last executing test programs: 10.363020756s ago: executing program 1 (id=756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}], 0x1, 0x4008440) 10.2740635s ago: executing program 1 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x48}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @multicast1}, &(0x7f0000000380)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x22, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="7a0892f39e71c2a461107e00000000000400000000000000950000000000000070b30c722ca6d98b10"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000100080004"], 0x54}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x72f, 0x40, 0x2, 0x23, {{0x5c, 0x4, 0x1, 0x3, 0x170, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @local, {[@cipso={0x86, 0x27, 0x0, [{0x6, 0x7, "80e79d16a9"}, {0x1, 0x11, "08bc4bbf0b07f26b1daa8689841f84"}, {0x0, 0x9, "6492290c5b5ada"}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x10, 0x1, 0x9, [{@multicast1, 0x1}, {@remote, 0x1}, {@remote, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0xc3, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x5}]}, @timestamp={0x44, 0x28, 0x12, 0x0, 0x0, [0xa, 0x9c1, 0x10001, 0xfffffffc, 0x80000001, 0x1, 0xdff2, 0x7, 0x0]}, @cipso={0x86, 0x46, 0x2, [{0x7, 0x5, "32a383"}, {0x7, 0xc, "f424ade7343c68799fcf"}, {0x1, 0x10, "c75c2f4425eb553f15242f725ffc"}, {0x2, 0x3, "b6"}, {0x2, 0xb, "61401e86be90c2797c"}, {0x0, 0x3, '1'}, {0x7, 0xa, "c6add9974957fbdb"}, {0x2, 0x4, 'Rd'}]}, @timestamp_prespec={0x44, 0x3c, 0x65, 0x3, 0x4, [{@private=0xa010100, 0xfffff800}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x6}, {@loopback, 0x2}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x54, 0xe3, 0x1, 0x8, [{@empty, 0xf}, {@broadcast, 0x2}, {@broadcast, 0x7fff}, {@private=0xa010101, 0xae3c90f}, {@local, 0x5}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0x8}, {@empty, 0xc5}, {@private=0xa010101, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa0, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xa0}}, 0x44004) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r11, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r11, &(0x7f0000000280)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x47}, {&(0x7f0000000180)=""/232}], 0x2, 0x1000000, 0x1ff) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, 0x0, 0x44080) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xfff2, 0xa}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x558}]}}]}, 0x38}}, 0x800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}}, 0x0) 10.003606561s ago: executing program 1 (id=758): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x10, 0x0, 0x3}, 0x18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'vxcan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080d5}, 0x4000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$tun(r3, &(0x7f0000000c40)={@val={0x0, 0xf5}, @void, @ipv6=@tcp={0x4, 0x6, "5a96b2", 0x14, 0x6, 0xff, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x6, 0x0, 0x3}}}}}, 0x40) landlock_restrict_self(r1, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) r8 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x1) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r9, 0xc00464af, &(0x7f0000000080)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x7f, &(0x7f0000000040)="02", 0x1) 9.45193467s ago: executing program 1 (id=759): socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) msgsnd(r6, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffd, 0x10000, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x5], 0x80a0000, 0x80284}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x18) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$binfmt_elf64(r8, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) mknodat$loop(r8, &(0x7f0000000180)='./file0\x00', 0x400, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.677714277s ago: executing program 1 (id=766): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000140)=""/118, 0x76) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_delete(r0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x8, 0x3, 0x7}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) getresuid(&(0x7f0000000100), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r8], 0x4c}}, 0x0) 6.916606523s ago: executing program 2 (id=770): syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x1, 0xbb, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x7, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x80, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x6, 0x7, [{0x9, 0x5}, {0x68, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0xfc, 0x5a}, {0x0, 0x5}, {0x40, 0x8}], 0x81}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x40}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x87, 0x9}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x2, 0x2}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x5, 0x4, [{0x8, 0x8}, {0x3, 0xc}, {0x80, 0x62}, {0x5, 0xe}], 0x2}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0xeb, 0x76, 0x9, {0x10, 0x25, 0x1, 0xc, "232cfa3788abac6c5097b456"}}}, {{0x9, 0x5, 0x0, 0x2, 0x8d3ccdc20e09f6f0, 0x0, 0x1, 0x5, {0x11, 0x25, 0x1, 0xd, "e27d73e0c7309a40caca2f18d0"}}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0xfd, 0x9, {0x7, 0x25, 0x1, 0x3, "80c28c"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x7f, 0x7, 0xd7, 0x7}, 0x71, &(0x7f0000000280)={0x5, 0xf, 0x71, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b3febdd15875990dd218b8785ec54236"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1ff, 0xf, 0x69a, [0x3f00, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x3, 0x2f20}, @generic={0x2c, 0x10, 0xb, "b6fe1c0b05dc4a241f4ba34756be01db106b1f9939d360ec8d21089eb55c125d959a32067e8879c568"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x7, 0x0, 0xfd, 0xe2df, 0x95}]}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x414}}, {0x6b, &(0x7f00000003c0)=@string={0x6b, 0x3, "6577536fa194a56780eecd2fa2de94c0df3ecf43f1bd61acfaa7f1df621b966ec942038f9af088dbaffbcda79c2c23c8f4b37c7a3d740ba73fc72ac5ba8f428ad38e5097fc9cb372800b9fa9d1eb2ad0d2f1772ecd24f05d4f1d291080d321437a55ed17b4d0e7bae5"}}, {0xe7, &(0x7f0000000540)=@string={0xe7, 0x3, "58c486407e9abd80a43eed916a4c7767926e3ba97e47fd6efae7fcd0c731b3e4f7a36a307a6fdc9704fe74acd95978448f97b200c32ee0041e5150b091aa5a97f46458727e61e8739726fd67bab0c5c6fc769bf42b101fb56bf8064c7150511b905867857ed0ef9bec41e5b6cc56dff2c45285b7e426c8d0a201f48ca30f4a4a3e43dabe0c747bc6ad21961876fa8ff92526521e469c3d79627231a5c23918e0cfb815b2ba1bf46302c97b8f2c42bc8f16a67c062ddf15b89fdf20da6e217aa3e5609de213b8a214b42b3c6109931d5366a2168afd894afa2375fab2bf1d4fe264d4705450"}}, {0x22, &(0x7f00000006c0)=@string={0x22, 0x3, "579e1186c8c5cd33e3324c78d96a6799643bd92e414c445222c920a6c7761151"}}, {0xa2, &(0x7f0000000700)=@string={0xa2, 0x3, "c335136752cf24c7717f611045070459825def52773b4dd1d20a98937a154d307087cf2e2e87113b7c1ebfe3bda1d11715c724dc1618e955de2b1eb9e2cee3bf88e4385e6ba02f899e801eb0fdef13d1ff39b2996be82f73068c961e579a0833bd0112384ec7e4aadb05603c4717104a6d44da9b88cd20ddc6ecad07d1d7c72e96ed859a99bfe785e6e6475b69786287b002c3dbae30a432d8ab69f1b91e88a2"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x403}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0xf014, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x2000040) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4044004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000640)=@sack_info={0x0, 0x2, 0x1ff}, 0xc) r5 = socket$kcm(0x2d, 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000380)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000b80), 0x1, 0x2) poll(&(0x7f0000000040)=[{r7, 0x9081}], 0x1, 0xffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500050000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000001440)=@fd={0x2, 0xb, 0x4, 0x800, 0x7, {0x77359400}, {0xc, 0x8, 0x4, 0x80, 0x7, 0x2, '8NJJ'}, 0x9193, 0x4, {}, 0x8}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r6}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xffffffffffffffff, 0x1000000) 6.818726018s ago: executing program 1 (id=771): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) landlock_restrict_self(r0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000780)=[{0x30, 0x2, 0x7d, 0xfffff028}, {0x6, 0x4, 0xff, 0x4}]}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) r3 = semget$private(0x0, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="0500010e0000813b793c66"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) semctl$SEM_STAT(r3, 0x4, 0x12, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x1) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x7) sendfile(r7, r2, 0x0, 0x9) 5.643983831s ago: executing program 0 (id=777): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4420}], 0x1, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 4.792440652s ago: executing program 0 (id=780): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf", 0x4a9, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1}, &(0x7f00000006c0)=ANY=[@ANYBLOB="656e633d74617720686173683d736861332d6344d79e7d7015532844f0e44e0f33383400"/91], 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xbc}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x6de4, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4.375154794s ago: executing program 0 (id=782): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@private2, 0x0}, &(0x7f00000000c0)=0x14) utimensat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x2c, 0x8, 0x2, 0x6c, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast1]}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@polexpire={0x134, 0x1b, 0x8, 0x70bd25, 0x25dfdbfb, {{{@in=@empty, @in=@rand_addr=0x64010101, 0x4e20, 0x0, 0x4e24, 0x100, 0xa, 0x80, 0x80, 0x84, r4, r2}, {0x5, 0x9, 0x5, 0x1, 0x211d, 0x0, 0x6, 0x9874}, {0xc, 0x101, 0x6, 0x2}, 0x430, 0x6e6bc0, 0x2, 0x0, 0x0, 0x1}, 0x80}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e20, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @iptfs_pkt_size={0x8, 0x29, 0x8}, @iptfs_max_qsize={0x8, 0x28, 0xb}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@private=0xa010100, 0x0, 0xa}}, @mark={0xc, 0x15, {0x35075b, 0x9}}, @replay_thresh={0x8, 0xb, 0x80000001}, @iptfs_pkt_size={0x8, 0x29, 0x756}]}, 0x134}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000004c0)={0x9, 0xc0011037, &(0x7f0000000400)="964e5928771bb1fbf7b900a966620c6e7b956524f8f467d572f2d5da892e2d04ce30e9aec2efc4872f2fac007cefb78d544005a3bed987ee9f62f5cc5e", &(0x7f0000000440)="ccc31567161024556cb20a3d654514b685ea4f031bd43e9fd8833d90a5409e67b6f14cd530ad9dc3c4d22180fbbc79a98bdf100c9bfb501613b45adb12b5459a2c975d2823016b3f9c7af05ef653937d21b920b39ba20ef9058dfb7367f7e79842d8970eb2555ed05c350cc866e5da7928237b331227ee0983668e913716", 0x3d, 0x7e}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r6, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x4040085) r7 = syz_usb_connect$uac3(0x2, 0xc3, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0xe, 0x50, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x32}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x31, 0x7}, [@source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x84f1, 0x7, 0xe}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x2, 0x100, 0x4, 0x7}, @power_domain={0xf, 0x24, 0x10, 0x94, 0x456, 0x7, 0xe, "b612e078fefc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xe3, 0x6, 0xe, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xb, 0x3, 0x1, {0xa, 0x25, 0x25, 0x401, 0x9, 0x28}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x9, 0xfb, 0x7}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x7f, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x66, 0x20, 0x19, {0xa, 0x25, 0x25, 0xcd, 0x8}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x110, 0x2f, 0xb2, 0x40, 0x10, 0x4}, 0x11c, &(0x7f0000000780)={0x5, 0xf, 0x11c, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x8, 0x2, 0x8, 0x5}, @generic={0xf3, 0x10, 0x4, "9d4ffee270b6aa8c7ee94df61a9ae335c8f307e4ec10b9f4f715c23d2e39331df8baf1261f6a3586d76759314156306f5d873b39579cb1384487641e67c0f9f648ec5174f1d22ba5f38da39efe9ebc4fce393019336ea42afaad9f780ee316bd14d5fdff90d622f4b2681fe10c322f7b1b5a77832e879c46cc8175453c202ab0129d649cf4d4c7370b7de546dbf09a8fff6f33f724fcd9986ccb657471bcf4ecb3efb56deca0ebe9deeee2abe219d9e0761ce3468a3c01786a6dfea98a0360109582dd9f965253c2a8685562b58bae3ebbad4826714a43558657493544d78d66e26c686a41abb85b585cf2bf31e43a9d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x8, 0x54, 0x6, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x38, 0x5, 0x40, 0xfffb, 0x40}]}, 0x3, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x429}}, {0x2a, &(0x7f0000000900)=@string={0x2a, 0x3, "955e2b820fd4e5a50060e90d0ab57709a4e76ce2ae06f9e41a420ecc6fc8bd704da8c475115b1ddb"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_usb_control_io$uac3(r7, &(0x7f0000000ac0)={0x14, &(0x7f00000009c0)={0x20, 0x30, 0x26, {0x26, 0x8, "0c9618a79baeb699d92b3137cb691eee0152caf4210ee506d71cca2bbc108bf8cd6187ee"}}, &(0x7f0000000a00)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "c11f1e8388ad6b77436134cb1738065daf1a4b537e6487a2c29413842ecb06ad1e7e7b36ddf2bfaed0a9986edf373873211a42e4ffb4c89b4a645e0a0c1834247e2593cd0dba749c18318d9d9c2e056f213dc075bb8b91411ea52475d49a62dcea9a7ecdcadf51d23d670afe84956dd741acddbb3f9eb2481619131cb0d21e7b2ff828c46e68fadb43"}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000b00)={0x0, 0xd, 0x26, "df45d18462d1a2f34c13aaa70575ec159d176e2cef47da35ddf10238bbc55539b97d690871e0"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000bc0)={0x20, 0x81, 0x3, "91843f"}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "05"}, &(0x7f0000000c40)={0x20, 0x83, 0x1, "05"}, &(0x7f0000000c80)={0x20, 0x84, 0x4, "badb841c"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "8ac1db"}}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d80)='./cgroup.net/syz1\x00', 0x200002, 0x0) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000e80)=@multiplanar_mmap={0x7, 0x9, 0x4, 0x40, 0x9, {r9, r10/1000+10000}, {0x2, 0x8, 0x93, 0x18, 0x49, 0x4, "01ee9846"}, 0x4, 0x1, {&(0x7f0000000e00)=[{0x8, 0x2, {0x4}, 0x1}, {0x47a8, 0x88, {0x80000001}, 0x8}]}, 0x8, 0x0, r1}) sendmsg$nl_generic(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfd, {0x7}, [@typed={0x8, 0x119, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x10, 0x0, 0x0, @fd}, @nested={0x4, 0x22}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000001000), 0x81, 0x9c803) openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x50000, 0x0) close_range(r1, r1, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@newspdinfo={0x2c, 0x24, 0x8, 0x70bd2a, 0x25dfdbfd, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4045}, 0x4000) timer_create(0x3, &(0x7f00000012c0)={0x0, 0x3f, 0x0, @thr={&(0x7f0000001180)="3f09555f7b7cdb9cd1f349f76b3a7bfed9abc0f2c9277aa7602a41f46796c4acc6f17c626af63045b8a206b735af8d34e70390893a97898fd23629f0a11f95cf8fa93ddd607a325a0dcda26d05ba0ce23cdacff35aaf2e8ddacff8a1ab06bc3f98b34dbae5647acb2b81416bd89ed8d0a7bb80825987cb49baf25f091d7d92a4397bfab23beace6d8b0f164601", &(0x7f0000001240)="7b450926a84c3137b3bd16ef7f9a9c631f7859034fa4a1bc21412f71501e0c2ac023efd831385b537c692ed70b6aef49654cc7f5b6455e779d70d5515d6568c0cea4481f30da3fe0e832980e70ee0ef6a5a7a9a373986ca986ae870c0636c9c56db211"}}, &(0x7f0000001300)) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r1) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000001380)={0x0, 0x7fffffffffffffff}) mq_timedreceive(r8, &(0x7f0000002380)=""/135, 0x87, 0x10000, &(0x7f0000002440)) r12 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002480)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) shmctl$IPC_SET(r12, 0x1, &(0x7f0000002540)={{0x2, r2, r3, r13, r3, 0x4, 0x61}, 0x4, 0x5, 0x7, 0x2, 0x0, 0x0, 0x7}) 3.769095144s ago: executing program 2 (id=785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc4}}, 0x4c050) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x6ee}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8f78, 0x4, 0x80000001, 0x10, 0x3, 0x9, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00d20fe9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd486731122100"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in6=@private2, @in=@loopback, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0xffff, 0x0, 0x100}, 0xfffffffe, 0x0, 0x0, 0x1, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) 3.512507724s ago: executing program 2 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="383a00001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001b00000000001400", @ANYRES64=r0], 0x38}}, 0x0) 3.335504537s ago: executing program 3 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="14d900001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000023c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a3f0200000000000000000a0000000900010073797a31000000000900020073017a31"], 0xcc}, 0x1, 0x0, 0x0, 0x48050}, 0x40) 3.335190758s ago: executing program 2 (id=788): openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_usb_connect$uac2(0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, 0xffffffffffffffff, 0x43) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x210a, r3}, 0x0) landlock_restrict_self(r4, 0x5) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) syz_open_procfs(0x0, 