da3957504e631c68294a3c5bc05e28b4a61d86304b36e52e56a6aa51405eca433d7374d022fa61b34df6fb1f648adc7c8e54b6d4b70b4218321e7cdd101c50b2b3fbe749e51b833db3b0f2108011d66a205fe2e520872404edc075defbd4e5ff9932bacd2f1e28d0c64d5d8ce07e587e1662487855103b5c473593292e392181e8609fc6986b3c99013a75c80c7c55689ae7f6ae4d1b3699138eb76b123814b6bdbf592803fcd0cfe1e7cd9a7a8d04ef5ab0cc6c12079452d6232b1aec88b1b2c99f50032b30861f1f0047e0f22fa2412d2052f788b3921f6e19a1a09fb4b319d6fc19662ef69d0b3176e2162d16513f55baa5df8173791a1b6bf8bb1c4a41032beb217102b999ab00b73158c2c91aa07ce08a4d01b7d24128514d830e8d0717dc315d73ee624ffda68d83ac8b2686b126af3e9d549adbf52443733587baaf511589b93e7606be7fefd973cf8e719b08508ac67715a77e4e40be56dfd4f5d173a73527bb900bbc8f61b94cd601261af24e4945b30fed761a101b2a732fa21a8a347041ced5551738ed2ffd822e1090e3b1129c3a569c4eaa298349b73d4a1329c8a91492f053c26378f0e7f5f8e2ba478b14de7a0fb22b7ca3f0c57ef34ad597f77d9e4d52709d0942fd618f47a03c07e32551b47f62b78c2063b08b0e4f06c5bf61a384a2e93df6445166279b3e515e08c41148f49f2e981df4dbe24b8efb52b3a3397a1d8d8ea277404c9516c9aeae255003f8df8ad2bf95eb1087859a55341b6bbfd39a37d26ed5607b465cbe6fcb34e3d456ec6023e8cb1347c1b9d816e32064945740982d16332683d2a106e66c96b7c4301865073bde539820d8c3c87542a7db15da3210a8997d1a163dfda978902e6572f1753913350b0b8d34cc6a5866c31368ae71a0c3110b3b8efd0c1ea9deeb44f9d9176e49576a0c0e9f7ec344de985c8256dad9025b1c94cac913b43388aa8e34191557b024edcfe2c9dde1547946e20e993782f2ca007ca5fc4cc9ecfa40f5f35e8ecde53fd62790c86921246783ebea20bbfcb8c6952bbd0863b7a0acb510f19fd8835184fcbd795fb0f50e1e61ec1544c56e1080eb8e566f507d550380104c82b1e064c6a25b391dc77c774e76532e2866a9f2dccc03b627db83556e6247872c56408876011afa0fd746c84d49034d896b555fae2a74d70b176b9ec64416cab9b249822be2a01de20a1157b729c7eab21107f20fab5be9f2644556cdf4ddcdad7438f9e60129a4451486a9eea253d54072e0a0b8b796b3bb7d9008a4616d028966c5078540c248ad5e3433982abb0097975d23ca3a9a7f3a8713cfa4107129d5281ac0b1fc68bf9a865c69b0651e40d6a4b96a71c3d009e4cf309dbffaf2fb0f52920ef473ac4717d7fe5d3b0eca4976c6bb153c5855a1594cd23704be42876e66253c104d69081c8d7f49c0480144623bfb426cf1b55c1af78023fcdcfcc76f411101456982a045e774d3a1ce63bc20bb23622732a3d95ace5f9d9f2ad390e0f3ca557068db53bcec9ae5f8f20531c5229a92ee9d9d594b6edf0ada953ea27b2289493a907602d25ecb0fd74161a4585b2a89cec0f869cc9130615aaf0952bd71a6f3039731f53f277fb016a18e14a01b4999742c5de7141148697e448fb4f9293ef4e87a716fca9f9ef59cfca10630a099ec8a58e1c92e19f4ecf8c9422107d375b0bbea135e48b0c9baaabaeba4397dc198dac83a656912178bce22569379e9dac575fef89d743d36f4b627a9639cd3649e498270b966c0b5eaa235e7e2b8bf1d26214af7d3649e2a6b9386151c6170c142d0db167cbd4f152ad8f561169c135fe8114fba923e6e70c7060a75344a620b127eea66ce6932e2b4c9952cf18a05faf989b8fa0cfa7e36e3898a4a8e8c98ba5f812e713f0a5d9850f5e991ddb417a7974f68fd4d4e5a8c41f7f0d903108ca374d79000c67f28614c2023c31284bd22cde507dec0e643dfa6b588d870fcaf3182c0064d58d1c27ced135e28ba6ae0a3c09b8f276dbf5bda96b3819218204e88ec1e5c517d87353d6539b3c75bb97922c5ce2b75c4d34070ab15bfb4f4320fc5855c16d405c28d0797af878798187277a899036d7f79efbc062d22f897065989937d0cb1b31b00"}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect$uac2(0x4, 0x9d, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x41e}}]}) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x8000) close_range(r2, r2, 0x0) (async) ioctl$NBD_CLEAR_QUE(r4, 0xab05) 8.866666767s ago: executing program 0 (id=651): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000001ffe, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x19}}, 0xfffffffffffffedd) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x8003, r6, 0x0, 0x7ffffffe, 0xfec3}}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x6008094}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1}, 0x80, 0x0}, 0x4044) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 8.63187345s ago: executing program 3 (id=652): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 8.497613564s ago: executing program 3 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08c, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x5, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0x0, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000004, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 8.164409908s ago: executing program 1 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x25c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x22c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x110, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x13}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.466896693s ago: executing program 0 (id=656): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, 0x0) (fail_nth: 1) 7.293750094s ago: executing program 2 (id=657): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80101, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00', 0x2}], 0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, 0x0) 6.946861286s ago: executing program 0 (id=658): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.863375705s ago: executing program 0 (id=659): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000020000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 5.049795905s ago: executing program 0 (id=662): r0 = gettid() syz_open_procfs$pagemap(r0, &(0x7f0000000100)) exit(0x5) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (fail_nth: 1) 5.014117438s ago: executing program 3 (id=663): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 4.939560619s ago: executing program 2 (id=664): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20040600) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000800)={{0x73, @rand_addr=0x64010102, 0x4e22, 0x1, 'sed\x00', 0x1, 0x9, 0x50}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4e22, 0x10000, 0x4, 0x9, 0x5}}, 0x44) 4.938487559s ago: executing program 1 (id=665): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaa"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 4.834234062s ago: executing program 3 (id=667): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0xffffffff, 0x0, 0x1, 0x1000}) writev(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) vmsplice(r2, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0xb3b}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) 4.532481418s ago: executing program 1 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x3, 0xff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000005c0)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, r1, 0x429, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}]}, 0x28}}, 0x0) 4.531165598s ago: executing program 2 (id=669): r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x80, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000002300)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000002280)={0x9, 0x4}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/220, 0xdc, 0x400096) (fail_nth: 2) 4.139964884s ago: executing program 2 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) writev(r1, &(0x7f0000002580)=[{&(0x7f0000001480)="c7db", 0x2}, {0x0}], 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, &(0x7f00000003c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2a4, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x50, 0x2, [@mcast2, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @dstopts={0x33, 0xe, '\x00', [@hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x40, {0x0, 0xe, 0x2, 0xfff9, [0xff, 0x1ff, 0x5, 0x4, 0x5, 0x7, 0x81]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x43, 0x668c, [0x8, 0xc, 0x6]}}]}, @dstopts={0x2f, 0x2d, '\x00', [@pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0xa58b}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x2, [0x3, 0x9, 0xc, 0x7f]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xfc, 0x7, [0x2, 0x6c2, 0x3, 0xfffffffffffffffe, 0x8, 0x3, 0x7fffffffffffffff]}}, @generic={0x0, 0xc0, "e99161b13e91aeb63977b8cd6a313fc005769ea2f8a0ce0d72c5f31bdc1c4d47ad317f27f7c050ce7f8d18ad09b01cfe44bd61455b71f320300e9da125280608e240b54d9fcb7bb4748ddd41f26d45915cc34cb01f776d887bac17d50dd8d037c35b9308d315964af59aa356356a6c95f602cd40b41d6fae719fcf50ce5e6355d806d2039e42e09478bceba079e47e0f1342ee3f52d0084cb0326101e39dad33a46e9a39c73074589b2cfd1f9111bf1159e69f806f5b5b3ae8d82c434e0a82a3"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1}, @generic={0xe, 0x11, "10534761dee7d9e903ffbe1e9e868776ff"}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @hopopts={0x3b, 0x4, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x1b, "135eb83749820032e6fc93ab6dbf7ac4451ba2e49e38a2fc9b6be8"}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x2cc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac3c776a000000000000000000000000000000001d9e21abf21e191b2ba63fde0c852b8a3d52ba8fe2c4a7c5a092ce0f89135cfb692a28911b37ed692ce8e268abf1265c1222bd00f9006ebe80bfa9f3ee121cf33ea76af738a83deb1cbdb47fa48f673bf173a30bceaeccfaf9b206f62dd8427837", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000000a0002000180c2000003000014001400776c616e3100"/48], 0x48}}, 0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0x100001, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_delroute={0x1c, 0x19, 0x300, 0x70bd2a, 0x25dfdbfe, {0x80, 0x80, 0x80, 0x6, 0x0, 0x0, 0xff, 0x7, 0x1300}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) 4.137933834s ago: executing program 4 (id=671): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x3, 0x374}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb4}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181b, 0x40, 0x2, 0xbc, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0xb, 0x502}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x10000, 0x2, 0x23b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0xf, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x8002, 0x48a, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001e00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xdb}, 0x0, 0x0, '\x00', {0x3, 0x1ca, 0x0, &(0x7f0000000e00)=@buf_max_buf="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"}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0xa5, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0xfffffffe, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x403, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x7, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x82, 0x100, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x0, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4eb, 0x4000000, 0x5, 0x800, 0x4, 0x6, 0x8, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffb, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x1, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff7, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0xfffffff5, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0x40000e, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xfffe, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x20000005, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 4.071855177s ago: executing program 0 (id=672): socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) pipe(&(0x7f00000001c0)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffff44, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="000e000000000b9bd436f0ec05cf5b3d4bc680990987b204f5bfc55556a6c9d52801706c71189c5d3785cf9b06e4f12e5c5130afcc7a24e0aa2614bc033dbfe2adebe330dee57636ddaa23a9bcbe883302ec801f3598f61faba6fead97a93ff7d52ce2b56685aad0dbd90dc9fda336cd12ead604b0fb0675808d73b17c81e8c02df70f8eae9734f473567840c64e0ec0e9a146618b9d72a768f7620698321135fb6afd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1) socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x3, 0x0, 0x101, 0xfffffffe, {0x1, 0x6, 0x9, 0xc, 0x100000000, 0xffffffff80000001, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x40, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x9, &(0x7f0000006680)) 3.842302469s ago: executing program 2 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08c, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x5, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0x0, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000004, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 3.690242041s ago: executing program 4 (id=674): r0 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x5, 0x80, 0x6, 0x5, 0xad19}) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100)={[0x3]}, 0x8) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="e84f2bded11ecbf9b9", 0x9) 3.448787076s ago: executing program 4 (id=675): r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x80882, 0x0) io_setup(0xa91, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="1d110ab70621", 0x6, 0x5, 0x0, 0x1}]) modify_ldt$write(0x1, &(0x7f0000000280)={0x1001}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x1c, 0x0, @tid=r3}, &(0x7f0000bbdffc)) openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 3.03332575s ago: executing program 4 (id=676): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000001ffe, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x19}}, 0xfffffffffffffedd) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x8003, r6, 0x0, 0x7ffffffe, 0xfec3}}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x6008094}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1}, 0x80, 0x0}, 0x4044) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 2.079201219s ago: executing program 4 (id=677): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040411215500000000000010902240001000000c609040007020300010009210000050122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0xe1, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0xc, 0x10, 0xff, {0x8, 0xb, 0x2, 0x2, 0x1, 0x20, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x17, 0x7}, [@feature_unit={0xd, 0x24, 0x7, 0x6, 0x5, [0xf, 0xa]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x2b}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x90, 0x1, 0x0, 0x6}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe, 0x1, 0x2, 0x1, "80"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0xa0, 0x4, {0xa, 0x25, 0x25, 0x1, 0x8, 0x7bf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0x3, "10"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x2, 0x7, 0x9, "", "8ea8"}, @as_header={0x17, 0x24, 0x1, 0x2, 0x3, 0xf, 0x1001, 0xab, 0x21, 0x8000, 0xfe}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x3, 0x1a, "fc", "8d3c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6c, 0x4, 0xb, {0xa, 0x25, 0x25, 0x7, 0x4, 0x400}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x2, 0x5, 0x2, 0x20, 0x5}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x5, [{0x35, &(0x7f00000004c0)=@string={0x35, 0x3, "a53a3f5ef5d8206657b601c5f726e9629656d9e3ba6fd6160e418185a3a87b3b8f9714fef02e228c17bbe2e96843bbaa9958a9"}}, {0x4d, &(0x7f0000001540)=ANY=[@ANYBLOB="4d031e2679339bee00b6715b21a8b600ed8d38d3c5bc371a5c369a9e3689e6633672e7ff3ee846c41e1b832b4b9be297b2a700a4df35f37b55a84f5475e3d3aba04fff4b4930c8cc331a6fd8010755a346ca5bf7d3cf6334"]}, {0x5d, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x40a}}, {0xe1, &(0x7f0000000940)=@string={0xe1, 0x3, "efccbb733bdd4837ab98daf8e0c44cb716f575ad87595c46c52f8804edad2a55c96ea76e83c211b3ee14ba086f380fc67bdd93c9ed12877b463cdb354c65b6c6f5d48b436f53ec726582b9e449aa0db29964d35702b44121e91f8b4e6d4f408c0bc0a5e43554ce4535f48005e7b7e783b6fd94e32098bc476f8dfe4a2a6ce30e6d7d0a29552cc455fe1474f75a7ac524523061f07c6b19b36239c0b86821ac58e4432694b8417a18643dfbf4ce23eaac56039652abab488c214b4740438205277ba4e1db9f72bc4329290bbb7f85df80732688103d3e5749d83c3c902abed1"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002205000000007a6883a5"], 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f00000015c0)={r3, 0x58, &(0x7f00000006c0)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x8000000, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, [@FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x88}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000ac0)=@ethtool_perm_addr={0x20, 0x12, "6cd1bfb610e6cd861d7faf43e4fa2494b3fd"}}) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r7) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x41000, 0x47, &(0x7f0000000280)=""/71}, {0xb000, 0x0, 0x0}, {0xb000, 0x1009, &(0x7f0000000500)=""/4105}, {0xe000, 0x70, &(0x7f0000000380)=""/112}, {0x1, 0x2d, &(0x7f0000000200)=""/45}]}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000001600)={0x0, r2}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$nl_crypto(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000130001002abd7000fbdbdf2561656769733132382d6165736e6900000000000000000000000000000000000000000000000000c720db9238d5c41a00000000000000000000000000000000002000"/118], 0xe0}, 0x1, 0x0, 0x0, 0x40801}, 0x10) fsopen(&(0x7f0000000000)='pstore\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005004c55de0009"], 0x0) pread64(r2, &(0x7f0000000040)=""/33, 0x21, 0x47) 1.517318656s ago: executing program 3 (id=678): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb6010203010902", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0xfffffffc}, 0x80, 0x0, 0x0, 0x0, 0x54}, 0x640ce0c0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="66b9800100400f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x3b, 