last executing test programs: 18m13.975203652s ago: executing program 2 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xffffffff, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18m13.900289549s ago: executing program 2 (id=2552): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x8000000}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) 18m13.885374274s ago: executing program 2 (id=2553): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0x5) 18m13.828281712s ago: executing program 2 (id=2554): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e22, @multicast1}}) 18m13.704269394s ago: executing program 2 (id=2555): capset(&(0x7f0000000080)={0x20071026}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 18m13.62012363s ago: executing program 2 (id=2556): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000100000000001800128008000100687372000c00028008000200", @ANYRES32=r1, @ANYBLOB="08001f0007000000050027007a000000"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000100000000001800128008000100687372000c00028008000200", @ANYRES32=r1, @ANYBLOB="08001f0007000000050027007a000000"], 0x48}}, 0x0) (async) 18m13.395066013s ago: executing program 32 (id=2556): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000100000000001800128008000100687372000c00028008000200", @ANYRES32=r1, @ANYBLOB="08001f0007000000050027007a000000"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000100000000001800128008000100687372000c00028008000200", @ANYRES32=r1, @ANYBLOB="08001f0007000000050027007a000000"], 0x48}}, 0x0) (async) 8.393398446s ago: executing program 5 (id=8616): syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/330], 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) (async) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r1, &(0x7f0000000040)='./file0\x00', 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x1d, 0x0, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x1d, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x2, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\t'}, @timestamp_addr={0x44, 0x4, 0x83, 0x1, 0xf}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x2, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\t'}, @timestamp_addr={0x44, 0x4, 0x83, 0x1, 0xf}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x9c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x28}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffc00}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x838}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x84}]}]}, 0x9c}}, 0x8000) 6.966220687s ago: executing program 5 (id=8618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x7c}}, 0x0) close(r2) ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 6.789890384s ago: executing program 5 (id=8619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aa21c15601aaaaaaaaaaaa0086dd60000000000000000001fe8000000000000100000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12bb9b69de4386bf2ae6a3b321505c68cd1d12c52a2d43d2c855000000000000000000"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aa21c15601aaaaaaaaaaaa0086dd60000000000000000001fe8000000000000100000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12bb9b69de4386bf2ae6a3b321505c68cd1d12c52a2d43d2c855000000000000000000"], 0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}, {0x80000000}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000540)={0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, &(0x7f0000000240)=[{}], 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x80000000}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={r9, &(0x7f0000000140)=[{}, {0x80000000, 0x0}], 0x0}) syz_usb_connect$uac2(0x5, 0x8b, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x9, 0xb2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x20, 0x3ce}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000180)={{r8, r6, 0x5, [0x2, 0x8000]}, {r7, r10, 0x7, [0x4, 0x8]}, 0x10000000, [0x3, 0xa46dba4]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000180)={{r8, r6, 0x5, [0x2, 0x8000]}, {r7, r10, 0x7, [0x4, 0x8]}, 0x10000000, [0x3, 0xa46dba4]}) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) recvfrom$l2tp6(r11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r13, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r12], 0x38}}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.38432469s ago: executing program 3 (id=8627): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000740)='x', 0x1}], 0x2) 5.116094062s ago: executing program 4 (id=8631): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x9, 0x105000) write$hidraw(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x4008001) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x4004004) bind$packet(r5, &(0x7f0000000440)={0x11, 0x15, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r9, 0x4b48, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000000300)="3b5d5bbc1b79ac893619fb41098e511a53843899ae695acb233e4e6391eafb65ea6a890b6eebedb2388d5d7852638aa2d18807e0d34c5cdd8552b0ad7bd1a7693b696bcc665268d8fb123265aa5e42da289cefd54af37fef84a88d7a84ed157df8d68b6b3af4d5c90569f8edcae6445ab169b4cdeeaf67a1b2760084d71df435", 0x80}, {&(0x7f0000000380)="08024aad0774cdb4adb211d1f9b4384163fef57cb0aa8e17bde8cd7241716a495d7bacce949ddf0c31c19d8eee6aed4827164a2f8f4a40e73dd36bcb0a42bae94f945b93646b22c1532142c88e384751494b1d7549e4e9bdc3b93cff0200b7d8850dae798629931bb4b8a497f6642ba4875c325b5c258c6429232e694097765f2550d7", 0x83}, {&(0x7f0000000500)="e6361c2883c523d0763b5ca7ac7d1c509fedab0748a11232b9339f787e7324d9599c44a073aeee6fdb63c0ee6c391b4e2f62fbce9f2255b57b076291c5ce06f2497321630ad2adac79463b47a10d14c7cd7d33666f9a7a3e2d9034a3476a5cbea7e46fe4cfd138de52f81b6ee9698a054560bf3525c2f8885ddda6d14448b5916d473dc083cfa8a386caecfd637cc9f3e96759ab79efe8bf337dbe5dde4a9df0d6bd012787e005900120919d1019fb64d1dd6395c6572578880472ed456a221a3ea0c37028af60203cc15392e8420cc6e3c1ca3a60be7bdb9f6e03d37d0fadd7317590009c7066de640708172424dca04153", 0xf2}, {&(0x7f0000000600)="f22ab0337a1d06e046c0c6cf10ea0cb7e9f669b8942783042be608d261cb182733a39e853f3eedc53648ba7e9aa8ee7e08a78fc670a43adff7", 0x39}, {&(0x7f00000019c0)}], 0x5, &(0x7f0000002a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x51}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}], 0x98}}, {{&(0x7f0000002b00)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002b40)}, {&(0x7f0000002c80)="652d878ec1aedbf91c9e7e98155229ade9baa14964f824f29fda8e4f7be944581f83ea12743cc3913e0418c9e7834d5bfe15075efeabe6bb1c2f71bc3e9bb5462195b8867b73cda35629e3e8b24df6d1edeb347f723e347bbb983c9fd18686445b69f6e11be1d1c7a84c1397fd5a863aba1ace76a8ba734aa6fc2d924eef9ddd56d92e1704af2bc196a19feed9d6abef736f8c775f69df21190c47f5fc0b5c893292e5067c6f860e10e327786ebd8f0de5b3bc01cce396a42b626d770f", 0xbd}, {&(0x7f0000002d80)="21e4a20c069fb3c0bfbda75d19736230adac95ffede661f4006939c349159914e0fbbaf0c4354ed40ae288fd0848c14cd4db3540a88b6cf5fa9415c37d12027b322b2be0b347d0d66935258b7c9c891b4b79df7e06bebd89606dcd19", 0x5c}, {&(0x7f0000002e00)="e8df644945e25aa191952f89f68ac38fc21b80c44915106f9e0b2535e4ff17fe0f", 0x21}], 0x4, &(0x7f0000002ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x92a}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0x30}}, {{&(0x7f0000002f00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003f40)}}], 0x3, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100003ca12a102c105161e644000000010902120701000000000904"], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) 4.135662745s ago: executing program 0 (id=8635): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) 4.100367568s ago: executing program 1 (id=8636): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="47948d071800000000f9e5581e00000006000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.046277349s ago: executing program 0 (id=8637): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x2, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c00409045db9029793eb0b09050204200098043e5e0905080310000e05"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}], 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r4, 0x708, 0x9) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000b80)={0x0, 0x3, 0x5, &(0x7f0000000000)={0x1d, "bfffabae9ebef352f700f0231504fc48dbf72a9cba7b41c804c93c66b6318e83c2"}}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4004094) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000ffffffce0cff080045000028006400000402907800000000e000000211009078e00000022c32e00fd5f8068c8c912131"], 0x0) r5 = socket(0x1e, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000580)={r7, @in6={{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0xfffffffffffffd83}, &(0x7f0000000040)=0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 4.034898683s ago: executing program 1 (id=8638): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x4d08, &(0x7f0000000100)={0x0, 0xef9, 0x4, 0x2, 0x2ab}) r1 = io_uring_setup(0x1b55, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x1ea, 0x0, r0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x131601, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) ioctl$FIBMAP(r2, 0x1, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.814261789s ago: executing program 1 (id=8639): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002580)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x20000000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x381b2, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xfffffffffffffc85, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x1020) syz_usb_disconnect(r3) close_range(r2, 0xffffffffffffffff, 0x0) 3.632029421s ago: executing program 5 (id=8640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0xe040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r3, 0x40044591, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x4, 0x4, 0x10000, 0x4000, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xff070000, 0x3}, 0x50) r5 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fcdbdf2531000000080001002200000008000300", @ANYRES32=r6, @ANYBLOB="1e390c0099000983ff000808005200", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x20001890) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000300000012000000080003004a", @ANYRES32=r7, @ANYBLOB="0a00060008021100000000000500e40000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 3.516686108s ago: executing program 5 (id=8641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000010351212904000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240802", @ANYRES8=r0], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x4000000) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x800) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x1, r5}) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) write$binfmt_misc(r2, &(0x7f0000000000)="646c1b789da51684ec9152e2040cb4cb6b7f9039f03774c8683ab06af89fc75eae4a4932cfdd7b12177a5d9e5c", 0x2d) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) 2.502303049s ago: executing program 0 (id=8642): epoll_create(0x5) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r3, 0x25, &(0x7f0000000200)={0x1, 0x0, 0x9, 0x0, r2}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000006740)={&(0x7f0000000000)={0x50, 0x0, 0xfffffffffffffffc, {0x7, 0x2d, 0x0, 0x50002200, 0x0, 0x4, 0xfffffffa, 0x5, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2) 2.199229084s ago: executing program 1 (id=8643): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r1, r1, 0x0) statx(r1, 0x0, 0x1000, 0x6000, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x303, 0xff7f, 0x0, 0x7, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x15) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x2, {0x2, 0x4e20, @multicast1}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) write$tun(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="000088a8aa00b00ccff0001cf2ff31e2e803eb"], 0x13) r6 = semget(0x1, 0x4, 0x39c) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0xfffffffffffffffd, 0x1, 0x10, 0x0, 0x0, 0xb, 0x0, 0x80000000}, {0x1, 0xffffffffe, 0x4053e5, 0x23}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0x2, @in=@local, 0x3502, 0x1, 0x1, 0x0, 0x1, 0xdffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) semctl$GETVAL(r6, 0x4, 0xc, &(0x7f00000003c0)=""/59) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b4331856000094b93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}, {&(0x7f0000000400)="25e173077922e3c2fab4d5d1d234c5d8bee32ab8e1e370027784284b", 0x1c}], 0x4, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x24005810}], 0x1, 0x4a050) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/46, 0x2e}, {&(0x7f0000001a00)=""/124, 0x7c}], 0x5}, 0x0) 2.14121356s ago: executing program 3 (id=8644): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='user\x00', &(0x7f0000000080)=@secondary) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[], 0x1d, r0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffdfffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xe, 0x2, 0x1002, 0x1, 0xd, 0x7, 0x9, 0x8}}}}]}, 0x58}}, 0x4c850) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) keyctl$chown(0x4, r1, r4, 0xee00) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x2, 0x4, 0x358, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "177bc60d6843b93e904a44a64aa4964e002fb83129254387e3e340eaf860"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r8, &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000740)=""/4096, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) inotify_init1(0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) 2.042505737s ago: executing program 1 (id=8645): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x400a200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x200, 0x9, 0xe80d}) 1.976162399s ago: executing program 5 (id=8646): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000700)=""/248, 0xf8}], 0x2}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x304, 0x7}) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000040)={'erspan0\x00', 0x100}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) unshare(0x44000000) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x2, &(0x7f00000000c0)={0x10, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010003904fdffffff0000060000000000", @ANYRES32=0x0, @ANYBLOB="01b80400000000001800128008000100677265010000009d06000e0004000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x10, 0x4b2040) fcntl$lock(r1, 0x6, &(0x7f0000000380)={0x2, 0x0, 0x1, 0x1fe, r7}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="a90018"], 0x0, 0x0, 0x0, 0x0}) 1.975419571s ago: executing program 4 (id=8647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) shutdown(r1, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) poll(&(0x7f0000000140)=[{r1, 0xa0}], 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x200) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x5, 0x1, 0x2, 0xf, 0x4}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001080)={0x10}) syslog(0x3, &(0x7f00000000c0)=""/88, 0x58) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.884051031s ago: executing program 3 (id=8648): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) 1.728279914s ago: executing program 3 (id=8649): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000319000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 1.703608676s ago: executing program 4 (id=8650): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300), 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x32c1}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000009dc0)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1daf", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4040081) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) 1.652696964s ago: executing program 3 (id=8651): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0x7f97, 0x13581, 0x0, 0x1ff}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r3, 0x507, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x20000054) io_uring_enter(r2, 0x55, 0x84a23, 0xf, 0x0, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats={0x2c}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) 1.600562797s ago: executing program 0 (id=8652): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9fb90d3abc52620e66db24b7c4f64fd9120d01eaf7503e1c7cfe204909190cf53b6c107bdd3bbcb1b23721d91ea46be5b513aafd253d4342e", 0x6c, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.531995591s ago: executing program 3 (id=8653): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x4a3, &(0x7f0000009380)={0x0, 0x6cfd, 0x8, 0x1, 0x122}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3c, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x7d2d732298b18228, 0x0, 0xa, 0xcd}}}}}]}}]}}, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2100) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000440)={0x0, 0xfb, 0xbc, 0xbd4db5a2061e725f, 0x1, "3e9a75f5cf88c1d441a46086b0d49f55", "b4ea2bca386283cb3f08006f2324262e0fb2a9fc3e1ec81917c2130669c19ea2c7b5938d23fa4412ddff678344adfe32e171460e4a930ac29d0ee99756a72c9ccf32a48ae13db14582bb45ad57837d415e543d6f9d1a62cba2d6feeaa9910c999fb6215731d9e88a32193b50c8176ccb2d1e8b6af6776d86ab161744cc50f0c0ac03debbd1336376be20bc9e5adfc1ca37abaa30724d6eff68e39a5156d7b0f6756a8a49ecb438"}, 0xbc, 0x1) syz_open_dev$loop(&(0x7f0000001800), 0x8, 0x101000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r3, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000280)={0x9a0000, 0x7, 0xd571, 0xffffffffffffffff, 0x0, 0x0}) mkdir(0x0, 0x22) r4 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x86, 0x1c9}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000) io_uring_enter(r4, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r4, 0x5bbb, 0xc549, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x24, 0x28, {0x28, 0xd, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5c6f, &(0x7f00000000c0)={0x0, 0x75b, 0x10, 0x2, 0x178}, &(0x7f0000009480), &(0x7f00000094c0), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.466108597s ago: executing program 0 (id=8654): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000740)='x', 0x1}], 0x2) 1.28393256s ago: executing program 1 (id=8655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x1, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000002c0)={0xfb, 0x1d, 0x3, 0x2fd, "4d512c91002a49506761425a7108d7d3f82acf5a895bd900000000000000009c"}) 743.446746ms ago: executing program 4 (id=8656): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x4c000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8) 651.783205ms ago: executing program 4 (id=8657): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0407ff02aaaaaaaaaa1285b3567d7fe250249b7b70cef7afc74126a99d9a44ef265c7d1caf468df2b179e65401f81df5f856947b9ac93daebaf8d4ef8d3de6ee2f7394e22a1b221ceb165df78bd17a3d2fd478b6a1cabf58ca3ec520a102a3a214f08f548275a76470bbd8730ccddb5868f72dc072"], 0x102) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000000f6ff0000000000020000000000000600ddc357bd8ce3a3030a000000000000002a8372907a67d87d646e62720723da4611ab4749839a4a9696411807ff000000000000f4a357a20e48050730ac342cffb18b8c28f4fdefdca3157e55a5ff0353a0f4e71e16447901d5ca01a8a6ed9bc22fbd3465998f1d0000a809000000000000000000400000", @ANYRES32=r0, @ANYBLOB="08000400", @ANYRES32, @ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x81) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000300)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) utimensat(r4, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 488.342907ms ago: executing program 4 (id=8658): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x9, 0x105000) write$hidraw(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x4008001) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x4004004) bind$packet(r5, &(0x7f0000000440)={0x11, 0x15, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r9, 0x4b48, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000000300)="3b5d5bbc1b79ac893619fb41098e511a53843899ae695acb233e4e6391eafb65ea6a890b6eebedb2388d5d7852638aa2d18807e0d34c5cdd8552b0ad7bd1a7693b696bcc665268d8fb123265aa5e42da289cefd54af37fef84a88d7a84ed157df8d68b6b3af4d5c90569f8edcae6445ab169b4cdeeaf67a1b2760084d71df435", 0x80}, {&(0x7f0000000380)="08024aad0774cdb4adb211d1f9b4384163fef57cb0aa8e17bde8cd7241716a495d7bacce949ddf0c31c19d8eee6aed4827164a2f8f4a40e73dd36bcb0a42bae94f945b93646b22c1532142c88e384751494b1d7549e4e9bdc3b93cff0200b7d8850dae798629931bb4b8a497f6642ba4875c325b5c258c6429232e694097765f2550d7", 0x83}, {&(0x7f0000000500)="e6361c2883c523d0763b5ca7ac7d1c509fedab0748a11232b9339f787e7324d9599c44a073aeee6fdb63c0ee6c391b4e2f62fbce9f2255b57b076291c5ce06f2497321630ad2adac79463b47a10d14c7cd7d33666f9a7a3e2d9034a3476a5cbea7e46fe4cfd138de52f81b6ee9698a054560bf3525c2f8885ddda6d14448b5916d473dc083cfa8a386caecfd637cc9f3e96759ab79efe8bf337dbe5dde4a9df0d6bd012787e005900120919d1019fb64d1dd6395c6572578880472ed456a221a3ea0c37028af60203cc15392e8420cc6e3c1ca3a60be7bdb9f6e03d37d0fadd7317590009c7066de640708172424dca04153", 0xf2}, {&(0x7f0000000600)="f22ab0337a1d06e046c0c6cf10ea0cb7e9f669b8942783042be608d261cb182733a39e853f3eedc53648ba7e9aa8ee7e08a78fc670a43adff7", 0x39}, {&(0x7f00000019c0)}], 0x5, &(0x7f0000002a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x51}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}], 0x98}}, {{&(0x7f0000002b00)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002b40)}, {&(0x7f0000002c80)="652d878ec1aedbf91c9e7e98155229ade9baa14964f824f29fda8e4f7be944581f83ea12743cc3913e0418c9e7834d5bfe15075efeabe6bb1c2f71bc3e9bb5462195b8867b73cda35629e3e8b24df6d1edeb347f723e347bbb983c9fd18686445b69f6e11be1d1c7a84c1397fd5a863aba1ace76a8ba734aa6fc2d924eef9ddd56d92e1704af2bc196a19feed9d6abef736f8c775f69df21190c47f5fc0b5c893292e5067c6f860e10e327786ebd8f0de5b3bc01cce396a42b626d770f", 0xbd}, {&(0x7f0000002d80)="21e4a20c069fb3c0bfbda75d19736230adac95ffede661f4006939c349159914e0fbbaf0c4354ed40ae288fd0848c14cd4db3540a88b6cf5fa9415c37d12027b322b2be0b347d0d66935258b7c9c891b4b79df7e06bebd89606dcd19", 0x5c}, {&(0x7f0000002e00)="e8df644945e25aa191952f89f68ac38fc21b80c44915106f9e0b2535e4ff17fe0f", 0x21}], 0x4, &(0x7f0000002ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x92a}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0x30}}, {{&(0x7f0000002f00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003f40)}}], 0x3, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100003ca12a102c105161e644000000010902120701000000000904"], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) 0s ago: executing program 0 (id=8659): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a"], 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4000009a}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003c9a04c10c95f61003c24000004d9dc97b3000107061005090400fe00b4b3120334f22c81"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): :0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1647.549822][T32393] usb 2-1: USB disconnect, device number 89 [ 1647.555947][ T8593] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1647.699581][ T558] openvswitch: netlink: IP tunnel dst address not specified [ 1647.728512][ T8593] usb 1-1: Using ep0 maxpacket: 32 [ 1647.741724][ T8593] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1647.756771][ T8593] usb 1-1: config 14 has an invalid interface number: 57 but max is 0 [ 1647.768471][ T8593] usb 1-1: config 14 has no interface number 0 [ 1647.772880][ T563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1647.781593][ T8593] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1647.802562][ T8593] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1647.816173][ T8593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.846712][ T8593] usb 1-1: Product: syz [ 1647.853627][ T8593] usb 1-1: Manufacturer: syz [ 1647.866183][ T8593] usb 1-1: SerialNumber: syz [ 1647.949406][ T566] netlink: 'syz.5.8347': attribute type 2 has an invalid length. [ 1648.307501][ T576] FAULT_INJECTION: forcing a failure. [ 1648.307501][ T576] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.356967][ T576] CPU: 0 UID: 0 PID: 576 Comm: syz.4.8351 Tainted: G L syzkaller #0 PREEMPT(full) [ 1648.356993][ T576] Tainted: [L]=SOFTLOCKUP [ 1648.357000][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1648.357015][ T576] Call Trace: [ 1648.357023][ T576] [ 1648.357031][ T576] dump_stack_lvl+0xe8/0x150 [ 1648.357061][ T576] should_fail_ex+0x412/0x560 [ 1648.357089][ T576] should_failslab+0xa8/0x100 [ 1648.357109][ T576] ? __pmd_alloc+0xc1/0x5c0 [ 1648.357131][ T576] kmem_cache_alloc_noprof+0x87/0x650 [ 1648.357163][ T576] __pmd_alloc+0xc1/0x5c0 [ 1648.357185][ T576] handle_mm_fault+0xeb7/0x3170 [ 1648.357228][ T576] ? handle_mm_fault+0xf1/0x3170 [ 1648.357257][ T576] ? __pfx_handle_mm_fault+0x10/0x10 [ 1648.357291][ T576] ? __lock_acquire+0x6b5/0x2cf0 [ 1648.357315][ T576] ? lock_mm_and_find_vma+0xa7/0x340 [ 1648.357343][ T576] do_user_addr_fault+0x75b/0x1340 [ 1648.357377][ T576] exc_page_fault+0x6a/0xc0 [ 1648.357398][ T576] asm_exc_page_fault+0x26/0x30 [ 1648.357416][ T576] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1648.357439][ T576] Code: e9 d4 57 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 1648.357453][ T576] RSP: 0018:ffffc90006c1fc78 EFLAGS: 00050202 [ 1648.357470][ T576] RAX: ffffffff84b1e3ff RBX: 0000000000000002 RCX: 0000000000000002 [ 1648.357482][ T576] RDX: 0000000000000000 RSI: ffffffff8c2043e0 RDI: 0000200000000bc0 [ 1648.357494][ T576] RBP: ffffc90006c1fee0 R08: 0000000000000001 R09: 0000000000000002 [ 1648.357505][ T576] R10: dffffc0000000000 R11: fffffbfff184087c R12: 0000200000000bc2 [ 1648.357517][ T576] R13: 00007ffffffff000 R14: ffffffff8c2043e0 R15: 0000200000000bc0 [ 1648.357537][ T576] ? check_zeroed_user+0x7f/0x170 [ 1648.357567][ T576] _copy_to_user+0x8a/0xb0 [ 1648.357591][ T576] keyctl_capabilities+0x50/0x160 [ 1648.357619][ T576] __se_sys_keyctl+0x4cc/0x9e0 [ 1648.357645][ T576] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1648.357671][ T576] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1648.357695][ T576] ? __fget_files+0x3a0/0x420 [ 1648.357723][ T576] ? fput+0xa0/0xd0 [ 1648.357743][ T576] ? ksys_write+0x242/0x270 [ 1648.357771][ T576] ? __pfx_ksys_write+0x10/0x10 [ 1648.357801][ T576] ? __x64_sys_keyctl+0x20/0xc0 [ 1648.357824][ T576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.357843][ T576] do_syscall_64+0x174/0x580 [ 1648.357860][ T576] ? trace_irq_disable+0x3b/0x140 [ 1648.357887][ T576] ? clear_bhb_loop+0x40/0x90 [ 1648.357910][ T576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.357927][ T576] RIP: 0033:0x7f32f7b9ce59 [ 1648.357943][ T576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.357957][ T576] RSP: 002b:00007f32f8b25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1648.357975][ T576] RAX: ffffffffffffffda RBX: 00007f32f7e15fa0 RCX: 00007f32f7b9ce59 [ 1648.357987][ T576] RDX: 00000000000000f5 RSI: 0000200000000bc0 RDI: 000000000000001f [ 1648.357998][ T576] RBP: 00007f32f8b25090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.358009][ T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.358019][ T576] R13: 00007f32f7e16038 R14: 00007f32f7e15fa0 R15: 00007f32f7f3fa48 [ 1648.358048][ T576] [ 1648.757100][T32393] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1648.917733][ T582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1648.985980][T23880] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1649.069048][ T8593] legousbtower 1-1:14.57: interrupt endpoints not found [ 1649.101487][ T8593] usb 1-1: USB disconnect, device number 54 [ 1649.121185][T32393] usb 6-1: Using ep0 maxpacket: 32 [ 1649.138372][T32393] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1649.148473][T23880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.166740][T32393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.176510][T23880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1649.195544][T32393] usb 6-1: Product: syz [ 1649.205433][T32393] usb 6-1: Manufacturer: syz [ 1649.219109][T23880] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 1649.222214][T32393] usb 6-1: SerialNumber: syz [ 1649.237942][T23880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.255104][T23880] usb 2-1: Product: syz [ 1649.265985][T23880] usb 2-1: Manufacturer: syz [ 1649.266651][T32393] usb 6-1: config 0 descriptor?? [ 1649.281274][T23880] usb 2-1: SerialNumber: syz [ 1649.497840][T32393] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1649.506695][ T8593] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1649.535521][T32393] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1649.617262][T23880] usb 2-1: USB disconnect, device number 90 [ 1649.636754][T32393] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1649.648864][T32393] usb 6-1: USB disconnect, device number 20 [ 1649.676518][ T8593] usb 1-1: Using ep0 maxpacket: 16 [ 1649.686843][ T8593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1649.700250][ T8593] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1649.710143][ T8593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.718185][ T8593] usb 1-1: Product: syz [ 1649.722360][ T8593] usb 1-1: Manufacturer: syz [ 1649.727086][ T8593] usb 1-1: SerialNumber: syz [ 1649.734506][ T8593] usb 1-1: config 0 descriptor?? [ 1649.743162][ T8593] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1649.752672][ T8593] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1649.806958][ T601] trusted_key: encrypted_key: insufficient parameters specified [ 1650.076137][T23880] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1650.113225][ T604] fuse: Unknown parameter '/dev/fuse' [ 1650.240326][T23880] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1650.251420][T23880] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1650.265235][T23880] usb 4-1: config 0 has no interface number 0 [ 1650.274676][T23880] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1650.284196][T23880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.292595][T23880] usb 4-1: Product: syz [ 1650.298659][T23880] usb 4-1: Manufacturer: syz [ 1650.303310][T23880] usb 4-1: SerialNumber: syz [ 1650.317382][T23880] usb 4-1: config 0 descriptor?? [ 1650.348464][ T8593] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1650.467856][ T619] xt_hashlimit: size too large, truncated to 1048576 [ 1650.531692][ T621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1650.559849][T32393] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1650.716437][T32393] usb 2-1: Using ep0 maxpacket: 8 [ 1650.723174][T32393] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1650.731647][T32393] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1650.741713][T32393] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1650.751773][T32393] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1650.756742][T23882] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1650.762173][T32393] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1650.782471][T32393] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1650.792579][T32393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.805290][ T8593] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1650.821843][ T8593] em28xx 1-1:0.0: board has no eeprom [ 1650.925927][T23882] usb 6-1: Using ep0 maxpacket: 32 [ 1650.933049][T23882] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1650.941906][T23882] usb 6-1: config 14 has an invalid interface number: 57 but max is 0 [ 1650.950205][T23881] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1650.957874][T23882] usb 6-1: config 14 has no interface number 0 [ 1650.964109][T23882] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1650.974220][T23882] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1650.983374][T23882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.991481][T23882] usb 6-1: Product: syz [ 1650.995735][T23882] usb 6-1: Manufacturer: syz [ 1651.000585][T23882] usb 6-1: SerialNumber: syz [ 1651.013334][T32393] usb 2-1: usb_control_msg returned -32 [ 1651.021869][T32393] usbtmc 2-1:16.0: can't read capabilities [ 1651.106082][ T8593] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1651.114936][ T8593] em28xx 1-1:0.0: dvb set to bulk mode. [ 1651.120976][T23881] usb 5-1: Using ep0 maxpacket: 32 [ 1651.130044][T32382] em28xx 1-1:0.0: Binding DVB extension [ 1651.143147][T23881] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1651.163572][T23881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.171692][T23881] usb 5-1: Product: syz [ 1651.175999][T23881] usb 5-1: Manufacturer: syz [ 1651.180654][T23881] usb 5-1: SerialNumber: syz [ 1651.192420][T23881] usb 5-1: config 0 descriptor?? [ 1651.294801][T23880] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1651.304253][T23880] uvcvideo 4-1:0.64: No valid video chain found. [ 1651.316441][T23880] usb 4-1: USB disconnect, device number 110 [ 1651.394880][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.396401][ T632] netlink: 'syz.3.8370': attribute type 12 has an invalid length. [ 1651.411446][ T632] netlink: 'syz.3.8370': attribute type 29 has an invalid length. [ 1651.420696][ T632] netlink: 'syz.3.8370': attribute type 7 has an invalid length. [ 1651.429855][ T632] netlink: 'syz.3.8370': attribute type 37 has an invalid length. [ 1651.434515][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.438732][ T632] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8370'. [ 1651.457975][ T630] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 1651.476963][T23881] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 096 [ 1651.660591][T32393] usb 1-1: USB disconnect, device number 55 [ 1651.664874][T23880] usb 2-1: USB disconnect, device number 91 [ 1651.678666][T32393] em28xx 1-1:0.0: Disconnecting em28xx [ 1651.704473][ T627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8368'. [ 1651.731934][T32382] em28xx 1-1:0.0: Registering input extension [ 1651.745002][T32393] em28xx 1-1:0.0: Closing input extension [ 1651.974477][T23882] legousbtower 6-1:14.57: interrupt endpoints not found [ 1651.991558][T23882] usb 6-1: USB disconnect, device number 21 [ 1652.275933][T16262] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1652.295847][ T649] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1652.302548][ T649] PKCS7: Only support pkcs7_signedData type [ 1652.432838][ T657] trusted_key: encrypted_key: insufficient parameters specified [ 1652.449290][T16262] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.460742][T16262] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1652.478267][T16262] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 1652.487456][T16262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.495517][T16262] usb 4-1: Product: syz [ 1652.500203][T16262] usb 4-1: Manufacturer: syz [ 1652.504840][T16262] usb 4-1: SerialNumber: syz [ 1652.590462][ T30] audit: type=1326 audit(1780918034.258:21117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=664 comm="syz.1.8381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1652.617129][ T30] audit: type=1326 audit(1780918034.258:21118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=664 comm="syz.1.8381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1652.642171][ T30] audit: type=1326 audit(1780918034.258:21119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=664 comm="syz.1.8381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1652.675987][ T30] audit: type=1326 audit(1780918034.258:21120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=664 comm="syz.1.8381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1652.701878][ T30] audit: type=1326 audit(1780918034.258:21121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=664 comm="syz.1.8381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1652.796045][T32390] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1652.860632][T16262] usb 4-1: USB disconnect, device number 111 [ 1652.924431][ T30] audit: type=1326 audit(1780918034.588:21122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=664 comm="syz.1.8381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1652.950206][ T30] audit: type=1326 audit(1780918034.588:21123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=664 comm="syz.1.8381" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1652.981552][T32390] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1652.998045][T32390] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1653.015786][T32390] usb 