0x0) 3.227545609s ago: executing program 3 (id=789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)}], 0x1, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}], 0x1, 0x4008440) 3.136544795s ago: executing program 3 (id=790): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4420}], 0x1, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 2.859288829s ago: executing program 0 (id=791): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="ceefa1f3897e2993353767100f33ee475f956150b3af23a315de58", 0x1b}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x654280, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000093c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0xe0, 0x0, 0x0, 0x804c040}, 0xc851) 2.840548038s ago: executing program 0 (id=792): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000012002927000000001fe1ff8b070021"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x804) write(r1, &(0x7f0000000d00)='n\\ 1...0.0.1 2\\0000000\\0l\\calhost\n', 0x24) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0xfffffffb, 0x200000e, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0, r8) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="420fc7bc4898580000640f01c566baf80cb864c95782ef66ba20003aeef3440fc7703567670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x50}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x40000000, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f00000001c0)={0xb, @meta={0x43465052, 0x29762778, 0x6cb9, 0x8055, 0x343b6b3a}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r11, &(0x7f00000001c0)=[{&(0x7f0000006d80)=""/4082, 0xff2}, {&(0x7f0000001340)=""/27, 0x1b}, {0x0, 0xf}], 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r13}}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r12, 0xae80, 0x0) 2.552708811s ago: executing program 0 (id=793): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r2 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0xd0a}]}) r3 = fsopen(0x0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x288, 0xffffffff, 0x288, 0x1e0, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd89286ae9b13d39b99407a9b6abe75a728baa18da576811985de44110b8602005e1298ea55f1c5087ab16f67b18ca90ac6040b3d6a068f727f7d23ab794d9ba59a5da2ff7f000000000000ae63e26b6fe772493180cfda2c9d49412e9469d85abdb467ba000000000000000000000000deffffff00", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wg0\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1d}, @icmp_id=0x68, @icmp_id=0x68}}}, {{@ip={@empty, @private=0x8010101, 0xffffffff, 0xff, 'wlan1\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x2, 0x4}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @multicast2, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1) r5 = fsmount(r3, 0x0, 0x5) r6 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff00"], 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ecm(0x5, 0x65, &(0x7f0000000200)=ANY=[@ANYRES8], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000004}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="cc4dffff0100c200040053fffaffd009"], 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f00000001c0)=0x1, 0x7, 0x6) truncate(&(0x7f00000000c0)='./file0\x00', 0xd) socket(0x1e, 0x5, 0xfff) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adc", 0x96}, {&(0x7f0000000440)="8aa37d3a0febb1475c8d1093de869cd15c8d9ef6662ab0dbd4799dc9de718ef4798e43133b5778fa664999fa1a35b1da64b4f87cec6c45beb762ca80d13e966a13c3", 0x42}], 0x2}, 0x48002) pipe2$9p(&(0x7f0000000080), 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000000906010200000000000000000a0000000900020073797a3100000000050001000700000034000780180001801400022cfe8000000000000000000000000000bb06000440000400000500070006000000060005404e220000564261dc"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.227631871s ago: executing program 3 (id=796): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) sync_file_range(r0, 0x100000000000000, 0x5, 0x7) 2.052817631s ago: executing program 3 (id=798): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x9, 0x0, 0xc3a0f8f1ba79d4a4, 0x5, 0x5d, 0x2}, 0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0xc803334a2dd05544, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6b24d, 0x58fa1}}, 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)={0x14, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msgsnd(r6, 0x0, 0xe3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x9, 0x10000, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x5], 0x80a0000, 0x82284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 1.519247808s ago: executing program 3 (id=801): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x801) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000702000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x24, 0x6, 0x1000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d409", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@v={0x93, 0x5, 0x80, 0xc, @MIDI_NOTEON=@note=0x27, 0x8, 0x6}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r6, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x5dc}], 0x1}, 0x4011) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 1.430866119s ago: executing program 4 (id=802): r0 = memfd_secret(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/199, 0xc7, 0x7, 0x8957}) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x9f29}}, './file0\x00'}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) 1.318189427s ago: executing program 4 (id=803): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) epoll_create(0x4) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x2, 0x12) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0x80000) 1.183370979s ago: executing program 4 (id=804): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x33, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 1.169112652s ago: executing program 4 (id=805): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r5, 0x1, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x76}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xb}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = dup(r0) ioctl$TCXONC(r9, 0x540a, 0x3) 906.40912ms ago: executing program 4 (id=806): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ppoll(&(0x7f00000001c0)=[{r0, 0x4420}], 0x1, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 219.545187ms ago: executing program 2 (id=807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x401) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000400)="f5"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x50, 0x0, &(0x7f0000000200)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x2, 0x198) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669630000000000000008666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301683142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffd) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r6 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f00000001c0)) sendfile(r6, r6, &(0x7f0000000040)=0x8, 0xc) 44.273773ms ago: executing program 2 (id=808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc}, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0x9, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1c09, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xa8, 0x4, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x9b, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x5b7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7, 0x0, 0xb, 0x8, 0x20}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x0, 0xc0, 0xd, 0x1}]}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4b, &(0x7f00000006c0)=@string={0x4b, 0x3, "d25f2c2c9bfaba8573a9e414e8b052f54e9359a4332d1c519c053b7d87d39f941690be97a91bf229e9939afd521037e06c85336ed29eec014e986bb8e551f7b91e3cea59adad6b3209"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x12, &(0x7f0000000300)=@string={0x12, 0x3, "305d22287e72ca1a70c632ba12ede64f"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x200a}}, {0xe0, &(0x7f00000003c0)=@string={0xe0, 0x3, "749a5c020e239f9cc764639300197e443de9e98a806c66861aff86ecd59f5a1e8ee8de48b7e021adcff6a856b51111edc6dbc49b36293580e9aa4b347bb148f0d98d9c5f0a79a5805158799a374367cac7861c0ebefd0c99f586a78a383b862b5045590357895556c70f03b586b393e16b43a2ffcb86afc57e6ad1aa03a6873fcabee9708126ae6bee164bdf3f67bf229876dfac977fb99ce63aab3dfef1d32aca7139605be3277cd85e4e555723ce704fa51aa68300c3edabde2e510b32f0d4f0fca5f6179a9ff7492c85f3760d89a7a94eed074caa25991543fd28adad"}}, {0x8, &(0x7f00000004c0)=@string={0x8, 0x3, "5b6e24a17250"}}, {0x100, &(0x7f0000000500)=@string={0x100, 0x3, "7fd6a98d8518c9e616a2b1ebf47adcbc0bbcb92ecde3d5aca9c3cb09966bee1f80a1be816375688aef61fee727c1e624f2d6455ea6f1e292c80f88a00d3e407bdad658a5e4309a6cc6e694c20d9df0aa4e36b7702118e6ddb7f856e25f3d711b62d9b5a0e172da04e980c19fad4bd1b74dc8af411c105dd1026289611db1fe2abee628969a3407055091089aa830d0f9642efd28f207691d8a88a6c87f46a3d26a4405232de6f65c555b51e1dca8bed10f957a9f42e6a1d3b37dff09df1694e9add7753a1d213a050f4665f46c87357f40ca7f497aa55b107ddd051ac37b3c4c8fa2a947f3e0dee9a1a20ac7fc5199f2e642b0c0ec9cf1f9c6032d8b2420"}}]}) 0s ago: executing program 4 (id=809): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) (async) accept(r0, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f0000010140)=[{r1, 0x2046}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x2c, 0x3f, 0x4, 0x20, 0x45e, 0x447, 0xb2a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfe, 0x81, 0x30, 0x32, "", [{{0x9, 0x4, 0xe, 0x2, 0x1, 0xea, 0xd8, 0xfc, 0x9, [], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1}}]}}]}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 0000000000000001 [ 172.958378][ T6914] R13: 00007f7bbea26038 R14: 00007f7bbea25fa0 R15: 00007f7bbeb4fa48 [ 172.958464][ T6914] [ 173.299867][ T5688] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 173.449881][ T5688] usb 1-1: device descriptor read/64, error -71 [ 173.598392][ T6921] syzkaller0: entered promiscuous mode [ 173.598446][ T6921] syzkaller0: entered allmulticast mode [ 173.640906][ T6921] tipc: Started in network mode [ 173.640988][ T6921] tipc: Node identity 329f29a03a24, cluster identity 4711 [ 173.671402][ T6921] tipc: Enabled bearer , priority 0 [ 173.689768][ T5688] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 173.708922][ T6921] tipc: Resetting bearer [ 173.740452][ T2243] usb 5-1: USB disconnect, device number 21 [ 173.801790][ T6921] tipc: Disabling bearer [ 173.819802][ T5688] usb 1-1: device descriptor read/64, error -71 [ 173.932498][ T5688] usb usb1-port1: attempt power cycle [ 174.199828][ T1590] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 174.239823][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 174.279837][ T5688] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 174.301619][ T5688] usb 1-1: device descriptor read/8, error -71 [ 174.354375][ T1590] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.366666][ T1590] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.366720][ T1590] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.375366][ T1590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.375439][ T1590] usb 4-1: Product: syz [ 174.375479][ T1590] usb 4-1: Manufacturer: syz [ 174.375513][ T1590] usb 4-1: SerialNumber: syz [ 174.401507][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 174.409181][ T25] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 174.421132][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.447385][ T1590] usb 4-1: 0:2 : does not exist [ 174.447559][ T1590] usb 4-1: unit 9 not found! [ 174.460875][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 174.471817][ T25] usb 2-1: config 0 descriptor?? [ 174.553776][ T5688] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 174.575104][ T5688] usb 1-1: device descriptor read/8, error -71 [ 174.666031][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.675859][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.681136][ T5688] usb usb1-port1: unable to enumerate USB device [ 174.709594][ T25] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 174.732625][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.748078][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.779469][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.789503][ T25] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 174.789620][ T25] usb 2-1: media controller created [ 174.892794][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.948366][ T5687] udevd[5687]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.030800][ T25] az6027: usb out operation failed. (-71) [ 175.031538][ T25] az6027: usb out operation failed. (-71) [ 175.031573][ T25] stb0899_attach: Driver disabled by Kconfig [ 175.031604][ T25] az6027: no front-end attached [ 175.031604][ T25] [ 175.065534][ T25] az6027: usb out operation failed. (-71) [ 175.065572][ T25] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 175.088043][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 175.126158][ T25] dvb-usb: schedule remote query interval to 400 msecs. [ 175.126214][ T25] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 175.165172][ T25] usb 2-1: USB disconnect, device number 32 [ 175.266018][ T25] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 175.338965][ T2243] usb 4-1: USB disconnect, device number 26 [ 175.604007][ T1590] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 175.652203][ T6945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.750839][ T1590] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 175.760832][ T1590] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 175.760861][ T1590] usb 5-1: config 127 has no interface number 0 [ 175.760902][ T1590] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 175.790222][ T1590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.790267][ T1590] usb 5-1: Product: syz [ 175.790299][ T1590] usb 5-1: Manufacturer: syz [ 175.790319][ T1590] usb 5-1: SerialNumber: syz [ 175.818893][ T6941] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.850723][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 175.863080][ T6949] tipc: Started in network mode [ 175.863154][ T6949] tipc: Node identity , cluster identity 4711 [ 175.864602][ T6949] tipc: Failed to obtain node identity [ 175.864753][ T6949] tipc: Enabling of bearer rejected, failed to enable media [ 176.007926][ T6953] macsec1: entered promiscuous mode [ 176.013544][ T6953] bridge0: entered promiscuous mode [ 176.047029][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.047645][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.091380][ T1590] asix 5-1:127.57: probe with driver asix failed with error -22 [ 176.123185][ T1590] usb 5-1: USB disconnect, device number 22 [ 176.359151][ T31] audit: type=1326 audit(1788819275.803:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.0.383" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x0 [ 177.089850][ T986] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 177.240583][ T986] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 177.243926][ T986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.244061][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.268317][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 177.306745][ T986] as10x_usb: device has been detected [ 177.313160][ T986] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 177.365998][ T986] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 177.409821][ T25] usb 2-1: device descriptor read/64, error -71 [ 177.631358][ T6986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.643581][ T986] as10x_usb: error during firmware upload part1 [ 177.645166][ T986] Registered device Abilis Systems DVB-Titan [ 177.654034][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 177.799813][ T25] usb 2-1: device descriptor read/64, error -71 [ 177.878937][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 177.900313][ T6991] tipc: Started in network mode [ 177.900356][ T6991] tipc: Node identity , cluster identity 4711 [ 177.900372][ T6991] tipc: Failed to obtain node identity [ 177.900440][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 177.928179][ T25] usb usb2-port1: attempt power cycle [ 178.271275][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 178.301569][ T25] usb 2-1: device descriptor read/8, error -71 [ 178.440811][ T986] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 178.549798][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 178.570515][ T25] usb 2-1: device descriptor read/8, error -71 [ 178.590501][ T986] usb 3-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice= 0.00 [ 178.601811][ T986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.601895][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.631970][ T986] usb 3-1: config 0 descriptor?? [ 178.644497][ T986] usb 3-1: active config #0 != 1 ?? [ 178.681042][ T25] usb usb2-port1: unable to enumerate USB device [ 178.808400][ T31] audit: type=1326 audit(1788819278.253:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 178.833335][ T31] audit: type=1326 audit(1788819278.283:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 178.864801][ T31] audit: type=1326 audit(1788819278.313:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 178.864999][ T31] audit: type=1326 audit(1788819278.313:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 178.866351][ T31] audit: type=1326 audit(1788819278.313:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 178.900863][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.902150][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.909468][ T6998] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 178.909525][ T6998] netlink: 152 bytes leftover after parsing attributes in process `syz.2.395'. [ 178.916568][ T31] audit: type=1326 audit(1788819278.363:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 178.959188][ T31] audit: type=1326 audit(1788819278.403:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 179.004075][ T31] audit: type=1326 audit(1788819278.413:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 179.017779][ T31] audit: type=1326 audit(1788819278.463:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.3.396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a0f5e98e code=0x7ffc0000 [ 179.042725][ T6998] netlink: 'syz.2.395': attribute type 12 has an invalid length. [ 179.092138][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.110092][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.129549][ T5716] usb 3-1: USB disconnect, device number 29 [ 179.193535][ T7006] netlink: 156 bytes leftover after parsing attributes in process `syz.3.396'. [ 179.295398][ T2243] usb 5-1: USB disconnect, device number 23 [ 179.393766][ T2243] Unregistered device Abilis Systems DVB-Titan [ 179.396793][ T2243] as10x_usb: device has been disconnected [ 180.495111][ T7040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.613765][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 180.627351][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 180.645301][ T7042] tipc: Enabled bearer , priority 0 [ 180.687191][ T7041] tipc: Disabling bearer [ 180.942571][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 180.963503][ T7052] FAULT_INJECTION: forcing a failure. [ 180.963503][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 180.963556][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.4.