0x0, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f00000006c0)) 832.2286ms ago: executing program 1 (id=679): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x7f}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x1b}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="98a81c008ceeaa8caf8d1f9d586735f254040cb527", 0x15}], 0x1}, 0x0) (fail_nth: 1) 830.884887ms ago: executing program 2 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000080)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7d03, 0xbd, 0x6, 0x6, 0x1ff}, 0x2}}]}, {0x4c}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 316.832802ms ago: executing program 3 (id=681): socket$igmp6(0xa, 0x3, 0x2) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect$uac3(0x5, 0x86, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x80, 0x30, 0xc, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0xe1, 0x5, {0xa, 0x25, 0x25, 0x10000, 0xd1, 0xb1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x248, 0xcb, 0x9, 0x8, {0xa, 0x25, 0x25, 0x3, 0xf7, 0xf800}}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x1200000000000000) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000040)={0x2, &(0x7f00000006c0)=[{0xc, '\x00', @buffer={"d533d2e865bfe29c4c40aa3355f3d9b54edf2acbbe53acfd86cfa45c1ca806a3", 0x20}, 0x6}, {0x24, '\x00', @data=0x10}]}) r2 = openat$vcs(0xffffff9c, &(0x7f0000000200), 0x43, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) syz_usb_connect$uac1(0x2, 0x82, &(0x7f0000002c40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x944, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x7f, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x80, 0xbc, {0x7, 0x25, 0x1, 0x4, 0x2, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x70, 0x95, 0x1001}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xb136, 0xac9, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x600, 0x8d, 0x4, 0x0, {0x7, 0x25, 0x1, 0xc, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 4 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x34}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a45491f360bf3a80a1e5f9be0d3fe60d2adc5dca35becc71cf7118ea8f7a1e6c41d0332596d335fa94dbc99dcf919810d3224b8158ad8cd5b8f2a092bbb5c064123811cb711ae25be6d15e962a4ad6f9ac8264b8f5c6f7bdff836f41744edc2d0c32c3f"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000d0a01030000000000000000b56365365d505d754e6a18dc7122420a0000010900020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'gretap0\x00', {}, 0xf}) kernel console output (not intermixed with test programs): T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 173.720303][ T5636] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 173.809181][ T7146] syzkaller0: entered promiscuous mode [ 173.816448][ T7146] syzkaller0: entered allmulticast mode [ 173.907830][ T5697] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 174.059817][ T5697] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.107227][ T5697] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.157269][ T5697] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.201088][ T5697] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 174.243432][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.271457][ T7145] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.428368][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 174.587750][ T24] usb 5-1: device descriptor read/64, error -71 [ 174.697903][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.740727][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.769295][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 174.847785][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 174.892017][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'. [ 174.957011][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.976108][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.990440][ T10] usb 3-1: Product: syz [ 174.994643][ T10] usb 3-1: Manufacturer: syz [ 174.997883][ T24] usb 5-1: device descriptor read/64, error -71 [ 175.006183][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.018579][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.018664][ T10] usb 3-1: SerialNumber: syz [ 175.064231][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.108106][ T24] usb usb5-port1: attempt power cycle [ 175.123075][ T5365] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.287835][ T5689] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 175.360360][ T42] usb 3-1: USB disconnect, device number 27 [ 175.455556][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 175.460855][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 175.470553][ T5689] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 175.481690][ T5689] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 175.494850][ T5689] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 175.504027][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.512211][ T24] usb 5-1: device descriptor read/8, error -71 [ 175.521940][ T5689] usb 4-1: config 0 descriptor?? [ 175.597719][ T5705] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 175.732109][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.741024][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.749206][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 175.756143][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.767426][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 175.775160][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.785374][ T5705] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 175.794702][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.809152][ T5705] usb 1-1: config 0 descriptor?? [ 175.814308][ T24] usb 5-1: device descriptor read/8, error -71 [ 175.928207][ T24] usb usb5-port1: unable to enumerate USB device [ 176.197818][ T5365] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 176.208017][ T5365] ath9k_htc: Failed to initialize the device [ 176.216631][ T42] usb 3-1: ath9k_htc: USB layer deinitialized [ 176.283610][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.294808][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.306832][ T5705] usbhid 1-1:0.0: can't add hid device: -71 [ 176.314806][ T5705] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 176.328848][ T5705] usb 1-1: USB disconnect, device number 31 [ 176.865594][ T7175] usb usb8: usbfs: process 7175 (syz.2.423) did not claim interface 0 before use [ 176.941349][ T7161] syz.3.419 (7161): drop_caches: 2 [ 176.990349][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 177.118659][ T5697] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 177.144679][ T5697] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input11 [ 177.190367][ T7187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.426'. [ 177.540763][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 178.127392][ T5689] usbhid 4-1:0.0: can't add hid device: -71 [ 178.137980][ T5689] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 178.187852][ T5365] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 178.218281][ T5689] usb 4-1: USB disconnect, device number 13 [ 178.357983][ T5365] usb 1-1: Using ep0 maxpacket: 16 [ 178.418165][ T5365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.441242][ T5365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 178.473110][ T5365] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.524293][ T5365] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 178.547802][ T5365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.566411][ T5365] usb 1-1: Product: syz [ 178.579512][ T5365] usb 1-1: Manufacturer: syz [ 178.596866][ T5365] usb 1-1: SerialNumber: syz [ 178.619821][ T5365] usb 1-1: config 0 descriptor?? [ 178.629726][ T5689] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 178.665362][ T5365] mcba_usb 1-1:0.0: Can't find endpoints [ 178.746686][ T24] usb 2-1: USB disconnect, device number 27 [ 178.746839][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 178.847780][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 178.870949][ T5689] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 178.914534][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.938092][ T7217] hsr0: entered promiscuous mode [ 178.953300][ T5689] usb 4-1: SerialNumber: syz [ 178.961588][ T5689] usb 4-1: config 0 descriptor?? [ 178.983770][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 179.008884][ T5689] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 179.030807][ T5689] usb 4-1: Detected SIO [ 179.038303][ T7217] hsr_slave_0: left promiscuous mode [ 179.048603][ T5689] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 179.065032][ T7217] hsr_slave_1: left promiscuous mode [ 179.111841][ T7217] hsr0 (unregistering): left promiscuous mode [ 179.327823][ T5689] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 179.487735][ T5689] usb 3-1: Using ep0 maxpacket: 8 [ 179.496552][ T5689] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.504945][ T5689] usb 3-1: config 179 has no interface number 0 [ 179.511658][ T5689] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 179.523850][ T5689] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 179.527738][ T5365] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 179.535325][ T5689] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 179.554169][ T5689] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 179.570688][ T5689] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 179.586175][ T5689] usb 3-1: config 179 interface 65 has no altsetting 0 [ 179.600701][ T5689] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 179.610284][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.647732][ T5689] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 179.706308][ T24] usb 4-1: USB disconnect, device number 14 [ 179.713704][ T4984] input input12: unable to receive magic message: -110 [ 179.737344][ T4984] input input12: unable to receive magic message: -32 [ 179.737359][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 179.770804][ T24] ftdi_sio 4-1:0.0: device disconnected [ 179.770909][ T5365] usb 2-1: Using ep0 maxpacket: 16 [ 179.800954][ T4984] input input12: unable to receive magic message: -32 [ 179.813485][ T5365] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 179.849501][ T5365] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 179.880022][ T7219] input input12: unable to receive magic message: -32 [ 179.890346][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 179.890362][ T29] audit: type=1326 audit(1780638127.679:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.434" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fff01c code=0x0 [ 179.891363][ T5365] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 179.936969][ T10] usb 3-1: USB disconnect, device number 28 [ 179.937083][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.946098][ T4984] input input12: unable to receive magic message: -71 [ 179.951971][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 180.023331][ T5365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.043335][ T5365] usb 2-1: config 0 descriptor?? [ 180.258554][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.267327][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.585375][ T7228] binder: BINDER_SET_CONTEXT_MGR already set [ 180.591897][ T7228] binder: 7227:7228 ioctl 4018620d 80000100 returned -16 [ 180.811234][ T24] usb 1-1: USB disconnect, device number 32 [ 180.894948][ T5365] usbhid 2-1:0.0: can't add hid device: -71 [ 180.924244][ T5365] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 180.939656][ T7234] kernel read not supported for file /eth0 (pid: 7234 comm: syz.3.437) [ 180.995864][ T5365] usb 2-1: USB disconnect, device number 28 [ 181.003952][ T29] audit: type=1800 audit(1780638128.779:123): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.437" name="eth0" dev="mqueue" ino=17989 res=0 errno=0 [ 181.095198][ T7234] FAULT_INJECTION: forcing a failure. [ 181.095198][ T7234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.177757][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.3.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.177785][ T7234] Tainted: [L]=SOFTLOCKUP [ 181.177791][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.177801][ T7234] Call Trace: [ 181.177808][ T7234] [ 181.177816][ T7234] dump_stack_lvl+0xe8/0x150 [ 181.177841][ T7234] should_fail_ex+0x412/0x560 [ 181.177864][ T7234] _copy_to_user+0x31/0xb0 [ 181.177887][ T7234] simple_read_from_buffer+0xe1/0x170 [ 181.177914][ T7234] proc_fail_nth_read+0x1bb/0x230 [ 181.177938][ T7234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.177962][ T7234] ? rw_verify_area+0x2a6/0x4d0 [ 181.177984][ T7234] ? do_epoll_ctl+0x3c9/0xe80 [ 181.178003][ T7234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.178025][ T7234] vfs_read+0x20c/0xa70 [ 181.178052][ T7234] ? __pfx___mutex_lock+0x10/0x10 [ 181.178072][ T7234] ? __pfx_vfs_read+0x10/0x10 [ 181.178095][ T7234] ? __fget_files+0x2a/0x420 [ 181.178118][ T7234] ? __fget_files+0x3a0/0x420 [ 181.178136][ T7234] ? __fget_files+0x2a/0x420 [ 181.178162][ T7234] ksys_read+0x150/0x270 [ 181.178185][ T7234] ? __pfx_ksys_read+0x10/0x10 [ 181.178211][ T7234] ? asm_int80_emulation+0x1a/0x20 [ 181.178241][ T7234] do_int80_emulation+0x19a/0x550 [ 181.178258][ T7234] ? trace_irq_disable+0x3b/0x140 [ 181.178280][ T7234] ? asm_int80_emulation+0x1a/0x20 [ 181.178295][ T7234] ? clear_bhb_loop+0x40/0x90 [ 181.178310][ T7234] ? clear_bhb_loop+0x40/0x90 [ 181.178329][ T7234] asm_int80_emulation+0x1a/0x20 [ 181.178346][ T7234] RIP: 0023:0xf71361ab [ 181.178360][ T7234] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 181.178368][ T7234] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 181.178380][ T7234] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53ed5d0 [ 181.178387][ T7234] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 181.178393][ T7234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.178398][ T7234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.178404][ T7234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.178419][ T7234] [ 181.695471][ T7251] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 181.724320][ T7251] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 181.883596][ T7250] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 181.997719][ T5697] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 182.189420][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 182.221064][ T5697] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 182.255109][ T5697] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 182.276961][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.300784][ T5697] usb 1-1: Product: syz [ 182.308604][ T5697] usb 1-1: Manufacturer: syz [ 182.320610][ T5697] usb 1-1: SerialNumber: syz [ 182.355967][ T5697] r8152-cfgselector 1-1: Unknown version 0x0000 [ 182.355985][ T5697] r8152-cfgselector 1-1: config 0 descriptor?? [ 182.387800][ T5705] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 182.539106][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.564624][ T5705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.627400][ T5705] usb 5-1: config 1 has no interface number 0 [ 182.650482][ T5705] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.696538][ T5705] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 182.714586][ T5705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.726012][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.743380][ T5705] usb 5-1: Product: syz [ 182.755883][ T5705] usb 5-1: Manufacturer: syz [ 182.769006][ T5705] usb 5-1: SerialNumber: syz [ 182.907747][ T5689] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 183.087705][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 183.105563][ T5689] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.137339][ T5689] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.165898][ T5689] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 183.193432][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.223971][ T5689] usb 3-1: Product: syz [ 183.236199][ T5689] usb 3-1: Manufacturer: syz [ 183.246429][ T5689] usb 3-1: SerialNumber: syz [ 183.262984][ T5689] usb 3-1: config 0 descriptor?? [ 183.497622][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 183.516663][ T5689] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 183.551877][ T5689] imon:send_packet: packet tx failed (-71) [ 183.577851][ T5689] imon 3-1:0.0: panel buttons/knobs setup failed [ 183.614776][ T5705] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 183.627412][ T5705] cdc_ncm 5-1:1.1: bind() failure [ 183.644092][ T5705] usb 5-1: USB disconnect, device number 25 [ 183.658408][ T5689] rc_core: IR keymap rc-imon-pad not found [ 183.666446][ T5689] Registered IR keymap rc-empty [ 183.671730][ T5689] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 183.684084][ T5689] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 183.702477][ T5689] imon:send_packet: packet tx failed (-71) [ 183.727776][ T5689] imon 3-1:0.0: remote input dev register failed [ 183.734363][ T5689] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 183.754820][ T5689] imon 3-1:0.0: unable to initialize intf0, err 0 [ 183.761686][ T5689] imon:imon_probe: failed to initialize context! [ 183.768147][ T5689] imon 3-1:0.0: unable to register, err -19 [ 183.777528][ T5689] usb 3-1: USB disconnect, device number 29 [ 184.077828][ T5689] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 184.249208][ T5689] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 184.260600][ T5689] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 184.271705][ T5689] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.280461][ T5689] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 184.290567][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.298648][ T5689] usb 3-1: Product: syz [ 184.302901][ T5689] usb 3-1: Manufacturer: syz [ 184.307491][ T5689] usb 3-1: SerialNumber: syz [ 184.315887][ T5689] usb 3-1: config 0 descriptor?? [ 184.322106][ T7266] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.367931][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 184.518912][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 184.525934][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 184.536926][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.563325][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 184.578489][ T24] pvrusb2: ********** [ 184.586653][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 184.608198][ T24] pvrusb2: Important functionality might not be entirely working. [ 184.618068][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 184.630988][ T24] pvrusb2: ********** [ 184.642320][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 184.653933][ T5689] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 184.689026][ T5689] imon:send_packet: packet tx failed (-71) [ 184.699363][ T1226] r8152-cfgselector 1-1: USB disconnect, device number 33 [ 184.734101][ T5689] imon 3-1:0.0: panel buttons/knobs setup failed [ 184.765253][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.785184][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.806610][ T24] usb 4-1: USB disconnect, device number 15 [ 184.811610][ T2368] pvrusb2: Invalid write control endpoint [ 184.816601][ T5689] rc_core: IR keymap rc-imon-pad not found [ 184.847196][ T5689] Registered IR keymap rc-empty [ 184.853086][ T5689] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 184.865236][ T5689] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 184.883979][ T5689] imon:send_packet: packet tx failed (-71) [ 184.908465][ T5689] imon 3-1:0.0: remote input dev register failed [ 184.939474][ T5689] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 184.955360][ T2368] pvrusb2: Invalid write control endpoint [ 184.963515][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 184.975403][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 184.985137][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 184.999181][ T2368] pvrusb2: Device being rendered inoperable [ 185.008547][ T5689] imon 3-1:0.0: unable to initialize intf0, err 0 [ 185.015042][ T5689] imon:imon_probe: failed to initialize context! [ 185.021227][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 185.024986][ T5689] imon 3-1:0.0: unable to register, err -19 [ 185.029827][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 185.045905][ T5689] usb 3-1: USB disconnect, device number 30 [ 185.091961][ T2368] pvrusb2: Attached sub-driver cx25840 [ 185.108974][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 185.148157][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 185.277067][ T7300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.457'. [ 185.290074][ T7300] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 185.597330][ T7314] capability: warning: `syz.2.463' uses 32-bit capabilities (legacy support in use) [ 185.782771][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'. [ 185.795330][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'. [ 185.917706][ T5697] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 186.085903][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 186.095765][ T5697] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 186.119250][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 186.136229][ T5697] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 186.145415][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.157224][ T5697] usb 3-1: config 0 descriptor?? [ 186.193166][ T7322] syzkaller0: entered promiscuous mode [ 186.199166][ T7322] syzkaller0: entered allmulticast mode [ 186.382461][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.401570][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.843870][ T5705] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 186.952664][ T5697] usbhid 3-1:0.0: can't add hid device: -71 [ 186.962195][ T5697] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 186.998851][ T5697] usb 3-1: USB disconnect, device number 31 [ 187.437776][ T5697] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 187.603219][ T5697] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.624952][ T5697] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.636527][ T5697] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.662681][ T5697] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 187.679281][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.715026][ T7332] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.788854][ T5689] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 188.877920][ T5632] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.947737][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 188.955923][ T5689] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 188.966136][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.974310][ T5689] usb 1-1: Product: syz [ 188.978671][ T5689] usb 1-1: Manufacturer: syz [ 188.983292][ T5689] usb 1-1: SerialNumber: syz [ 188.991676][ T5689] usb 1-1: config 0 descriptor?? [ 188.999603][ T5689] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 189.007223][ T5689] dvb-usb: bulk message failed: -22 (4/0) [ 189.013042][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.023330][ T5689] dvb-usb: bulk message failed: -22 (5/0) [ 189.029123][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.041219][ T5632] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 189.049908][ T5689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.061708][ T5632] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 189.073113][ T5689] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 189.076976][ T5632] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 189.081843][ T5689] usb 1-1: media controller created [ 189.098874][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.103294][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.106963][ T5632] usb 4-1: Product: syz [ 189.120878][ T5632] usb 4-1: Manufacturer: syz [ 189.125541][ T5632] usb 4-1: SerialNumber: syz [ 189.131268][ T5689] usb 1-1: selecting invalid altsetting 3 [ 189.137570][ T5689] ttusb2: set interface to alts=3 failed [ 189.174000][ T5689] DVB: Unable to find symbol tda10086_attach() [ 189.180277][ T5689] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 189.191229][ T5689] dvb-usb: bulk message failed: -22 (4/0) [ 189.196969][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.205869][ T7338] ttusb2: i2c wr len=120 too high [ 189.207482][ T5689] dvb-usb: bulk message failed: -22 (5/0) [ 189.221718][ T5689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.231942][ T5705] usb 5-1: device descriptor read/64, error -71 [ 189.238484][ T5689] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 189.250891][ T7343] sg_write: data in/out 229343/136 bytes for SCSI command 0x2-- guessing data in; [ 189.250891][ T7343] program syz.2.468 not setting count and/or reply_len properly [ 189.257038][ T5689] usb 1-1: USB disconnect, device number 34 [ 189.277574][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.290789][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.304738][ T5697] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 189.324612][ T5697] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input17 [ 189.365097][ T5689] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 189.365778][ T5697] usb 3-1: USB disconnect, device number 32 [ 189.374573][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 189.465379][ T7334] kvm: pic: single mode not supported [ 189.465604][ T7334] kvm: pic: single mode not supported [ 189.471473][ T7334] kvm: pic: level sensitive irq not supported [ 189.481673][ T7334] kvm: pic: single mode not supported [ 189.488213][ T7334] kvm: pic: level sensitive irq not supported [ 189.501396][ T5705] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 189.515907][ T7334] kvm: pic: single mode not supported [ 189.515925][ T7334] kvm: pic: level sensitive irq not supported [ 189.521736][ T7334] kvm: pic: single mode not supported [ 189.606938][ T5632] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 189.620587][ T5632] usb 4-1: unit 6 not found! [ 189.653224][ T5632] usb 4-1: USB disconnect, device number 16 [ 189.677711][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 189.694724][ T5705] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 189.712841][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.732011][ T5705] usb 5-1: Product: syz [ 189.743019][ T5705] usb 5-1: Manufacturer: syz [ 189.750785][ T5705] usb 5-1: SerialNumber: syz [ 189.771266][ T5705] usb 5-1: config 0 descriptor?? [ 189.784280][ T5705] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 189.803806][ T5705] dvb-usb: bulk message failed: -22 (4/0) [ 189.819557][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.830874][ T5705] dvb-usb: bulk message failed: -22 (5/0) [ 189.836656][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.851957][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.864900][ T5705] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 189.883636][ T5705] usb 5-1: media controller created [ 189.906890][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.955277][ T5705] usb 5-1: selecting invalid altsetting 3 [ 189.985199][ T7347] FAULT_INJECTION: forcing a failure. [ 189.985199][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 190.001772][ T5705] ttusb2: set interface to alts=3 failed [ 190.031352][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.031382][ T7347] Tainted: [L]=SOFTLOCKUP [ 190.031388][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.031399][ T7347] Call Trace: [ 190.031405][ T7347] [ 190.031413][ T7347] dump_stack_lvl+0xe8/0x150 [ 190.031438][ T7347] should_fail_ex+0x412/0x560 [ 190.031463][ T7347] should_failslab+0xa8/0x100 [ 190.031483][ T7347] __kmalloc_noprof+0xe8/0x760 [ 190.031508][ T7347] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.031540][ T7347] tomoyo_realpath_from_path+0xe3/0x5d0 [ 190.031566][ T7347] ? tomoyo_domain+0xd7/0x130 [ 190.031589][ T7347] ? tomoyo_path_number_perm+0x219/0x630 [ 190.031611][ T7347] tomoyo_path_number_perm+0x246/0x630 [ 190.031636][ T7347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.031658][ T7347] ? __lock_acquire+0x6b5/0x2cf0 [ 190.031713][ T7347] ? __fget_files+0x2a/0x420 [ 190.031738][ T7347] ? __fget_files+0x3a0/0x420 [ 190.031757][ T7347] ? __fget_files+0x2a/0x420 [ 190.031782][ T7347] security_file_ioctl_compat+0xc3/0x2a0 [ 190.031806][ T7347] __ia32_compat_sys_ioctl+0x139/0x950 [ 190.031835][ T7347] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 190.031864][ T7347] ? __fget_files+0x3a0/0x420 [ 190.031889][ T7347] ? fput+0xa0/0xd0 [ 190.031910][ T7347] ? ksys_write+0x242/0x270 [ 190.031944][ T7347] __do_fast_syscall_32+0x23e/0x6f0 [ 190.031964][ T7347] ? do_fast_syscall_32+0x33/0x70 [ 190.031989][ T7347] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.032006][ T7347] ? asm_int80_emulation+0x1a/0x20 [ 190.032023][ T7347] ? do_int80_emulation+0x29f/0x550 [ 190.032040][ T7347] ? trace_irq_disable+0x3b/0x140 [ 190.032066][ T7347] do_fast_syscall_32+0x33/0x70 [ 190.032086][ T7347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.032106][ T7347] RIP: 0023:0xf707f01c [ 190.032122][ T7347] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 190.032137][ T7347] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 190.032156][ T7347] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 190.032168][ T7347] RDX: 0000000080002300 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.032179][ T7347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.032189][ T7347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.032199][ T7347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.032226][ T7347] [ 190.033278][ T7347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.296864][ T5705] DVB: Unable to find symbol tda10086_attach() [ 190.303400][ T5705] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 190.311651][ T7347] ttusb2: i2c wr len=120 too high [ 190.317266][ T5705] dvb-usb: bulk message failed: -22 (4/0) [ 190.325318][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 190.349419][ T5705] dvb-usb: bulk message failed: -22 (5/0) [ 190.365583][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 190.391967][ T5705] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 190.428686][ T5689] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 190.440966][ T5705] usb 5-1: USB disconnect, device number 27 [ 190.536760][ T5705] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 190.577743][ T5689] usb 1-1: device descriptor read/64, error -71 [ 190.801453][ T7374] netlink: 'syz.3.477': attribute type 12 has an invalid length. [ 190.811098][ T7374] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 190.819174][ T5689] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 190.832066][ T7374] netlink: 148 bytes leftover after parsing attributes in process `syz.3.477'. [ 190.845545][ T7374] netlink: 43 bytes leftover after parsing attributes in process `syz.3.477'. [ 190.977855][ T5689] usb 1-1: device descriptor read/64, error -71 [ 191.098454][ T5689] usb usb1-port1: attempt power cycle [ 191.261340][ T7391] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 191.287853][ T5705] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 191.387973][ T1226] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 191.447786][ T5689] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 191.455630][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 191.465189][ T5705] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 191.479763][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 191.497572][ T5689] usb 1-1: device descriptor read/8, error -71 [ 191.504264][ T5705] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 191.513846][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.522022][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 191.536691][ T5705] usb 5-1: config 0 descriptor?? [ 191.553812][ T1226] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.571206][ T1226] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.582605][ T1226] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.594103][ T1226] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.610850][ T1226] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.621559][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.629872][ T1226] usb 4-1: Product: syz [ 191.634205][ T1226] usb 4-1: Manufacturer: syz [ 191.639276][ T1226] usb 4-1: SerialNumber: syz [ 191.668348][ T24] usb 3-1: device descriptor read/64, error -71 [ 191.747791][ T5689] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 191.763417][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.772671][ T5689] usb 1-1: device descriptor read/8, error -71 [ 191.779622][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.897982][ T5689] usb usb1-port1: unable to enumerate USB device [ 191.920418][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 192.058053][ T24] usb 3-1: device descriptor read/64, error -71 [ 192.179786][ T24] usb usb3-port1: attempt power cycle [ 192.481119][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.502776][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.515703][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.530286][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.537810][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 192.546806][ T1226] cdc_ncm 4-1:1.0: bind() failure [ 192.579608][ T1226] usbhid 4-1:1.1: couldn't find an input interrupt endpoint [ 192.598278][ T24] usb 3-1: device descriptor read/8, error -71 [ 192.606145][ T1226] usb 4-1: USB disconnect, device number 17 [ 192.862143][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 192.901090][ T24] usb 3-1: device descriptor read/8, error -71 [ 193.020483][ T24] usb usb3-port1: unable to enumerate USB device [ 193.257894][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 193.329744][ T7461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.487'. [ 193.341340][ T7461] netlink: 'syz.3.487': attribute type 21 has an invalid length. [ 193.349621][ T7461] netlink: 100 bytes leftover after parsing attributes in process `syz.3.487'. [ 193.367269][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 193.414288][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.427424][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 193.441048][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.449394][ T10] usb 1-1: Product: syz [ 193.453780][ T10] usb 1-1: Manufacturer: syz [ 193.458492][ T10] usb 1-1: SerialNumber: syz [ 193.466999][ T10] usb 1-1: config 0 descriptor?? [ 193.476329][ T10] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 193.486573][ T10] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 193.493834][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 193.697813][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 193.738253][ T7464] netlink: 72 bytes leftover after parsing attributes in process `syz.0.483'. [ 193.850054][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.861296][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.871176][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 193.880485][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.891874][ T24] usb 4-1: config 0 descriptor?? [ 194.014707][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 194.022699][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 194.036401][ T5705] usb 5-1: USB disconnect, device number 28 [ 194.124134][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.132347][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.395994][ T5697] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.492748][ T5697] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.531137][ T7476] netlink: 19 bytes leftover after parsing attributes in process `syz.2.493'. [ 194.551533][ T7476] netlink: 19 bytes leftover after parsing attributes in process `syz.2.493'. [ 194.561574][ T7476] netlink: 19 bytes leftover after parsing attributes in process `syz.2.493'. [ 194.572313][ T7476] netlink: 19 bytes leftover after parsing attributes in process `syz.2.493'. [ 194.939803][ T7485] FAULT_INJECTION: forcing a failure. [ 194.939803][ T7485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.965203][ T7485] CPU: 1 UID: 0 PID: 7485 Comm: syz.2.