6-1: config 0 has no interface number 0 [ 1653.024158][T32390] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1653.033469][T32390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.043508][T32390] usb 6-1: Product: syz [ 1653.047930][T32390] usb 6-1: Manufacturer: syz [ 1653.052543][T32390] usb 6-1: SerialNumber: syz [ 1653.065418][T32390] usb 6-1: config 0 descriptor?? [ 1653.191965][ T672] xt_hashlimit: size too large, truncated to 1048576 [ 1653.230752][ T5646] Bluetooth: hci5: ACL packet for unknown connection handle 3291 [ 1653.665142][T32393] em28xx 1-1:0.0: Freeing device [ 1653.669068][T23880] usb 5-1: USB disconnect, device number 96 [ 1653.696102][T16262] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1653.876065][T16262] usb 4-1: Using ep0 maxpacket: 16 [ 1653.884129][T16262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1653.898673][T16262] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1653.908362][T16262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.914522][ T30] audit: type=1326 audit(1780918035.588:21124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=681 comm="syz.4.8386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32f7b9ce59 code=0x0 [ 1653.929136][T16262] usb 4-1: Product: syz [ 1653.945276][T16262] usb 4-1: Manufacturer: syz [ 1653.950044][T16262] usb 4-1: SerialNumber: syz [ 1653.957865][T16262] usb 4-1: config 0 descriptor?? [ 1653.967217][T16262] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1653.976611][T16262] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1653.985980][T32393] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1654.016128][T32390] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1654.024474][T32390] uvcvideo 6-1:0.64: No valid video chain found. [ 1654.039817][T32390] usb 6-1: USB disconnect, device number 22 [ 1654.148813][T32393] usb 1-1: Using ep0 maxpacket: 32 [ 1654.163057][T32393] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1654.183467][T32393] usb 1-1: config 14 has an invalid interface number: 57 but max is 0 [ 1654.202279][T32393] usb 1-1: config 14 has no interface number 0 [ 1654.215944][T32393] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1654.235431][T32393] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1654.251524][T32393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.282164][T32393] usb 1-1: Product: syz [ 1654.293782][T32393] usb 1-1: Manufacturer: syz [ 1654.307022][T32393] usb 1-1: SerialNumber: syz [ 1654.355566][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1654.378410][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1654.386515][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1654.395262][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1654.405176][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1654.602939][T16262] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1654.893109][ T698] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1655.026446][T16262] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1655.034518][T16262] em28xx 4-1:0.0: board has no eeprom [ 1655.169183][T20423] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.196380][T32390] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1655.268442][ T691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.276151][ T691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.296752][ T691] bridge_slave_0: entered allmulticast mode [ 1655.304581][ T691] bridge_slave_0: entered promiscuous mode [ 1655.325538][T32393] legousbtower 1-1:14.57: interrupt endpoints not found [ 1655.337033][T16262] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1655.354800][T16262] em28xx 4-1:0.0: dvb set to bulk mode. [ 1655.368063][T32393] usb 1-1: USB disconnect, device number 56 [ 1655.384130][T32390] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1655.401911][T20423] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.419880][T32392] em28xx 4-1:0.0: Binding DVB extension [ 1655.425588][T32390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.451791][T32390] usb 2-1: config 0 descriptor?? [ 1655.476743][T32390] cp210x 2-1:0.0: cp210x converter detected [ 1655.549642][ T691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.558826][ T691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.566189][ T691] bridge_slave_1: entered allmulticast mode [ 1655.573995][ T691] bridge_slave_1: entered promiscuous mode [ 1655.648352][T20423] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.722519][ T30] audit: type=1326 audit(1780918037.388:21125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=708 comm="syz.0.8392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5939ce59 code=0x7ffc0000 [ 1655.765917][ T30] audit: type=1326 audit(1780918037.398:21126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=708 comm="syz.0.8392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed5939ce59 code=0x7ffc0000 [ 1655.870884][T32382] usb 4-1: USB disconnect, device number 112 [ 1655.879584][T32382] em28xx 4-1:0.0: Disconnecting em28xx [ 1655.918783][ T691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.982354][T20423] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.985354][T32392] em28xx 4-1:0.0: Registering input extension [ 1656.022680][T32382] em28xx 4-1:0.0: Closing input extension [ 1656.051131][ T691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.084804][T32382] em28xx 4-1:0.0: Freeing device [ 1656.097525][T32390] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1656.121127][T32390] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1656.169148][T32390] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1656.193143][T32390] usb 2-1: USB disconnect, device number 92 [ 1656.209612][ T691] team0: Port device team_slave_0 added [ 1656.223118][T32390] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1656.234968][ T691] team0: Port device team_slave_1 added [ 1656.249936][T32390] cp210x 2-1:0.0: device disconnected [ 1656.320936][ T691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.336591][ T691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.394991][ T691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.414682][ T691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.421904][ T691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.462062][ T691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.483656][ T5639] Bluetooth: hci3: command tx timeout [ 1656.641786][ T716] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1656.795979][T23880] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1656.801502][ T691] hsr_slave_0: entered promiscuous mode [ 1656.819207][ T691] hsr_slave_1: entered promiscuous mode [ 1656.930181][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1656.966923][T23880] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1656.981922][T23880] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1657.002374][T23880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1657.044689][T23880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1657.071901][T23880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1657.104927][T23880] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1657.114965][T23880] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1657.123646][T20437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1657.154336][T23880] usb 5-1: Product: syz [ 1657.168590][T23880] usb 5-1: Manufacturer: syz [ 1657.176690][T32382] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1657.201733][T23880] cdc_wdm 5-1:1.0: skipping garbage [ 1657.222809][T23880] cdc_wdm 5-1:1.0: skipping garbage [ 1657.230047][T23880] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1657.239165][T23880] cdc_wdm 5-1:1.0: Unknown control protocol [ 1657.317518][T20423] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1657.336615][T32382] usb 1-1: Using ep0 maxpacket: 32 [ 1657.350839][T32382] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1657.377600][T32382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.402822][T32382] usb 1-1: Product: syz [ 1657.403432][T32392] usb 5-1: USB disconnect, device number 97 [ 1657.409083][T23881] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1657.414145][ T714] cdc_wdm 5-1:1.0: Error submitting int urb - -19 [ 1657.428237][T32382] usb 1-1: Manufacturer: syz [ 1657.432958][T32382] usb 1-1: SerialNumber: syz [ 1657.454598][T32382] usb 1-1: config 0 descriptor?? [ 1657.587413][T23881] usb 2-1: Using ep0 maxpacket: 8 [ 1657.602872][T23881] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1657.614825][T20423] bond0 (unregistering): (slave 4é): Releasing backup interface [ 1657.634943][T23881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1657.651689][T23881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1657.662292][T20423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.682162][T23881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1657.697013][T20423] bond0 (unregistering): Released all slaves [ 1657.705970][T23881] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1657.732946][T32382] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 057 [ 1657.746481][T20423] bond1 (unregistering): Released all slaves [ 1657.754525][T23881] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1657.773295][T23881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.822409][T20423] bond2 (unregistering): Released all slaves [ 1657.864239][T20423] bond3 (unregistering): Released all slaves [ 1657.899948][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1657.899961][ T30] audit: type=1326 audit(1780918039.568:21132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1657.946670][ T30] audit: type=1326 audit(1780918039.608:21133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1657.972105][ T30] audit: type=1326 audit(1780918039.608:21134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1658.006914][T23881] usb 2-1: usb_control_msg returned -32 [ 1658.010273][ T750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8399'. [ 1658.023609][ T30] audit: type=1326 audit(1780918039.608:21135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1658.030060][T23881] usbtmc 2-1:16.0: can't read capabilities [ 1658.054283][ T30] audit: type=1326 audit(1780918039.608:21136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1658.081971][ T751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8395'. [ 1658.092241][ T727] bridge6: port 1(dummy0) entered blocking state [ 1658.098952][ T727] bridge6: port 1(dummy0) entered disabled state [ 1658.106251][ T727] dummy0: entered allmulticast mode [ 1658.125219][ T727] dummy0: entered promiscuous mode [ 1658.152989][ T30] audit: type=1326 audit(1780918039.608:21137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1658.243410][ T30] audit: type=1326 audit(1780918039.608:21138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1658.278928][ T757] xt_hashlimit: size too large, truncated to 1048576 [ 1658.310327][ T30] audit: type=1326 audit(1780918039.608:21139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=747 comm="syz.4.8399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f32f7b9ce59 code=0x7ffc0000 [ 1658.347821][T20423] tipc: Disabling bearer [ 1658.353467][T20423] tipc: Left network mode [ 1658.367634][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1658.413837][ T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.439885][ T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.456834][ T729] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 1658.558117][ T5639] Bluetooth: hci3: command tx timeout [ 1658.628103][T32390] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1658.663061][T23882] usb 2-1: USB disconnect, device number 93 [ 1658.787280][T32390] usb 4-1: Using ep0 maxpacket: 32 [ 1658.811261][T32390] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1658.821122][T32390] usb 4-1: config 14 has an invalid interface number: 57 but max is 0 [ 1658.832693][T32390] usb 4-1: config 14 has no interface number 0 [ 1658.841036][T32390] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1658.854046][T32390] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1658.864049][T32390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.875288][T32390] usb 4-1: Product: syz [ 1658.880535][T32390] usb 4-1: Manufacturer: syz [ 1658.886153][T32390] usb 4-1: SerialNumber: syz [ 1659.170800][T20423] hsr_slave_0: left promiscuous mode [ 1659.181058][T20423] hsr_slave_1: left promiscuous mode [ 1659.187497][T20423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.195646][T20423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.403273][T20423] team0 (unregistering): Port device team_slave_1 removed [ 1659.424096][T20423] team0 (unregistering): Port device team_slave_0 removed [ 1659.767059][ T691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1659.788016][ T691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1659.797100][ T691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1659.813464][ T691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1659.827500][ T691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1659.858073][ T691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1659.873338][T32382] usb 1-1: USB disconnect, device number 57 [ 1659.880029][ T691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1659.921939][ T691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1660.210470][ T30] audit: type=1326 audit(1780918041.878:21140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=803 comm="syz.1.8404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1660.243240][T32390] legousbtower 4-1:14.57: interrupt endpoints not found [ 1660.273884][ T691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.307649][ T30] audit: type=1326 audit(1780918041.878:21141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=803 comm="syz.1.8404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1660.313012][T32390] usb 4-1: USB disconnect, device number 113 [ 1660.343384][ T691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.425755][T20430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.432937][T20430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.440937][T32382] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1660.454560][T20430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.461762][T20430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.636162][ T5639] Bluetooth: hci3: command tx timeout [ 1660.653972][ T691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.742647][ T691] veth0_vlan: entered promiscuous mode [ 1660.765406][ T691] veth1_vlan: entered promiscuous mode [ 1660.818942][ T691] veth0_macvtap: entered promiscuous mode [ 1660.843484][ T691] veth1_macvtap: entered promiscuous mode [ 1660.887538][ T691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.914935][ T691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.944944][T20437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.967034][T20437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.992760][T20437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.020002][T20437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.086669][T32382] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1661.187004][T20437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.218416][T20437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.257775][T32382] usb 1-1: config 0 has no interfaces? [ 1661.280948][T32382] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1661.319175][T32382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.332502][T20428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.338745][ T826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8408'. [ 1661.372042][T20428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.380446][T32382] usb 1-1: config 0 descriptor?? [ 1661.382678][ T826] bridge_slave_0: left allmulticast mode [ 1661.402650][ T826] bridge_slave_0: left promiscuous mode [ 1661.409072][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.555712][ T838] trusted_key: encrypted_key: insufficient parameters specified [ 1661.620762][ T814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.631889][ T814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.641321][T16262] usb 1-1: USB disconnect, device number 59 [ 1661.685998][T32393] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1661.827897][T32390] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1661.856426][T32393] usb 5-1: Using ep0 maxpacket: 8 [ 1661.873069][T32393] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1661.881884][T32393] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1661.892404][T32393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1661.902679][T32393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1661.914315][T32393] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1661.929414][T32393] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1661.940405][T23880] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1661.948605][T32393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.987684][T32390] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1662.003805][T32390] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1662.015210][T32390] usb 2-1: config 0 has no interface number 0 [ 1662.025108][T32390] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1662.034666][T32390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.045535][T32390] usb 2-1: Product: syz [ 1662.049909][T32390] usb 2-1: Manufacturer: syz [ 1662.054619][T32390] usb 2-1: SerialNumber: syz [ 1662.064909][T32390] usb 2-1: config 0 descriptor?? [ 1662.096558][T16262] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1662.105937][T23880] usb 4-1: Using ep0 maxpacket: 32 [ 1662.119583][T23880] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1662.146275][T23880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.157743][T23880] usb 4-1: Product: syz [ 1662.166271][T23880] usb 4-1: Manufacturer: syz [ 1662.176877][T23880] usb 4-1: SerialNumber: syz [ 1662.180455][T32393] usb 5-1: usb_control_msg returned -32 [ 1662.190817][T23880] usb 4-1: config 0 descriptor?? [ 1662.194557][T32393] usbtmc 5-1:16.0: can't read capabilities [ 1662.248108][T16262] usb 1-1: config 1 has an invalid interface number: 170 but max is 0 [ 1662.257162][T16262] usb 1-1: config 1 has no interface number 0 [ 1662.263379][T16262] usb 1-1: config 1 interface 170 has no altsetting 0 [ 1662.274221][T16262] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 1662.289969][T16262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.300461][T16262] usb 1-1: Product: syz [ 1662.304703][T16262] usb 1-1: Manufacturer: syz [ 1662.311170][T16262] usb 1-1: SerialNumber: syz [ 1662.472313][T23880] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 114 [ 1662.527011][ T814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.537027][ T814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.570240][ T865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.579714][ T865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.590776][ T865] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 1662.610640][ T868] fuse: Bad value for 'fd' [ 1662.635591][ T868] binder: 861:868 ioctl 4018620d 0 returned -22 [ 1662.668300][ T868] No such timeout policy "syz1" [ 1662.716046][ T5639] Bluetooth: hci3: command tx timeout [ 1662.742612][ T862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8411'. [ 1662.793228][T30064] usb 5-1: USB disconnect, device number 98 [ 1662.858125][T16262] hub 1-1:1.170: bad descriptor, ignoring hub [ 1662.884783][T16262] hub 1-1:1.170: probe with driver hub failed with error -5 [ 1662.903832][T16262] usbsevseg 1-1:1.170: USB 7 Segment device now attached [ 1662.937072][T16262] usb 1-1: USB disconnect, device number 60 [ 1662.946544][T16262] usbsevseg 1-1:1.170: USB 7 Segment now disconnected [ 1663.046984][T32390] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1663.064263][T32390] uvcvideo 2-1:0.64: No valid video chain found. [ 1663.089042][T32390] usb 2-1: USB disconnect, device number 94 [ 1663.365391][ T875] xt_hashlimit: size too large, truncated to 1048576 [ 1663.666012][T23880] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1663.835989][T32390] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1663.846659][T23880] usb 5-1: Using ep0 maxpacket: 32 [ 1663.854262][T23880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1663.863144][T23880] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 1663.871743][T23880] usb 5-1: config 14 has no interface number 0 [ 1663.878995][T23880] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1663.888038][T23880] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1663.897334][T23880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.905334][T23880] usb 5-1: Product: syz [ 1663.909587][T23880] usb 5-1: Manufacturer: syz [ 1663.915178][T23880] usb 5-1: SerialNumber: syz [ 1663.986103][T32390] usb 1-1: Using ep0 maxpacket: 16 [ 1664.001316][T32390] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1664.012709][T32390] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1664.017783][T30064] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1664.029418][T32390] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1664.039987][T32390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.049065][T32390] usb 1-1: Product: 敇潖ᦺﻗ¿ዸ祜ꦽ숎軜䌹떅ä¿áž¼ç‰¹âº›è´â½¾í‰ åº…ꇌé“擛鴸爎䘑ᑃï¬á¿Œå¾žë§ƒâ–‚⣸ì²íž¼é·»ã£‹ì ªá¾šè–¹ë³¨ã€’駥繌ì¾í’‘í¹é¾„႒ȯ璬⃮希è§î²¥ã’±äœ†ç™¨ï¬®å­©ë¨¼ï«¢æ¥•å¡²êž«èªœâ°–䩠浲屦툘à³í”ºä¶å¶•ë ‹á¼‹â‘–固î®ï—„ﾂ혮 [ 1664.077366][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1664.077381][ T30] audit: type=1326 audit(1780918045.748:21147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.108837][ T30] audit: type=1326 audit(1780918045.748:21148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.116242][T32390] usb 1-1: Manufacturer: 钅抴ç»ç¡ïœ™êŽ»ìŸàª‚￤胜婱᫱홖藧솣佮⧌Ԙ캩䓋朜䈇⿲㤅㋱á·í‹½ [ 1664.146637][ T30] audit: type=1326 audit(1780918045.748:21149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.174538][ T30] audit: type=1326 audit(1780918045.748:21150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.188975][T32390] usb 1-1: SerialNumber: ꅴ퉞옥趀䎘䧿ꋉ敚馴ꙭ㪖䊢篪꥟钧칊ꈹ旋䪄踹媭䰊䵚ê•ê’¦ì¾‡í‚“æ’ⶀ蔮찮â©á±¸èŸ‘࢓䂎㡘䃉î–ꙅ病츓鳸섀닀磚篭굔ᇮ近릘줖샚쉞ﴕ範膾阫ἆâ°â¼‹é ¯áº¤ì‹à»‹â›˜î¬ˆê°¾âŠ‹ì²±îžŠì£‘锵Ƅ೥꧘쯠뒠ⱦ [ 1664.228686][ T30] audit: type=1326 audit(1780918045.748:21151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.254275][T30064] usb 6-1: Using ep0 maxpacket: 8 [ 1664.263333][ T30] audit: type=1326 audit(1780918045.748:21152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.288318][T30064] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.300161][T30064] usb 6-1: config 0 has no interfaces? [ 1664.310569][T30064] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.323744][T30064] usb 6-1: config 0 has no interfaces? [ 1664.330888][T30064] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.341462][T30064] usb 6-1: config 0 has no interfaces? [ 1664.350036][T30064] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1664.359714][T30064] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.367968][T30064] usb 6-1: Product: syz [ 1664.372461][T30064] usb 6-1: Manufacturer: syz [ 1664.377240][T30064] usb 6-1: SerialNumber: syz [ 1664.387830][T30064] usb 6-1: config 0 descriptor?? [ 1664.568872][ T30] audit: type=1326 audit(1780918046.238:21153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.594791][ T30] audit: type=1326 audit(1780918046.238:21154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=884 comm="syz.1.8418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x7ffc0000 [ 1664.634066][T32392] usb 6-1: USB disconnect, device number 23 [ 1664.684801][ T881] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8416'. [ 1664.715478][T32390] cdc_ncm 1-1:1.0: bind() failure [ 1664.734169][T16262] usb 4-1: USB disconnect, device number 114 [ 1664.760450][T32390] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1664.781681][T32390] cdc_ncm 1-1:1.1: bind() failure [ 1664.813323][T32390] usb 1-1: USB disconnect, device number 61 [ 1664.885245][ T30] audit: type=1326 audit(1780918046.548:21155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=889 comm="syz.3.8420" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84a559ce59 code=0x0 [ 1664.967891][T23880] legousbtower 5-1:14.57: interrupt endpoints not found [ 1664.983570][T23880] usb 5-1: USB disconnect, device number 99 [ 1665.004740][ T895] FAULT_INJECTION: forcing a failure. [ 1665.004740][ T895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.018936][ T895] CPU: 0 UID: 0 PID: 895 Comm: syz.1.8421 Tainted: G L syzkaller #0 PREEMPT(full) [ 1665.018962][ T895] Tainted: [L]=SOFTLOCKUP [ 1665.018969][ T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1665.018980][ T895] Call Trace: [ 1665.018987][ T895] [ 1665.018995][ T895] dump_stack_lvl+0xe8/0x150 [ 1665.019020][ T895] should_fail_ex+0x412/0x560 [ 1665.019044][ T895] _copy_from_user+0x2d/0xb0 [ 1665.019068][ T895] ___sys_recvmsg+0x175/0x590 [ 1665.019094][ T895] ? __pfx____sys_recvmsg+0x10/0x10 [ 1665.019117][ T895] ? __fget_files+0x2a/0x420 [ 1665.019154][ T895] ? __fget_files+0x3a0/0x420 [ 1665.019184][ T895] do_recvmmsg+0x334/0x800 [ 1665.019210][ T895] ? __pfx_do_recvmmsg+0x10/0x10 [ 1665.019239][ T895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1665.019278][ T895] __x64_sys_recvmmsg+0x198/0x250 [ 1665.019300][ T895] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1665.019327][ T895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.019346][ T895] do_syscall_64+0x174/0x580 [ 1665.019364][ T895] ? trace_irq_disable+0x3b/0x140 [ 1665.019389][ T895] ? clear_bhb_loop+0x40/0x90 [ 1665.019411][ T895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.019429][ T895] RIP: 0033:0x7f4baed9ce59 [ 1665.019445][ T895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.019460][ T895] RSP: 002b:00007f4bacff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1665.019480][ T895] RAX: ffffffffffffffda RBX: 00007f4baf015fa0 RCX: 00007f4baed9ce59 [ 1665.019492][ T895] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 1665.019505][ T895] RBP: 00007f4bacff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.019516][ T895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.019526][ T895] R13: 00007f4baf016038 R14: 00007f4baf015fa0 R15: 00007f4baf13fa48 [ 1665.019554][ T895] [ 1665.270346][ T898] netlink: 'syz.4.8422': attribute type 10 has an invalid length. [ 1665.317822][ T900] trusted_key: encrypted_key: insufficient parameters specified [ 1665.444769][ T905] loop7: detected capacity change from 0 to 16383 [ 1665.615963][T23882] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1665.758788][T16262] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1665.780717][T23882] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1665.789061][T23882] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1665.800154][T23882] usb 5-1: config 0 has no interface number 0 [ 1665.809335][T23882] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1665.818813][T23882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.827043][T23882] usb 5-1: Product: syz [ 1665.831366][T23882] usb 5-1: Manufacturer: syz [ 1665.837185][T23882] usb 5-1: SerialNumber: syz [ 1665.844498][T23882] usb 5-1: config 0 descriptor?? [ 1665.921157][T16262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.940513][T16262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.957347][T16262] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1665.982826][T16262] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1666.011167][T16262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.040909][T16262] usb 6-1: config 0 descriptor?? [ 1666.058809][T16262] hub 6-1:0.0: USB hub found [ 1666.783676][T23882] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1666.804834][T23882] uvcvideo 5-1:0.64: No valid video chain found. [ 1666.838857][T23882] usb 5-1: USB disconnect, device number 100 [ 1666.886113][T23880] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1667.041040][ T938] xt_hashlimit: size too large, truncated to 1048576 [ 1667.082845][T23880] usb 1-1: Using ep0 maxpacket: 32 [ 1667.103388][T23880] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1667.126187][T23880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.138033][T23880] usb 1-1: Product: syz [ 1667.147579][T23880] usb 1-1: Manufacturer: syz [ 1667.156244][T23880] usb 1-1: SerialNumber: syz [ 1667.174813][T23880] usb 1-1: config 0 descriptor?? [ 1667.356281][T23882] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1667.467252][T23880] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 062 [ 1667.505962][T23882] usb 2-1: Using ep0 maxpacket: 32 [ 1667.514607][T23882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1667.524387][T23882] usb 2-1: config 14 has an invalid interface number: 57 but max is 0 [ 1667.533643][T23882] usb 2-1: config 14 has no interface number 0 [ 1667.541491][T23882] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1667.551115][T23882] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1667.560992][T23882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.571550][T23882] usb 2-1: Product: syz [ 1667.579025][T23882] usb 2-1: Manufacturer: syz [ 1667.585053][T23882] usb 2-1: SerialNumber: syz [ 1667.714635][ T958] gre0: entered promiscuous mode [ 1667.721442][ T958] gre0: entered allmulticast mode [ 1667.748515][ T949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8430'. [ 1667.860519][ T962] ALSA: mixer_oss: invalid OSS volume '' [ 1667.867246][ T962] ALSA: mixer_oss: invalid OSS volume '' [ 1667.985670][ T971] trusted_key: encrypted_key: insufficient parameters specified [ 1668.286139][T32382] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1668.445507][T16262] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1668.463627][T32382] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1668.487441][T16262] usb 6-1: USB disconnect, device number 24 [ 1668.492960][T32382] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1668.519839][T32382] usb 4-1: config 0 has no interface number 0 [ 1668.542809][T23882] legousbtower 2-1:14.57: interrupt endpoints not found [ 1668.552910][T32382] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1668.576225][T32382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.590568][T23882] usb 2-1: USB disconnect, device number 95 [ 1668.603229][T32382] usb 4-1: Product: syz [ 1668.621070][T32382] usb 4-1: Manufacturer: syz [ 1668.641635][T32382] usb 4-1: SerialNumber: syz [ 1668.648657][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.655049][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.681028][T32382] usb 4-1: config 0 descriptor?? [ 1668.988186][ T985] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1669.547365][T16262] usb 1-1: USB disconnect, device number 62 [ 1669.633152][T32382] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1669.675238][T32382] uvcvideo 4-1:0.64: No valid video chain found. [ 1669.731566][T32382] usb 4-1: USB disconnect, device number 115 [ 1669.862099][ T997] syzkaller0: entered promiscuous mode [ 1669.893562][ T997] syzkaller0: entered allmulticast mode [ 1670.228289][ T1008] xt_hashlimit: size too large, truncated to 1048576 [ 1670.262391][ T1009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1670.556702][T23880] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1670.565627][T32382] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1670.746400][T23880] usb 5-1: Using ep0 maxpacket: 32 [ 1670.751619][T32382] usb 1-1: Using ep0 maxpacket: 32 [ 1670.769301][T23880] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1670.791517][T32382] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1670.806927][T23880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.821047][T32382] usb 1-1: config 14 has an invalid interface number: 57 but max is 0 [ 1670.837841][T23880] usb 5-1: Product: syz [ 1670.839105][ T1023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8458'. [ 1670.844170][T32382] usb 1-1: config 14 has no interface number 0 [ 1670.860307][T23880] usb 5-1: Manufacturer: syz [ 1670.866462][T23880] usb 5-1: SerialNumber: syz [ 1670.876876][T32382] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1670.887680][T32382] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1670.897966][T23880] usb 5-1: config 0 descriptor?? [ 1670.903186][T32382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.936748][T32382] usb 1-1: Product: syz [ 1670.954273][T32382] usb 1-1: Manufacturer: syz [ 1670.974726][T32382] usb 1-1: SerialNumber: syz [ 1671.145996][T32390] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1671.311998][T32390] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1671.335371][T32390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.360109][T32390] usb 4-1: Product: syz [ 1671.372783][T32390] usb 4-1: Manufacturer: syz [ 1671.388590][T32390] usb 4-1: SerialNumber: syz [ 1671.411672][T32390] usb 4-1: config 0 descriptor?? [ 1671.432539][T32390] usb 4-1: selecting invalid altsetting 1 [ 1671.445622][T32390] technisat-usb2: could not set alternate setting to 0 [ 1671.512116][ T30] audit: type=1326 audit(1780918053.178:21156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1024 comm="syz.5.8459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e9ef9ce59 code=0x0 [ 1671.634632][T32390] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 1671.703890][T32390] usb 4-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 1671.734049][T32390] usb 4-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 1671.794175][ T1029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8460'. [ 1671.974756][T32382] legousbtower 1-1:14.57: interrupt endpoints not found [ 1672.010427][T32382] usb 1-1: USB disconnect, device number 63 [ 1672.065978][T23882] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1672.233146][T23882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.260939][ T1036] bridge1: entered promiscuous mode [ 1672.274825][T23882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1672.312013][T23882] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1672.344944][T23882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.368515][T23882] usb 2-1: config 0 descriptor?? [ 1672.391978][T23882] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1672.405378][T23882] dvb-usb: bulk message failed: -22 (3/0) [ 1672.421201][T23882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1672.431542][T23882] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1672.449035][T23882] usb 2-1: media controller created [ 1672.467801][ T1040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1672.478116][T23882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1672.525270][T23882] dvb-usb: bulk message failed: -22 (6/0) [ 1672.534837][T23882] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1672.544845][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8463'. [ 1672.558263][T23882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input196 [ 1672.581472][T23882] dvb-usb: schedule remote query interval to 150 msecs. [ 1672.594531][ T1042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8463'. [ 1672.611006][T23882] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1672.611141][ T1029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.647445][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8463'. [ 1672.674686][ T1029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.708114][ T1042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8463'. [ 1672.762250][ T1029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.766308][T23882] dvb-usb: bulk message failed: -22 (1/0) [ 1672.780792][T23882] dvb-usb: error while querying for an remote control event. [ 1672.808426][ T1029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.854144][T32392] usb 2-1: USB disconnect, device number 96 [ 1672.910470][T32392] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1673.145981][T16262] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1673.166695][T23880] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1673.193182][T23880] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1673.277368][T23880] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1673.289499][T23880] usb 