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.963583][ T7052] Tainted: [L]=SOFTLOCKUP [ 180.963590][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.963601][ T7052] Call Trace: [ 180.963607][ T7052] [ 180.963616][ T7052] dump_stack_lvl+0xe8/0x150 [ 180.963647][ T7052] should_fail_ex+0x410/0x560 [ 180.963681][ T7052] ? __alloc_skb+0x1db/0x7a0 [ 180.963701][ T7052] should_failslab+0xa8/0x100 [ 180.963725][ T7052] ? __alloc_skb+0x1db/0x7a0 [ 180.963741][ T7052] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 180.963771][ T7052] ? __alloc_skb+0x18d/0x7a0 [ 180.963800][ T7052] ? __alloc_skb+0x1db/0x7a0 [ 180.963830][ T7052] __alloc_skb+0x1db/0x7a0 [ 180.963852][ T7052] audit_log_start+0x1b3/0xa10 [ 180.963881][ T7052] ? __pfx_audit_log_start+0x10/0x10 [ 180.963907][ T7052] ? get_pid_task+0x20/0x1f0 [ 180.963924][ T7052] ? get_pid_task+0x20/0x1f0 [ 180.963940][ T7052] ? get_pid_task+0x20/0x1f0 [ 180.963968][ T7052] audit_seccomp+0x63/0x190 [ 180.963989][ T7052] ? clear_bhb_loop+0x70/0xc0 [ 180.964012][ T7052] ? clear_bhb_loop+0xe/0xc0 [ 180.964039][ T7052] __seccomp_filter+0xd14/0x1de0 [ 180.964098][ T7052] ? __pfx___seccomp_filter+0x10/0x10 [ 180.964181][ T7052] ? __mutex_unlock_slowpath+0x731/0x900 [ 180.964246][ T7052] ? __fget_files+0x2a/0x420 [ 180.964332][ T7052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.964395][ T7052] ? __fget_files+0x3a2/0x420 [ 180.964492][ T7052] ? fput+0xa0/0xd0 [ 180.964579][ T7052] ? __pfx_ksys_write+0x10/0x10 [ 180.964676][ T7052] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 180.964758][ T7052] do_syscall_64+0x11f/0x520 [ 180.964817][ T7052] ? trace_irq_disable+0x3b/0x140 [ 180.964879][ T7052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.964940][ T7052] ? clear_bhb_loop+0x70/0xc0 [ 180.965005][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.965067][ T7052] RIP: 0033:0x7f4d2cf9e159 [ 180.965119][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.965166][ T7052] RSP: 002b:00007f4d2de9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 180.965230][ T7052] RAX: ffffffffffffffda RBX: 00007f4d2d225fa0 RCX: 00007f4d2cf9e159 [ 180.965272][ T7052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000502 [ 180.965315][ T7052] RBP: 00007f4d2de9d090 R08: 0000000000000000 R09: 0000000000000000 [ 180.965348][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.965387][ T7052] R13: 00007f4d2d226038 R14: 00007f4d2d225fa0 R15: 00007f4d2d34fa48 [ 180.965472][ T7052] [ 181.637760][ T7056] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.794450][ T7056] xt_connbytes: Forcing CT accounting to be enabled [ 181.978489][ T7066] erspan1: entered promiscuous mode [ 182.480024][ T986] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 182.645470][ T986] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.663927][ T986] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 182.663990][ T986] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 182.664062][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.774656][ T7076] loop7: detected capacity change from 16384 to 16383 [ 182.998602][ T986] usb 3-1: USB disconnect, device number 30 [ 183.063584][ T5716] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 183.213606][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 183.215134][ T5716] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 183.237535][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.237607][ T5716] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.237699][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.291363][ T5716] usb 4-1: config 0 descriptor?? [ 183.558674][ T7084] netlink: Only one type of NAT may be specified [ 183.558746][ T7084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.032815][ T7088] kvm: emulating exchange as write [ 184.372781][ T7100] xt_l2tp: missing protocol rule (udp|l2tpip) [ 184.702198][ T7100] netlink: 52 bytes leftover after parsing attributes in process `syz.2.419'. [ 185.395565][ T7128] x_tables: duplicate underflow at hook 1 [ 185.456968][ T31] kauditd_printk_skb: 348 callbacks suppressed [ 185.457028][ T31] audit: type=1326 audit(1788819284.903:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.4.427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cf9e159 code=0x0 [ 185.507741][ T7137] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 185.522589][ T5718] usb 4-1: USB disconnect, device number 27 [ 185.541824][ T1590] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 185.720089][ T1590] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 185.720152][ T1590] usb 3-1: no configurations [ 185.720183][ T1590] usb 3-1: can't read configurations, error -22 [ 185.798684][ T7136] syzkaller0: entered promiscuous mode [ 185.798732][ T7136] syzkaller0: entered allmulticast mode [ 185.872747][ T1590] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 186.065512][ T7147] ALSA: mixer_oss: invalid OSS volume '' [ 186.080532][ T1590] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 186.080594][ T1590] usb 3-1: no configurations [ 186.080625][ T1590] usb 3-1: can't read configurations, error -22 [ 186.102851][ T1590] usb usb3-port1: attempt power cycle [ 186.221529][ T31] audit: type=1326 audit(1788819285.673:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.222132][ T31] audit: type=1326 audit(1788819285.673:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.270036][ T31] audit: type=1326 audit(1788819285.713:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.274205][ T31] audit: type=1326 audit(1788819285.723:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.274381][ T31] audit: type=1326 audit(1788819285.723:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.278738][ T31] audit: type=1326 audit(1788819285.723:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.278857][ T31] audit: type=1326 audit(1788819285.723:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.278974][ T31] audit: type=1326 audit(1788819285.723:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.281491][ T31] audit: type=1326 audit(1788819285.723:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.432" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 186.479763][ T1590] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 186.505339][ T1590] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 186.505420][ T1590] usb 3-1: no configurations [ 186.505463][ T1590] usb 3-1: can't read configurations, error -22 [ 186.659882][ T1590] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 186.681013][ T1590] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 186.681074][ T1590] usb 3-1: no configurations [ 186.681105][ T1590] usb 3-1: can't read configurations, error -22 [ 186.702592][ T1590] usb usb3-port1: unable to enumerate USB device [ 186.889954][ T986] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 187.039789][ T986] usb 4-1: Using ep0 maxpacket: 32 [ 187.042691][ T986] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 187.057968][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.058025][ T986] usb 4-1: Product: syz [ 187.058042][ T986] usb 4-1: Manufacturer: syz [ 187.058077][ T986] usb 4-1: SerialNumber: syz [ 187.082145][ T986] usb 4-1: config 0 descriptor?? [ 187.098209][ T986] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 187.143259][ T5716] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 187.269915][ T5716] usb 5-1: device descriptor read/64, error -71 [ 187.510873][ T5716] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 187.570061][ T7170] xt_l2tp: invalid flags combination: 0 [ 187.650923][ T5716] usb 5-1: device descriptor read/64, error -71 [ 187.760573][ T5716] usb usb5-port1: attempt power cycle [ 188.108783][ T5716] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 188.120558][ T5716] usb 5-1: device descriptor read/8, error -71 [ 188.359861][ T5716] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 188.383185][ T5716] usb 5-1: device descriptor read/8, error -71 [ 188.490668][ T5716] usb usb5-port1: unable to enumerate USB device [ 188.741091][ T7186] syzkaller0: entered promiscuous mode [ 188.748374][ T7186] syzkaller0: entered allmulticast mode [ 188.832090][ T7188] syzkaller0: entered promiscuous mode [ 188.832146][ T7188] syzkaller0: entered allmulticast mode [ 188.862347][ T7188] tipc: Started in network mode [ 188.862438][ T7188] tipc: Node identity 762dd5587fab, cluster identity 4711 [ 188.864963][ T7188] tipc: Enabled bearer , priority 0 [ 188.887640][ T7187] tipc: Resetting bearer [ 188.915092][ T7187] tipc: Disabling bearer [ 189.004188][ T7190] tipc: Started in network mode [ 189.004232][ T7190] tipc: Node identity , cluster identity 4711 [ 189.004248][ T7190] tipc: Failed to obtain node identity [ 189.004403][ T7190] tipc: Enabling of bearer rejected, failed to enable media [ 189.251066][ T986] gspca_ov534_9: reg_w failed -110 [ 189.316290][ T7198] netlink: 'syz.0.449': attribute type 2 has an invalid length. [ 189.316342][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 189.475994][ T7198] : entered promiscuous mode [ 189.492866][ T986] gspca_ov534_9: Unknown sensor 0000 [ 189.492983][ T986] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 189.958064][ T7214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1226918919 (78522810816 ns) > initial count (60690011328 ns). Using initial count to start timer. [ 189.986823][ T7214] kvm: pic: level sensitive irq not supported [ 189.992005][ T7214] kvm: pic: single mode not supported [ 190.504957][ T5688] usb 4-1: USB disconnect, device number 28 [ 190.590005][ T5718] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 190.764231][ T5718] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 190.764278][ T5718] usb 5-1: no configurations [ 190.764304][ T5718] usb 5-1: can't read configurations, error -22 [ 190.920404][ T5718] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 191.080565][ T5718] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 191.080611][ T5718] usb 5-1: no configurations [ 191.080632][ T5718] usb 5-1: can't read configurations, error -22 [ 191.101349][ T5718] usb usb5-port1: attempt power cycle [ 191.449797][ T5718] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 191.481324][ T5718] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 191.481395][ T5718] usb 5-1: no configurations [ 191.481427][ T5718] usb 5-1: can't read configurations, error -22 [ 191.629792][ T5718] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 191.651296][ T5718] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d [ 191.651368][ T5718] usb 5-1: no configurations [ 191.651400][ T5718] usb 5-1: can't read configurations, error -22 [ 191.661162][ T5718] usb usb5-port1: unable to enumerate USB device [ 191.679865][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 191.831482][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 191.837488][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.849512][ T25] usb 3-1: config 0 has no interfaces? [ 191.865252][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.865303][ T25] usb 3-1: Product: syz [ 191.865333][ T25] usb 3-1: Manufacturer: syz [ 191.865352][ T25] usb 3-1: SerialNumber: syz [ 191.893739][ T25] usb 3-1: config 0 descriptor?? [ 192.126506][ T1590] usb 3-1: USB disconnect, device number 35 [ 192.339804][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 192.500336][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 192.514509][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.523564][ T25] usb 1-1: Product: syz [ 192.527840][ T25] usb 1-1: Manufacturer: syz [ 192.532618][ T25] usb 1-1: SerialNumber: syz [ 192.728026][ T7259] FAULT_INJECTION: forcing a failure. [ 192.728026][ T7259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.728093][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.1.467 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.728125][ T7259] Tainted: [L]=SOFTLOCKUP [ 192.728133][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.728149][ T7259] Call Trace: [ 192.728197][ T7259] [ 192.728231][ T7259] dump_stack_lvl+0xe8/0x150 [ 192.728395][ T7259] should_fail_ex+0x410/0x560 [ 192.728495][ T7259] _copy_to_user+0x31/0xb0 [ 192.728569][ T7259] put_user_ifreq+0x6a/0xc0 [ 192.728645][ T7259] sock_do_ioctl+0x26d/0x320 [ 192.728731][ T7259] ? __pfx_sock_do_ioctl+0x10/0x10 [ 192.728799][ T7259] ? hook_file_ioctl+0x1f2/0x600 [ 192.728903][ T7259] sock_ioctl+0x57a/0x7e0 [ 192.728987][ T7259] ? __pfx_sock_ioctl+0x10/0x10 [ 192.729063][ T7259] ? __fget_files+0x2a/0x420 [ 192.729145][ T7259] ? __fget_files+0x3a2/0x420 [ 192.729213][ T7259] ? __fget_files+0x2a/0x420 [ 192.729312][ T7259] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.729397][ T7259] ? __pfx_sock_ioctl+0x10/0x10 [ 192.729473][ T7259] __se_sys_ioctl+0xfc/0x170 [ 192.729540][ T7259] do_syscall_64+0x166/0x520 [ 192.729600][ T7259] ? trace_irq_disable+0x3b/0x140 [ 192.729656][ T7259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.729730][ T7259] ? clear_bhb_loop+0x70/0xc0 [ 192.729796][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.729858][ T7259] RIP: 0033:0x7f4693d9ddeb [ 192.729897][ T7259] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 192.729948][ T7259] RSP: 002b:00007f4694bf1e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.730011][ T7259] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4693d9ddeb [ 192.730054][ T7259] RDX: 00007f4694bf1e60 RSI: 0000000000008933 RDI: 0000000000000007 [ 192.730089][ T7259] RBP: 0000000000000026 R08: 00007f4694bf1f70 R09: 0000000000000000 [ 192.730129][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.730163][ T7259] R13: 00007f4694bf1f90 R14: 00007f4694bf1f90 R15: 0000200000000080 [ 192.730256][ T7259] [ 193.125564][ T7270] syzkaller0: entered promiscuous mode [ 193.132349][ T7270] syzkaller0: entered allmulticast mode [ 193.749954][ T5688] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 193.819354][ T7281] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 193.828272][ T986] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 193.919876][ T5688] usb 5-1: Using ep0 maxpacket: 8 [ 193.929376][ T5688] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.946749][ T5688] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 193.955410][ T5688] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.955442][ T5688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.955498][ T5688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.955525][ T5688] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.955571][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.267592][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.284220][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.317105][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317184][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.441938][ T7293] netlink: 64 bytes leftover after parsing attributes in process `syz.4.473'. [ 194.491611][ T30] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 194.652565][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 194.659601][ T30] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.672832][ T30] usb 3-1: config 0 has no interfaces? [ 