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.965233][ T7485] Tainted: [L]=SOFTLOCKUP [ 194.965240][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.965250][ T7485] Call Trace: [ 194.965260][ T7485] [ 194.965268][ T7485] dump_stack_lvl+0xe8/0x150 [ 194.965293][ T7485] should_fail_ex+0x412/0x560 [ 194.965318][ T7485] _copy_from_iter+0x1d3/0x1670 [ 194.965341][ T7485] ? rcu_is_watching+0x15/0xb0 [ 194.965367][ T7485] ? __pfx__copy_from_iter+0x10/0x10 [ 194.965394][ T7485] ? netlink_sendmsg+0x650/0xb40 [ 194.965418][ T7485] ? skb_put+0x11b/0x210 [ 194.965445][ T7485] netlink_sendmsg+0x6c0/0xb40 [ 194.965479][ T7485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.965507][ T7485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 194.965533][ T7485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.965558][ T7485] ____sys_sendmsg+0x972/0x9f0 [ 194.965582][ T7485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.965606][ T7485] ? kstrtoull+0x12f/0x1d0 [ 194.965640][ T7485] ___sys_sendmsg+0x2a5/0x360 [ 194.965656][ T7485] ? __lock_acquire+0x6b5/0x2cf0 [ 194.965677][ T7485] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.965695][ T7485] ? get_pid_task+0x20/0x1f0 [ 194.965716][ T7485] ? get_pid_task+0x20/0x1f0 [ 194.965734][ T7485] ? get_pid_task+0x20/0x1f0 [ 194.965775][ T7485] ? __fget_files+0x2a/0x420 [ 194.965793][ T7485] ? __fget_files+0x3a0/0x420 [ 194.965823][ T7485] __sys_sendmsg+0x183/0x260 [ 194.965842][ T7485] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.965877][ T7485] __do_fast_syscall_32+0x23e/0x6f0 [ 194.965897][ T7485] ? do_fast_syscall_32+0x33/0x70 [ 194.965915][ T7485] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.965940][ T7485] ? asm_int80_emulation+0x1a/0x20 [ 194.965957][ T7485] ? do_int80_emulation+0x29f/0x550 [ 194.965975][ T7485] ? trace_irq_disable+0x3b/0x140 [ 194.966003][ T7485] do_fast_syscall_32+0x33/0x70 [ 194.966022][ T7485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.966043][ T7485] RIP: 0023:0xf709f01c [ 194.966060][ T7485] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 194.966075][ T7485] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 194.966094][ T7485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000bf00 [ 194.966107][ T7485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.966118][ T7485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.966128][ T7485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 194.966138][ T7485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.966164][ T7485] [ 195.319579][ T29] audit: type=1804 audit(1780638143.109:124): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.492" name="/newroot/90/file1" dev="tmpfs" ino=481 res=1 errno=0 [ 195.358176][ T5697] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 195.530673][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 195.552458][ T5697] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 195.575689][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.592881][ T5697] usb 5-1: config 0 descriptor?? [ 195.603919][ T7492] No such timeout policy "syz1" [ 195.610812][ T7483] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 195.870312][ T7502] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5647] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[7502] [ 195.946113][ T5705] usb 1-1: USB disconnect, device number 39 [ 195.957829][ T5705] garmin_gps 1-1:0.0: device disconnected [ 196.040792][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.059472][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.130057][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.149537][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.172309][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.194359][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.219436][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.239209][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.260073][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.274391][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.291147][ T5697] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 196.324101][ T5697] asus 0003:0B05:1ABE.0003: reserved main item tag 0xd [ 196.448962][ T5697] asus 0003:0B05:1ABE.0003: hidraw1: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 196.497968][ T5697] asus 0003:0B05:1ABE.0003: Asus handshake 5a failed to send: -71 [ 196.525964][ T5697] asus 0003:0B05:1ABE.0003: Failed to initialize 0x5a: -71. [ 196.569294][ T5697] usb 5-1: USB disconnect, device number 29 [ 196.589174][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 196.612882][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 196.702522][ T24] usb 4-1: USB disconnect, device number 18 [ 196.767149][ T7512] fido_id[7512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 196.792285][ T29] audit: type=1326 audit(1780638144.579:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 196.866448][ T29] audit: type=1326 audit(1780638144.579:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 196.926603][ T29] audit: type=1326 audit(1780638144.579:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 196.969519][ T29] audit: type=1326 audit(1780638144.619:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 197.053938][ T29] audit: type=1326 audit(1780638144.619:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 197.111952][ T29] audit: type=1326 audit(1780638144.619:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 197.148949][ T5705] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 197.182308][ T29] audit: type=1326 audit(1780638144.619:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 197.255981][ T29] audit: type=1326 audit(1780638144.619:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 197.322498][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 197.344992][ T29] audit: type=1326 audit(1780638144.619:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.1.506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 197.409383][ T5705] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 197.420765][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.446325][ T5705] usb 2-1: Product: syz [ 197.460224][ T5705] usb 2-1: Manufacturer: syz [ 197.471509][ T5705] usb 2-1: SerialNumber: syz [ 197.477003][ T7531] __nla_validate_parse: 61 callbacks suppressed [ 197.477018][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 197.683901][ T7531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.513'. [ 197.997348][ T5705] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 198.020867][ T5705] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 198.036663][ T7551] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 198.088685][ T5705] usb 2-1: USB disconnect, device number 29 [ 198.137757][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 198.196960][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.287890][ T24] usb 1-1: device descriptor read/64, error -71 [ 198.549708][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 198.688108][ T5697] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 198.697754][ T24] usb 1-1: device descriptor read/64, error -71 [ 198.818264][ T24] usb usb1-port1: attempt power cycle [ 198.880889][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.898210][ T5697] usb 3-1: not running at top speed; connect to a high speed hub [ 198.919793][ T5697] usb 3-1: string descriptor 0 read error: -22 [ 198.929935][ T5697] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice= 0.40 [ 198.940099][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.960261][ T5697] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.967310][ T5697] usb 3-1: MIDIStreaming interface descriptor not found [ 199.167821][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 199.218428][ T24] usb 1-1: device descriptor read/8, error -71 [ 199.388299][ T5697] usb 3-1: USB disconnect, device number 37 [ 199.487828][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 199.509036][ T24] usb 1-1: device descriptor read/8, error -71 [ 199.560839][ T7588] openvswitch: netlink: Message has 4 unknown bytes. [ 199.628707][ T24] usb usb1-port1: unable to enumerate USB device [ 199.644988][ T7573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.652464][ T7573] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 199.877978][ T5697] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 200.029562][ T5697] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.039015][ T5697] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.048318][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.070794][ T5697] usb 4-1: config 0 descriptor?? [ 200.313861][ T1226] usb 4-1: USB disconnect, device number 19 [ 200.914649][ T7605] FAULT_INJECTION: forcing a failure. [ 200.914649][ T7605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.929788][ T7605] CPU: 1 UID: 0 PID: 7605 Comm: syz.3.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.929824][ T7605] Tainted: [L]=SOFTLOCKUP [ 200.929831][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.929864][ T7605] Call Trace: [ 200.929878][ T7605] [ 200.929885][ T7605] dump_stack_lvl+0xe8/0x150 [ 200.929916][ T7605] should_fail_ex+0x412/0x560 [ 200.929980][ T7605] _copy_to_iter+0x1e4/0x17d0 [ 200.930011][ T7605] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.930055][ T7605] ? __pfx__copy_to_iter+0x10/0x10 [ 200.930079][ T7605] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 200.930119][ T7605] ? lockdep_hardirqs_on+0x7a/0x110 [ 200.930136][ T7605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 200.930160][ T7605] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 200.930184][ T7605] __skb_datagram_iter+0xf8/0x980 [ 200.930204][ T7605] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 200.930232][ T7605] skb_copy_datagram_iter+0xb5/0x240 [ 200.930254][ T7605] netlink_recvmsg+0x2c3/0xa50 [ 200.930279][ T7605] ? __pfx_netlink_recvmsg+0x10/0x10 [ 200.930309][ T7605] ? aa_sock_msg_perm+0xf1/0x1b0 [ 200.930334][ T7605] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 200.930364][ T7605] ? security_socket_recvmsg+0x7e/0x2c0 [ 200.930385][ T7605] ? __pfx_netlink_recvmsg+0x10/0x10 [ 200.930410][ T7605] sock_recvmsg+0x172/0x1b0 [ 200.930433][ T7605] __sys_recvfrom+0x240/0x3c0 [ 200.930469][ T7605] ? __pfx___sys_recvfrom+0x10/0x10 [ 200.930502][ T7605] ? __might_fault+0xaf/0x130 [ 200.930540][ T7605] __ia32_compat_sys_socketcall+0x898/0xa10 [ 200.930571][ T7605] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 200.930606][ T7605] ? asm_int80_emulation+0x1a/0x20 [ 200.930633][ T7605] do_int80_emulation+0x19a/0x550 [ 200.930652][ T7605] ? trace_irq_disable+0x3b/0x140 [ 200.930675][ T7605] ? asm_int80_emulation+0x1a/0x20 [ 200.930691][ T7605] ? clear_bhb_loop+0x40/0x90 [ 200.930708][ T7605] ? clear_bhb_loop+0x40/0x90 [ 200.930728][ T7605] asm_int80_emulation+0x1a/0x20 [ 200.930745][ T7605] RIP: 0023:0xf71361ab [ 200.930762][ T7605] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 200.930776][ T7605] RSP: 002b:00000000f53ec35c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 200.930795][ T7605] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53ec40c [ 200.930806][ T7605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.930816][ T7605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.930825][ T7605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.930835][ T7605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.930859][ T7605] [ 201.324615][ T4949] Bluetooth: hci2: command 0x0406 tx timeout [ 201.330768][ T4949] Bluetooth: hci0: command 0x0406 tx timeout [ 201.366343][ T7573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.372338][ T7573] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 201.380259][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 201.415834][ T7573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.424082][ T7573] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 201.437196][ T7573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.443794][ T7573] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 201.698069][ T7621] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 201.717987][ T5632] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 201.725688][ T5697] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 201.733586][ T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 201.887893][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 201.899251][ T5632] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 201.908581][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.921386][ T5697] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 201.932081][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.945314][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 201.955994][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 201.969709][ T5632] usb 1-1: Product: syz [ 201.981280][ T5632] usb 1-1: Manufacturer: syz [ 201.986383][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 201.996496][ T5632] usb 1-1: SerialNumber: syz [ 202.009838][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.018882][ T5697] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 202.031802][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.047725][ T5697] usb 3-1: Product: syz [ 202.055315][ T5697] usb 3-1: Manufacturer: syz [ 202.060808][ T10] usb 5-1: config 0 descriptor?? [ 202.073300][ T5697] usb 3-1: SerialNumber: syz [ 202.079212][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 202.089068][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 202.105365][ T5697] usb 3-1: config 0 descriptor?? [ 202.139354][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 202.158800][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 202.185290][ T10] usb 5-1: media controller created [ 202.206621][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.242891][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 202.254171][ T5632] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 202.284877][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 202.285716][ T7595] dvb-usb: bulk message failed: -22 (2/0) [ 202.292235][ T5632] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 202.313053][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 202.349562][ T5632] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 202.369555][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 202.383320][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 202.398862][ T7595] dvb-usb: bulk message failed: -22 (4/0) [ 202.409708][ T5632] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 202.477791][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.538204][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 202.547286][ T5632] usb 1-1: USB disconnect, device number 44 [ 202.557326][ T10] dvb-usb: error while querying for an remote control event. [ 202.604244][ T1226] usb 5-1: USB disconnect, device number 30 [ 202.656141][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.695786][ T42] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 202.731250][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.762643][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.777100][ T1226] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 202.793646][ T42] usb 4-1: Product: syz [ 202.806706][ T42] usb 4-1: Manufacturer: syz [ 202.823542][ T42] usb 4-1: SerialNumber: syz [ 202.844337][ T42] cdc_mbim 4-1:1.0: skipping garbage [ 203.057431][ T7628] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 203.063945][ T7630] x_tables: duplicate underflow at hook 2 [ 203.624625][ T5697] mcba_usb 3-1:0.0: Can't find endpoints [ 203.663238][ T5697] usb 3-1: USB disconnect, device number 38 [ 203.683552][ T7628] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 203.712793][ T42] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 203.766981][ T42] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 203.778367][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 203.778382][ T29] audit: type=1326 audit(1780638151.569:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 203.836105][ T42] wwan wwan0: port wwan0mbim0 attached [ 203.860366][ T29] audit: type=1326 audit(1780638151.599:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 203.907509][ T42] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, f6:d4:83:7d:9c:fb [ 203.940229][ T29] audit: type=1326 audit(1780638151.599:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 203.989787][ T29] audit: type=1326 audit(1780638151.599:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 204.057125][ T29] audit: type=1326 audit(1780638151.599:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 204.124361][ T29] audit: type=1326 audit(1780638151.599:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 204.198160][ T29] audit: type=1326 audit(1780638151.599:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 204.254275][ T5697] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 204.289233][ T29] audit: type=1326 audit(1780638151.599:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 204.347735][ T29] audit: type=1326 audit(1780638151.599:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 204.437855][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.467249][ T29] audit: type=1326 audit(1780638151.599:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 204.481537][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.575523][ T5697] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.597774][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.628692][ T5697] usb 3-1: Product: syz [ 204.637268][ T5697] usb 3-1: Manufacturer: syz [ 204.660105][ T5697] usb 3-1: SerialNumber: syz [ 204.705655][ T5697] usb 3-1: 0:2 : does not exist [ 204.718012][ T5697] usb 3-1: unit 9 not found! [ 205.071453][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 205.147248][ T5697] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 205.186424][ T5697] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 205.207064][ T5697] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 205.242867][ T5697] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 205.276829][ T5697] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 205.324794][ T5697] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 205.356486][ T5697] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 205.380029][ T5697] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 205.437229][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.444083][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.451017][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.457725][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.464130][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.470825][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.477194][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.483888][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.492438][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.499141][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.506639][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.513334][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.520349][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.527045][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.533841][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.540535][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.547417][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.552175][ T5697] usb 3-1: USB disconnect, device number 39 [ 205.554121][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.555571][ C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 205.572854][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 205.723679][ T5294] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 205.978016][ T7699] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 206.251413][ C1] cdc_mbim 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 206.357467][ T5697] usb 4-1: USB disconnect, device number 20 [ 206.372037][ T5697] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 206.649084][ T7713] syzkaller1: entered promiscuous mode [ 206.668527][ T7713] syzkaller1: entered allmulticast mode [ 206.683834][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 206.708814][ T5697] wwan wwan0: port wwan0mbim0 disconnected [ 206.847826][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 206.871317][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 206.905050][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 206.928914][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.947167][ T24] usb 5-1: Product: syz [ 206.953989][ T24] usb 5-1: Manufacturer: syz [ 206.968658][ T24] usb 5-1: SerialNumber: syz [ 207.206938][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 207.222856][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 207.230530][ T24] gspca_stv06xx: st6422 sensor detected [ 207.487896][ T1226] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 207.502097][ T24] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 207.512149][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 207.519581][ T24] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 207.558999][ T5632] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 207.577956][ T24] usb 5-1: USB disconnect, device number 31 [ 207.637953][ T1226] usb 4-1: Using ep0 maxpacket: 32 [ 207.655342][ T1226] usb 4-1: config 1 has an invalid descriptor of length 69, skipping remainder of the config [ 207.677468][ T1226] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 207.700314][ T1226] usb 4-1: too many endpoints for config 1 interface 1 altsetting 82: 99, using maximum allowed: 30 [ 207.714236][ T1226] usb 4-1: config 1 interface 1 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 207.729028][ T1226] usb 4-1: config 1 interface 1 has no altsetting 0 [ 207.730320][ T5632] usb 3-1: Using ep0 maxpacket: 32 [ 207.738644][ T1226] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 207.752043][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.761382][ T1226] usb 4-1: Product: syz [ 207.765925][ T5632] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.775393][ T1226] usb 4-1: Manufacturer: syz [ 207.792959][ T5632] usb 3-1: config 7 has an invalid interface number: 245 but max is 0 [ 207.807051][ T1226] usb 4-1: SerialNumber: syz [ 207.811944][ T5632] usb 3-1: config 7 has an invalid descriptor of length 80, skipping remainder of the config [ 207.838585][ T5632] usb 3-1: config 7 has no interface number 0 [ 207.857205][ T5632] usb 3-1: too many endpoints for config 7 interface 245 altsetting 142: 118, using maximum allowed: 30 [ 207.892241][ T5632] usb 3-1: config 7 interface 245 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 118 [ 207.933399][ T5632] usb 3-1: config 7 interface 245 has no altsetting 0 [ 207.950292][ T5632] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 207.968387][ T24] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 207.980992][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.017828][ T5632] usb 3-1: Product: syz [ 208.029628][ T5632] usb 3-1: Manufacturer: syz [ 208.039472][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 208.046320][ T5632] usb 3-1: SerialNumber: syz [ 208.070258][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.093800][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 208.095290][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.124253][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.139284][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 4 [ 208.161901][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.174846][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 208.190042][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.207359][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 208.219292][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.230407][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.239444][ T24] usb 5-1: Product: syz [ 208.246131][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.255670][ T24] usb 5-1: Manufacturer: syz [ 208.261371][ T24] usb 5-1: SerialNumber: syz [ 208.266720][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.289299][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.314034][ T1226] usb 4-1: unable to issue vendor read request (ret = -71) [ 208.351909][ T5632] usb 3-1: Cannot retrieve CPort count: -71 [ 208.361846][ T7769] xt_bpf: check failed: parse error [ 208.424891][ T1226] usb 4-1: USB disconnect, device number 21 [ 208.462724][ T5632] usb 3-1: Cannot retrieve CPort count: -71 [ 208.543722][ T5632] es2_ap_driver 3-1:7.245: probe with driver es2_ap_driver failed with error -71 [ 208.588243][ T5632] usb 3-1: USB disconnect, device number 40 [ 208.605893][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 208.636462][ T24] gspca_stv06xx: st6422 sensor detected [ 209.097284][ T7782] syzkaller0: entered promiscuous mode [ 209.117523][ T7782] syzkaller0: entered allmulticast mode [ 209.237058][ T24] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 209.303165][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.350124][ T24] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 209.527703][ T5697] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 209.529199][ T24] usb 5-1: USB disconnect, device number 32 [ 209.737730][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 209.765289][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.825558][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.858546][ T5697] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 209.894068][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.939720][ T5697] usb 3-1: config 0 descriptor?? [ 210.323198][ T5697] usbhid 3-1:0.0: can't add hid device: -71 [ 210.357368][ T5697] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.406173][ T5697] usb 3-1: USB disconnect, device number 41 [ 210.709590][ T7810] netlink: 'syz.4.572': attribute type 10 has an invalid length. [ 211.042627][ T5689] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 211.212505][ T5689] usb 5-1: Using ep0 maxpacket: 16 [ 211.225212][ T5689] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 211.241439][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.260395][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.284502][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.298018][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.317992][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.336477][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.360422][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.384935][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.417235][ T5689] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 211.426521][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 211.452024][ T5689] usb 5-1: SerialNumber: syz [ 211.473062][ T5689] usb 5-1: config 0 descriptor?? [ 211.502407][ T5689] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 211.737900][ T7826] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 211.779805][ T7813] netlink: 14 bytes leftover after parsing attributes in process `syz.4.572'. [ 212.326762][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 212.427723][ T5632] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 212.607729][ T5632] usb 4-1: Using ep0 maxpacket: 16 [ 212.625085][ T5632] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 212.646701][ T5632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 212.670373][ T5632] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 212.685134][ T5632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.706730][ T5632] usb 4-1: config 0 descriptor?? [ 212.940865][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.972824][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.482438][ T7835] syz.3.578 (7835): drop_caches: 2 [ 213.775397][ T7810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.784905][ T7810] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 213.812117][ T7813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.824930][ T7813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.836608][ T7813] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 213.857522][ T7813] bond0 (unregistering): Released all slaves [ 214.031813][ T4984] bcm5974 5-1:0.0: could not read from device [ 214.068786][ T5689] usb 5-1: USB disconnect, device number 33 [ 214.082030][ T5632] usbhid 4-1:0.0: can't add hid device: -71 [ 214.103432][ T5632] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 214.173354][ T5632] usb 4-1: USB disconnect, device number 22 [ 214.261204][ T7848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.289633][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 214.445638][ T7859] syzkaller1: entered promiscuous mode [ 214.471945][ T7859] syzkaller1: entered allmulticast mode [ 215.096586][ T7879] syzkaller0: entered promiscuous mode [ 215.111869][ T7879] syzkaller0: entered allmulticast mode [ 215.357738][ T5632] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 215.385923][ T7888] fuse: Bad value for 'user_id' [ 215.418843][ T7888] fuse: Bad value for 'user_id' [ 215.520274][ T5632] usb 5-1: Using ep0 maxpacket: 32 [ 215.539952][ T7891] FAULT_INJECTION: forcing a failure. [ 215.539952][ T7891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.540376][ T5632] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.553348][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.1.