5-1: USB disconnect, device number 101 [ 1673.310533][ T1052] usb usb8: check_ctrlrecip: process 1052 (syz.4.8465) requesting ep 01 but needs 81 [ 1673.335915][T16262] usb 1-1: Using ep0 maxpacket: 16 [ 1673.344222][T16262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1673.368181][T16262] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1673.378166][T16262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.388465][T16262] usb 1-1: Product: syz [ 1673.392679][T16262] usb 1-1: Manufacturer: syz [ 1673.397908][T16262] usb 1-1: SerialNumber: syz [ 1673.405194][T16262] usb 1-1: config 0 descriptor?? [ 1673.419776][T16262] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1673.448886][T16262] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1673.466980][ T1054] binder: 1049:1054 ioctl c0306201 0 returned -14 [ 1673.643663][ T1062] FAULT_INJECTION: forcing a failure. [ 1673.643663][ T1062] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.665376][ T1062] CPU: 0 UID: 0 PID: 1062 Comm: syz.1.8467 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.665401][ T1062] Tainted: [L]=SOFTLOCKUP [ 1673.665408][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1673.665422][ T1062] Call Trace: [ 1673.665428][ T1062] [ 1673.665433][ T1062] dump_stack_lvl+0xe8/0x150 [ 1673.665452][ T1062] should_fail_ex+0x412/0x560 [ 1673.665470][ T1062] should_failslab+0xa8/0x100 [ 1673.665482][ T1062] ? security_file_alloc+0x34/0x310 [ 1673.665499][ T1062] kmem_cache_alloc_noprof+0x87/0x650 [ 1673.665516][ T1062] ? rcu_is_watching+0x15/0xb0 [ 1673.665532][ T1062] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1673.665550][ T1062] security_file_alloc+0x34/0x310 [ 1673.665566][ T1062] init_file+0x90/0x2b0 [ 1673.665583][ T1062] alloc_empty_file+0x74/0x1d0 [ 1673.665598][ T1062] path_openat+0x10f/0x3860 [ 1673.665617][ T1062] ? unwind_next_frame+0xa6/0x2550 [ 1673.665635][ T1062] ? is_bpf_text_address+0x26/0x2b0 [ 1673.665684][ T1062] ? is_bpf_text_address+0x26/0x2b0 [ 1673.665704][ T1062] ? is_bpf_text_address+0x292/0x2b0 [ 1673.665721][ T1062] ? is_bpf_text_address+0x26/0x2b0 [ 1673.665741][ T1062] ? __pfx_path_openat+0x10/0x10 [ 1673.665766][ T1062] ? __kernel_text_address+0xd/0x30 [ 1673.665791][ T1062] ? unwind_get_return_address+0x4d/0x90 [ 1673.665812][ T1062] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1673.665839][ T1062] ? arch_stack_walk+0xfb/0x150 [ 1673.665870][ T1062] do_file_open+0x23e/0x4a0 [ 1673.665895][ T1062] ? __pfx_stack_trace_save+0x10/0x10 [ 1673.665923][ T1062] ? __pfx_do_file_open+0x10/0x10 [ 1673.665973][ T1062] ? do_open_execat+0xad/0x580 [ 1673.666000][ T1062] do_open_execat+0x12b/0x580 [ 1673.666025][ T1062] ? __pfx_do_open_execat+0x10/0x10 [ 1673.666060][ T1062] alloc_bprm+0x28/0x5c0 [ 1673.666088][ T1062] do_execveat_common+0x175/0x690 [ 1673.666116][ T1062] ? do_getname+0x151/0x250 [ 1673.666137][ T1062] __x64_sys_execveat+0xc7/0xf0 [ 1673.666162][ T1062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.666182][ T1062] do_syscall_64+0x174/0x580 [ 1673.666200][ T1062] ? trace_irq_disable+0x3b/0x140 [ 1673.666225][ T1062] ? clear_bhb_loop+0x40/0x90 [ 1673.666247][ T1062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.666264][ T1062] RIP: 0033:0x7f4baed9ce59 [ 1673.666280][ T1062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.666307][ T1062] RSP: 002b:00007f4bacfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1673.666326][ T1062] RAX: ffffffffffffffda RBX: 00007f4baf016090 RCX: 00007f4baed9ce59 [ 1673.666340][ T1062] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 1673.666352][ T1062] RBP: 00007f4bacfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.666363][ T1062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.666374][ T1062] R13: 00007f4baf016128 R14: 00007f4baf016090 R15: 00007f4baf13fa48 [ 1673.666402][ T1062] [ 1674.385689][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8468'. [ 1674.488224][T16262] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1674.636420][ T1083] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1674.902593][T16262] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1674.922360][T16262] em28xx 1-1:0.0: board has no eeprom [ 1674.944337][ T30] audit: type=1326 audit(1780918056.608:21157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1092 comm="syz.1.8475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4baed9ce59 code=0x0 [ 1674.961606][ T1094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8476'. [ 1674.986080][ T1094] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8476'. [ 1675.205969][T16262] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1675.214043][T16262] em28xx 1-1:0.0: dvb set to bulk mode. [ 1675.220913][T32392] em28xx 1-1:0.0: Binding DVB extension [ 1675.365931][T23880] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1675.516313][T23880] usb 6-1: Using ep0 maxpacket: 8 [ 1675.524013][T23880] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1675.532402][T23880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1675.542836][T23880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1675.555466][T23880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1675.566655][T23880] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1675.579985][T23880] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1675.590441][T23880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.705989][T16262] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1675.815580][T23880] usb 6-1: usb_control_msg returned -32 [ 1675.821694][T23880] usbtmc 6-1:16.0: can't read capabilities [ 1675.862748][ T1112] bond0: (slave bond_slave_0): Releasing backup interface [ 1675.866548][T16262] usb 5-1: Using ep0 maxpacket: 8 [ 1675.876730][ T1112] bond_slave_0: left promiscuous mode [ 1675.880884][T16262] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1675.891964][ T1112] bond0: (slave bond_slave_1): Releasing backup interface [ 1675.899558][T16262] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1675.899583][T16262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.899602][T16262] usb 5-1: Product: syz [ 1675.899615][T16262] usb 5-1: Manufacturer: syz [ 1675.899652][T16262] usb 5-1: SerialNumber: syz [ 1675.932265][ T1112] bond_slave_1: left promiscuous mode [ 1675.938354][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.941862][T16262] usb 5-1: config 0 descriptor?? [ 1675.951454][ T1112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1675.970720][T16262] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1676.177361][T16262] gspca_sonixj: reg_w1 err -71 [ 1676.187290][T16262] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1676.207344][ T1118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.220239][T16262] usb 5-1: USB disconnect, device number 102 [ 1676.239240][ T1118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.254796][ T1118] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 1676.457842][T16262] usb 6-1: USB disconnect, device number 25 [ 1676.662001][T32392] em28xx 1-1:0.0: Registering input extension [ 1676.723529][ T1125] FAULT_INJECTION: forcing a failure. [ 1676.723529][ T1125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1676.736838][ T1125] CPU: 1 UID: 0 PID: 1125 Comm: syz.4.8485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1676.736866][ T1125] Tainted: [L]=SOFTLOCKUP [ 1676.736874][ T1125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1676.736885][ T1125] Call Trace: [ 1676.736899][ T1125] [ 1676.736906][ T1125] dump_stack_lvl+0xe8/0x150 [ 1676.736927][ T1125] should_fail_ex+0x412/0x560 [ 1676.736945][ T1125] _copy_from_user+0x2d/0xb0 [ 1676.736963][ T1125] ___sys_recvmsg+0x175/0x590 [ 1676.736982][ T1125] ? __pfx____sys_recvmsg+0x10/0x10 [ 1676.736999][ T1125] ? __fget_files+0x2a/0x420 [ 1676.737028][ T1125] ? __fget_files+0x3a0/0x420 [ 1676.737050][ T1125] do_recvmmsg+0x334/0x800 [ 1676.737070][ T1125] ? __pfx_do_recvmmsg+0x10/0x10 [ 1676.737092][ T1125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1676.737118][ T1125] __x64_sys_recvmmsg+0x198/0x250 [ 1676.737134][ T1125] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1676.737154][ T1125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.737168][ T1125] do_syscall_64+0x174/0x580 [ 1676.737182][ T1125] ? trace_irq_disable+0x3b/0x140 [ 1676.737213][ T1125] ? clear_bhb_loop+0x40/0x90 [ 1676.737229][ T1125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.737241][ T1125] RIP: 0033:0x7f32f7b9ce59 [ 1676.737253][ T1125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.737264][ T1125] RSP: 002b:00007f32f8b25028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1676.737277][ T1125] RAX: ffffffffffffffda RBX: 00007f32f7e15fa0 RCX: 00007f32f7b9ce59 [ 1676.737287][ T1125] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 1676.737295][ T1125] RBP: 00007f32f8b25090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.737303][ T1125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.737310][ T1125] R13: 00007f32f7e16038 R14: 00007f32f7e15fa0 R15: 00007f32f7f3fa48 [ 1676.737330][ T1125] [ 1676.973432][T23882] usb 1-1: USB disconnect, device number 64 [ 1676.981620][T23882] em28xx 1-1:0.0: Disconnecting em28xx [ 1676.987293][T23882] em28xx 1-1:0.0: Closing input extension [ 1676.999744][T23882] em28xx 1-1:0.0: Freeing device [ 1677.346575][T32392] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1677.487423][T32392] usb 2-1: device descriptor read/64, error -71 [ 1677.525972][T32393] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1677.695893][T32393] usb 6-1: Using ep0 maxpacket: 16 [ 1677.703208][T32393] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1677.706077][T23882] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1677.723069][T32393] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.735128][T32392] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1677.750041][T32393] usb 6-1: config 1 has no interface number 0 [ 1677.761722][T32393] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1677.779388][T32393] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.801884][T32393] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1677.817677][T32393] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1677.834185][T32393] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1677.849229][T32393] usb 6-1: Product: syz [ 1677.857435][T32393] usb 6-1: Manufacturer: syz [ 1677.864964][T32393] usb 6-1: SerialNumber: syz [ 1677.866169][T23882] usb 1-1: Using ep0 maxpacket: 16 [ 1677.878339][T23882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1677.896030][T32392] usb 2-1: device descriptor read/64, error -71 [ 1677.901569][T23882] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1677.914602][ T1147] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1677.927173][T23882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.951005][T23882] usb 1-1: Product: syz [ 1677.960503][T23882] usb 1-1: Manufacturer: syz [ 1677.974599][T23882] usb 1-1: SerialNumber: syz [ 1677.990032][T23882] usb 1-1: config 0 descriptor?? [ 1678.002734][T23882] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1678.014205][T23882] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1678.017104][T32392] usb usb2-port1: attempt power cycle [ 1678.151255][T32393] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 1678.382363][ T1147] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1678.403730][T32392] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1678.456726][T32392] usb 2-1: device descriptor read/8, error -71 [ 1678.610628][T23882] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1678.706088][T32392] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1678.739631][T32392] usb 2-1: device descriptor read/8, error -71 [ 1678.866213][T32392] usb usb2-port1: unable to enumerate USB device [ 1679.033450][T23882] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1679.046908][T23882] em28xx 1-1:0.0: board has no eeprom [ 1679.109762][ T1174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1679.356102][T23882] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1679.364353][T23882] em28xx 1-1:0.0: dvb set to bulk mode. [ 1679.371076][T23880] em28xx 1-1:0.0: Binding DVB extension [ 1679.586083][T32392] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1679.738578][T32392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.750231][T32392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.760297][T32392] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1679.769428][T32392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.780165][T32392] usb 5-1: config 0 descriptor?? [ 1679.866891][T25310] usb 1-1: USB disconnect, device number 65 [ 1679.881261][T25310] em28xx 1-1:0.0: Disconnecting em28xx [ 1679.912828][T23880] em28xx 1-1:0.0: Registering input extension [ 1679.925656][T25310] em28xx 1-1:0.0: Closing input extension [ 1679.944648][T25310] em28xx 1-1:0.0: Freeing device [ 1680.202262][T32392] hid-steam 0003:28DE:1142.00A4: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1680.236524][T32393] usb 6-1: USB disconnect, device number 26 [ 1680.276738][T32392] hid-steam 0003:28DE:1142.00A4: Steam wireless receiver connected [ 1680.301699][T32392] hid-steam 0003:28DE:1142.00A5: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1680.488804][T32393] hid_parser_main: 7 callbacks suppressed [ 1680.488824][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.519237][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.527063][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.534647][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.542694][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.550336][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.558021][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.565754][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.589552][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.617891][T32393] hid-generic 0006:0008:0001.00A6: unknown main item tag 0x0 [ 1680.677562][T32393] hid-generic 0006:0008:0001.00A6: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1680.771268][ T1198] fido_id[1198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1680.835989][T32392] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1680.913829][T23880] usb 5-1: USB disconnect, device number 103 [ 1680.946068][T23882] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1680.990679][T23880] hid-steam 0003:28DE:1142.00A4: Steam wireless receiver disconnected [ 1680.999503][T32392] usb 1-1: Using ep0 maxpacket: 8 [ 1681.017724][T32392] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1681.034169][T32392] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1681.052780][T32392] usb 1-1: config 0 has no interface number 0 [ 1681.064486][T32392] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1681.082904][T32392] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1681.107642][T32392] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1681.125817][T32392] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1681.135401][T23882] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 1681.139208][T32392] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1681.158152][T32392] usb 1-1: Product: syz [ 1681.162397][T32392] usb 1-1: Manufacturer: syz [ 1681.181683][T32392] usb 1-1: config 0 descriptor?? [ 1681.188194][T23882] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1681.189034][ T1194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1681.237397][T23882] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1681.261603][T23882] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1681.283736][T23882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.306126][T23882] usb 6-1: config 0 descriptor?? [ 1681.832130][T32392] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input199 [ 1682.069341][ T8593] usb 1-1: USB disconnect, device number 66 [ 1682.069355][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1683.056002][ T1221] fuse: Unknown parameter '' [ 1683.366536][T32392] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1683.476594][ T8593] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1683.546005][T32392] usb 1-1: Using ep0 maxpacket: 32 [ 1683.554000][T32392] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1683.562623][T32392] usb 1-1: config 0 has no interface number 0 [ 1683.569734][T32392] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1683.581786][T32392] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1683.592181][T32392] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1683.606035][T32392] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1683.617576][T32392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.631129][T32392] usb 1-1: Product: syz [ 1683.635970][ T8593] usb 2-1: Using ep0 maxpacket: 16 [ 1683.641401][T32392] usb 1-1: Manufacturer: syz [ 1683.646266][T32392] usb 1-1: SerialNumber: syz [ 1683.652463][ T8593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1683.664609][T32392] usb 1-1: config 0 descriptor?? [ 1683.679238][ T1224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1683.688929][ T8593] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1683.708253][ T8593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.721739][ T8593] usb 2-1: Product: syz [ 1683.728325][T23882] usbhid 6-1:0.0: can't add hid device: -71 [ 1683.738431][ T8593] usb 2-1: Manufacturer: syz [ 1683.743243][T23882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1683.752686][ T8593] usb 2-1: SerialNumber: syz [ 1683.766764][ T8593] usb 2-1: config 0 descriptor?? [ 1683.773687][T23882] usb 6-1: USB disconnect, device number 27 [ 1683.789320][ T8593] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1683.799699][ T8593] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1684.123757][ T1224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.145142][ T1224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.402708][ T8593] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1684.602348][ T1244] trusted_key: encrypted_key: insufficient parameters specified [ 