194.687153][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.687239][ T30] usb 3-1: Product: syz [ 194.687273][ T30] usb 3-1: Manufacturer: syz [ 194.687293][ T30] usb 3-1: SerialNumber: syz [ 194.735109][ T30] usb 3-1: config 0 descriptor?? [ 194.753412][ T5688] usb 5-1: usb_control_msg returned -71 [ 194.753505][ T5688] usbtmc 5-1:16.0: can't read capabilities [ 194.785473][ T5688] usb 5-1: USB disconnect, device number 32 [ 194.969520][ T986] usb 3-1: USB disconnect, device number 36 [ 195.083169][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 195.095648][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 195.106803][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 195.133933][ T25] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 195.144225][ T7303] syzkaller0: entered promiscuous mode [ 195.144261][ T7303] syzkaller0: entered allmulticast mode [ 195.164262][ T25] usb 1-1: USB disconnect, device number 29 [ 195.598586][ T7307] netlink: 'syz.0.483': attribute type 13 has an invalid length. [ 195.629837][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 195.739805][ T30] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 195.789770][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 195.795529][ T25] usb 4-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=59.7b [ 195.808019][ T25] usb 4-1: config 5 has an invalid interface number: 202 but max is 0 [ 195.808078][ T25] usb 4-1: config 5 has no interface number 0 [ 195.808127][ T25] usb 4-1: config 5 interface 202 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 195.847968][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.856186][ T25] usb 4-1: Product: syz [ 195.856202][ T25] usb 4-1: Manufacturer: syz [ 195.856212][ T25] usb 4-1: SerialNumber: syz [ 195.921609][ T30] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.946082][ T30] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x97, changing to 0x87 [ 195.959057][ T30] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 195.959160][ T30] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x87 has invalid wMaxPacketSize 0 [ 195.959195][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.993323][ T30] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.001680][ T30] usb 5-1: Product: syz [ 196.001703][ T30] usb 5-1: Manufacturer: syz [ 196.001721][ T30] usb 5-1: SerialNumber: syz [ 196.031612][ T30] usb 5-1: config 0 descriptor?? [ 196.059240][ T30] usb 5-1: selecting invalid altsetting 0 [ 196.127191][ T25] uvcvideo 4-1:5.202: Found UVC 0.00 device syz (05a9:2641) [ 196.134797][ T25] uvcvideo 4-1:5.202: No valid video chain found. [ 196.185152][ T25] usb 4-1: USB disconnect, device number 29 [ 196.376437][ T30] usb 5-1: USB disconnect, device number 33 [ 196.450556][ T7324] fuse: Bad value for 'user_id' [ 196.450614][ T7324] fuse: Bad value for 'user_id' [ 196.484235][ T5725] udevd[5725]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.029822][ T30] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 197.030916][ T2243] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 197.162215][ T2243] usb 2-1: device descriptor read/64, error -71 [ 197.179924][ T1590] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 197.201145][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.212064][ T30] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.212121][ T30] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.212225][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.247810][ T7327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.262235][ T30] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.349796][ T1590] usb 3-1: Using ep0 maxpacket: 32 [ 197.351408][ T1590] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 197.365469][ T5716] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 197.380672][ T1590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.380714][ T1590] usb 3-1: Product: syz [ 197.380731][ T1590] usb 3-1: Manufacturer: syz [ 197.380770][ T1590] usb 3-1: SerialNumber: syz [ 197.403051][ T2243] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 197.435278][ T1590] usb 3-1: config 0 descriptor?? [ 197.449908][ T1590] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 197.517146][ T30] usb 4-1: USB disconnect, device number 30 [ 197.524259][ T5716] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 197.539897][ T2243] usb 2-1: device descriptor read/64, error -71 [ 197.548806][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.557171][ T5716] usb 5-1: Product: syz [ 197.557192][ T5716] usb 5-1: Manufacturer: syz [ 197.557208][ T5716] usb 5-1: SerialNumber: syz [ 197.650483][ T2243] usb usb2-port1: attempt power cycle [ 197.850147][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.863014][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.989930][ T2243] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 198.020406][ T2243] usb 2-1: device descriptor read/8, error -71 [ 198.259784][ T2243] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 198.282879][ T2243] usb 2-1: device descriptor read/8, error -71 [ 198.393218][ T2243] usb usb2-port1: unable to enumerate USB device [ 198.484888][ T1590] gspca_topro: reg_w err -71 [ 198.489126][ T7337] input: syz0 as /devices/virtual/input/input16 [ 198.509802][ T1590] gspca_topro: Sensor soi763a [ 198.516997][ T7338] netlink: 71 bytes leftover after parsing attributes in process `syz.3.494'. [ 198.558929][ T1590] usb 3-1: USB disconnect, device number 37 [ 199.166759][ T7342] FAULT_INJECTION: forcing a failure. [ 199.166759][ T7342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.166822][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: syz.2.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.166851][ T7342] Tainted: [L]=SOFTLOCKUP [ 199.166881][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.166934][ T7342] Call Trace: [ 199.166963][ T7342] [ 199.166994][ T7342] dump_stack_lvl+0xe8/0x150 [ 199.167100][ T7342] should_fail_ex+0x410/0x560 [ 199.167198][ T7342] _copy_to_user+0x31/0xb0 [ 199.167265][ T7342] simple_read_from_buffer+0xe1/0x170 [ 199.167361][ T7342] proc_fail_nth_read+0x1bb/0x230 [ 199.167454][ T7342] ? common_file_perm+0x20e/0x2b0 [ 199.167520][ T7342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.167615][ T7342] ? rw_verify_area+0x24a/0x4c0 [ 199.167705][ T7342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.167795][ T7342] vfs_read+0x213/0xa80 [ 199.167901][ T7342] ? __pfx_vfs_read+0x10/0x10 [ 199.168033][ T7342] ksys_read+0x150/0x270 [ 199.168124][ T7342] ? __pfx_ksys_read+0x10/0x10 [ 199.168235][ T7342] do_syscall_64+0x166/0x520 [ 199.168288][ T7342] ? trace_irq_disable+0x3b/0x140 [ 199.168350][ T7342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.168427][ T7342] ? clear_bhb_loop+0x70/0xc0 [ 199.168507][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.168562][ T7342] RIP: 0033:0x7f7bbe75e98e [ 199.168624][ T7342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.168684][ T7342] RSP: 002b:00007f7bbf599fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.168745][ T7342] RAX: ffffffffffffffda RBX: 00007f7bbf59a6c0 RCX: 00007f7bbe75e98e [ 199.168787][ T7342] RDX: 000000000000000f RSI: 00007f7bbf59a0a0 RDI: 0000000000000004 [ 199.168821][ T7342] RBP: 00007f7bbf59a090 R08: 0000000000000000 R09: 0000000000000000 [ 199.168862][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.168895][ T7342] R13: 00007f7bbea26038 R14: 00007f7bbea25fa0 R15: 00007f7bbeb4fa48 [ 199.168983][ T7342] [ 199.799914][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 199.961161][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 199.965115][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.969602][ T10] usb 3-1: config 0 has no interfaces? [ 199.986113][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.986189][ T10] usb 3-1: Product: syz [ 199.986249][ T10] usb 3-1: Manufacturer: syz [ 199.986299][ T10] usb 3-1: SerialNumber: syz [ 200.020375][ T10] usb 3-1: config 0 descriptor?? [ 200.153601][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 200.179801][ T1590] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 200.198353][ T5716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 200.198437][ T5716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 200.198521][ T5716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 200.247842][ T5716] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 200.275597][ T10] usb 3-1: USB disconnect, device number 38 [ 200.321873][ T5716] usb 5-1: USB disconnect, device number 34 [ 200.340787][ T1590] usb 4-1: Using ep0 maxpacket: 16 [ 200.348247][ T1590] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 200.360854][ T1590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.360923][ T1590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.404546][ T1590] usb 4-1: config 0 descriptor?? [ 200.829230][ T7361] netlink: 116 bytes leftover after parsing attributes in process `syz.4.504'. [ 201.485016][ T7364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.492986][ T7364] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.508766][ T7364] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.537606][ T7364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.540516][ T7364] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.556099][ T7364] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.565593][ T7364] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.575289][ T7364] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.584994][ T7364] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.598353][ T7364] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.610580][ T7364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.616928][ T7364] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.626163][ T7364] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.642001][ T7364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.648295][ T7364] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.658882][ T7364] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.707035][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.712504][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.747365][ T1590] usbhid 4-1:0.0: can't add hid device: -71 [ 201.753766][ T1590] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 201.771035][ T1590] usb 4-1: USB disconnect, device number 31 [ 201.836164][ T7379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.919930][ T2243] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 201.929818][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 201.932579][ T986] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 202.049785][ T2243] usb 5-1: device descriptor read/64, error -71 [ 202.079813][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 202.081901][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 202.086266][ T986] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 202.099220][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.104853][ T30] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 202.124641][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 202.124691][ T10] usb 1-1: Product: syz [ 202.124709][ T10] usb 1-1: Manufacturer: syz [ 202.124758][ T10] usb 1-1: SerialNumber: syz [ 202.152111][ T10] usb 1-1: config 0 descriptor?? [ 202.166589][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 202.269795][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 202.276526][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.276632][ T30] usb 2-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 202.295254][ T2243] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 202.296951][ T30] usb 2-1: config 7 has an invalid interface number: 171 but max is 0 [ 202.297022][ T30] usb 2-1: config 7 has no interface number 0 [ 202.297152][ T30] usb 2-1: config 7 interface 171 has no altsetting 0 [ 202.342889][ T986] cxacru_cm: 40 callbacks suppressed [ 202.342973][ T986] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 202.347679][ T30] usb 2-1: string descriptor 0 read error: -22 [ 202.348046][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.377008][ T7380] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 202.377054][ T7380] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 202.408470][ T30] gspca_main: spca505-2.14.0 probing 041e:401d [ 202.443693][ T986] usb 3-1: USB disconnect, device number 39 [ 202.452279][ T2243] usb 5-1: device descriptor read/64, error -71 [ 202.560143][ T2243] usb usb5-port1: attempt power cycle [ 202.599402][ T10] gspca_sn9c2028: read1 error -71 [ 202.600179][ T10] gspca_sn9c2028: read1 error -71 [ 202.600380][ T10] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 202.623975][ T10] usb 1-1: USB disconnect, device number 30 [ 202.791029][ T4937] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.874128][ T30] gspca_spca505: reg write: error -71 [ 202.879993][ T30] spca505 2-1:7.171: probe with driver spca505 failed with error -5 [ 202.893444][ T30] usb 2-1: USB disconnect, device number 41 [ 202.901524][ T2243] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 202.921550][ T2243] usb 5-1: device descriptor read/8, error -71 [ 203.024266][ T31] audit: type=1326 audit(1788819302.473:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.2.511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bbe79e159 code=0x0 [ 203.160860][ T2243] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 203.183824][ T2243] usb 5-1: device descriptor read/8, error -71 [ 203.290171][ T2243] usb usb5-port1: unable to enumerate USB device [ 203.601086][ T4937] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.601847][ T4937] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.671401][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.671474][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.760002][ T5716] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 203.774284][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 203.921469][ T5716] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 203.937266][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.937313][ T5716] usb 2-1: Product: syz [ 203.937349][ T5716] usb 2-1: Manufacturer: syz [ 203.937370][ T5716] usb 2-1: SerialNumber: syz [ 204.001404][ T2243] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 204.169802][ T2243] usb 4-1: Using ep0 maxpacket: 16 [ 204.176548][ T2243] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.186770][ T2243] usb 4-1: config 0 has no interfaces? [ 204.198367][ T2243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.198447][ T2243] usb 4-1: Product: syz [ 204.198467][ T2243] usb 4-1: Manufacturer: syz [ 204.198486][ T2243] usb 4-1: SerialNumber: syz [ 204.232171][ T2243] usb 4-1: config 0 descriptor?? [ 204.471419][ T1590] usb 4-1: USB disconnect, device number 32 [ 204.870115][ T4937] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.439867][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 205.593994][ T25] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 205.609794][ T25] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 205.609834][ T25] usb 4-1: config 0 has no interface number 0 [ 205.609969][ T25] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 205.610047][ T25] usb 4-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 205.610129][ T25] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 205.610203][ T25] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 205.610266][ T25] usb 4-1: config 0 interface 11 has no altsetting 0 [ 205.610359][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.631553][ T25] usb 4-1: config 0 descriptor?? [ 205.673241][ T4937] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.673346][ T4937] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.709638][ T25] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 205.720770][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 205.720888][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 205.721807][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 205.723834][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 205.724350][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 205.724581][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 205.751651][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.751756][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.764050][ T25] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 205.795854][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 205.796397][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 205.796630][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 205.796841][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 205.797050][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 205.802220][ T25] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 205.854728][ T25] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 205.894539][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.905710][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.162515][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.166276][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.457056][ T2243] usb 4-1: USB disconnect, device number 33 [ 206.497255][ T2243] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 