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.553376][ T7891] Tainted: [L]=SOFTLOCKUP [ 215.553382][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.553393][ T7891] Call Trace: [ 215.553401][ T7891] [ 215.553408][ T7891] dump_stack_lvl+0xe8/0x150 [ 215.553432][ T7891] should_fail_ex+0x412/0x560 [ 215.553457][ T7891] _copy_to_user+0x31/0xb0 [ 215.553480][ T7891] simple_read_from_buffer+0xe1/0x170 [ 215.553506][ T7891] proc_fail_nth_read+0x1bb/0x230 [ 215.553531][ T7891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.553555][ T7891] ? rw_verify_area+0x2a6/0x4d0 [ 215.553578][ T7891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.553601][ T7891] vfs_read+0x20c/0xa70 [ 215.553628][ T7891] ? __pfx___mutex_lock+0x10/0x10 [ 215.553648][ T7891] ? __pfx_vfs_read+0x10/0x10 [ 215.553673][ T7891] ? __fget_files+0x2a/0x420 [ 215.553697][ T7891] ? __fget_files+0x3a0/0x420 [ 215.553716][ T7891] ? __fget_files+0x2a/0x420 [ 215.553743][ T7891] ksys_read+0x150/0x270 [ 215.553768][ T7891] ? __pfx_ksys_read+0x10/0x10 [ 215.553795][ T7891] ? asm_int80_emulation+0x1a/0x20 [ 215.553816][ T7891] do_int80_emulation+0x19a/0x550 [ 215.553834][ T7891] ? trace_irq_disable+0x3b/0x140 [ 215.553857][ T7891] ? asm_int80_emulation+0x1a/0x20 [ 215.553873][ T7891] ? clear_bhb_loop+0x40/0x90 [ 215.553889][ T7891] ? clear_bhb_loop+0x40/0x90 [ 215.553910][ T7891] asm_int80_emulation+0x1a/0x20 [ 215.553926][ T7891] RIP: 0023:0xf71f61ab [ 215.553944][ T7891] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 215.553958][ T7891] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 215.553978][ T7891] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54ad5d0 [ 215.553990][ T7891] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 215.553999][ T7891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.554009][ T7891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.554019][ T7891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.554045][ T7891] [ 215.915304][ T5632] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.941991][ T5632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.953687][ T5632] usb 5-1: config 0 descriptor?? [ 215.971025][ T5632] hub 5-1:0.0: bad descriptor, ignoring hub [ 215.980628][ T5632] hub 5-1:0.0: probe with driver hub failed with error -5 [ 215.993703][ T5632] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 216.241194][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 216.423020][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 216.439502][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.465826][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 216.500580][ T24] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 216.539013][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.567382][ T24] usb 2-1: Product: syz [ 216.571705][ T24] usb 2-1: Manufacturer: syz [ 216.593374][ T24] usb 2-1: SerialNumber: syz [ 216.853930][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.895155][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.087920][ T5632] usb 5-1: USB disconnect, device number 34 [ 217.483818][ T7908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.597'. [ 218.509418][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 218.696627][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 218.717758][ T24] usb 2-1: USB disconnect, device number 30 [ 218.752972][ T7923] ======================================================= [ 218.752972][ T7923] WARNING: The mand mount option has been deprecated and [ 218.752972][ T7923] and is ignored by this kernel. Remove the mand [ 218.752972][ T7923] option from the mount to silence this warning. [ 218.752972][ T7923] ======================================================= [ 218.850505][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.886114][ T7926] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5649] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[7926] [ 218.954681][ T7931] FAULT_INJECTION: forcing a failure. [ 218.954681][ T7931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.954713][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.2.605 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.954735][ T7931] Tainted: [L]=SOFTLOCKUP [ 218.954741][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.954749][ T7931] Call Trace: [ 218.954756][ T7931] [ 218.954763][ T7931] dump_stack_lvl+0xe8/0x150 [ 218.954786][ T7931] should_fail_ex+0x412/0x560 [ 218.954810][ T7931] _copy_from_user+0x2d/0xb0 [ 218.954833][ T7931] userfaultfd_ioctl+0x37a/0x4a10 [ 218.954865][ T7931] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.954901][ T7931] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 218.954922][ T7931] ? rcu_is_watching+0x15/0xb0 [ 218.954943][ T7931] ? trace_hrtimer_start+0x82/0x200 [ 218.954984][ T7931] ? finish_task_switch+0x4da/0xbe0 [ 218.955014][ T7931] ? trace_sched_exit_tp+0x3a/0x130 [ 218.955032][ T7931] ? __schedule+0x1837/0x5740 [ 218.955084][ T7931] ? __pfx___schedule+0x10/0x10 [ 218.955120][ T7931] ? irqentry_exit+0x218/0x8b0 [ 218.955138][ T7931] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.955155][ T7931] ? irqentry_exit+0x218/0x8b0 [ 218.955172][ T7931] ? trace_irq_disable+0x3b/0x140 [ 218.955206][ T7931] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 218.955229][ T7931] ? compat_ptr_ioctl+0x6a/0xa0 [ 218.955259][ T7931] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 218.955288][ T7931] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 218.955317][ T7931] ? __fget_files+0x3a0/0x420 [ 218.955345][ T7931] ? fput+0xa0/0xd0 [ 218.955372][ T7931] ? ksys_write+0x242/0x270 [ 218.955406][ T7931] __do_fast_syscall_32+0x23e/0x6f0 [ 218.955426][ T7931] ? do_fast_syscall_32+0x33/0x70 [ 218.955443][ T7931] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.955460][ T7931] ? asm_int80_emulation+0x1a/0x20 [ 218.955477][ T7931] ? do_int80_emulation+0x29f/0x550 [ 218.955494][ T7931] ? trace_irq_disable+0x3b/0x140 [ 218.955520][ T7931] do_fast_syscall_32+0x33/0x70 [ 218.955539][ T7931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.955559][ T7931] RIP: 0023:0xf709f01c [ 218.955574][ T7931] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 218.955583][ T7931] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 218.955594][ T7931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa05 [ 218.955601][ T7931] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.955607][ T7931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.955612][ T7931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.955618][ T7931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.955632][ T7931] [ 219.044747][ T7934] sctp: [Deprecated]: syz.0.603 (pid 7934) Use of int in maxseg socket option. [ 219.044747][ T7934] Use struct sctp_assoc_value instead [ 219.327728][ T5632] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 219.473424][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 219.509497][ T5632] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 219.509530][ T5632] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 219.509550][ T5632] usb 4-1: config 171 has no interface number 0 [ 219.509586][ T5632] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 219.509601][ T5632] usb 4-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 219.511342][ T5632] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 219.511360][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.511371][ T5632] usb 4-1: Product: syz [ 219.511379][ T5632] usb 4-1: Manufacturer: syz [ 219.511391][ T5632] usb 4-1: SerialNumber: syz [ 219.515388][ T7936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.628322][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 219.629979][ T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 219.630009][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.644802][ T24] usb 2-1: config 0 descriptor?? [ 219.718935][ T5632] ath6kl: Failed to submit usb control message: -71 [ 219.803843][ T5632] ath6kl: unable to send the bmi data to the device: -71 [ 219.826493][ T5632] ath6kl: Unable to send get target info: -71 [ 219.849483][ T5632] ath6kl: Failed to init ath6kl core: -71 [ 219.876614][ T5632] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 219.883022][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 219.984821][ T5632] usb 4-1: USB disconnect, device number 23 [ 220.381419][ T7956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.612'. [ 220.553289][ T7958] syzkaller0: entered promiscuous mode [ 220.559831][ T42] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 220.580336][ T7958] syzkaller0: entered allmulticast mode [ 220.738442][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 220.756320][ T42] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 220.777205][ T42] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.807164][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.823060][ T42] usb 1-1: Product: syz [ 220.828824][ T42] usb 1-1: Manufacturer: syz [ 220.833543][ T42] usb 1-1: SerialNumber: syz [ 220.864979][ T42] r8152-cfgselector 1-1: Unknown version 0x0000 [ 220.877876][ T42] r8152-cfgselector 1-1: config 0 descriptor?? [ 221.708783][ T24] gspca_vc032x: reg_r err -32 [ 221.714738][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 221.720467][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 221.748608][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 221.770808][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 221.822272][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 221.874392][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 221.884315][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 221.902496][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.050096][ T7987] QAT: Device 225 not found [ 222.111699][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.117128][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.122560][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.128321][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.133737][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.139517][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.144838][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.150637][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.155952][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.161836][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 222.167164][ T24] gspca_vc032x: Unknown sensor... [ 222.229341][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 222.737558][ T24] usb 2-1: USB disconnect, device number 31 [ 223.353559][ T5632] r8152-cfgselector 1-1: USB disconnect, device number 45 [ 224.815236][ T8007] netlink: 52 bytes leftover after parsing attributes in process `syz.4.624'. [ 224.964906][ T8008] ip6t_REJECT: ECHOREPLY is not supported [ 225.042334][ T24] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 225.221893][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.232027][ T5689] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 225.247420][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 225.273137][ T24] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 225.302696][ T24] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 225.336416][ T24] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 225.381624][ T24] usb 2-1: config 14 has no interface number 0 [ 225.396685][ T8016] FAULT_INJECTION: forcing a failure. [ 225.396685][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 225.410353][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.2.628 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.410391][ T8016] Tainted: [L]=SOFTLOCKUP [ 225.410398][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.410408][ T8016] Call Trace: [ 225.410416][ T8016] [ 225.410423][ T8016] dump_stack_lvl+0xe8/0x150 [ 225.410448][ T8016] should_fail_ex+0x412/0x560 [ 225.410478][ T8016] should_failslab+0xa8/0x100 [ 225.410498][ T8016] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 225.410525][ T8016] ? __kernfs_new_node+0xaa/0x970 [ 225.410553][ T8016] kstrdup+0x42/0x100 [ 225.410572][ T8016] __kernfs_new_node+0xaa/0x970 [ 225.410594][ T8016] ? bus_add_driver+0x255/0x670 [ 225.410616][ T8016] ? driver_register+0x23a/0x320 [ 225.410635][ T8016] ? usb_gadget_register_driver_owner+0xf9/0x270 [ 225.410658][ T8016] ? __pfx___kernfs_new_node+0x10/0x10 [ 225.410682][ T8016] ? kernfs_root+0x1c/0x230 [ 225.410708][ T8016] ? kernfs_root+0x1c/0x230 [ 225.410729][ T8016] ? kernfs_root+0x1c/0x230 [ 225.410751][ T8016] ? kernfs_root+0x1c/0x230 [ 225.410776][ T8016] kernfs_new_node+0x102/0x210 [ 225.410803][ T8016] kernfs_create_dir_ns+0x44/0x130 [ 225.410831][ T8016] sysfs_create_dir_ns+0x12f/0x2a0 [ 225.410853][ T8016] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 225.410878][ T8016] ? do_raw_spin_unlock+0xf5/0x210 [ 225.410905][ T8016] kobject_add_internal+0x62b/0xd00 [ 225.410934][ T8016] kobject_init_and_add+0x12b/0x1a0 [ 225.410959][ T8016] ? __pfx_kobject_init_and_add+0x10/0x10 [ 225.410982][ T8016] ? __raw_spin_lock_init+0x45/0x100 [ 225.411012][ T8016] bus_add_driver+0x255/0x670 [ 225.411041][ T8016] driver_register+0x23a/0x320 [ 225.411065][ T8016] usb_gadget_register_driver_owner+0xf9/0x270 [ 225.411086][ T8016] raw_ioctl+0x154d/0x41c0 [ 225.411115][ T8016] ? tomoyo_path_number_perm+0x219/0x630 [ 225.411147][ T8016] ? do_vfs_ioctl+0x1166/0x1530 [ 225.411174][ T8016] ? __pfx_raw_ioctl+0x10/0x10 [ 225.411227][ T8016] ? __fget_files+0x2a/0x420 [ 225.411253][ T8016] ? __fget_files+0x3a0/0x420 [ 225.411272][ T8016] ? __fget_files+0x2a/0x420 [ 225.411295][ T8016] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 225.411323][ T8016] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 225.411351][ T8016] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 225.411398][ T8016] ? exc_page_fault+0x6a/0xc0 [ 225.411428][ T8016] __do_fast_syscall_32+0x23e/0x6f0 [ 225.411448][ T8016] ? do_fast_syscall_32+0x33/0x70 [ 225.411466][ T8016] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.411482][ T8016] ? irqentry_exit+0x10f/0x8b0 [ 225.411498][ T8016] ? trace_irq_disable+0x3b/0x140 [ 225.411526][ T8016] do_fast_syscall_32+0x33/0x70 [ 225.411545][ T8016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.411566][ T8016] RIP: 0023:0xf709f01c [ 225.411582][ T8016] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 225.411597][ T8016] RSP: 002b:00000000f548b424 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 225.411616][ T8016] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005501 [ 225.411628][ T8016] RDX: 0000000000000000 RSI: 00000000f7464ff4 RDI: 00000000f548c4c0 [ 225.411639][ T8016] RBP: 00000000f7464ff4 R08: 0000000000000000 R09: 0000000000000000 [ 225.411650][ T8016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 225.411661][ T8016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.411687][ T8016] [ 225.411915][ T8016] kobject: kobject_add_internal failed for raw-gadget.2 (error: -12 parent: drivers) [ 225.411948][ T24] usb 2-1: config 14 has no interface number 1 [ 225.430667][ T8016] UDC core: USB Raw Gadget: driver registration failed: -12 [ 225.439060][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 225.758636][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 225.764687][ T24] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 225.796163][ T24] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 225.809494][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.820831][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.834065][ T24] usb 2-1: config 14 interface 57 has no altsetting 0 [ 225.840944][ T24] usb 2-1: config 14 interface 228 has no altsetting 0 [ 225.880888][ T24] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 225.897819][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.907506][ T24] usb 2-1: Product: syz [ 225.913339][ T24] usb 2-1: Manufacturer: syz [ 225.927689][ T24] usb 2-1: SerialNumber: syz [ 225.940864][ T5689] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.952235][ T5689] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.968146][ T5689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.980721][ T5689] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 226.014624][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.040085][ T5689] usb 5-1: config 0 descriptor?? [ 226.413195][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 226.422513][ T24] legousbtower 2-1:14.57: interrupt endpoints not found [ 226.463972][ T24] legousbtower 2-1:14.228: get version request failed: -71 [ 226.510780][ T24] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 226.571981][ T24] usb 2-1: USB disconnect, device number 32 [ 226.651702][ T5689] uclogic 0003:5543:0005.0004: hidraw0: USB HID v0.04 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 226.792892][ T8032] syzkaller0: entered promiscuous mode [ 226.805878][ T8032] syzkaller0: entered allmulticast mode [ 226.815853][ T8030] FAULT_INJECTION: forcing a failure. [ 226.815853][ T8030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.843311][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.2.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.843341][ T8030] Tainted: [L]=SOFTLOCKUP [ 226.843347][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.843357][ T8030] Call Trace: [ 226.843364][ T8030] [ 226.843372][ T8030] dump_stack_lvl+0xe8/0x150 [ 226.843397][ T8030] should_fail_ex+0x412/0x560 [ 226.843422][ T8030] _copy_to_user+0x31/0xb0 [ 226.843446][ T8030] simple_read_from_buffer+0xe1/0x170 [ 226.843472][ T8030] proc_fail_nth_read+0x1bb/0x230 [ 226.843498][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.843523][ T8030] ? rw_verify_area+0x2a6/0x4d0 [ 226.843546][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.843570][ T8030] vfs_read+0x20c/0xa70 [ 226.843598][ T8030] ? __pfx___mutex_lock+0x10/0x10 [ 226.843626][ T8030] ? __pfx_vfs_read+0x10/0x10 [ 226.843650][ T8030] ? __fget_files+0x2a/0x420 [ 226.843674][ T8030] ? __fget_files+0x3a0/0x420 [ 226.843693][ T8030] ? __fget_files+0x2a/0x420 [ 226.843722][ T8030] ksys_read+0x150/0x270 [ 226.843747][ T8030] ? __pfx_ksys_read+0x10/0x10 [ 226.843773][ T8030] ? asm_int80_emulation+0x1a/0x20 [ 226.843796][ T8030] do_int80_emulation+0x19a/0x550 [ 226.843814][ T8030] ? trace_irq_disable+0x3b/0x140 [ 226.843838][ T8030] ? asm_int80_emulation+0x1a/0x20 [ 226.843854][ T8030] ? clear_bhb_loop+0x40/0x90 [ 226.843871][ T8030] ? clear_bhb_loop+0x40/0x90 [ 226.843891][ T8030] asm_int80_emulation+0x1a/0x20 [ 226.843908][ T8030] RIP: 0023:0xf71d61ab [ 226.843923][ T8030] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 226.843938][ T8030] RSP: 002b:00000000f546c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 226.843957][ T8030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546c5d0 [ 226.843969][ T8030] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 226.843979][ T8030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.843989][ T8030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.843999][ T8030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.844026][ T8030] [ 227.145614][ T5697] usb 5-1: USB disconnect, device number 35 [ 227.652721][ T8052] netlink: 52 bytes leftover after parsing attributes in process `syz.1.636'. [ 228.228285][ T8058] FAULT_INJECTION: forcing a failure. [ 228.228285][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.251675][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.2.