1684.626521][T23880] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1684.785931][T23880] usb 6-1: Using ep0 maxpacket: 8 [ 1684.792791][T23880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.803724][T23880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1684.816938][T23880] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1684.827112][T23880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.840711][T23880] usb 6-1: config 0 descriptor?? [ 1684.853297][ T8593] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1684.861585][ T8593] em28xx 2-1:0.0: board has no eeprom [ 1684.896334][T23882] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1685.070330][T23882] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1685.078922][T23882] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1685.089549][T23882] usb 5-1: config 0 has no interface number 0 [ 1685.099445][T23882] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1685.125928][T23882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.134056][T23882] usb 5-1: Product: syz [ 1685.146086][T23882] usb 5-1: Manufacturer: syz [ 1685.155963][T23882] usb 5-1: SerialNumber: syz [ 1685.165938][ T8593] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1685.175060][T23882] usb 5-1: config 0 descriptor?? [ 1685.185893][ T8593] em28xx 2-1:0.0: dvb set to bulk mode. [ 1685.200465][T32382] em28xx 2-1:0.0: Binding DVB extension [ 1685.580448][T23880] hid_parser_main: 7 callbacks suppressed [ 1685.580469][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.594170][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.601633][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.609201][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.616514][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.625459][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.632682][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.639906][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.647170][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.654370][T23880] samsung 0003:0419:0001.00A7: unknown main item tag 0x0 [ 1685.666975][T23880] samsung 0003:0419:0001.00A7: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 1685.704223][T32391] usb 2-1: USB disconnect, device number 101 [ 1685.720280][T32391] em28xx 2-1:0.0: Disconnecting em28xx [ 1685.791357][T25310] usb 6-1: USB disconnect, device number 28 [ 1685.805682][T32382] em28xx 2-1:0.0: Registering input extension [ 1685.820250][T32391] em28xx 2-1:0.0: Closing input extension [ 1685.883192][T32391] em28xx 2-1:0.0: Freeing device [ 1686.055243][T32392] usb-storage 1-1:0.20: USB Mass Storage device detected [ 1686.075290][T32392] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1686.090449][T32392] scsi host1: usb-storage 1-1:0.20 [ 1686.106589][T32392] usb 1-1: USB disconnect, device number 67 [ 1686.161840][T23882] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1686.191108][T23882] uvcvideo 5-1:0.64: No valid video chain found. [ 1686.243429][T23882] usb 5-1: USB disconnect, device number 104 [ 1686.280877][ T1269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1686.561349][T32392] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1686.717844][T32392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1686.737996][T32392] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.749494][T32392] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1686.761579][T32392] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1686.771196][T32392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.779530][T32392] usb 1-1: Product: syz [ 1686.783827][T32392] usb 1-1: Manufacturer: syz [ 1686.788843][T32392] usb 1-1: SerialNumber: syz [ 1686.803285][T32392] usb 1-1: selecting invalid altsetting 1 [ 1686.815981][T32392] usb 1-1: unit 6 not found! [ 1686.896003][T32391] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1687.048620][ T1290] binder: 1270:1290 ioctl b704 200000000980 returned -22 [ 1687.056093][T32391] usb 6-1: Using ep0 maxpacket: 8 [ 1687.061885][T32391] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1687.078979][T32391] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1687.089143][T32391] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1687.102299][T32391] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1687.112906][T32391] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1687.128003][T32391] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1687.138961][T32391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.354982][T32391] usb 6-1: usb_control_msg returned -32 [ 1687.361072][T32391] usbtmc 6-1:16.0: can't read capabilities [ 1687.454598][ T30] audit: type=1326 audit(1780918069.118:21158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1295 comm="syz.4.8539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32f7b9ce59 code=0x0 [ 1687.713376][ T1300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.722603][ T1300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.732976][ T1300] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 1687.934664][T32391] usb 6-1: USB disconnect, device number 29 [ 1688.590257][ T1318] xt_hashlimit: size too large, truncated to 1048576 [ 1688.646866][T23882] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1688.806333][T23882] usb 5-1: Using ep0 maxpacket: 16 [ 1688.825326][T23882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1688.869391][T23882] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1688.885663][T23882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.906199][T32391] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1688.915990][T23882] usb 5-1: Product: syz [ 1688.925915][T23882] usb 5-1: Manufacturer: syz [ 1688.937366][T23882] usb 5-1: SerialNumber: syz [ 1688.958879][T23882] usb 5-1: config 0 descriptor?? [ 1688.977272][T23882] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1688.995911][T23882] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1689.085912][T32391] usb 2-1: Using ep0 maxpacket: 32 [ 1689.098474][T32391] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1689.122412][T20437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1689.137395][T32391] usb 2-1: config 14 has an invalid interface number: 57 but max is 0 [ 1689.149583][T32391] usb 2-1: config 14 has no interface number 0 [ 1689.163702][T32391] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1689.182892][T32391] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1689.198634][T32392] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1689.206953][T32391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.216972][T32391] usb 2-1: Product: syz [ 1689.221529][T32391] usb 2-1: Manufacturer: syz [ 1689.226418][T32391] usb 2-1: SerialNumber: syz [ 1689.292716][T32392] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1689.307299][T32392] usb 1-1: USB disconnect, device number 68 [ 1689.351290][T14202] udevd[14202]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1689.493646][ T1338] netlink: 528 bytes leftover after parsing attributes in process `syz.5.8551'. [ 1689.512696][ T1336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1689.618519][T23882] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1689.867899][T32382] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1689.941095][ T1361] syzkaller0: entered promiscuous mode [ 1689.947658][ T1361] syzkaller0: entered allmulticast mode [ 1690.025923][T32382] usb 6-1: Using ep0 maxpacket: 16 [ 1690.042941][T23882] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1690.059796][T32382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1690.071285][T23882] em28xx 5-1:0.0: board has no eeprom [ 1690.082907][T32382] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1690.100191][T32382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.113755][T32382] usb 6-1: Product: syz [ 1690.123631][T32382] usb 6-1: Manufacturer: syz [ 1690.138854][T32382] usb 6-1: SerialNumber: syz [ 1690.164508][T32382] usb 6-1: config 0 descriptor?? [ 1690.188236][T32382] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1690.207197][T32382] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1690.259444][ T1367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8560'. [ 1690.274280][ T1367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8560'. [ 1690.287240][ T1367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8560'. [ 1690.345578][T32391] legousbtower 2-1:14.57: interrupt endpoints not found [ 1690.375919][T23882] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1690.383846][T23882] em28xx 5-1:0.0: dvb set to bulk mode. [ 1690.389645][ T8593] em28xx 5-1:0.0: Binding DVB extension [ 1690.417984][T32391] usb 2-1: USB disconnect, device number 102 [ 1690.653695][ T1372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1690.804452][T32382] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1690.813845][ T1375] FAULT_INJECTION: forcing a failure. [ 1690.813845][ T1375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.837485][ T1375] CPU: 0 UID: 0 PID: 1375 Comm: syz.1.8563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1690.837506][ T1375] Tainted: [L]=SOFTLOCKUP [ 1690.837511][ T1375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1690.837519][ T1375] Call Trace: [ 1690.837525][ T1375] [ 1690.837531][ T1375] dump_stack_lvl+0xe8/0x150 [ 1690.837571][ T1375] should_fail_ex+0x412/0x560 [ 1690.837596][ T1375] _copy_to_user+0x31/0xb0 [ 1690.837619][ T1375] simple_read_from_buffer+0xe1/0x170 [ 1690.837648][ T1375] proc_fail_nth_read+0x1bb/0x230 [ 1690.837668][ T1375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.837686][ T1375] ? rw_verify_area+0x2a6/0x4d0 [ 1690.837721][ T1375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.837746][ T1375] vfs_read+0x20c/0xa70 [ 1690.837774][ T1375] ? __pfx___mutex_lock+0x10/0x10 [ 1690.837793][ T1375] ? __pfx_vfs_read+0x10/0x10 [ 1690.837818][ T1375] ? __fget_files+0x2a/0x420 [ 1690.837837][ T1375] ? __fget_files+0x3a0/0x420 [ 1690.837852][ T1375] ? __fget_files+0x2a/0x420 [ 1690.837893][ T1375] ksys_read+0x150/0x270 [ 1690.837919][ T1375] ? __pfx_ksys_read+0x10/0x10 [ 1690.837953][ T1375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.837967][ T1375] do_syscall_64+0x174/0x580 [ 1690.837981][ T1375] ? clear_bhb_loop+0x40/0x90 [ 1690.837997][ T1375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.838023][ T1375] RIP: 0033:0x7f4baed5d68e [ 1690.838041][ T1375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1690.838055][ T1375] RSP: 002b:00007f4bacff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1690.838072][ T1375] RAX: ffffffffffffffda RBX: 00007f4bacff66c0 RCX: 00007f4baed5d68e [ 1690.838084][ T1375] RDX: 000000000000000f RSI: 00007f4bacff60a0 RDI: 0000000000000005 [ 1690.838096][ T1375] RBP: 00007f4bacff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.838109][ T1375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.838117][ T1375] R13: 00007f4baf016038 R14: 00007f4baf015fa0 R15: 00007f4baf13fa48 [ 1690.838137][ T1375] [ 1691.067770][T23882] usb 5-1: USB disconnect, device number 105 [ 1691.075870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1691.093105][T23882] em28xx 5-1:0.0: Disconnecting em28xx [ 1691.304377][T32382] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1691.327109][T32382] em28xx 6-1:0.0: board has no eeprom [ 1691.337903][ T8593] em28xx 5-1:0.0: Registering input extension [ 1691.362953][T23882] em28xx 5-1:0.0: Closing input extension [ 1691.432345][T23882] em28xx 5-1:0.0: Freeing device [ 1691.658952][T32382] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1691.671204][T32382] em28xx 6-1:0.0: dvb set to bulk mode. [ 1691.679321][T23882] em28xx 6-1:0.0: Binding DVB extension [ 1691.691181][ T1390] FAULT_INJECTION: forcing a failure. [ 1691.691181][ T1390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.724449][ T1390] CPU: 0 UID: 0 PID: 1390 Comm: syz.4.8568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1691.724475][ T1390] Tainted: [L]=SOFTLOCKUP [ 1691.724483][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1691.724494][ T1390] Call Trace: [ 1691.724502][ T1390] [ 1691.724510][ T1390] dump_stack_lvl+0xe8/0x150 [ 1691.724535][ T1390] should_fail_ex+0x412/0x560 [ 1691.724563][ T1390] _copy_from_user+0x2d/0xb0 [ 1691.724585][ T1390] memdup_user+0x5e/0xd0 [ 1691.724605][ T1390] strndup_user+0x68/0xd0 [ 1691.724623][ T1390] __keyctl_dh_compute+0x4bc/0xd10 [ 1691.724656][ T1390] ? __lock_acquire+0x6b5/0x2cf0 [ 1691.724680][ T1390] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1691.724709][ T1390] ? __might_fault+0xaf/0x130 [ 1691.724747][ T1390] keyctl_dh_compute+0x124/0x180 [ 1691.724766][ T1390] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1691.724798][ T1390] __se_sys_keyctl+0x44c/0x9e0 [ 1691.724823][ T1390] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1691.724848][ T1390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1691.724872][ T1390] ? __fget_files+0x3a0/0x420 [ 1691.724899][ T1390] ? fput+0xa0/0xd0 [ 1691.724920][ T1390] ? ksys_write+0x242/0x270 [ 1691.724947][ T1390] ? __pfx_ksys_write+0x10/0x10 [ 1691.724977][ T1390] ? __x64_sys_keyctl+0x20/0xc0 [ 1691.724998][ T1390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.725019][ T1390] do_syscall_64+0x174/0x580 [ 1691.725036][ T1390] ? trace_irq_disable+0x3b/0x140 [ 1691.725063][ T1390] ? clear_bhb_loop+0x40/0x90 [ 1691.725085][ T1390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.725103][ T1390] RIP: 0033:0x7f32f7b9ce59 [ 1691.725120][ T1390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.725135][ T1390] RSP: 002b:00007f32f8b25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1691.725154][ T1390] RAX: ffffffffffffffda RBX: 00007f32f7e15fa0 RCX: 00007f32f7b9ce59 [ 1691.725167][ T1390] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000017 [ 1691.725178][ T1390] RBP: 00007f32f8b25090 R08: 0000200000000280 R09: 0000000000000000 [ 1691.725190][ T1390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.725200][ T1390] R13: 00007f32f7e16038 R14: 00007f32f7e15fa0 R15: 00007f32f7f3fa48 [ 1691.725228][ T1390] [ 1692.163965][T23880] usb 6-1: USB disconnect, device number 30 [ 1692.171416][T23880] em28xx 6-1:0.0: Disconnecting em28xx [ 1692.220738][T23882] em28xx 6-1:0.0: Registering input extension [ 1692.227929][T23880] em28xx 6-1:0.0: Closing input extension [ 1692.247581][T23880] em28xx 6-1:0.0: Freeing device [ 1692.676509][T23882] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1692.836147][T23882] usb 2-1: Using ep0 maxpacket: 8 [ 1692.848731][T23882] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1692.859422][T23882] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1692.870720][T23882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1692.880940][T23882] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1692.893106][T23882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1692.903232][T23882] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1692.916242][T23882] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1692.925295][T23882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.138081][T23882] usb 2-1: GET_CAPABILITIES returned 0 [ 1693.143728][T23882] usbtmc 2-1:16.0: can't read capabilities [ 1693.414765][ T1418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1693.432970][ T1418] ipvlan0: entered allmulticast mode [ 1693.449211][ T1418] syz_tun: entered allmulticast mode [ 1693.517640][ T1421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1693.536065][ T1421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1693.557608][ T1421] netlink: 'syz.4.8577': attribute type 15 has an invalid length. [ 1693.574195][ T1421] netlink: 'syz.4.8577': attribute type 18 has an invalid length. [ 1693.662466][ T1423] trusted_key: encrypted_key: insufficient parameters specified [ 1693.764995][ T1429] netlink: 'syz.4.8581': attribute type 49 has an invalid length. [ 1693.815208][ T1435] netlink: 300 bytes leftover after parsing attributes in process `syz.4.8582'. [ 1693.863204][ T1437] SET target dimension over the limit! [ 1693.895442][T23882] usb 2-1: USB disconnect, device number 103 [ 1694.386140][T23882] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1694.535984][T23882] usb 2-1: Using ep0 maxpacket: 32 [ 1694.549677][T23882] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1694.561691][T23882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.574017][T23882] usb 2-1: Product: syz [ 1694.580310][T23882] usb 2-1: Manufacturer: syz [ 1694.587640][T23882] usb 2-1: SerialNumber: syz [ 1694.597883][T23882] usb 2-1: config 0 descriptor?? [ 1695.466706][T32393] hid_parser_main: 24 callbacks suppressed [ 1695.466726][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.504632][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.530728][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.550280][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.575214][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.588881][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.600002][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.614875][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.623965][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.634862][T32393] hid-generic 0006:0008:0001.00A8: unknown main item tag 0x0 [ 1695.665430][T32393] hid-generic 0006:0008:0001.00A8: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1695.731083][ T1475] fido_id[1475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1695.816203][T23880] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1695.975923][T23880] usb 5-1: Using ep0 maxpacket: 8 [ 1695.990017][T23880] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1696.000974][T23880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1696.015932][T23880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1696.031420][T23880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1696.048748][T23880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1696.064866][T23880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1696.078418][T23880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.300686][T23880] usb 5-1: usb_control_msg