206.544442][ T2243] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 206.560360][ T2243] keyspan 4-1:0.11: device disconnected [ 206.662763][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 206.676213][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 206.676283][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.709413][ T5716] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 206.751160][ T5716] usb 2-1: USB disconnect, device number 42 [ 206.883556][ T31] audit: type=1326 audit(1788819306.333:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4693d9e159 code=0x7ffc0000 [ 206.908613][ T31] audit: type=1326 audit(1788819306.333:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4693d9e159 code=0x7ffc0000 [ 206.935480][ T31] audit: type=1326 audit(1788819306.333:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4693d9e159 code=0x7ffc0000 [ 206.935568][ T31] audit: type=1326 audit(1788819306.333:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4693d9e159 code=0x7ffc0000 [ 206.935626][ T31] audit: type=1326 audit(1788819306.333:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4693d9e159 code=0x7ffc0000 [ 206.935686][ T31] audit: type=1326 audit(1788819306.333:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4693d9dec2 code=0x7ffc0000 [ 206.935743][ T31] audit: type=1326 audit(1788819306.363:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4693d9df57 code=0x7ffc0000 [ 206.935800][ T31] audit: type=1326 audit(1788819306.363:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.1.532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4693d9e159 code=0x7ffc0000 [ 206.970885][ T4937] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.224884][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 207.554608][ T31] kauditd_printk_skb: 289 callbacks suppressed [ 207.554676][ T31] audit: type=1326 audit(1788819307.003:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.1.535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4693d9e159 code=0x0 [ 207.749852][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.750737][ T4937] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.832003][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.832089][ T4937] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.899780][ T2243] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 208.050091][ T2243] usb 4-1: Using ep0 maxpacket: 16 [ 208.055914][ T2243] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.066602][ T2243] usb 4-1: config 0 has no interfaces? [ 208.081881][ T2243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.081925][ T2243] usb 4-1: Product: syz [ 208.081964][ T2243] usb 4-1: Manufacturer: syz [ 208.081984][ T2243] usb 4-1: SerialNumber: syz [ 208.119405][ T2243] usb 4-1: config 0 descriptor?? [ 208.293451][ T7472] FAULT_INJECTION: forcing a failure. [ 208.293451][ T7472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.307976][ T7472] CPU: 0 UID: 0 PID: 7472 Comm: syz.4.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.308012][ T7472] Tainted: [L]=SOFTLOCKUP [ 208.308021][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.308035][ T7472] Call Trace: [ 208.308043][ T7472] [ 208.308053][ T7472] dump_stack_lvl+0xe8/0x150 [ 208.308091][ T7472] should_fail_ex+0x410/0x560 [ 208.308132][ T7472] _copy_to_user+0x31/0xb0 [ 208.308162][ T7472] do_sock_getsockopt+0x6ea/0x7e0 [ 208.308196][ T7472] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 208.308240][ T7472] ? __fget_files+0x3a2/0x420 [ 208.308270][ T7472] ? __fget_files+0x2a/0x420 [ 208.308309][ T7472] __x64_sys_getsockopt+0x1a4/0x240 [ 208.308344][ T7472] do_syscall_64+0x166/0x520 [ 208.308372][ T7472] ? trace_irq_disable+0x3b/0x140 [ 208.308394][ T7472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.308417][ T7472] ? clear_bhb_loop+0x70/0xc0 [ 208.308444][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.308466][ T7472] RIP: 0033:0x7f4d2cf9e159 [ 208.308487][ T7472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.308506][ T7472] RSP: 002b:00007f4d2de9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 208.308531][ T7472] RAX: ffffffffffffffda RBX: 00007f4d2d225fa0 RCX: 00007f4d2cf9e159 [ 208.308547][ T7472] RDX: 000000000000000b RSI: 0000000000000107 RDI: 0000000000000003 [ 208.308561][ T7472] RBP: 00007f4d2de9d090 R08: 0000200000001540 R09: 0000000000000000 [ 208.308576][ T7472] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.308591][ T7472] R13: 00007f4d2d226038 R14: 00007f4d2d225fa0 R15: 00007f4d2d34fa48 [ 208.308625][ T7472] [ 208.526069][ T7473] JFS: charset not found [ 208.539093][ T25] usb 4-1: USB disconnect, device number 34 [ 208.663744][ T7475] tipc: Enabling of bearer rejected, failed to enable media [ 208.940599][ T1590] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 209.025662][ T7486] veth1_to_hsr: entered allmulticast mode [ 209.032667][ T7486] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 209.082592][ T1590] usb 5-1: device descriptor read/64, error -71 [ 209.127480][ T7486] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 209.323003][ T1590] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 209.459766][ T1590] usb 5-1: device descriptor read/64, error -71 [ 209.571079][ T1590] usb usb5-port1: attempt power cycle [ 209.721912][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 209.830720][ T4937] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.880948][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 209.895838][ T25] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 209.895914][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.921478][ T1590] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 209.944045][ T1590] usb 5-1: device descriptor read/8, error -71 [ 209.975201][ T25] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 210.180470][ T1590] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 210.201367][ T1590] usb 5-1: device descriptor read/8, error -71 [ 210.311314][ T1590] usb usb5-port1: unable to enumerate USB device [ 210.555414][ T7499] lo: Caught tx_queue_len zero misconfig [ 210.819903][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 210.949794][ T10] usb 1-1: device descriptor read/64, error -71 [ 211.172462][ T7509] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 211.189889][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 211.259105][ T7509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.295914][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 211.317852][ T7511] bond1: (slave batadv1): making interface the new active one [ 211.335606][ T7511] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 211.356481][ T10] usb 1-1: device descriptor read/64, error -71 [ 211.460478][ T10] usb usb1-port1: attempt power cycle [ 211.517786][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 211.541391][ T25] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 211.541441][ T25] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 211.543145][ T25] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 211.543184][ T25] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 211.809767][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 211.830394][ T10] usb 1-1: device descriptor read/8, error -71 [ 212.070062][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 212.090825][ T10] usb 1-1: device descriptor read/8, error -71 [ 212.200370][ T10] usb usb1-port1: unable to enumerate USB device [ 212.309239][ T7521] netlink: 9 bytes leftover after parsing attributes in process `syz.4.552'. [ 212.341771][ T7521] gretap0: entered promiscuous mode [ 212.358967][ T7520] netlink: 5 bytes leftover after parsing attributes in process `syz.4.552'. [ 212.359395][ T7520] 0{X: renamed from gretap0 [ 212.377738][ T7520] 0{X: left promiscuous mode [ 212.377783][ T7520] 0{X: entered allmulticast mode [ 212.399222][ T7520] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 212.440201][ T25] usb 4-1: USB disconnect, device number 35 [ 212.910653][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 213.069842][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 213.077091][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.086829][ T10] usb 4-1: config 0 has no interfaces? [ 213.097783][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.097828][ T10] usb 4-1: Product: syz [ 213.097860][ T10] usb 4-1: Manufacturer: syz [ 213.097881][ T10] usb 4-1: SerialNumber: syz [ 213.135238][ T10] usb 4-1: config 0 descriptor?? [ 213.203329][ T7543] JFS: charset not found [ 213.363201][ T25] usb 4-1: USB disconnect, device number 36 [ 213.881367][ T7548] ALSA: mixer_oss: invalid OSS volume '' [ 213.881418][ T7548] ALSA: mixer_oss: invalid OSS volume ']b#oDticJ]xD\Z' [ 213.881437][ T7548] ALSA: mixer_oss: invalid OSS volume '73KY*@X,ebفLkJDris' [ 213.881509][ T7548] ALSA: mixer_oss: invalid OSS volume '=' [ 213.883440][ T7548] ALSA: mixer_oss: invalid OSS volume 'cW$u}<\Lu|GKiLО"' [ 213.883613][ T7548] ALSA: mixer_oss: invalid OSS volume ',`! Q$9hy7zj;' [ 213.883684][ T7548] ALSA: mixer_oss: invalid OSS volume 's' [ 213.883745][ T7548] ALSA: mixer_oss: invalid OSS volume 'n(\bʬc_2&tg| 3' [ 213.883978][ T7548] ALSA: mixer_oss: invalid OSS volume 's)dŹ-Ç<2~]/' [ 213.884182][ T7548] ALSA: mixer_oss: invalid OSS volume '33Ѵe1?' [ 213.884242][ T7548] ALSA: mixer_oss: invalid OSS volume 'P/Ǡ6{<`lN' [ 213.884290][ T7548] ALSA: mixer_oss: invalid OSS volume 'W^5}愔˵_N[T[o\' [ 213.924130][ T7548] ALSA: mixer_oss: invalid OSS volume '' [ 214.095962][ T7550] batman_adv: batadv0: Adding interface: veth0 [ 214.096010][ T7550] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.096045][ T7550] batman_adv: batadv0: Interface activated: veth0 [ 214.178372][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.178427][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.203948][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.204003][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.223176][ T7550] batman_adv: batadv0: Interface deactivated: veth0 [ 214.223218][ T7550] batman_adv: batadv0: Removing interface: veth0 [ 214.350882][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 214.600924][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 214.709976][ T31] audit: type=1326 audit(1788819314.153:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.738396][ T31] audit: type=1326 audit(1788819314.183:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.738475][ T31] audit: type=1326 audit(1788819314.183:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.738619][ T31] audit: type=1326 audit(1788819314.183:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.738763][ T31] audit: type=1326 audit(1788819314.183:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.738880][ T31] audit: type=1326 audit(1788819314.183:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.739033][ T31] audit: type=1326 audit(1788819314.183:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.741920][ T31] audit: type=1326 audit(1788819314.193:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.766973][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 214.767644][ T31] audit: type=1326 audit(1788819314.193:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.767841][ T31] audit: type=1326 audit(1788819314.213:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x7ffc0000 [ 214.841144][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.863356][ T7561] FAULT_INJECTION: forcing a failure. [ 214.863356][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 214.863449][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.0.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.863529][ T7561] Tainted: [L]=SOFTLOCKUP [ 214.863550][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.863589][ T7561] Call Trace: [ 214.863611][ T7561] [ 214.863633][ T7561] dump_stack_lvl+0xe8/0x150 [ 214.863723][ T7561] should_fail_ex+0x410/0x560 [ 214.863838][ T7561] ? __alloc_skb+0x1db/0x7a0 [ 214.863892][ T7561] should_failslab+0xa8/0x100 [ 214.863965][ T7561] ? __alloc_skb+0x1db/0x7a0 [ 214.864017][ T7561] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 214.864108][ T7561] ? __alloc_skb+0x18d/0x7a0 [ 214.864170][ T7561] ? __alloc_skb+0x1db/0x7a0 [ 214.864261][ T7561] __alloc_skb+0x1db/0x7a0 [ 214.864336][ T7561] audit_log_start+0x1b3/0xa10 [ 214.864429][ T7561] ? __pfx_audit_log_start+0x10/0x10 [ 214.864523][ T7561] ? kasan_quarantine_put+0xbb/0x1f0 [ 214.864584][ T7561] ? lockdep_hardirqs_on+0x7b/0x110 [ 214.864657][ T7561] audit_seccomp+0x63/0x190 [ 214.864723][ T7561] ? clear_bhb_loop+0x70/0xc0 [ 214.864773][ T7561] ? clear_bhb_loop+0xe/0xc0 [ 214.864846][ T7561] __seccomp_filter+0xd14/0x1de0 [ 214.864948][ T7561] ? __pfx___seccomp_filter+0x10/0x10 [ 214.865011][ T7561] ? __mutex_unlock_slowpath+0x731/0x900 [ 214.865083][ T7561] ? lock_acquire+0x115/0x350 [ 214.865160][ T7561] ? __fget_files+0x2a/0x420 [ 214.865296][ T7561] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 214.865370][ T7561] do_syscall_64+0x11f/0x520 [ 214.865431][ T7561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.865492][ T7561] ? clear_bhb_loop+0x70/0xc0 [ 214.865570][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.865626][ T7561] RIP: 0033:0x7f5217b5e98e [ 214.865676][ T7561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.865731][ T7561] RSP: 002b:00007f52189c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.865798][ T7561] RAX: ffffffffffffffda RBX: 00007f52189c16c0 RCX: 00007f5217b5e98e [ 214.865813][ T7561] RDX: 000000000000000f RSI: 00007f52189c10a0 RDI: 0000000000000004 [ 214.865826][ T7561] RBP: 00007f52189c1090 R08: 0000000000000000 R09: 0000000000000000 [ 214.865840][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.865853][ T7561] R13: 00007f5217e26038 R14: 00007f5217e25fa0 R15: 00007f5217f4fa48 [ 214.865885][ T7561] [ 214.867989][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.868150][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.971475][ T25] usb 2-1: config 0 descriptor?? [ 215.053235][ T25] hub 2-1:0.0: USB hub found [ 215.281296][ T25] hub 2-1:0.0: 1 port detected [ 215.495327][ T25] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 215.565537][ T7570] fuse: Unknown parameter 'f90x0000000000000003' [ 215.573717][ T7569] netlink: 164 bytes leftover after parsing attributes in process `syz.2.568'. [ 215.584913][ T7566] loop5: detected capacity change from 0 to 7 [ 215.620470][ T7566] Dev loop5: unable to read RDB block 7 [ 215.620633][ T7566] loop5: unable to read partition table [ 215.627535][ T7566] loop5: partition table beyond EOD, truncated [ 215.634541][ T7566] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 215.944071][ T25] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 215.944839][ T25] hid-generic 0003:046D:C31C.0009: probe with driver hid-generic failed with error -22 [ 216.176860][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 216.201703][ T30] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 216.330636][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.341355][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.341409][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.341456][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.361747][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 216.368125][ T30] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.370133][ T30] usb 5-1: config 0 has no interfaces? [ 216.386494][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.386542][ T30] usb 5-1: Product: syz [ 216.386559][ T30] usb 5-1: Manufacturer: syz [ 216.386574][ T30] usb 5-1: SerialNumber: syz [ 216.417889][ T30] usb 5-1: config 0 descriptor?? [ 216.426877][ T7577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 216.446911][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.653211][ T5688] usb 5-1: USB disconnect, device number 43 [ 216.771112][ T7580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.771344][ T7580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.771518][ T7580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.771674][ T7580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.799393][ T7580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.807777][ T30] usb 4-1: USB disconnect, device number 37 [ 217.218120][ T7598] JFS: charset not found [ 217.504074][ T2243] usb 2-1: USB disconnect, device number 43 [ 217.661763][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 217.701025][ T38] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.701522][ T38] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.701589][ T38] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.701633][ T38] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.070581][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.661428][ T2243] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 218.790597][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.790660][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.790680][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 218.790736][ T4937] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.831220][ T2243] usb 4-1: Using ep0 maxpacket: 16 [ 218.839130][ T2243] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.839214][ T2243] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 218.865188][ T2243] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 218.873586][ T2243] usb 4-1: config 9 has no interface number 0 [ 218.873625][ T2243] usb 4-1: config 9 interface 57 has no altsetting 0 [ 218.891185][ T2243] usb 4-1: string descriptor 0 read error: -22 [ 218.897639][ T2243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.203204][ T2243] (null): keene_cmd_main failed (-71) [ 219.239175][ T2243] video4linux radio48: keene_cmd_main failed (-71) [ 219.256495][ T2243] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 219.269192][ T2243] usb 4-1: USB disconnect, device number 38 [ 221.127859][ T7675] syzkaller0: entered promiscuous mode [ 221.127909][ T7675] syzkaller0: entered allmulticast mode [ 221.214258][ T7678] JFS: charset not found [ 221.292509][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 221.300656][ T30] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 221.359766][ T2243] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 221.449752][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 221.456609][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.457571][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 221.463093][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.463158][ T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.488154][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.488229][ T30] usb 2-1: Product: syz [ 221.488270][ T30] usb 2-1: Manufacturer: syz [ 221.488319][ T30] usb 2-1: SerialNumber: syz [ 221.493602][ T2243] usb 1-1: device descriptor read/64, error -71 [ 221.549861][ T30] usb 2-1: interface 1 not found [ 221.739825][ T2243] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 221.752461][ T5688] usb 2-1: USB disconnect, device number 44 [ 221.889759][ T2243] usb 1-1: device descriptor read/64, error -71 [ 222.013861][ T2243] usb usb1-port1: attempt power cycle [ 222.164786][ T7692] loop5: detected capacity change from 0 to 7 [ 222.174477][ T7692] Dev loop5: unable to read RDB block 7 [ 222.180766][ T7692] loop5: unable to read partition table [ 222.187050][ T7692] loop5: partition table beyond EOD, truncated [ 222.195079][ T7692] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 222.376983][ T2243] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 222.401360][ T2243] usb 1-1: device descriptor read/8, error -71 [ 222.437728][ T7698] netlink: 'syz.4.605': attribute type 27 has an invalid length. [ 222.650377][ T2243] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 222.682254][ T2243] usb 1-1: device descriptor read/8, error -71 [ 222.790026][ T2243] usb usb1-port1: unable to enumerate USB device [ 223.173767][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 223.332923][ T7719] FAULT_INJECTION: forcing a failure. [ 223.332923][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 223.360754][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.3.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.360791][ T7719] Tainted: [L]=SOFTLOCKUP [ 223.360800][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.360814][ T7719] Call Trace: [ 223.360823][ T7719] [ 223.360833][ T7719] dump_stack_lvl+0xe8/0x150 [ 223.360870][ T7719] should_fail_ex+0x410/0x560 [ 223.360912][ T7719] ? __alloc_skb+0x1db/0x7a0 [ 223.360935][ T7719] should_failslab+0xa8/0x100 [ 223.360964][ T7719] ? __alloc_skb+0x1db/0x7a0 [ 223.360985][ T7719] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 223.361021][ T7719] ? __alloc_skb+0x18d/0x7a0 [ 223.361048][ T7719] ? __alloc_skb+0x1db/0x7a0 [ 223.361079][ T7719] __alloc_skb+0x1db/0x7a0 [ 223.361107][ T7719] nl80211_tx_mgmt+0xaac/0xf10 [ 223.361133][ T7719] ? netdev_run_todo+0xfda/0x1060 [ 223.361166][ T7719] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 223.361186][ T7719] ? __cfg80211_wdev_from_attrs+0x766/0x810 [ 223.361214][ T7719] ? __pfx_netdev_run_todo+0x10/0x10 [ 223.361248][ T7719] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 223.361291][ T7719] ? nl80211_pre_doit+0x53d/0x890 [ 223.361324][ T7719] genl_family_rcv_msg_doit+0x233/0x340 [ 223.361357][ T7719] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 223.361402][ T7719] ? bpf_lsm_capable+0x9/0x20 [ 223.361422][ T7719] ? security_capable+0x7e/0x2c0 [ 223.361454][ T7719] genl_rcv_msg+0x614/0x7a0 [ 223.361485][ T7719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.361507][ T7719] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 223.361532][ T7719] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 223.361552][ T7719] ? __pfx_nl80211_post_doit+0x10/0x10 [ 223.361594][ T7719] netlink_rcv_skb+0x226/0x4a0 [ 223.361626][ T7719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.361651][ T7719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.361699][ T7719] ? down_read+0x2be/0x330 [ 223.361729][ T7719] genl_rcv+0x28/0x40 [ 223.361749][ T7719] netlink_unicast+0x7bd/0x940 [ 223.361789][ T7719] netlink_sendmsg+0x813/0xb40 [ 223.361843][ T7719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.361882][ T7719] ? apparmor_socket_sendmsg+0x98/0x360 [ 223.361907][ T7719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.361937][ T7719] sock_sendmsg_nosec+0x13a/0x180 [ 223.361972][ T7719] ____sys_sendmsg+0x54e/0x850 [ 223.362005][ T7719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.362041][ T7719] ? import_iovec+0x73/0xa0 [ 223.362070][ T7719] ___sys_sendmsg+0x2a5/0x360 [ 223.362095][ T7719] ? __lock_acquire+0x747/0x2de0 [ 223.362122][ T7719] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.362186][ T7719] ? __fget_files+0x2a/0x420 [ 223.362215][ T7719] ? __fget_files+0x3a2/0x420 [ 223.362256][ T7719] __x64_sys_sendmsg+0x1b1/0x290 [ 223.362305][ T7719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.362356][ T7719] do_syscall_64+0x166/0x520 [ 223.362377][ T7719] ? trace_irq_disable+0x3b/0x140 [ 223.362407][ T7719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.362431][ T7719] ? clear_bhb_loop+0x70/0xc0 [ 223.362459][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.362482][ T7719] RIP: 0033:0x7f50a0f9e159 [ 223.362504][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.362524][ T7719] RSP: 002b:00007f50a1f35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.362549][ T7719] RAX: ffffffffffffffda RBX: 00007f50a1225fa0 RCX: 00007f50a0f9e159 [ 223.362567][ T7719] RDX: 0000000000000110 RSI: 0000200000000240 RDI: 0000000000000004 [ 223.362582][ T7719] RBP: 00007f50a1f35090 R08: 0000000000000000 R09: 0000000000000000 [ 223.362596][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.362610][ T7719] R13: 00007f50a1226038 R14: 00007f50a1225fa0 R15: 00007f50a134fa48 [ 223.362647][ T7719] [ 224.029885][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 224.202427][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 224.203166][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.206106][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.206174][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.246653][ T5688] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 224.247732][ T10] usb 4-1: config 0 descriptor?? [ 224.302543][ T10] hub 4-1:0.0: USB hub found [ 224.410196][ T5688] usb 2-1: Using ep0 maxpacket: 16 [ 224.416115][ T5688] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.425895][ T5688] usb 2-1: config 0 has no interfaces? [ 224.434991][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.435034][ T5688] usb 2-1: Product: syz [ 224.435076][ T5688] usb 2-1: Manufacturer: syz [ 224.435098][ T5688] usb 2-1: SerialNumber: syz [ 224.464660][ T5688] usb 2-1: config 0 descriptor?? [ 224.474919][ T10] hub 4-1:0.0: 1 port detected [ 224.526931][ T7736] binder: BINDER_SET_CONTEXT_MGR already set [ 224.527003][ T7736] binder: 7729:7736 ioctl 4018620d 200000000100 returned -16 [ 224.696429][ T10] hub 4-1:0.0: config failed, can't get hub status (err -5) [ 224.720131][ T2243] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 224.733620][ T5702] usb 2-1: USB disconnect, device number 45 [ 224.894607][ T2243] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 224.952771][ T2243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.952853][ T2243] usb 5-1: Product: syz [ 224.952871][ T2243] usb 5-1: Manufacturer: syz [ 224.952912][ T2243] usb 5-1: SerialNumber: syz [ 225.110757][ T7744] syzkaller0: entered promiscuous mode [ 225.110798][ T7744] syzkaller0: entered allmulticast mode [ 225.133501][ T7744] tipc: Enabling of bearer rejected, failed to enable media [ 225.259143][ T10] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 225.261763][ T10] hid-generic 0003:046D:C31C.000A: probe with driver hid-generic failed with error -22 [ 225.392529][ T7745] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 225.827235][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.844778][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.150844][ T7728] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 226.181983][ T10] usb 5-1: USB disconnect, device number 44 [ 226.251903][ T7767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.361395][ T7769] fuse: Unknown parameter ''M?~ώ'1&  rejected, failed to enable media [ 228.656637][ T7816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.762291][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 230.178450][ T7848] syzkaller0: entered promiscuous mode [ 230.178493][ T7848] syzkaller0: entered allmulticast mode [ 231.220062][ T7876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.288049][ T7899] can: request_module (can-proto-0) failed. [ 232.833800][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 232.833852][ T31] audit: type=1326 audit(1788819332.263:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.4.655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cf9e159 code=0x7ffc0000 [ 232.865881][ T31] audit: type=1326 audit(1788819332.283:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.4.655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cf9e159 code=0x7ffc0000 [ 232.918754][ T31] audit: type=1326 audit(1788819332.363:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.4.655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f4d2cf9e159 code=0x7ffc0000 [ 232.928348][ T31] audit: type=1326 audit(1788819332.363:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.4.655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cf9e159 code=0x7ffc0000 [ 232.928485][ T31] audit: type=1326 audit(1788819332.363:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.4.655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cf9e159 code=0x7ffc0000 [ 233.430471][ T31] audit: type=1326 audit(1788819332.883:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cf9e159 code=0x0 [ 233.537636][ T7924] netlink: 'syz.3.656': attribute type 13 has an invalid length. [ 233.997199][ T7942] FAULT_INJECTION: forcing a failure. [ 233.997199][ T7942] name failslab, interval 1, probability 0, space 0, times 0 [ 234.012182][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.2.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.012218][ T7942] Tainted: [L]=SOFTLOCKUP [ 234.012226][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.012240][ T7942] Call Trace: [ 234.012249][ T7942] [ 234.012259][ T7942] dump_stack_lvl+0xe8/0x150 [ 234.012295][ T7942] should_fail_ex+0x410/0x560 [ 234.012336][ T7942] should_failslab+0xa8/0x100 [ 234.012364][ T7942] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 234.012395][ T7942] ? __kasan_kmalloc+0x93/0xb0 [ 234.012419][ T7942] ? __request_module+0x2ec/0x630 [ 234.012445][ T7942] ? __request_module+0x2ec/0x630 [ 234.012473][ T7942] ? __kmalloc_cache_noprof+0x14d/0x600 [ 234.012498][ T7942] kstrdup+0x42/0x100 [ 234.012523][ T7942] __request_module+0x2ec/0x630 [ 234.012553][ T7942] ? rtnl_link_ops_get+0x23/0x250 [ 234.012580][ T7942] ? __pfx___request_module+0x10/0x10 [ 234.012619][ T7942] ? rtnl_link_ops_get+0x23/0x250 [ 234.012642][ T7942] ? rtnl_link_ops_get+0x23/0x250 [ 234.012669][ T7942] ? rtnl_link_ops_get+0x215/0x250 [ 234.012698][ T7942] rtnl_newlink+0x662/0x1c30 [ 234.012727][ T7942] ? kmem_cache_free+0x182/0x650 [ 234.012749][ T7942] ? nlmon_xmit+0xb0/0x100 [ 234.012773][ T7942] ? dev_hard_start_xmit+0x2cd/0x830 [ 234.012800][ T7942] ? __dev_queue_xmit+0x14c0/0x3820 [ 234.012828][ T7942] ? __netlink_deliver_tap+0x5b4/0x860 [ 234.012857][ T7942] ? netlink_deliver_tap+0x19c/0x1b0 [ 234.012885][ T7942] ? netlink_unicast+0x781/0x940 [ 234.012910][ T7942] ? netlink_sendmsg+0x813/0xb40 [ 234.012940][ T7942] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.012962][ T7942] ? do_syscall_64+0x166/0x520 [ 234.012982][ T7942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.013041][ T7942] ? kasan_quarantine_put+0xbb/0x1f0 [ 234.013064][ T7942] ? lockdep_hardirqs_on+0x7b/0x110 [ 234.013090][ T7942] ? nlmon_xmit+0xb0/0x100 [ 234.013110][ T7942] ? kmem_cache_free+0x182/0x650 [ 234.013144][ T7942] ? __lock_acquire+0x747/0x2de0 [ 234.013178][ T7942] ? __local_bh_enable_ip+0xd6/0x140 [ 234.013208][ T7942] ? lockdep_hardirqs_on+0x7b/0x110 [ 234.013229][ T7942] ? __dev_queue_xmit+0x29b/0x3820 [ 234.013256][ T7942] ? __local_bh_enable_ip+0xd6/0x140 [ 234.013284][ T7942] ? __dev_queue_xmit+0x29b/0x3820 [ 234.013320][ T7942] ? lock_acquire+0x115/0x350 [ 234.013357][ T7942] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.013388][ T7942] rtnetlink_rcv_msg+0x802/0xc00 [ 234.013416][ T7942] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 234.013440][ T7942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.013461][ T7942] ? ref_tracker_free+0x689/0x830 [ 234.013491][ T7942] ? __pfx_ref_tracker_free+0x10/0x10 [ 234.013526][ T7942] netlink_rcv_skb+0x226/0x4a0 [ 234.013557][ T7942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.013582][ T7942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.013625][ T7942] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.013653][ T7942] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.013688][ T7942] netlink_unicast+0x7bd/0x940 [ 234.013726][ T7942] netlink_sendmsg+0x813/0xb40 [ 234.013765][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.013802][ T7942] ? apparmor_socket_sendmsg+0x98/0x360 [ 234.013827][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.013856][ T7942] sock_sendmsg_nosec+0x13a/0x180 [ 234.013893][ T7942] ____sys_sendmsg+0x54e/0x850 [ 234.013926][ T7942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.013963][ T7942] ? import_iovec+0x73/0xa0 [ 234.013993][ T7942] ___sys_sendmsg+0x2a5/0x360 [ 234.014020][ T7942] ? lapic_next_event+0x11/0x20 [ 234.014048][ T7942] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.014112][ T7942] ? kasan_check_range+0x93/0x2c0 [ 234.014151][ T7942] __x64_sys_sendmsg+0x1b1/0x290 [ 234.014181][ T7942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.014230][ T7942] do_syscall_64+0x166/0x520 [ 234.014251][ T7942] ? trace_irq_disable+0x3b/0x140 [ 234.014273][ T7942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.014296][ T7942] ? clear_bhb_loop+0x70/0xc0 [ 234.014324][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.014347][ T7942] RIP: 0033:0x7f7bbe79e159 [ 234.014367][ T7942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.014395][ T7942] RSP: 002b:00007f7bbf59a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.014419][ T7942] RAX: ffffffffffffffda RBX: 00007f7bbea25fa0 RCX: 00007f7bbe79e159 [ 234.014436][ T7942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 234.014451][ T7942] RBP: 00007f7bbf59a090 R08: 0000000000000000 R09: 0000000000000000 [ 234.014466][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.014479][ T7942] R13: 00007f7bbea26038 R14: 00007f7bbea25fa0 R15: 00007f7bbeb4fa48 [ 234.014514][ T7942] [ 234.193251][ T7942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.661'. [ 234.776464][ T7953] binder: BINDER_SET_CONTEXT_MGR already set [ 234.776498][ T7953] binder: 7952:7953 ioctl 4018620d 200000000100 returned -16 [ 234.801713][ T7953] binder: BINDER_SET_CONTEXT_MGR already set [ 234.824591][ T7953] binder: 7952:7953 ioctl 4018620d 200000004a80 returned -16 [ 234.836718][ T7953] binder: 7952:7953 ioctl c0306201 200000004a40 returned -22 [ 235.089886][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 235.255967][ T10] usb 2-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice= 0.00 [ 235.267737][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.267816][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.321878][ T10] usb 2-1: config 0 descriptor?? [ 235.363399][ T10] usb 2-1: active config #0 != 1 ?? [ 235.507083][ T7970] syzkaller0: entered promiscuous mode [ 235.507136][ T7970] syzkaller0: entered allmulticast mode [ 235.580315][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.600772][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.712634][ T7956] netlink: 'syz.1.666': attribute type 12 has an invalid length. [ 235.929051][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.956797][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.856102][ T7989] FAULT_INJECTION: forcing a failure. [ 236.856102][ T7989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.856175][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.0.