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.251704][ T8058] Tainted: [L]=SOFTLOCKUP [ 228.251710][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.251719][ T8058] Call Trace: [ 228.251726][ T8058] [ 228.251744][ T8058] dump_stack_lvl+0xe8/0x150 [ 228.251858][ T8058] should_fail_ex+0x412/0x560 [ 228.251988][ T8058] _copy_from_user+0x2d/0xb0 [ 228.252113][ T8058] __sys_connect+0x156/0x450 [ 228.252198][ T8058] ? fd_install+0x94/0x3d0 [ 228.252299][ T8058] ? __pfx___sys_connect+0x10/0x10 [ 228.252478][ T8058] __ia32_sys_connect+0x7a/0x90 [ 228.252515][ T8058] __do_fast_syscall_32+0x23e/0x6f0 [ 228.252545][ T8058] ? do_fast_syscall_32+0x33/0x70 [ 228.252567][ T8058] ? lockdep_hardirqs_on+0x7a/0x110 [ 228.252590][ T8058] ? asm_int80_emulation+0x1a/0x20 [ 228.252602][ T8058] ? do_int80_emulation+0x29f/0x550 [ 228.252622][ T8058] ? trace_irq_disable+0x3b/0x140 [ 228.252660][ T8058] do_fast_syscall_32+0x33/0x70 [ 228.252671][ T8058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.252688][ T8058] RIP: 0023:0xf709f01c [ 228.252702][ T8058] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 228.252714][ T8058] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 228.252732][ T8058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 228.252740][ T8058] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 228.252753][ T8058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.252762][ T8058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 228.252771][ T8058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.252806][ T8058] [ 228.927770][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 229.096580][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 229.118455][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.127386][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.138833][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.160059][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.181033][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.192219][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.218253][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.228897][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.253221][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.276843][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.299707][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.324580][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.350911][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.370692][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.396038][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.420982][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.430182][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.451310][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.477044][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.505383][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.534034][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.543720][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.561976][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.581654][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.617010][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 229.635265][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 229.652887][ T10] usb 1-1: Product: syz [ 229.657533][ T10] usb 1-1: Manufacturer: syz [ 229.671904][ T10] usb 1-1: SerialNumber: syz [ 229.680180][ T10] usb 1-1: config 0 descriptor?? [ 229.714105][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 230.106064][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 230.116625][ T5697] usb 1-1: USB disconnect, device number 46 [ 230.126033][ T5697] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 230.634474][ T8067] bridge1: entered promiscuous mode [ 230.642858][ T8067] bridge1: entered allmulticast mode [ 230.742435][ T8072] FAULT_INJECTION: forcing a failure. [ 230.742435][ T8072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.764950][ T8072] CPU: 0 UID: 0 PID: 8072 Comm: syz.1.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.764978][ T8072] Tainted: [L]=SOFTLOCKUP [ 230.764984][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.764995][ T8072] Call Trace: [ 230.765002][ T8072] [ 230.765010][ T8072] dump_stack_lvl+0xe8/0x150 [ 230.765035][ T8072] should_fail_ex+0x412/0x560 [ 230.765058][ T8072] _copy_from_user+0x2d/0xb0 [ 230.765079][ T8072] get_compat_msghdr+0xb3/0x4c0 [ 230.765099][ T8072] ? _parse_integer_limit+0x1ae/0x1f0 [ 230.765125][ T8072] ? __pfx_get_compat_msghdr+0x10/0x10 [ 230.765144][ T8072] ? kstrtoull+0x12f/0x1d0 [ 230.765174][ T8072] ___sys_sendmsg+0x201/0x360 [ 230.765191][ T8072] ? __lock_acquire+0x6b5/0x2cf0 [ 230.765218][ T8072] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.765238][ T8072] ? get_pid_task+0x20/0x1f0 [ 230.765259][ T8072] ? get_pid_task+0x20/0x1f0 [ 230.765277][ T8072] ? get_pid_task+0x20/0x1f0 [ 230.765320][ T8072] ? __fget_files+0x2a/0x420 [ 230.765339][ T8072] ? __fget_files+0x3a0/0x420 [ 230.765368][ T8072] __sys_sendmsg+0x183/0x260 [ 230.765387][ T8072] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.765423][ T8072] __do_fast_syscall_32+0x23e/0x6f0 [ 230.765443][ T8072] ? do_fast_syscall_32+0x33/0x70 [ 230.765460][ T8072] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.765477][ T8072] ? asm_int80_emulation+0x1a/0x20 [ 230.765492][ T8072] ? do_int80_emulation+0x29f/0x550 [ 230.765510][ T8072] ? trace_irq_disable+0x3b/0x140 [ 230.765536][ T8072] do_fast_syscall_32+0x33/0x70 [ 230.765555][ T8072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.765576][ T8072] RIP: 0023:0xf70bf01c [ 230.765591][ T8072] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 230.765606][ T8072] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 230.765625][ T8072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 230.765637][ T8072] RDX: 00000000200040dc RSI: 0000000000000000 RDI: 0000000000000000 [ 230.765647][ T8072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.765656][ T8072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.765666][ T8072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.765691][ T8072] [ 231.383235][ T8088] netlink: 184 bytes leftover after parsing attributes in process `syz.4.648'. [ 231.441254][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 231.477298][ T8088] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 231.523315][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.606303][ T8088] netlink: 128 bytes leftover after parsing attributes in process `syz.4.648'. [ 231.777402][ T8111] netlink: 52 bytes leftover after parsing attributes in process `syz.3.652'. [ 232.086419][ T8115] syzkaller0: entered promiscuous mode [ 232.108613][ T8115] syzkaller0: entered allmulticast mode [ 233.035650][ T8127] FAULT_INJECTION: forcing a failure. [ 233.035650][ T8127] name failslab, interval 1, probability 0, space 0, times 0 [ 233.076107][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.0.656 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.076136][ T8127] Tainted: [L]=SOFTLOCKUP [ 233.076143][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.076153][ T8127] Call Trace: [ 233.076160][ T8127] [ 233.076168][ T8127] dump_stack_lvl+0xe8/0x150 [ 233.076194][ T8127] should_fail_ex+0x412/0x560 [ 233.076218][ T8127] should_failslab+0xa8/0x100 [ 233.076238][ T8127] __kmalloc_noprof+0xe8/0x760 [ 233.076262][ T8127] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 233.076293][ T8127] tomoyo_realpath_from_path+0xe3/0x5d0 [ 233.076320][ T8127] ? tomoyo_domain+0xd7/0x130 [ 233.076341][ T8127] ? tomoyo_path_number_perm+0x219/0x630 [ 233.076364][ T8127] tomoyo_path_number_perm+0x246/0x630 [ 233.076389][ T8127] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.076412][ T8127] ? __lock_acquire+0x6b5/0x2cf0 [ 233.076481][ T8127] ? __fget_files+0x2a/0x420 [ 233.076507][ T8127] ? __fget_files+0x3a0/0x420 [ 233.076527][ T8127] ? __fget_files+0x2a/0x420 [ 233.076551][ T8127] security_file_ioctl_compat+0xc3/0x2a0 [ 233.076576][ T8127] __ia32_compat_sys_ioctl+0x139/0x950 [ 233.076607][ T8127] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 233.076637][ T8127] ? __fget_files+0x3a0/0x420 [ 233.076664][ T8127] ? fput+0xa0/0xd0 [ 233.076684][ T8127] ? ksys_write+0x242/0x270 [ 233.076720][ T8127] __do_fast_syscall_32+0x23e/0x6f0 [ 233.076741][ T8127] ? do_fast_syscall_32+0x33/0x70 [ 233.076758][ T8127] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.076776][ T8127] ? asm_int80_emulation+0x1a/0x20 [ 233.076793][ T8127] ? do_int80_emulation+0x29f/0x550 [ 233.076811][ T8127] ? trace_irq_disable+0x3b/0x140 [ 233.076838][ T8127] do_fast_syscall_32+0x33/0x70 [ 233.076858][ T8127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.076880][ T8127] RIP: 0023:0xf707f01c [ 233.076896][ T8127] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 233.076911][ T8127] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 233.076937][ T8127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400452c9 [ 233.076950][ T8127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.076960][ T8127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.076970][ T8127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 233.076981][ T8127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.077008][ T8127] [ 233.077015][ T8127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.453475][ T8148] netlink: 52 bytes leftover after parsing attributes in process `syz.3.663'. [ 235.471164][ T8149] FAULT_INJECTION: forcing a failure. [ 235.471164][ T8149] name failslab, interval 1, probability 0, space 0, times 0 [ 235.497703][ T8149] CPU: 1 UID: 0 PID: 8149 Comm: syz.0.662 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.497734][ T8149] Tainted: [L]=SOFTLOCKUP [ 235.497741][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.497751][ T8149] Call Trace: [ 235.497759][ T8149] [ 235.497766][ T8149] dump_stack_lvl+0xe8/0x150 [ 235.497791][ T8149] should_fail_ex+0x412/0x560 [ 235.497814][ T8149] should_failslab+0xa8/0x100 [ 235.497830][ T8149] ? do_getname+0x2e/0x250 [ 235.497847][ T8149] kmem_cache_alloc_noprof+0x87/0x650 [ 235.497868][ T8149] ? __pfx_vfs_write+0x10/0x10 [ 235.497897][ T8149] do_getname+0x2e/0x250 [ 235.497914][ T8149] ? getname_flags+0x11/0x20 [ 235.497934][ T8149] do_sys_openat2+0xca/0x200 [ 235.497957][ T8149] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.497978][ T8149] ? ksys_write+0x242/0x270 [ 235.498002][ T8149] ? __pfx_ksys_write+0x10/0x10 [ 235.498029][ T8149] __ia32_compat_sys_openat+0x131/0x160 [ 235.498055][ T8149] do_int80_emulation+0x19a/0x550 [ 235.498075][ T8149] ? trace_irq_disable+0x3b/0x140 [ 235.498098][ T8149] ? asm_int80_emulation+0x1a/0x20 [ 235.498114][ T8149] ? clear_bhb_loop+0x40/0x90 [ 235.498132][ T8149] ? clear_bhb_loop+0x40/0x90 [ 235.498153][ T8149] asm_int80_emulation+0x1a/0x20 [ 235.498170][ T8149] RIP: 0023:0xf71b61ab [ 235.498187][ T8149] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 235.498209][ T8149] RSP: 002b:00000000f544c3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 235.498230][ T8149] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f544c490 [ 235.498242][ T8149] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.498253][ T8149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.498263][ T8149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 235.498274][ T8149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.498299][ T8149] [ 235.916363][ T8164] FAULT_INJECTION: forcing a failure. [ 235.916363][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.936496][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.936525][ T8164] Tainted: [L]=SOFTLOCKUP [ 235.936532][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.936542][ T8164] Call Trace: [ 235.936549][ T8164] [ 235.936557][ T8164] dump_stack_lvl+0xe8/0x150 [ 235.936582][ T8164] should_fail_ex+0x412/0x560 [ 235.936607][ T8164] _copy_to_user+0x31/0xb0 [ 235.936631][ T8164] simple_read_from_buffer+0xe1/0x170 [ 235.936657][ T8164] proc_fail_nth_read+0x1bb/0x230 [ 235.936682][ T8164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.936706][ T8164] ? rw_verify_area+0x2a6/0x4d0 [ 235.936729][ T8164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.936752][ T8164] vfs_read+0x20c/0xa70 [ 235.936784][ T8164] ? __pfx___mutex_lock+0x10/0x10 [ 235.936805][ T8164] ? __pfx_vfs_read+0x10/0x10 [ 235.936830][ T8164] ? __fget_files+0x2a/0x420 [ 235.936855][ T8164] ? __fget_files+0x3a0/0x420 [ 235.936875][ T8164] ? __fget_files+0x2a/0x420 [ 235.936904][ T8164] ksys_read+0x150/0x270 [ 235.936929][ T8164] ? __pfx_ksys_read+0x10/0x10 [ 235.936957][ T8164] ? asm_int80_emulation+0x1a/0x20 [ 235.936978][ T8164] do_int80_emulation+0x19a/0x550 [ 235.936996][ T8164] ? trace_irq_disable+0x3b/0x140 [ 235.937018][ T8164] ? asm_int80_emulation+0x1a/0x20 [ 235.937035][ T8164] ? clear_bhb_loop+0x40/0x90 [ 235.937051][ T8164] ? clear_bhb_loop+0x40/0x90 [ 235.937072][ T8164] asm_int80_emulation+0x1a/0x20 [ 235.937089][ T8164] RIP: 0023:0xf71d61ab [ 235.937105][ T8164] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 235.937120][ T8164] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 235.937139][ T8164] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0 [ 235.937151][ T8164] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 235.937161][ T8164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.937171][ T8164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 235.937181][ T8164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.937215][ T8164] [ 236.200278][ T5689] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 236.362541][ T5689] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 236.376314][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.393996][ T8166] sg_write: data in/out 435166/674 bytes for SCSI command 0x0-- guessing data in; [ 236.393996][ T8166] program syz.2.670 not setting count and/or reply_len properly [ 236.419351][ T5689] usb 2-1: Product: syz [ 236.430878][ T5689] usb 2-1: Manufacturer: syz [ 236.440023][ T5689] usb 2-1: SerialNumber: syz [ 236.459397][ T5689] usb 2-1: config 0 descriptor?? [ 236.480347][ T5689] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 236.492847][ T8172] netlink: 'syz.4.671': attribute type 10 has an invalid length. [ 236.585257][ T8172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.603082][ T8172] team0: Port device netdevsim1 added [ 236.610789][ T8173] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 236.647725][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 236.703939][ T8176] syzkaller0: entered promiscuous mode [ 236.709560][ T8176] syzkaller0: entered allmulticast mode [ 236.797774][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 236.806951][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 236.815361][ T24] usb 1-1: config 0 has no interface number 0 [ 236.830711][ T24] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.851308][ T24] usb 1-1: config 0 interface 89 has no altsetting 0 [ 236.873539][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 236.883301][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.897867][ T24] usb 1-1: Product: syz [ 236.908623][ T24] usb 1-1: Manufacturer: syz [ 236.918347][ T24] usb 1-1: SerialNumber: syz [ 236.937356][ T24] usb 1-1: config 0 descriptor?? [ 236.952739][ T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 236.962373][ T24] em28xx 1-1:0.89: Video interface 89 found: [ 237.076823][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.675'. [ 237.395559][ T5689] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 237.411366][ T5689] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 237.652400][ T24] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 238.567706][ T5697] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 238.741985][ T5697] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.754225][ T5697] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.764752][ T5697] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.779428][ T5697] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.786101][ T5697] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 238.800855][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.827155][ T5697] usb 5-1: config 0 descriptor?? [ 239.152141][ T5689] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 239.238488][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.259331][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.302005][ T5697] hid_parser_main: 454 callbacks suppressed [ 239.302027][ T5697] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 239.317979][ T5697] holtek 0003:1241:5015.0005: item fetching failed at offset 4/5 [ 239.329055][ T5697] holtek 0003:1241:5015.0005: parse failed [ 239.334732][ T5689] usb 4-1: config index 0 descriptor too short (expected 30768, got 18) [ 239.336920][ T5697] holtek 0003:1241:5015.0005: probe with driver holtek failed with error -22 [ 239.347710][ T5689] usb 4-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 239.382821][ T5689] usb 4-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 239.402130][ T5689] usb 4-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 239.414241][ T5689] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 239.433295][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.441449][ T5689] usb 4-1: Product: syz [ 239.445659][ T5689] usb 4-1: Manufacturer: syz [ 239.450435][ T5689] usb 4-1: SerialNumber: syz [ 239.455325][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 239.479837][ T5697] usb 2-1: USB disconnect, device number 33 [ 239.520574][ T8194] netlink: 'syz.4.677': attribute type 21 has an invalid length. [ 239.539640][ T8194] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.565632][ T24] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 239.589712][ T8194] IPv6: Can't replace route, no match found [ 239.599911][ T24] em28xx 1-1:0.89: board has no eeprom [ 239.615975][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.638419][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.646268][ T8208] syzkaller0: entered promiscuous mode [ 239.652447][ T8208] syzkaller0: entered allmulticast mode [ 239.663961][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'. [ 239.677036][ T42] usb 5-1: USB disconnect, device number 36 [ 239.683773][ T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 239.700312][ T24] em28xx 1-1:0.89: analog set to bulk mode. [ 239.715801][ T8211] FAULT_INJECTION: forcing a failure. [ 239.715801][ T8211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.719096][ T1226] em28xx 1-1:0.89: Registering V4L2 extension [ 239.735124][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.1.