returned -32 [ 1696.306991][T23880] usbtmc 5-1:16.0: can't read capabilities [ 1696.358344][ T1481] fuse: Bad value for 'fd' [ 1696.485272][ T1483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8596'. [ 1696.689378][ T1484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.699569][ T1484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.712461][ T1484] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 1696.844287][ T1486] FAULT_INJECTION: forcing a failure. [ 1696.844287][ T1486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.869553][ T1486] CPU: 0 UID: 0 PID: 1486 Comm: syz.3.8597 Tainted: G L syzkaller #0 PREEMPT(full) [ 1696.869579][ T1486] Tainted: [L]=SOFTLOCKUP [ 1696.869585][ T1486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1696.869596][ T1486] Call Trace: [ 1696.869603][ T1486] [ 1696.869615][ T1486] dump_stack_lvl+0xe8/0x150 [ 1696.869633][ T1486] should_fail_ex+0x412/0x560 [ 1696.869651][ T1486] _copy_from_user+0x2d/0xb0 [ 1696.869669][ T1486] ___sys_recvmsg+0x175/0x590 [ 1696.869707][ T1486] ? __pfx____sys_recvmsg+0x10/0x10 [ 1696.869730][ T1486] ? __fget_files+0x2a/0x420 [ 1696.869765][ T1486] ? __fget_files+0x3a0/0x420 [ 1696.869795][ T1486] do_recvmmsg+0x334/0x800 [ 1696.869813][ T1486] ? __pfx_do_recvmmsg+0x10/0x10 [ 1696.869833][ T1486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1696.869877][ T1486] __x64_sys_recvmmsg+0x198/0x250 [ 1696.869898][ T1486] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1696.869923][ T1486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.869944][ T1486] do_syscall_64+0x174/0x580 [ 1696.869957][ T1486] ? trace_irq_disable+0x3b/0x140 [ 1696.869977][ T1486] ? clear_bhb_loop+0x40/0x90 [ 1696.869992][ T1486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.870022][ T1486] RIP: 0033:0x7f84a559ce59 [ 1696.870039][ T1486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.870054][ T1486] RSP: 002b:00007f84a6469028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1696.870073][ T1486] RAX: ffffffffffffffda RBX: 00007f84a5815fa0 RCX: 00007f84a559ce59 [ 1696.870086][ T1486] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1696.870097][ T1486] RBP: 00007f84a6469090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.870107][ T1486] R10: 0000000040012030 R11: 0000000000000246 R12: 0000000000000001 [ 1696.870118][ T1486] R13: 00007f84a5816038 R14: 00007f84a5815fa0 R15: 00007f84a593fa48 [ 1696.870145][ T1486] [ 1697.079362][T32392] usb 5-1: USB disconnect, device number 106 [ 1697.119918][T23882] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1697.138520][T23882] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1697.207275][T23882] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1697.243579][T23882] usb 2-1: USB disconnect, device number 104 [ 1697.480500][ T1493] netlink: 'syz.0.8598': attribute type 21 has an invalid length. [ 1697.488730][ T1493] netlink: 'syz.0.8598': attribute type 6 has an invalid length. [ 1697.497472][ T1493] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1698.030880][ T1520] trusted_key: encrypted_key: insufficient parameters specified [ 1698.186832][ T1525] FAULT_INJECTION: forcing a failure. [ 1698.186832][ T1525] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.209865][ T1525] CPU: 0 UID: 0 PID: 1525 Comm: syz.0.8609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.209892][ T1525] Tainted: [L]=SOFTLOCKUP [ 1698.209905][ T1525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1698.209913][ T1525] Call Trace: [ 1698.209919][ T1525] [ 1698.209925][ T1525] dump_stack_lvl+0xe8/0x150 [ 1698.209944][ T1525] should_fail_ex+0x412/0x560 [ 1698.209961][ T1525] should_failslab+0xa8/0x100 [ 1698.209974][ T1525] ? alloc_empty_file+0x5b/0x1d0 [ 1698.209989][ T1525] kmem_cache_alloc_noprof+0x87/0x650 [ 1698.210011][ T1525] alloc_empty_file+0x5b/0x1d0 [ 1698.210027][ T1525] alloc_file_pseudo+0x155/0x240 [ 1698.210040][ T1525] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1698.210058][ T1525] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1698.210072][ T1525] ? evm_inode_alloc_security+0x40/0xb0 [ 1698.210093][ T1525] ? security_inode_alloc+0xd5/0x310 [ 1698.210119][ T1525] sock_alloc_file+0xb8/0x2e0 [ 1698.210137][ T1525] do_accept+0x3a0/0x760 [ 1698.210158][ T1525] ? __pfx_do_accept+0x10/0x10 [ 1698.210188][ T1525] __sys_accept4+0x139/0x230 [ 1698.210207][ T1525] ? __pfx___sys_accept4+0x10/0x10 [ 1698.210224][ T1525] ? __pfx_ksys_write+0x10/0x10 [ 1698.210247][ T1525] __x64_sys_accept4+0x9a/0xb0 [ 1698.210264][ T1525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.210277][ T1525] do_syscall_64+0x174/0x580 [ 1698.210291][ T1525] ? trace_irq_disable+0x3b/0x140 [ 1698.210310][ T1525] ? clear_bhb_loop+0x40/0x90 [ 1698.210325][ T1525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.210337][ T1525] RIP: 0033:0x7fed5939ce59 [ 1698.210349][ T1525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.210360][ T1525] RSP: 002b:00007fed5a272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1698.210374][ T1525] RAX: ffffffffffffffda RBX: 00007fed59615fa0 RCX: 00007fed5939ce59 [ 1698.210383][ T1525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1698.210390][ T1525] RBP: 00007fed5a272090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.210398][ T1525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.210406][ T1525] R13: 00007fed59616038 R14: 00007fed59615fa0 R15: 00007fed5973fa48 [ 1698.210425][ T1525] [ 1698.628785][T23882] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1698.700438][ T1529] bridge2: entered promiscuous mode [ 1698.786098][T23882] usb 6-1: Using ep0 maxpacket: 32 [ 1698.792563][T23882] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1698.804747][T23882] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1698.813932][T23882] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1698.823197][T23882] usb 6-1: Product: syz [ 1698.828268][T23882] usb 6-1: Manufacturer: syz [ 1698.834229][T23882] usb 6-1: SerialNumber: syz [ 1698.841799][T23882] usb 6-1: config 0 descriptor?? [ 1698.848378][ T1523] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1698.856892][T23882] hub 6-1:0.0: bad descriptor, ignoring hub [ 1698.862830][T23882] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1698.917174][T32393] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1698.946905][T32392] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1699.087527][T32393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.099468][T32393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.110209][T32392] usb 1-1: Using ep0 maxpacket: 32 [ 1699.115721][T32393] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1699.126470][T32393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.136198][T32392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1699.148927][T32392] usb 1-1: string descriptor 0 read error: -22 [ 1699.156601][T32392] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1699.169148][T32392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.177438][T32393] usb 5-1: config 0 descriptor?? [ 1699.182711][T32391] usb 6-1: USB disconnect, device number 31 [ 1699.387529][T23882] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1699.407052][T32392] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1699.545926][T23882] usb 2-1: Using ep0 maxpacket: 16 [ 1699.553553][T23882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1699.565384][T23882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1699.574568][T23882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.582637][T23882] usb 2-1: Product: syz [ 1699.586868][T23882] usb 2-1: Manufacturer: syz [ 1699.591486][T23882] usb 2-1: SerialNumber: syz [ 1699.598786][T23882] usb 2-1: config 0 descriptor?? [ 1699.609895][T23882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1699.610399][T32392] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1699.619328][T23882] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1699.710994][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8610'. [ 1699.723255][ T1528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.734100][ T1528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.830643][ T1539] binder: 1538:1539 ioctl c0306201 0 returned -14 [ 1699.840550][ T1539] binder: 1538:1539 ioctl c0306201 0 returned -14 [ 1699.941430][T32392] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1700.016645][ T30] audit: type=1326 audit(1780918081.688:21159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1527 comm="syz.0.8611" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed5939ce59 code=0x0 [ 1700.205964][T32392] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1700.253997][T23882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1700.355912][T32392] usb 6-1: Using ep0 maxpacket: 8 [ 1700.361709][T32392] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 1700.371786][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.382135][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.392509][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.402826][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.413737][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.424077][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.434259][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.444477][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.454698][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.465035][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.475603][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.486030][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.496178][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.506580][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.517134][T32392] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.527561][T32392] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1700.538676][T32392] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f [ 1700.547861][T32392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.560801][T32392] usb 6-1: Product: syz [ 1700.565001][T32392] usb 6-1: Manufacturer: syz [ 1700.569735][T32392] usb 6-1: SerialNumber: syz [ 1700.672216][T23882] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1700.682027][T23882] em28xx 2-1:0.0: board has no eeprom [ 1700.802926][T32392] usb 6-1: USB disconnect, device number 32 [ 1700.975994][T23882] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1700.989143][T23882] em28xx 2-1:0.0: dvb set to bulk mode. [ 1700.997512][T23880] em28xx 2-1:0.0: Binding DVB extension [ 1701.521491][T23882] usb 2-1: USB disconnect, device number 105 [ 1701.543211][T23882] em28xx 2-1:0.0: Disconnecting em28xx [ 1701.600873][T23880] em28xx 2-1:0.0: Registering input extension [ 1701.613681][T23882] em28xx 2-1:0.0: Closing input extension [ 1701.666821][T23882] em28xx 2-1:0.0: Freeing device [ 1701.710065][T32382] usb 1-1: USB disconnect, device number 69 [ 1701.896147][T23880] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1701.923926][T32393] usbhid 5-1:0.0: can't add hid device: -71 [ 1701.944293][T32393] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1701.979363][T32393] usb 5-1: USB disconnect, device number 107 [ 1702.067213][T23880] usb 6-1: Using ep0 maxpacket: 32 [ 1702.097721][T23880] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1702.110962][T23880] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1702.127141][T23880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.141345][ T30] audit: type=1326 audit(1780918083.808:21160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.3.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a559ce59 code=0x7ffc0000 [ 1702.157969][T23880] usb 6-1: Product: syz [ 1702.189418][T23880] usb 6-1: Manufacturer: syz [ 1702.201277][ T30] audit: type=1326 audit(1780918083.808:21161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.3.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84a559ce59 code=0x7ffc0000 [ 1702.205988][T23880] usb 6-1: SerialNumber: syz [ 1702.249315][ T30] audit: type=1326 audit(1780918083.808:21162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.3.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a559ce59 code=0x7ffc0000 [ 1702.274537][ T30] audit: type=1326 audit(1780918083.808:21163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.3.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84a559ce59 code=0x7ffc0000 [ 1702.302334][ T1569] FAULT_INJECTION: forcing a failure. [ 1702.302334][ T1569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.323925][ T1569] CPU: 0 UID: 0 PID: 1569 Comm: syz.1.8624 Tainted: G L syzkaller #0 PREEMPT(full) [ 1702.323951][ T1569] Tainted: [L]=SOFTLOCKUP [ 1702.323956][ T1569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1702.323963][ T1569] Call Trace: [ 1702.323969][ T1569] [ 1702.323975][ T1569] dump_stack_lvl+0xe8/0x150 [ 1702.324014][ T1569] should_fail_ex+0x412/0x560 [ 1702.324039][ T1569] _copy_from_user+0x2d/0xb0 [ 1702.324061][ T1569] do_fcntl+0x91d/0x1a20 [ 1702.324091][ T1569] ? __fget_files+0x2a/0x420 [ 1702.324107][ T1569] ? __pfx_do_fcntl+0x10/0x10 [ 1702.324130][ T1569] ? __fget_files+0x2a/0x420 [ 1702.324161][ T1569] ? __fget_files+0x2a/0x420 [ 1702.324193][ T1569] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1702.324222][ T1569] __se_sys_fcntl+0xc8/0x150 [ 1702.324246][ T1569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.324260][ T1569] do_syscall_64+0x174/0x580 [ 1702.324274][ T1569] ? trace_irq_disable+0x3b/0x140 [ 1702.324303][ T1569] ? clear_bhb_loop+0x40/0x90 [ 1702.324326][ T1569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.324342][ T1569] RIP: 0033:0x7f4baed9ce59 [ 1702.324358][ T1569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.324372][ T1569] RSP: 002b:00007f4bacff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1702.324391][ T1569] RAX: ffffffffffffffda RBX: 00007f4baf015fa0 RCX: 00007f4baed9ce59 [ 1702.324401][ T1569] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000005 [ 1702.324409][ T1569] RBP: 00007f4bacff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.324417][ T1569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.324424][ T1569] R13: 00007f4baf016038 R14: 00007f4baf015fa0 R15: 00007f4baf13fa48 [ 1702.324453][ T1569] [ 1702.748001][ T30] audit: type=1326 audit(1780918084.418:21164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.3.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a559ce59 code=0x7ffc0000 [ 1702.771659][ T1578] netlink: 'syz.0.8626': attribute type 1 has an invalid length. [ 1702.785453][ T30] audit: type=1326 audit(1780918084.418:21165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.3.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a559ce59 code=0x7ffc0000 [ 1702.819946][ T1578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1702.847348][ T1578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8626'. [ 1702.882462][ T1578] bond3: (slave dummy0): making interface the new active one [ 1702.892502][ T1578] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1703.051236][ T1582] fuse: Unknown parameter 'group_i00000000000000000000' [ 1703.134095][ T1586] binder: 1585:1586 ioctl c028564d 200000000100 returned -22 [ 1703.136245][ T1587] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8630'. [ 1703.151747][ T1587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8630'. [ 1703.455984][T32382] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1703.618296][T32382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.629483][T32382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.639484][T32382] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1703.649798][T32382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.660331][T32382] usb 5-1: config 0 descriptor?? [ 1704.133846][ T1602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8631'. [ 1704.153237][ T1602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.171148][ T1602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.517866][T32391] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1704.611051][T23880] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 1704.637782][T23880] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1704.677998][T32391] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1704.678984][T23880] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1704.687871][ T1615] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8640'. [ 1704.703923][T32391] usb 1-1: not running at top speed; connect to a high speed hub [ 1704.714792][T32391] usb 1-1: config 1 has an invalid interface number: 93 but max is 0 [ 1704.733241][T32391] usb 1-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 1704.756497][T32392] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1704.769079][T32391] usb 1-1: config 1 has no interface number 0 [ 1704.784747][T32391] usb 1-1: config 1 interface 93 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1704.813295][T32391] usb 1-1: config 1 interface 93 has no altsetting 0 [ 1704.833993][T32391] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 1704.849387][T32391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.858600][T32391] usb 1-1: Product: syz [ 1704.862889][T32391] usb 1-1: Manufacturer: syz [ 1704.868707][T32391] usb 1-1: SerialNumber: syz [ 1704.905250][T23880] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1704.936073][T32392] usb 2-1: Using ep0 maxpacket: 32 [ 1704.943813][T32392] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1704.961263][T23880] usb 6-1: USB disconnect, device number 33 [ 1704.962154][T32392] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1705.002747][T32392] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1705.014661][T14202] udevd[14202]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1705.033952][T32392] usb 2-1: Product: syz [ 1705.038559][T32392] usb 2-1: Manufacturer: syz [ 1705.046627][T32392] usb 2-1: SerialNumber: syz [ 1705.070381][T32392] usb 2-1: config 0 descriptor?? [ 1705.081730][ T1613] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1705.106384][T32392] hub 2-1:0.0: bad descriptor, ignoring hub [ 1705.112390][T32392] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1705.237995][T32391] peak_usb 