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.856205][ T7989] Tainted: [L]=SOFTLOCKUP [ 236.856239][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.856289][ T7989] Call Trace: [ 236.856318][ T7989] [ 236.856347][ T7989] dump_stack_lvl+0xe8/0x150 [ 236.856461][ T7989] should_fail_ex+0x410/0x560 [ 236.856568][ T7989] prepare_alloc_pages+0x223/0x600 [ 236.856666][ T7989] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 236.856750][ T7989] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.856825][ T7989] ? __pfx_policy_nodemask+0x10/0x10 [ 236.856923][ T7989] alloc_pages_mpol+0x21e/0x390 [ 236.857015][ T7989] alloc_pages_noprof+0xb1/0x2b0 [ 236.857092][ T7989] folio_alloc_noprof+0x1e/0x30 [ 236.857176][ T7989] filemap_alloc_folio_noprof+0x111/0x460 [ 236.857271][ T7989] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 236.857370][ T7989] __filemap_get_folio_mpol+0x402/0x1000 [ 236.857475][ T7989] aio_setup_ring+0x3b1/0xe20 [ 236.857568][ T7989] ? __pfx_aio_setup_ring+0x10/0x10 [ 236.857653][ T7989] ioctx_alloc+0x313/0x830 [ 236.857742][ T7989] __se_sys_io_setup+0x7b/0x1d0 [ 236.857845][ T7989] do_syscall_64+0x166/0x520 [ 236.857899][ T7989] ? trace_irq_disable+0x3b/0x140 [ 236.857959][ T7989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.858020][ T7989] ? clear_bhb_loop+0x70/0xc0 [ 236.858086][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.858149][ T7989] RIP: 0033:0x7f5217b9e159 [ 236.858202][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.858254][ T7989] RSP: 002b:00007f52189c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 236.858312][ T7989] RAX: ffffffffffffffda RBX: 00007f5217e25fa0 RCX: 00007f5217b9e159 [ 236.858354][ T7989] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000002278 [ 236.858395][ T7989] RBP: 00007f52189c1090 R08: 0000000000000000 R09: 0000000000000000 [ 236.858427][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.858460][ T7989] R13: 00007f5217e26038 R14: 00007f5217e25fa0 R15: 00007f5217f4fa48 [ 236.858552][ T7989] [ 237.484732][ T5718] usb 2-1: USB disconnect, device number 46 [ 238.121062][ T8004] syzkaller0: entered promiscuous mode [ 238.121093][ T8004] syzkaller0: entered allmulticast mode [ 238.261665][ T31] audit: type=1326 audit(1788819337.713:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.263967][ T31] audit: type=1326 audit(1788819337.713:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.316756][ T31] audit: type=1326 audit(1788819337.763:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.316839][ T31] audit: type=1326 audit(1788819337.763:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.330638][ T31] audit: type=1326 audit(1788819337.773:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.331226][ T31] audit: type=1326 audit(1788819337.773:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.358760][ T31] audit: type=1326 audit(1788819337.793:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.423871][ T31] audit: type=1326 audit(1788819337.863:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.424004][ T31] audit: type=1326 audit(1788819337.863:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.424114][ T31] audit: type=1326 audit(1788819337.863:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 238.725910][ T8014] syzkaller0: entered promiscuous mode [ 238.725956][ T8014] syzkaller0: entered allmulticast mode [ 239.238728][ T8025] sctp: [Deprecated]: syz.0.684 (pid 8025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.238728][ T8025] Use struct sctp_sack_info instead [ 239.683021][ T8037] loop5: detected capacity change from 0 to 7 [ 239.701528][ T8037] Dev loop5: unable to read RDB block 7 [ 239.701590][ T8037] loop5: unable to read partition table [ 239.701796][ T8037] loop5: partition table beyond EOD, truncated [ 239.701825][ T8037] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 239.879764][ T30] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 239.996387][ T8039] fuse: Bad value for 'fd' [ 240.029780][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 240.035942][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 240.047038][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.047105][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.082193][ T30] usb 1-1: config 0 descriptor?? [ 240.102006][ T30] hub 1-1:0.0: USB hub found [ 240.301631][ T30] hub 1-1:0.0: 1 port detected [ 240.460461][ T8044] xt_hashlimit: size too large, truncated to 1048576 [ 240.502611][ T30] hub 1-1:0.0: config failed, can't get hub status (err -5) [ 240.618074][ T8046] syzkaller0: entered promiscuous mode [ 240.624090][ T8046] syzkaller0: entered allmulticast mode [ 240.928625][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 240.965528][ T8051] syzkaller0: entered promiscuous mode [ 240.973336][ T8051] syzkaller0: entered allmulticast mode [ 241.082769][ T30] usbhid 1-1:0.0: can't add hid device: -71 [ 241.082896][ T30] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 241.129282][ T30] usb 1-1: USB disconnect, device number 43 [ 241.210028][ T1590] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 241.370885][ T1590] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 241.382353][ T1590] usb 4-1: config 0 has no interfaces? [ 241.382410][ T1590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.410049][ T1590] usb 4-1: config 0 descriptor?? [ 241.508286][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 241.620591][ T10] usb 4-1: USB disconnect, device number 40 [ 241.709808][ T5716] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 241.890793][ T8069] netlink: 'syz.0.701': attribute type 2 has an invalid length. [ 242.031809][ T10] hid-generic 036B:214EC8:192CF38B.000B: hidraw0: HID vf80018.02 Device [syz1] on syz0 [ 242.459188][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 242.568615][ T8084] syzkaller0: entered promiscuous mode [ 242.575064][ T8084] syzkaller0: entered allmulticast mode [ 242.741858][ T8088] syzkaller0: entered promiscuous mode [ 242.747607][ T8088] syzkaller0: entered allmulticast mode [ 243.103111][ T8095] nvme_rdma: malformed src address passed: 1270.0.1 [ 243.259890][ T1590] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 243.409722][ T1590] usb 2-1: Using ep0 maxpacket: 32 [ 243.411641][ T1590] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 243.416972][ T1590] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 243.417049][ T1590] usb 2-1: config 0 has no interface number 0 [ 243.417166][ T1590] usb 2-1: config 0 interface 12 has no altsetting 0 [ 243.428067][ T1590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.428138][ T1590] usb 2-1: Product: syz [ 243.428172][ T1590] usb 2-1: Manufacturer: syz [ 243.428213][ T1590] usb 2-1: SerialNumber: syz [ 243.471442][ T1590] usb 2-1: config 0 descriptor?? [ 243.799881][ T5688] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 243.983453][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 243.987425][ T5688] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 244.003745][ T5688] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.005255][ T5688] usb 5-1: config 0 has no interface number 0 [ 244.005817][ T5688] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.005953][ T5688] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.006109][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.052046][ T5688] usb 5-1: config 0 descriptor?? [ 244.120969][ T1590] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 244.121052][ T1590] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 244.121185][ T1590] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 244.121566][ T1590] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 244.169347][ T1590] usb 2-1: USB disconnect, device number 48 [ 244.681465][ T5688] uclogic 0003:28BD:0071.000C: failed retrieving string descriptor #100: -71 [ 244.681561][ T5688] uclogic 0003:28BD:0071.000C: failed retrieving pen parameters: -71 [ 244.681668][ T5688] uclogic 0003:28BD:0071.000C: pen probing failed: -71 [ 244.681742][ T5688] uclogic 0003:28BD:0071.000C: failed probing parameters: -71 [ 244.682037][ T5688] uclogic 0003:28BD:0071.000C: probe with driver uclogic failed with error -71 [ 244.735530][ T5688] usb 5-1: USB disconnect, device number 45 [ 245.301278][ T5688] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 245.392397][ T8132] netlink: 'syz.1.721': attribute type 13 has an invalid length. [ 245.491479][ T5688] usb 1-1: Invalid ep0 maxpacket: 16 [ 245.608188][ T8138] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20004 [ 245.640071][ T5688] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 245.785934][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.724'. [ 245.799809][ T5688] usb 1-1: Invalid ep0 maxpacket: 16 [ 245.805750][ T5688] usb usb1-port1: attempt power cycle [ 246.149863][ T5688] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 246.182334][ T5688] usb 1-1: Invalid ep0 maxpacket: 16 [ 246.322259][ T5688] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 246.340322][ T5688] usb 1-1: Invalid ep0 maxpacket: 16 [ 246.341053][ T5688] usb usb1-port1: unable to enumerate USB device [ 246.588750][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.727'. [ 247.481230][ T5688] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 247.650299][ T5688] usb 4-1: Using ep0 maxpacket: 32 [ 247.665712][ T5688] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 247.670478][ T5688] usb 4-1: config 0 has no interfaces? [ 247.695850][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.695904][ T5688] usb 4-1: Product: syz [ 247.695921][ T5688] usb 4-1: Manufacturer: syz [ 247.695937][ T5688] usb 4-1: SerialNumber: syz [ 247.722422][ T5688] usb 4-1: config 0 descriptor?? [ 247.987037][ T8165] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 248.131770][ T8165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.152921][ T8172] bond1: (slave gretap1): making interface the new active one [ 248.161277][ T8172] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 248.232432][ T8165] batadv_slave_0: entered promiscuous mode [ 248.262464][ T8165] bond1 (unregistering): (slave gretap1): Releasing active interface [ 248.285191][ T8165] bond1 (unregistering): Released all slaves [ 248.329979][ T7745] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 248.414302][ T8163] batadv_slave_0: left promiscuous mode [ 248.425909][ T5688] usb 4-1: USB disconnect, device number 41 [ 248.490526][ T7745] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 248.508929][ T7745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.508964][ T7745] usb 1-1: Product: syz [ 248.508986][ T7745] usb 1-1: Manufacturer: syz [ 248.509000][ T7745] usb 1-1: SerialNumber: syz [ 248.719789][ T30] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 248.872860][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 248.874696][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.887879][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.887928][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.907084][ T30] usb 5-1: config 0 descriptor?? [ 248.919749][ T30] hub 5-1:0.0: USB hub found [ 249.030140][ T5688] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 249.121848][ T30] hub 5-1:0.0: 1 port detected [ 249.159867][ T5688] usb 2-1: device descriptor read/64, error -71 [ 249.328068][ T30] hub 5-1:0.0: config failed, can't get hub status (err -5) [ 249.399951][ T5688] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 249.539847][ T5688] usb 2-1: device descriptor read/64, error -71 [ 249.615735][ T8201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.650135][ T5688] usb usb2-port1: attempt power cycle [ 249.785042][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 249.791523][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 249.831151][ T30] usb 5-1: USB disconnect, device number 46 [ 249.991986][ T5688] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 250.021150][ T5688] usb 2-1: device descriptor read/8, error -71 [ 250.259942][ T5688] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 250.283880][ T5688] usb 2-1: device descriptor read/8, error -71 [ 250.346816][ T8204] FAULT_INJECTION: forcing a failure. [ 250.346816][ T8204] name failslab, interval 1, probability 0, space 0, times 0 [ 250.346897][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.2.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.346930][ T8204] Tainted: [L]=SOFTLOCKUP [ 250.346939][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.346952][ T8204] Call Trace: [ 250.346961][ T8204] [ 250.347004][ T8204] dump_stack_lvl+0xe8/0x150 [ 250.347136][ T8204] should_fail_ex+0x410/0x560 [ 250.347251][ T8204] should_failslab+0xa8/0x100 [ 250.347333][ T8204] __kmalloc_cache_noprof+0xa3/0x600 [ 250.347390][ T8204] ? nft_trans_table_add+0x56/0x430 [ 250.347453][ T8204] ? nft_trans_table_add+0x56/0x430 [ 250.347536][ T8204] nft_trans_table_add+0x56/0x430 [ 250.347625][ T8204] nf_tables_newtable+0xd26/0x1990 [ 250.347734][ T8204] nfnetlink_rcv+0x1288/0x28c0 [ 250.347901][ T8204] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 250.348012][ T8204] ? ref_tracker_free+0x689/0x830 [ 250.348138][ T8204] ? skb_clone+0x246/0x3a0 [ 250.348221][ T8204] ? __netlink_deliver_tap+0x811/0x860 [ 250.348319][ T8204] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.348392][ T8204] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.348490][ T8204] netlink_unicast+0x7bd/0x940 [ 250.348605][ T8204] netlink_sendmsg+0x813/0xb40 [ 250.348709][ T8204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.348805][ T8204] ? apparmor_socket_sendmsg+0x98/0x360 [ 250.348870][ T8204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.348948][ T8204] sock_sendmsg_nosec+0x13a/0x180 [ 250.349037][ T8204] ____sys_sendmsg+0x54e/0x850 [ 250.349120][ T8204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.349216][ T8204] ? import_iovec+0x73/0xa0 [ 250.349293][ T8204] ___sys_sendmsg+0x2a5/0x360 [ 250.349365][ T8204] ? __lock_acquire+0x747/0x2de0 [ 250.349430][ T8204] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.349593][ T8204] ? __fget_files+0x2a/0x420 [ 250.349667][ T8204] ? __fget_files+0x3a2/0x420 [ 250.349771][ T8204] __x64_sys_sendmsg+0x1b1/0x290 [ 250.349899][ T8204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.350043][ T8204] do_syscall_64+0x166/0x520 [ 250.350097][ T8204] ? trace_irq_disable+0x3b/0x140 [ 250.350157][ T8204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.350212][ T8204] ? clear_bhb_loop+0x70/0xc0 [ 250.350285][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.350340][ T8204] RIP: 0033:0x7f7bbe79e159 [ 250.350392][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.350442][ T8204] RSP: 002b:00007f7bbf59a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.350503][ T8204] RAX: ffffffffffffffda RBX: 00007f7bbea25fa0 RCX: 00007f7bbe79e159 [ 250.350545][ T8204] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 250.350579][ T8204] RBP: 00007f7bbf59a090 R08: 0000000000000000 R09: 0000000000000000 [ 250.350618][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.350651][ T8204] R13: 00007f7bbea26038 R14: 00007f7bbea25fa0 R15: 00007f7bbeb4fa48 [ 250.350738][ T8204] [ 250.406842][ T5688] usb usb2-port1: unable to enumerate USB device [ 251.168125][ T7745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 251.181466][ T7745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 251.192592][ T7745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 251.206529][ T7745] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 251.245475][ T7745] usb 1-1: USB disconnect, device number 48 [ 251.318788][ T8217] netlink: 'syz.4.746': attribute type 13 has an invalid length. [ 251.338875][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 252.649844][ T1590] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 252.669797][ T5716] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 252.810694][ T1590] usb 1-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice= 0.00 [ 252.820733][ T5716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.822778][ T1590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.822910][ T1590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.854211][ T1590] usb 1-1: config 0 descriptor?? [ 252.869154][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.869197][ T5716] usb 4-1: Product: syz [ 252.869237][ T5716] usb 4-1: Manufacturer: syz [ 252.869258][ T5716] usb 4-1: SerialNumber: syz [ 252.899560][ T1590] usb 1-1: active config #0 != 1 ?? [ 252.962958][ T8247] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 253.103131][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.105866][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.137560][ T8242] netlink: 'syz.0.755': attribute type 12 has an invalid length. [ 253.288786][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.293127][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.561392][ T5716] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 253.561450][ T5716] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 253.561495][ T5716] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 253.762682][ T5716] cdc_ncm 4-1:1.0: setting tx_max = 40 [ 253.836790][ T5716] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 253.863102][ T5716] usb 4-1: USB disconnect, device number 42 [ 253.874523][ T5716] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 253.912804][ T7745] usb 1-1: USB disconnect, device number 49 [ 254.027049][ T8259] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 254.606619][ T8267] syz_tun: entered allmulticast mode [ 254.668889][ T8267] dvmrp6: entered allmulticast mode [ 254.766575][ T8266] syz_tun: left allmulticast mode [ 255.376657][ T8283] fuse: fd is not a fuse device [ 255.639777][ T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 255.753663][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.753742][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.789751][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 255.797744][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.803238][ T25] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 255.803374][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 183, changing to 11 [ 255.803449][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 255.803564][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.852609][ T25] usb 5-1: config 0 descriptor?? [ 255.865200][ T8283] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.081103][ T25] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 256.666398][ T5688] usb 5-1: USB disconnect, device number 47 [ 256.820201][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 256.928273][ T8303] overlayfs: option "workdir=/157" is useless in a non-upper mount, ignore [ 256.940225][ T8303] overlayfs: missing 'lowerdir' [ 256.980761][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 256.992373][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.992457][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.992487][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.992514][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.992560][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.277130][ T8309] trusted_key: encrypted_key: insufficient parameters specified [ 257.369783][ T7745] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 257.522800][ T8319] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 257.550546][ T7745] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 257.561527][ T7745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.561644][ T7745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.575477][ T7745] usb 4-1: config 0 descriptor?? [ 257.987792][ T7745] hid (null): global environment stack underflow [ 257.987920][ T7745] hid (null): global environment stack underflow [ 257.987981][ T7745] hid (null): invalid report_size 13705 [ 258.011211][ T7745] bigben 0003:146B:0902.000D: unexpected rdesc, please submit for review [ 258.014693][ T7745] bigben 0003:146B:0902.000D: global environment stack underflow [ 258.014814][ T7745] bigben 0003:146B:0902.000D: item 0 0 1 11 parsing failed [ 258.018421][ T7745] bigben 0003:146B:0902.000D: parse failed [ 258.018809][ T7745] bigben 0003:146B:0902.000D: probe with driver bigben failed with error -22 [ 258.063958][ T10] gud 2-1:1.0: [drm] [PLANE:35:plane-0] pixel format with alpha exposed but blend mode not setup. Please fix. [ 258.091588][ T10] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1 [ 258.198573][ T1590] usb 4-1: USB disconnect, device number 43 [ 259.009841][ T5716] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 259.163331][ T5716] usb 1-1: not running at top speed; connect to a high speed hub [ 259.163440][ T5716] usb 1-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 259.170343][ T5716] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 102, changing to 4 [ 259.181836][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.181954][ T5716] usb 1-1: Product: 䠊 [ 259.182126][ T5716] usb 1-1: Manufacturer: 底舫퐏ꗥ怀෩딊ॷڮ䈚찎졯炽ꡍ痄嬑 [ 259.182178][ T5716] usb 1-1: SerialNumber: syz [ 259.445467][ T5716] gspca_main: ov519-2.14.0 probing 041e:4068 [ 259.951705][ T5716] ov519 1-1:1.0: reg_w 5a failed -110 [ 260.265137][ T8354] netlink: 'syz.0.792': attribute type 33 has an invalid length. [ 260.687265][ T31] kauditd_printk_skb: 574 callbacks suppressed [ 260.687346][ T31] audit: type=1326 audit(1788819360.133:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.0.793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5217b9e159 code=0x0 [ 260.917639][ T31] audit: type=1326 audit(1788819360.363:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 260.942547][ T31] audit: type=1326 audit(1788819360.363:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 260.942606][ T31] audit: type=1326 audit(1788819360.363:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 260.942652][ T31] audit: type=1326 audit(1788819360.363:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 260.942696][ T31] audit: type=1326 audit(1788819360.363:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 260.942741][ T31] audit: type=1326 audit(1788819360.363:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.3.796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 261.076518][ T8385] FAULT_INJECTION: forcing a failure. [ 261.076518][ T8385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.076588][ T8385] CPU: 1 UID: 0 PID: 8385 Comm: syz.4.797 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.076620][ T8385] Tainted: [L]=SOFTLOCKUP [ 261.076629][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.076642][ T8385] Call Trace: [ 261.076650][ T8385] [ 261.076686][ T8385] dump_stack_lvl+0xe8/0x150 [ 261.076794][ T8385] should_fail_ex+0x410/0x560 [ 261.076901][ T8385] _copy_to_iter+0x59c/0x1810 [ 261.076954][ T8385] ? unwind_get_return_address+0x4d/0x90 [ 261.077068][ T8385] ? __pfx__copy_to_iter+0x10/0x10 [ 261.077132][ T8385] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 261.077226][ T8385] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 261.077312][ T8385] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 261.077407][ T8385] __skb_datagram_iter+0xf8/0x980 [ 261.077486][ T8385] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 261.077580][ T8385] skb_copy_datagram_iter+0xb5/0x240 [ 261.077665][ T8385] netlink_recvmsg+0x2b9/0xa50 [ 261.077763][ T8385] ? __pfx_netlink_recvmsg+0x10/0x10 [ 261.077853][ T8385] ? aa_sock_msg_perm+0x144/0x210 [ 261.077938][ T8385] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 261.078009][ T8385] ? security_socket_recvmsg+0x7e/0x2c0 [ 261.078085][ T8385] ? __pfx_netlink_recvmsg+0x10/0x10 [ 261.078191][ T8385] sock_recvmsg+0x196/0x1e0 [ 261.078294][ T8385] ____sys_recvmsg+0x1e6/0x4a0 [ 261.078366][ T8385] ? iovec_from_user+0x87/0x250 [ 261.078448][ T8385] ? __pfx_____sys_recvmsg+0x10/0x10 [ 261.078561][ T8385] ? import_iovec+0x73/0xa0 [ 261.078634][ T8385] ___sys_recvmsg+0x213/0x5a0 [ 261.078706][ T8385] ? lock_acquire+0x115/0x350 [ 261.078764][ T8385] ? __pfx____sys_recvmsg+0x10/0x10 [ 261.078845][ T8385] ? lock_acquire+0x115/0x350 [ 261.078940][ T8385] ? __fget_files+0x3a2/0x420 [ 261.079050][ T8385] do_recvmmsg+0x31a/0x7f0 [ 261.079137][ T8385] ? __pfx_do_recvmmsg+0x10/0x10 [ 261.079243][ T8385] ? get_timespec64+0x119/0x1b0 [ 261.079313][ T8385] ? __pfx_get_timespec64+0x10/0x10 [ 261.079415][ T8385] __x64_sys_recvmmsg+0x1b7/0x250 [ 261.079491][ T8385] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 261.079617][ T8385] do_syscall_64+0x166/0x520 [ 261.079679][ T8385] ? trace_irq_disable+0x3b/0x140 [ 261.079739][ T8385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.079793][ T8385] ? clear_bhb_loop+0x70/0xc0 [ 261.079876][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.079944][ T8385] RIP: 0033:0x7f4d2cf9e159 [ 261.079996][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.080042][ T8385] RSP: 002b:00007f4d2de9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 261.080105][ T8385] RAX: ffffffffffffffda RBX: 00007f4d2d225fa0 RCX: 00007f4d2cf9e159 [ 261.080147][ T8385] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 261.080189][ T8385] RBP: 00007f4d2de9d090 R08: 0000200000003700 R09: 0000000000000000 [ 261.080230][ T8385] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 261.080262][ T8385] R13: 00007f4d2d226038 R14: 00007f4d2d225fa0 R15: 00007f4d2d34fa48 [ 261.080344][ T8385] [ 261.417719][ T8387] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 261.562492][ T31] audit: type=1326 audit(1788819361.013:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 261.587164][ T31] audit: type=1326 audit(1788819361.013:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 261.612105][ T31] audit: type=1326 audit(1788819361.053:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f50a0f9e159 code=0x7ffc0000 [ 261.812712][ T8398] usb usb7: usbfs: process 8398 (syz.4.803) did not claim interface 0 before use [ 262.055261][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.805'. [ 262.060175][ T7745] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 262.209778][ T7745] usb 4-1: Using ep0 maxpacket: 8 [ 262.215830][ T7745] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 262.225423][ T7745] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 262.225506][ T7745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.225527][ T7745] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.245562][ T7745] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 262.245695][ T7745] usb 4-1: Product: syz [ 262.245737][ T7745] usb 4-1: Manufacturer: syz [ 262.258610][ T7745] usb 4-1: config 0 descriptor?? [ 262.859590][ T8409] X.509: Couldn't decode AuthKeyIdentifier [ 262.875731][ T8409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.133310][ T10] gud 2-1:1.0: [drm] format XR24 little-endian (0x34325258) not supported [ 263.133382][ T10] gud 2-1:1.0: [drm] No compatible format found [ 263.153977][ T10] gud 2-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 263.171 ** replaying previous printk message ** [ 263.171053][ T8295] ------------[ cut here ]------------ [ 263.171099][ T8295] !set->fb [ 263.171143][ T8295] WARNING: drivers/gpu/drm/drm_atomic.c:2031 at __drm_atomic_helper_set_config+0xceb/0xef0, CPU#0: syz.1.771/8295 [ 263.197593][ T8295] Modules linked in: [ 263.201666][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.1.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.212606][ T8295] Tainted: [L]=SOFTLOCKUP [ 263.216993][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.227217][ T8295] RIP: 0010:__drm_atomic_helper_set_config+0xceb/0xef0 [ 263.234216][ T8295] Code: ff e8 09 8a 3a fc e9 bf f9 ff ff e8 ff 89 3a fc 4c 8b 7c 24 30 e9 b0 f9 ff ff e8 f0 89 3a fc e9 a6 f9 ff ff e8 e6 89 3a fc 90 <0f> 0b 90 e9 ae f4 ff ff e8 d8 89 3a fc 90 0f 0b 90 e9 e4 f4 ff ff [ 263.255055][ T8295] RSP: 0018:ffffc90004ff7900 EFLAGS: 00010293 [ 263.261222][ T8295] RAX: ffffffff858d3b6a RBX: ffff888050de5328 RCX: ffff88801e3d8000 [ 263.269230][ T8295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.277470][ T8295] RBP: ffffc90004ff79f0 R08: 0000000000000025 R09: ffff888075fa28e0 [ 263.285650][ T8295] R10: ffff88804aac3d40 R11: ffffed10095587aa R12: ffff888054036200 [ 263.293807][ T8295] R13: ffff88804aac3c00 R14: 1ffff110052619f2 R15: 1ffff920009fef2c [ 263.302129][ T8295] FS: 0000555583d2e500(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000 [ 263.311297][ T8295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.317947][ T8295] CR2: 00005555632824e8 CR3: 000000007a74e000 CR4: 00000000003526f0 [ 263.326037][ T8295] Call Trace: [ 263.329354][ T8295] [ 263.332379][ T8295] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 263.339103][ T8295] ? drm_client_rotation+0x444/0x5b0 [ 263.344503][ T8295] drm_client_modeset_commit_atomic+0x4a9/0x7e0 [ 263.350872][ T8295] ? rcu_is_watching+0x16/0xb0 [ 263.355732][ T8295] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 263.362627][ T8295] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 263.368846][ T8295] drm_client_modeset_commit+0x4a/0x70 [ 263.374442][ T8295] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 263.381673][ T8295] drm_fbdev_client_restore+0x1b/0x30 [ 263.387148][ T8295] drm_client_dev_restore+0x14c/0x290 [ 263.392716][ T8295] drm_release+0x32d/0x400 [ 263.397197][ T8295] ? __pfx_drm_release+0x10/0x10 [ 263.402264][ T8295] __fput+0x418/0xa50 [ 263.406318][ T8295] task_work_run+0x1d9/0x270 [ 263.411015][ T8295] ? __pfx_task_work_run+0x10/0x10 [ 263.416191][ T8295] exit_to_user_mode_loop+0x204/0x770 [ 263.421734][ T8295] ? rcu_is_watching+0x16/0xb0 [ 263.426581][ T8295] do_syscall_64+0x328/0x520 [ 263.431575][ T8295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.437729][ T8295] ? clear_bhb_loop+0x70/0xc0 [ 263.442610][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.448603][ T8295] RIP: 0033:0x7f4693d9e159 [ 263.453161][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.473014][ T8295] RSP: 002b:00007f469414fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 263.481550][ T8295] RAX: 0000000000000000 RBX: 00007f4694027da0 RCX: 00007f4693d9e159 [ 263.489561][ T8295] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 263.497682][ T8295] RBP: 00007f4694027da0 R08: 00007f4694026038 R09: 0000000000000000 [ 263.505771][ T8295] R10: 00000000003ffb6c R11: 0000000000000246 R12: 000000000003fc9f [ 263.513952][ T8295] R13: 00007f469402609c R14: 000000000003f116 R15: 00007f4694026090 [ 263.522065][ T8295] [ 263.525175][ T8295] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.532489][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.1.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.543316][ T8295] Tainted: [L]=SOFTLOCKUP [ 263.547651][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.557820][ T8295] Call Trace: [ 263.561108][ T8295] [ 263.564052][ T8295] vpanic+0x56d/0xa60 [ 263.568076][ T8295] ? __pfx__printk+0x10/0x10 [ 263.572701][ T8295] ? __pfx_vpanic+0x10/0x10 [ 263.577234][ T8295] ? is_bpf_text_address+0x292/0x2b0 [ 263.582623][ T8295] ? is_bpf_text_address+0x26/0x2b0 [ 263.587899][ T8295] panic+0xc5/0xd0 [ 263.591641][ T8295] ? __pfx_panic+0x10/0x10 [ 263.596119][ T8295] __warn+0x315/0x4c0 [ 263.600153][ T8295] ? __drm_atomic_helper_set_config+0xceb/0xef0 [ 263.606449][ T8295] ? __drm_atomic_helper_set_config+0xceb/0xef0 [ 263.612735][ T8295] __report_bug+0x276/0x570 [ 263.617258][ T8295] ? __drm_atomic_helper_set_config+0xceb/0xef0 [ 263.623516][ T8295] ? __pfx___report_bug+0x10/0x10 [ 263.628557][ T8295] ? __drm_dev_dbg+0xf1/0x200 [ 263.633254][ T8295] ? __drm_atomic_helper_set_config+0xceb/0xef0 [ 263.639531][ T8295] report_bug+0x16b/0x220 [ 263.643900][ T8295] ? __drm_atomic_helper_set_config+0xceb/0xef0 [ 263.650183][ T8295] ? __drm_atomic_helper_set_config+0xced/0xef0 [ 263.656456][ T8295] handle_bug+0x9c/0x200 [ 263.660725][ T8295] exc_invalid_op+0x1a/0x50 [ 263.665257][ T8295] asm_exc_invalid_op+0x1a/0x20 [ 263.670136][ T8295] RIP: 0010:__drm_atomic_helper_set_config+0xceb/0xef0 [ 263.677015][ T8295] Code: ff e8 09 8a 3a fc e9 bf f9 ff ff e8 ff 89 3a fc 4c 8b 7c 24 30 e9 b0 f9 ff ff e8 f0 89 3a fc e9 a6 f9 ff ff e8 e6 89 3a fc 90 <0f> 0b 90 e9 ae f4 ff ff e8 d8 89 3a fc 90 0f 0b 90 e9 e4 f4 ff ff [ 263.696653][ T8295] RSP: 0018:ffffc90004ff7900 EFLAGS: 00010293 [ 263.702749][ T8295] RAX: ffffffff858d3b6a RBX: ffff888050de5328 RCX: ffff88801e3d8000 [ 263.710740][ T8295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.718742][ T8295] RBP: ffffc90004ff79f0 R08: 0000000000000025 R09: ffff888075fa28e0 [ 263.726731][ T8295] R10: ffff88804aac3d40 R11: ffffed10095587aa R12: ffff888054036200 [ 263.734728][ T8295] R13: ffff88804aac3c00 R14: 1ffff110052619f2 R15: 1ffff920009fef2c [ 263.742737][ T8295] ? __drm_atomic_helper_set_config+0xcea/0xef0 [ 263.749024][ T8295] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 263.755645][ T8295] ? drm_client_rotation+0x444/0x5b0 [ 263.760995][ T8295] drm_client_modeset_commit_atomic+0x4a9/0x7e0 [ 263.767350][ T8295] ? rcu_is_watching+0x16/0xb0 [ 263.772230][ T8295] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 263.779046][ T8295] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 263.785227][ T8295] drm_client_modeset_commit+0x4a/0x70 [ 263.790709][ T8295] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 263.797847][ T8295] drm_fbdev_client_restore+0x1b/0x30 [ 263.803246][ T8295] drm_client_dev_restore+0x14c/0x290 [ 263.808648][ T8295] drm_release+0x32d/0x400 [ 263.813091][ T8295] ? __pfx_drm_release+0x10/0x10 [ 263.818057][ T8295] __fput+0x418/0xa50 [ 263.822071][ T8295] task_work_run+0x1d9/0x270 [ 263.826686][ T8295] ? __pfx_task_work_run+0x10/0x10 [ 263.831826][ T8295] exit_to_user_mode_loop+0x204/0x770 [ 263.837226][ T8295] ? rcu_is_watching+0x16/0xb0 [ 263.842044][ T8295] do_syscall_64+0x328/0x520 [ 263.846665][ T8295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.852750][ T8295] ? clear_bhb_loop+0x70/0xc0 [ 263.857460][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.863386][ T8295] RIP: 0033:0x7f4693d9e159 [ 263.867823][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.887466][ T8295] RSP: 002b:00007f469414fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 263.895912][ T8295] RAX: 0000000000000000 RBX: 00007f4694027da0 RCX: 00007f4693d9e159 [ 263.903899][ T8295] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 263.911891][ T8295] RBP: 00007f4694027da0 R08: 00007f4694026038 R09: 0000000000000000 [ 263.919881][ T8295] R10: 00000000003ffb6c R11: 0000000000000246 R12: 000000000003fc9f [ 263.927892][ T8295] R13: 00007f469402609c R14: 000000000003f116 R15: 00007f4694026090 [ 263.935899][ T8295] [ 263.939527][ T8295] Kernel Offset: disabled [ 263.943884][ T8295] Rebooting in 86400 seconds..