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.735150][ T8211] Tainted: [L]=SOFTLOCKUP [ 239.735157][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.735166][ T8211] Call Trace: [ 239.735171][ T8211] [ 239.735177][ T8211] dump_stack_lvl+0xe8/0x150 [ 239.735198][ T8211] should_fail_ex+0x412/0x560 [ 239.735217][ T8211] _copy_from_user+0x2d/0xb0 [ 239.735237][ T8211] get_compat_msghdr+0xb3/0x4c0 [ 239.735255][ T8211] ? _parse_integer_limit+0x1ae/0x1f0 [ 239.735278][ T8211] ? __pfx_get_compat_msghdr+0x10/0x10 [ 239.735296][ T8211] ? kstrtoull+0x12f/0x1d0 [ 239.735325][ T8211] ___sys_sendmsg+0x201/0x360 [ 239.735342][ T8211] ? __lock_acquire+0x6b5/0x2cf0 [ 239.735375][ T8211] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.735395][ T8211] ? get_pid_task+0x20/0x1f0 [ 239.735416][ T8211] ? get_pid_task+0x20/0x1f0 [ 239.735433][ T8211] ? get_pid_task+0x20/0x1f0 [ 239.735476][ T8211] ? __fget_files+0x2a/0x420 [ 239.735496][ T8211] ? __fget_files+0x3a0/0x420 [ 239.735524][ T8211] __sys_sendmsg+0x183/0x260 [ 239.735543][ T8211] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.735579][ T8211] __do_fast_syscall_32+0x23e/0x6f0 [ 239.735598][ T8211] ? do_fast_syscall_32+0x33/0x70 [ 239.735615][ T8211] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.735632][ T8211] ? asm_int80_emulation+0x1a/0x20 [ 239.735648][ T8211] ? do_int80_emulation+0x29f/0x550 [ 239.735665][ T8211] ? trace_irq_disable+0x3b/0x140 [ 239.735692][ T8211] do_fast_syscall_32+0x33/0x70 [ 239.735710][ T8211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.735731][ T8211] RIP: 0023:0xf70bf01c [ 239.735763][ T8211] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 239.735778][ T8211] RSP: 002b:00000000f548c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 239.735796][ T8211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 239.735809][ T8211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.735818][ T8211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.735828][ T8211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.735838][ T8211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.735862][ T8211] [ 239.767823][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'. [ 239.822480][ T5689] usb 4-1: USB disconnect, device number 24 [ 239.939350][ T8206] syzkaller0: entered promiscuous mode [ 239.956861][ T1226] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 239.979880][ T8206] syzkaller0: entered allmulticast mode [ 240.002296][ T1226] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 240.032922][ T1226] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 240.050057][ T1226] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 240.063561][ T1226] em28xx 1-1:0.89: Config register raw data: 0xfffffffb [ 240.075982][ T1226] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 240.078340][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 240.078356][ T29] audit: type=1326 audit(1780638187.859:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 240.083626][ T1226] em28xx 1-1:0.89: No AC97 audio processor [ 240.092557][ T29] audit: type=1326 audit(1780638187.859:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 240.143924][ T29] audit: type=1326 audit(1780638187.859:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71361ab code=0x7ffc0000 [ 240.169189][ T29] audit: type=1326 audit(1780638187.859:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 240.173190][ T1226] usb 1-1: Decoder not found [ 240.210810][ T1226] em28xx 1-1:0.89: failed to create media graph [ 240.217700][ T29] audit: type=1326 audit(1780638187.859:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 240.217742][ T29] audit: type=1326 audit(1780638187.879:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 240.217771][ T29] audit: type=1326 audit(1780638187.879:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 240.294603][ T1226] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 240.331547][ T8216] ================================================================== [ 240.339651][ T8216] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 240.346873][ T8216] Read of size 4 at addr ffff888092f7c860 by task v4l_id/8216 [ 240.354336][ T8216] [ 240.356657][ T8216] CPU: 0 UID: 0 PID: 8216 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 240.356676][ T8216] Tainted: [L]=SOFTLOCKUP [ 240.356681][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.356690][ T8216] Call Trace: [ 240.356696][ T8216] [ 240.356701][ T8216] dump_stack_lvl+0xe8/0x150 [ 240.356719][ T8216] print_address_description+0x55/0x1e0 [ 240.356734][ T8216] ? v4l2_open+0x395/0x3a0 [ 240.356753][ T8216] print_report+0x58/0x70 [ 240.356765][ T8216] kasan_report+0x117/0x150 [ 240.356778][ T8216] ? v4l2_open+0x395/0x3a0 [ 240.356798][ T8216] v4l2_open+0x395/0x3a0 [ 240.356818][ T8216] chrdev_open+0x4cd/0x5e0 [ 240.356831][ T8216] ? __pfx_chrdev_open+0x10/0x10 [ 240.356844][ T8216] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 240.356865][ T8216] ? __pfx_chrdev_open+0x10/0x10 [ 240.356877][ T8216] do_dentry_open+0x822/0x13a0 [ 240.356896][ T8216] vfs_open+0x3b/0x340 [ 240.356909][ T8216] ? path_openat+0x2df0/0x3860 [ 240.356928][ T8216] path_openat+0x2e08/0x3860 [ 240.356950][ T8216] ? __pfx_stack_trace_save+0x10/0x10 [ 240.356971][ T8216] ? stack_depot_save_flags+0x33/0x810 [ 240.356988][ T8216] ? __pfx_path_openat+0x10/0x10 [ 240.357005][ T8216] ? __x64_sys_openat+0x138/0x170 [ 240.357021][ T8216] ? __lock_acquire+0x6b5/0x2cf0 [ 240.357039][ T8216] do_file_open+0x23e/0x4a0 [ 240.357059][ T8216] ? __pfx_do_file_open+0x10/0x10 [ 240.357084][ T8216] ? _raw_spin_unlock+0x28/0x50 [ 240.357103][ T8216] ? alloc_fd+0x64b/0x6c0 [ 240.357120][ T8216] do_sys_openat2+0x113/0x200 [ 240.357136][ T8216] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.357151][ T8216] ? exc_page_fault+0x6a/0xc0 [ 240.357166][ T8216] ? do_user_addr_fault+0xc6f/0x1340 [ 240.357180][ T8216] __x64_sys_openat+0x138/0x170 [ 240.357196][ T8216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.357209][ T8216] do_syscall_64+0x174/0x580 [ 240.357222][ T8216] ? trace_irq_disable+0x3b/0x140 [ 240.357246][ T8216] ? clear_bhb_loop+0x40/0x90 [ 240.357261][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.357274][ T8216] RIP: 0033:0x7f31aaca7407 [ 240.357288][ T8216] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 240.357300][ T8216] RSP: 002b:00007fff65e7ff90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 240.357315][ T8216] RAX: ffffffffffffffda RBX: 00007f31ab390880 RCX: 00007f31aaca7407 [ 240.357325][ T8216] RDX: 0000000000000000 RSI: 00007fff65e80f1d RDI: ffffffffffffff9c [ 240.357334][ T8216] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 240.357342][ T8216] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 240.357350][ T8216] R13: 00007fff65e801e0 R14: 00007f31ab495000 R15: 00005646d3e274d8 [ 240.357365][ T8216] [ 240.357370][ T8216] [ 240.631106][ T8216] Allocated by task 1226: [ 240.635413][ T8216] kasan_save_track+0x3e/0x80 [ 240.640088][ T8216] __kasan_kmalloc+0x93/0xb0 [ 240.644670][ T8216] __kmalloc_cache_noprof+0x31c/0x660 [ 240.650031][ T8216] em28xx_v4l2_init+0x10b/0x2eb0 [ 240.654951][ T8216] em28xx_init_extension+0x120/0x1c0 [ 240.660230][ T8216] process_scheduled_works+0xb5d/0x1860 [ 240.665759][ T8216] worker_thread+0xa53/0xfc0 [ 240.670334][ T8216] kthread+0x389/0x470 [ 240.674389][ T8216] ret_from_fork+0x514/0xb70 [ 240.678964][ T8216] ret_from_fork_asm+0x1a/0x30 [ 240.683714][ T8216] [ 240.686020][ T8216] Freed by task 1226: [ 240.689977][ T8216] kasan_save_track+0x3e/0x80 [ 240.694647][ T8216] kasan_save_free_info+0x46/0x50 [ 240.699655][ T8216] __kasan_slab_free+0x5c/0x80 [ 240.704405][ T8216] kfree+0x1c5/0x640 [ 240.708287][ T8216] em28xx_v4l2_init+0x1685/0x2eb0 [ 240.713293][ T8216] em28xx_init_extension+0x120/0x1c0 [ 240.718565][ T8216] process_scheduled_works+0xb5d/0x1860 [ 240.724092][ T8216] worker_thread+0xa53/0xfc0 [ 240.728662][ T8216] kthread+0x389/0x470 [ 240.732718][ T8216] ret_from_fork+0x514/0xb70 [ 240.737291][ T8216] ret_from_fork_asm+0x1a/0x30 [ 240.742043][ T8216] [ 240.744350][ T8216] The buggy address belongs to the object at ffff888092f7c000 [ 240.744350][ T8216] which belongs to the cache kmalloc-8k of size 8192 [ 240.758388][ T8216] The buggy address is located 2144 bytes inside of [ 240.758388][ T8216] freed 8192-byte region [ffff888092f7c000, ffff888092f7e000) [ 240.772339][ T8216] [ 240.774649][ T8216] The buggy address belongs to the physical page: [ 240.781067][ T8216] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x92f78 [ 240.789820][ T8216] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 240.798306][ T8216] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 240.805841][ T8216] page_type: f5(slab) [ 240.809818][ T8216] raw: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122 [ 240.818393][ T8216] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 240.826967][ T8216] head: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122 [ 240.835626][ T8216] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 240.844301][ T8216] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 240.852972][ T8216] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 240.861636][ T8216] page dumped because: kasan: bad access detected [ 240.868057][ T8216] page_owner tracks the page as allocated [ 240.873752][ T8216] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7707, tgid 7703 (syz.1.555), ts 206585595853, free_ts 206352623374 [ 240.894410][ T8216] post_alloc_hook+0x22d/0x280 [ 240.899181][ T8216] get_page_from_freelist+0x2593/0x2610 [ 240.904717][ T8216] __alloc_frozen_pages_noprof+0x18d/0x380 [ 240.910510][ T8216] allocate_slab+0x77/0x660 [ 240.914996][ T8216] refill_objects+0x339/0x3d0 [ 240.919652][ T8216] __pcs_replace_empty_main+0x321/0x720 [ 240.925185][ T8216] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 240.931583][ T8216] kmemdup_noprof+0x2b/0x70 [ 240.936067][ T8216] sctp_process_init+0xb7e/0x2bf0 [ 240.941080][ T8216] sctp_do_sm+0x1872/0x5cf0 [ 240.945571][ T8216] sctp_assoc_bh_rcv+0x3f2/0x630 [ 240.950496][ T8216] sctp_backlog_rcv+0x167/0x380 [ 240.955335][ T8216] __release_sock+0x297/0x3a0 [ 240.959992][ T8216] release_sock+0x190/0x260 [ 240.964480][ T8216] sctp_wait_for_connect+0x38b/0x6f0 [ 240.969751][ T8216] sctp_sendmsg_to_asoc+0x1735/0x1900 [ 240.975106][ T8216] page last free pid 7700 tgid 7697 stack trace: [ 240.981409][ T8216] __free_frozen_pages+0xc1c/0xd30 [ 240.986508][ T8216] skb_release_data+0x8a5/0xa60 [ 240.991336][ T8216] __kfree_skb+0x5d/0x210 [ 240.995652][ T8216] usbnet_bh+0x463/0x1080 [ 240.999971][ T8216] process_scheduled_works+0xb5d/0x1860 [ 241.005501][ T8216] bh_worker+0x465/0x870 [ 241.009732][ T8216] tasklet_action+0xc/0x70 [ 241.014131][ T8216] handle_softirqs+0x22a/0x840 [ 241.018970][ T8216] do_softirq+0x76/0xd0 [ 241.023106][ T8216] __local_bh_enable_ip+0xf8/0x130 [ 241.028197][ T8216] ip6t_do_table+0x137d/0x1560 [ 241.032947][ T8216] ip6table_mangle_hook+0x275/0x740 [ 241.038133][ T8216] nf_hook_slow+0xc5/0x220 [ 241.042533][ T8216] __ip6_local_out+0x819/0x940 [ 241.047276][ T8216] ip6_local_out+0x2a/0x190 [ 241.051761][ T8216] ip6_send_skb+0x1d5/0x390 [ 241.056257][ T8216] [ 241.058571][ T8216] Memory state around the buggy address: [ 241.064188][ T8216] ffff888092f7c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.072245][ T8216] ffff888092f7c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.080295][ T8216] >ffff888092f7c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.088339][ T8216] ^ [ 241.095517][ T8216] ffff888092f7c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.103557][ T8216] ffff888092f7c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 241.111597][ T8216] ================================================================== [ 241.122558][ T1226] em28xx 1-1:0.89: Registering snapshot button... [ 241.130578][ T29] audit: type=1326 audit(1780638188.909:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 241.136677][ T1226] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input20 [ 241.175809][ T1226] em28xx 1-1:0.89: Remote control support is not available for this card. [ 241.179386][ T29] audit: type=1326 audit(1780638188.909:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 241.234016][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.682'. [ 241.245605][ T8216] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 241.252837][ T8216] CPU: 0 UID: 0 PID: 8216 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 241.263328][ T8216] Tainted: [L]=SOFTLOCKUP [ 241.267640][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.277692][ T8216] Call Trace: [ 241.280967][ T8216] [ 241.283887][ T8216] vpanic+0x56c/0xa60 [ 241.287861][ T8216] ? __pfx_vpanic+0x10/0x10 [ 241.292349][ T8216] ? __pfx___schedule+0x10/0x10 [ 241.297201][ T8216] panic+0xc5/0xd0 [ 241.300909][ T8216] ? __pfx_panic+0x10/0x10 [ 241.305309][ T8216] ? preempt_schedule_thunk+0x16/0x30 [ 241.310674][ T8216] ? v4l2_open+0x395/0x3a0 [ 241.315079][ T8216] check_panic_on_warn+0x89/0xb0 [ 241.320007][ T8216] ? v4l2_open+0x395/0x3a0 [ 241.324421][ T8216] end_report+0x73/0x170 [ 241.328669][ T8216] ? v4l2_open+0x395/0x3a0 [ 241.333081][ T8216] kasan_report+0x128/0x150 [ 241.337572][ T8216] ? v4l2_open+0x395/0x3a0 [ 241.341990][ T8216] v4l2_open+0x395/0x3a0 [ 241.346221][ T8216] chrdev_open+0x4cd/0x5e0 [ 241.350621][ T8216] ? __pfx_chrdev_open+0x10/0x10 [ 241.355545][ T8216] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 241.361891][ T8216] ? __pfx_chrdev_open+0x10/0x10 [ 241.366831][ T8216] do_dentry_open+0x822/0x13a0 [ 241.371600][ T8216] vfs_open+0x3b/0x340 [ 241.375679][ T8216] ? path_openat+0x2df0/0x3860 [ 241.380449][ T8216] path_openat+0x2e08/0x3860 [ 241.385049][ T8216] ? __pfx_stack_trace_save+0x10/0x10 [ 241.390417][ T8216] ? stack_depot_save_flags+0x33/0x810 [ 241.395889][ T8216] ? __pfx_path_openat+0x10/0x10 [ 241.400835][ T8216] ? __x64_sys_openat+0x138/0x170 [ 241.405854][ T8216] ? __lock_acquire+0x6b5/0x2cf0 [ 241.410782][ T8216] do_file_open+0x23e/0x4a0 [ 241.415284][ T8216] ? __pfx_do_file_open+0x10/0x10 [ 241.420311][ T8216] ? _raw_spin_unlock+0x28/0x50 [ 241.425156][ T8216] ? alloc_fd+0x64b/0x6c0 [ 241.429476][ T8216] do_sys_openat2+0x113/0x200 [ 241.434142][ T8216] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.439332][ T8216] ? exc_page_fault+0x6a/0xc0 [ 241.443996][ T8216] ? do_user_addr_fault+0xc6f/0x1340 [ 241.449272][ T8216] __x64_sys_openat+0x138/0x170 [ 241.454129][ T8216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.460194][ T8216] do_syscall_64+0x174/0x580 [ 241.464781][ T8216] ? trace_irq_disable+0x3b/0x140 [ 241.469805][ T8216] ? clear_bhb_loop+0x40/0x90 [ 241.474474][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.480350][ T8216] RIP: 0033:0x7f31aaca7407 [ 241.484753][ T8216] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 241.504346][ T8216] RSP: 002b:00007fff65e7ff90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 241.512753][ T8216] RAX: ffffffffffffffda RBX: 00007f31ab390880 RCX: 00007f31aaca7407 [ 241.520716][ T8216] RDX: 0000000000000000 RSI: 00007fff65e80f1d RDI: ffffffffffffff9c [ 241.528683][ T8216] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 241.536652][ T8216] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 241.544627][ T8216] R13: 00007fff65e801e0 R14: 00007f31ab495000 R15: 00005646d3e274d8 [ 241.552614][ T8216] [ 241.555889][ T8216] Kernel Offset: disabled [ 241.560224][ T8216] Rebooting in 86400 seconds..