1-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1705.245601][T32391] peak_usb 1-1:1.93: unable to read PCAN-USB serial number (err -22) [ 1705.276438][T23880] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1705.297411][T32391] peak_usb 1-1:1.93: probe with driver peak_usb failed with error -22 [ 1705.311427][ T1613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8639'. [ 1705.317255][T32391] usb 1-1: USB disconnect, device number 70 [ 1705.435977][T23880] usb 6-1: Using ep0 maxpacket: 16 [ 1705.442773][T23880] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1705.451783][T23880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.456617][T32392] usb 2-1: USB disconnect, device number 106 [ 1705.463271][T23880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1705.483245][T23880] usb 6-1: New USB device found, idVendor=1235, idProduct=9012, bcdDevice= 0.40 [ 1705.495527][T23880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.503664][T23880] usb 6-1: Product: syz [ 1705.508850][T23880] usb 6-1: Manufacturer: syz [ 1705.513480][T23880] usb 6-1: SerialNumber: syz [ 1705.803464][T23880] usb 6-1: USB disconnect, device number 34 [ 1705.847662][ T1620] fuse: Unknown parameter 'group_id00000000000000000000' [ 1706.312693][T32382] usbhid 5-1:0.0: can't add hid device: -71 [ 1706.330088][T32382] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1706.363597][T32382] usb 5-1: USB disconnect, device number 108 [ 1706.509932][ T1641] vlan0: entered allmulticast mode [ 1706.785970][T32382] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1706.945915][T32382] usb 6-1: Using ep0 maxpacket: 32 [ 1706.958065][T32382] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1706.974915][T32382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.991846][T32382] usb 6-1: Product: syz [ 1707.000733][T32382] usb 6-1: Manufacturer: syz [ 1707.012125][T32382] usb 6-1: SerialNumber: syz [ 1707.027271][T32382] usb 6-1: config 0 descriptor?? [ 1707.135939][T32392] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1707.295934][T32392] usb 1-1: Using ep0 maxpacket: 8 [ 1707.307615][T32391] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1707.322682][T32392] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1707.337959][T32392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.357863][T32382] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 035 [ 1707.358938][T32392] usb 1-1: config 0 has no interface number 0 [ 1707.396024][T32392] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1707.431106][T32392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.463651][T32392] usb 1-1: config 0 descriptor?? [ 1707.485555][T32392] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1707.514237][T32391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.537061][T32391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.555761][T32391] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1707.567957][T32391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.589118][T32391] usb 2-1: config 0 descriptor?? [ 1707.621338][ T1664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8646'. [ 1707.695326][T32392] usb 1-1: USB disconnect, device number 71 [ 1708.007389][T32391] hid_parser_main: 7 callbacks suppressed [ 1708.007411][T32391] cm6533_jd 0003:0D8C:0022.00A9: unknown main item tag 0x0 [ 1708.025430][T32391] cm6533_jd 0003:0D8C:0022.00A9: unknown main item tag 0x0 [ 1708.053428][T32391] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.00A9/input/input205 [ 1708.065922][T32382] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1708.115967][T32391] cm6533_jd 0003:0D8C:0022.00A9: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1708.223539][T32391] usb 2-1: USB disconnect, device number 107 [ 1708.229808][T32382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.258091][T32382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.268192][T32382] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1708.278576][T32382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.304283][T32382] usb 5-1: config 0 descriptor?? [ 1708.322128][ T1680] [ 1708.324483][ T1680] ===================================================== [ 1708.331448][ T1680] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1708.339029][ T1680] syzkaller #0 Tainted: G L [ 1708.345022][ T1680] ----------------------------------------------------- [ 1708.352022][ T1680] syz.0.8659/1680 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1708.359680][ T1680] ffff888028de1360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1708.368435][ T1680] [ 1708.368435][ T1680] and this task is already holding: [ 1708.375805][ T1680] ffff88809e512028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1708.385625][ T1680] which would create a new lock dependency: [ 1708.391521][ T1680] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1708.399776][ T1680] [ 1708.399776][ T1680] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1708.409252][ T1680] (&client->buffer_lock){..-.}-{3:3} [ 1708.409283][ T1680] [ 1708.409283][ T1680] ... which became SOFTIRQ-irq-safe at: [ 1708.422362][ T1680] lock_acquire+0x106/0x350 [ 1708.426973][ T1680] _raw_spin_lock+0x2e/0x40 [ 1708.431606][ T1680] evdev_pass_values+0xb9/0xbd0 [ 1708.436567][ T1680] evdev_events+0x1e6/0x340 [ 1708.441178][ T1680] input_pass_values+0x288/0x890 [ 1708.446265][ T1680] input_event_dispose+0x3e5/0x6b0 [ 1708.451500][ T1680] input_inject_event+0x1dc/0x330 [ 1708.456639][ T1680] kd_sound_helper+0x19f/0x210 [ 1708.461517][ T1680] input_handler_for_each_handle+0x101/0x1c0 [ 1708.467613][ T1680] call_timer_fn+0x192/0x5e0 [ 1708.472309][ T1680] __run_timer_base+0x652/0x8b0 [ 1708.477268][ T1680] run_timer_softirq+0xb7/0x170 [ 1708.482225][ T1680] handle_softirqs+0x22a/0x840 [ 1708.487095][ T1680] __irq_exit_rcu+0xca/0x220 [ 1708.491788][ T1680] irq_exit_rcu+0x9/0x30 [ 1708.496138][ T1680] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1708.501877][ T1680] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1708.507967][ T1680] rcu_is_watching+0x5a/0xb0 [ 1708.512668][ T1680] lock_release+0x4b/0x3c0 [ 1708.517190][ T1680] unwind_next_frame+0x1bba/0x2550 [ 1708.522420][ T1680] arch_stack_walk+0x11b/0x150 [ 1708.527299][ T1680] stack_trace_save+0xa9/0x100 [ 1708.532176][ T1680] save_stack+0x122/0x230 [ 1708.536615][ T1680] __reset_page_owner+0x71/0x1f0 [ 1708.541657][ T1680] free_unref_folios+0xd9f/0x14c0 [ 1708.546775][ T1680] folios_put_refs+0x9ff/0xb40 [ 1708.551628][ T1680] shmem_undo_range+0x52c/0x1660 [ 1708.556652][ T1680] shmem_evict_inode+0x289/0xae0 [ 1708.561686][ T1680] evict+0x61e/0xb10 [ 1708.565670][ T1680] __dentry_kill+0x1a2/0x690 [ 1708.570348][ T1680] finish_dput+0xc9/0x480 [ 1708.574771][ T1680] __fput+0x691/0xa60 [ 1708.578843][ T1680] task_work_run+0x1d9/0x270 [ 1708.583526][ T1680] do_exit+0x70f/0x22c0 [ 1708.587770][ T1680] do_group_exit+0x21b/0x2d0 [ 1708.592449][ T1680] __x64_sys_exit_group+0x3f/0x40 [ 1708.597560][ T1680] x64_sys_call+0x221a/0x2240 [ 1708.602329][ T1680] do_syscall_64+0x174/0x580 [ 1708.607011][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.612991][ T1680] [ 1708.612991][ T1680] to a SOFTIRQ-irq-unsafe lock: [ 1708.620078][ T1680] (tasklist_lock){.+.+}-{3:3} [ 1708.620108][ T1680] [ 1708.620108][ T1680] ... which became SOFTIRQ-irq-unsafe at: [ 1708.632734][ T1680] ... [ 1708.632741][ T1680] lock_acquire+0x106/0x350 [ 1708.639906][ T1680] _raw_read_lock+0x36/0x50 [ 1708.644551][ T1680] __do_wait+0xde/0x740 [ 1708.648797][ T1680] do_wait+0x1e7/0x510 [ 1708.652958][ T1680] kernel_wait+0xd6/0x1c0 [ 1708.657378][ T1680] call_usermodehelper_exec_work+0xbe/0x230 [ 1708.663373][ T1680] process_scheduled_works+0xb5d/0x1860 [ 1708.669013][ T1680] worker_thread+0xa53/0xfc0 [ 1708.673690][ T1680] kthread+0x389/0x470 [ 1708.677847][ T1680] ret_from_fork+0x514/0xb70 [ 1708.682520][ T1680] ret_from_fork_asm+0x1a/0x30 [ 1708.687371][ T1680] [ 1708.687371][ T1680] other info that might help us debug this: [ 1708.687371][ T1680] [ 1708.697601][ T1680] Chain exists of: [ 1708.697601][ T1680] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1708.697601][ T1680] [ 1708.710733][ T1680] Possible interrupt unsafe locking scenario: [ 1708.710733][ T1680] [ 1708.719089][ T1680] CPU0 CPU1 [ 1708.724477][ T1680] ---- ---- [ 1708.729875][ T1680] lock(tasklist_lock); [ 1708.734124][ T1680] local_irq_disable(); [ 1708.740877][ T1680] lock(&client->buffer_lock); [ 1708.748258][ T1680] lock(&new->fa_lock); [ 1708.755021][ T1680] [ 1708.758506][ T1680] lock(&client->buffer_lock); [ 1708.763538][ T1680] [ 1708.763538][ T1680] *** DEADLOCK *** [ 1708.763538][ T1680] [ 1708.771680][ T1680] 7 locks held by syz.0.8659/1680: [ 1708.776792][ T1680] #0: ffff88802bde7110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1708.785942][ T1680] #1: ffff88801ff4c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1708.796045][ T1680] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 1708.805709][ T1680] #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1708.815289][ T1680] #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1708.824430][ T1680] #5: ffff88809e512028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1708.834606][ T1680] #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1708.843670][ T1680] [ 1708.843670][ T1680] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1708.854065][ T1680] -> (&client->buffer_lock){..-.}-{3:3} { [ 1708.859802][ T1680] IN-SOFTIRQ-W at: [ 1708.863838][ T1680] lock_acquire+0x106/0x350 [ 1708.869990][ T1680] _raw_spin_lock+0x2e/0x40 [ 1708.876150][ T1680] evdev_pass_values+0xb9/0xbd0 [ 1708.882650][ T1680] evdev_events+0x1e6/0x340 [ 1708.888803][ T1680] input_pass_values+0x288/0x890 [ 1708.895391][ T1680] input_event_dispose+0x3e5/0x6b0 [ 1708.902167][ T1680] input_inject_event+0x1dc/0x330 [ 1708.908844][ T1680] kd_sound_helper+0x19f/0x210 [ 1708.915262][ T1680] input_handler_for_each_handle+0x101/0x1c0 [ 1708.922897][ T1680] call_timer_fn+0x192/0x5e0 [ 1708.929141][ T1680] __run_timer_base+0x652/0x8b0 [ 1708.935637][ T1680] run_timer_softirq+0xb7/0x170 [ 1708.942132][ T1680] handle_softirqs+0x22a/0x840 [ 1708.948548][ T1680] __irq_exit_rcu+0xca/0x220 [ 1708.954783][ T1680] irq_exit_rcu+0x9/0x30 [ 1708.960668][ T1680] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1708.967945][ T1680] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1708.975581][ T1680] rcu_is_watching+0x5a/0xb0 [ 1708.981823][ T1680] lock_release+0x4b/0x3c0 [ 1708.987888][ T1680] unwind_next_frame+0x1bba/0x2550 [ 1708.994653][ T1680] arch_stack_walk+0x11b/0x150 [ 1709.001068][ T1680] stack_trace_save+0xa9/0x100 [ 1709.007483][ T1680] save_stack+0x122/0x230 [ 1709.013465][ T1680] __reset_page_owner+0x71/0x1f0 [ 1709.020058][ T1680] free_unref_folios+0xd9f/0x14c0 [ 1709.026735][ T1680] folios_put_refs+0x9ff/0xb40 [ 1709.033147][ T1680] shmem_undo_range+0x52c/0x1660 [ 1709.039736][ T1680] shmem_evict_inode+0x289/0xae0 [ 1709.046327][ T1680] evict+0x61e/0xb10 [ 1709.051865][ T1680] __dentry_kill+0x1a2/0x690 [ 1709.058107][ T1680] finish_dput+0xc9/0x480 [ 1709.064084][ T1680] __fput+0x691/0xa60 [ 1709.069715][ T1680] task_work_run+0x1d9/0x270 [ 1709.075970][ T1680] do_exit+0x70f/0x22c0 [ 1709.081801][ T1680] do_group_exit+0x21b/0x2d0 [ 1709.088042][ T1680] __x64_sys_exit_group+0x3f/0x40 [ 1709.094728][ T1680] x64_sys_call+0x221a/0x2240 [ 1709.101061][ T1680] do_syscall_64+0x174/0x580 [ 1709.107301][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.114843][ T1680] INITIAL USE at: [ 1709.118738][ T1680] lock_acquire+0x106/0x350 [ 1709.124802][ T1680] _raw_spin_lock+0x2e/0x40 [ 1709.130869][ T1680] evdev_pass_values+0xb9/0xbd0 [ 1709.137371][ T1680] evdev_events+0x1e6/0x340 [ 1709.143433][ T1680] input_pass_values+0x288/0x890 [ 1709.149929][ T1680] input_event_dispose+0x330/0x6b0 [ 1709.156604][ T1680] input_inject_event+0x1dc/0x330 [ 1709.163198][ T1680] evdev_write+0x325/0x4c0 [ 1709.169178][ T1680] vfs_write+0x29a/0xb90 [ 1709.174992][ T1680] ksys_write+0x150/0x270 [ 1709.180891][ T1680] do_syscall_64+0x174/0x580 [ 1709.187045][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.194505][ T1680] } [ 1709.197002][ T1680] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1709.205264][ T1680] [ 1709.205264][ T1680] the dependencies between the lock to be acquired [ 1709.205272][ T1680] and SOFTIRQ-irq-unsafe lock: [ 1709.218775][ T1680] -> (tasklist_lock){.+.+}-{3:3} { [ 1709.224073][ T1680] HARDIRQ-ON-R at: [ 1709.228222][ T1680] lock_acquire+0x106/0x350 [ 1709.234719][ T1680] _raw_read_lock+0x36/0x50 [ 1709.241227][ T1680] __do_wait+0xde/0x740 [ 1709.247380][ T1680] do_wait+0x1e7/0x510 [ 1709.253447][ T1680] kernel_wait+0xd6/0x1c0 [ 1709.259776][ T1680] call_usermodehelper_exec_work+0xbe/0x230 [ 1709.267674][ T1680] process_scheduled_works+0xb5d/0x1860 [ 1709.275215][ T1680] worker_thread+0xa53/0xfc0 [ 1709.281800][ T1680] kthread+0x389/0x470 [ 1709.287866][ T1680] ret_from_fork+0x514/0xb70 [ 1709.294450][ T1680] ret_from_fork_asm+0x1a/0x30 [ 1709.301213][ T1680] SOFTIRQ-ON-R at: [ 1709.305369][ T1680] lock_acquire+0x106/0x350 [ 1709.311865][ T1680] _raw_read_lock+0x36/0x50 [ 1709.318374][ T1680] __do_wait+0xde/0x740 [ 1709.324537][ T1680] do_wait+0x1e7/0x510 [ 1709.330616][ T1680] kernel_wait+0xd6/0x1c0 [ 1709.336943][ T1680] call_usermodehelper_exec_work+0xbe/0x230 [ 1709.344840][ T1680] process_scheduled_works+0xb5d/0x1860 [ 1709.352378][ T1680] worker_thread+0xa53/0xfc0 [ 1709.358965][ T1680] kthread+0x389/0x470 [ 1709.365031][ T1680] ret_from_fork+0x514/0xb70 [ 1709.371632][ T1680] ret_from_fork_asm+0x1a/0x30 [ 1709.378400][ T1680] INITIAL USE at: [ 1709.382472][ T1680] lock_acquire+0x106/0x350 [ 1709.388903][ T1680] _raw_write_lock_irq+0x3d/0x50 [ 1709.395756][ T1680] copy_process+0x2b4c/0x4440 [ 1709.402340][ T1680] kernel_clone+0x2d7/0x940 [ 1709.408753][ T1680] user_mode_thread+0x110/0x180 [ 1709.415526][ T1680] rest_init+0x23/0x300 [ 1709.421592][ T1680] start_kernel+0x38a/0x3e0 [ 1709.428084][ T1680] x86_64_start_reservations+0x24/0x30 [ 1709.435483][ T1680] x86_64_start_kernel+0x143/0x1c0 [ 1709.442572][ T1680] common_startup_64+0x13e/0x147 [ 1709.449428][ T1680] INITIAL READ USE at: [ 1709.453928][ T1680] lock_acquire+0x106/0x350 [ 1709.460774][ T1680] _raw_read_lock+0x36/0x50 [ 1709.467628][ T1680] __do_wait+0xde/0x740 [ 1709.474132][ T1680] do_wait+0x1e7/0x510 [ 1709.480558][ T1680] kernel_wait+0xd6/0x1c0 [ 1709.487234][ T1680] call_usermodehelper_exec_work+0xbe/0x230 [ 1709.495478][ T1680] process_scheduled_works+0xb5d/0x1860 [ 1709.503458][ T1680] worker_thread+0xa53/0xfc0 [ 1709.510391][ T1680] kthread+0x389/0x470 [ 1709.516811][ T1680] ret_from_fork+0x514/0xb70 [ 1709.523744][ T1680] ret_from_fork_asm+0x1a/0x30 [ 1709.530874][ T1680] } [ 1709.533546][ T1680] ... key at: [] tasklist_lock+0x18/0x40 [ 1709.541503][ T1680] ... acquired at: [ 1709.545484][ T1680] _raw_read_lock+0x36/0x50 [ 1709.550167][ T1680] send_sigurg+0x12b/0x420 [ 1709.554763][ T1680] sk_send_sigurg+0x6c/0x2e0 [ 1709.559531][ T1680] queue_oob+0x42c/0x4f0 [ 1709.563981][ T1680] unix_stream_sendmsg+0xcb1/0xe80 [ 1709.569268][ T1680] ____sys_sendmsg+0x972/0x9f0 [ 1709.574287][ T1680] ___sys_sendmsg+0x2a5/0x360 [ 1709.579135][ T1680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1709.584245][ T1680] do_syscall_64+0x174/0x580 [ 1709.589012][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.595078][ T1680] [ 1709.597402][ T1680] -> (&f_owner->lock){....}-{3:3} { [ 1709.602701][ T1680] INITIAL USE at: [ 1709.606676][ T1680] lock_acquire+0x106/0x350 [ 1709.612914][ T1680] _raw_write_lock_irq+0x3d/0x50 [ 1709.619588][ T1680] __f_setown+0x67/0x370 [ 1709.625575][ T1680] fcntl_dirnotify+0x3f9/0x6a0 [ 1709.632075][ T1680] do_fcntl+0x77e/0x1a20 [ 1709.638066][ T1680] __se_sys_fcntl+0xc8/0x150 [ 1709.644398][ T1680] do_syscall_64+0x174/0x580 [ 1709.650724][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.658354][ T1680] INITIAL READ USE at: [ 1709.662766][ T1680] lock_acquire+0x106/0x350 [ 1709.669439][ T1680] _raw_read_lock_irqsave+0x48/0x60 [ 1709.676821][ T1680] send_sigio+0x38/0x370 [ 1709.683236][ T1680] kill_fasync+0x24d/0x4d0 [ 1709.689824][ T1680] sock_wake_async+0x137/0x160 [ 1709.696764][ T1680] sk_wake_async+0x184/0x280 [ 1709.703528][ T1680] unix_release_sock+0x74f/0xc80 [ 1709.710635][ T1680] unix_release+0x92/0xd0 [ 1709.717136][ T1680] sock_close+0xc3/0x240 [ 1709.723554][ T1680] __fput+0x44f/0xa60 [ 1709.729707][ T1680] task_work_run+0x1d9/0x270 [ 1709.736474][ T1680] exit_to_user_mode_loop+0x193/0x680 [ 1709.744042][ T1680] do_syscall_64+0x353/0x580 [ 1709.750808][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.758873][ T1680] } [ 1709.761457][ T1680] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1709.770456][ T1680] ... acquired at: [ 1709.774346][ T1680] _raw_read_lock_irqsave+0x48/0x60 [ 1709.779743][ T1680] send_sigio+0x38/0x370 [ 1709.784173][ T1680] kill_fasync+0x24d/0x4d0 [ 1709.788764][ T1680] sock_wake_async+0x137/0x160 [ 1709.793711][ T1680] sk_wake_async+0x184/0x280 [ 1709.798501][ T1680] unix_release_sock+0x74f/0xc80 [ 1709.803611][ T1680] unix_release+0x92/0xd0 [ 1709.808118][ T1680] sock_close+0xc3/0x240 [ 1709.812539][ T1680] __fput+0x44f/0xa60 [ 1709.816696][ T1680] task_work_run+0x1d9/0x270 [ 1709.821461][ T1680] exit_to_user_mode_loop+0x193/0x680 [ 1709.827004][ T1680] do_syscall_64+0x353/0x580 [ 1709.831767][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.837829][ T1680] [ 1709.840151][ T1680] -> (&new->fa_lock){....}-{3:3} { [ 1709.845277][ T1680] INITIAL USE at: [ 1709.849165][ T1680] lock_acquire+0x106/0x350 [ 1709.855231][ T1680] _raw_write_lock_irq+0x3d/0x50 [ 1709.861731][ T1680] fasync_remove_entry+0xf1/0x1c0 [ 1709.868333][ T1680] sock_fasync+0x85/0xf0 [ 1709.874137][ T1680] __fput+0x890/0xa60 [ 1709.879685][ T1680] task_work_run+0x1d9/0x270 [ 1709.885848][ T1680] do_exit+0x70f/0x22c0 [ 1709.891570][ T1680] do_group_exit+0x21b/0x2d0 [ 1709.897726][ T1680] get_signal+0x1284/0x1330 [ 1709.903792][ T1680] arch_do_signal_or_restart+0xbc/0x840 [ 1709.910901][ T1680] exit_to_user_mode_loop+0xa9/0x680 [ 1709.917750][ T1680] do_syscall_64+0x353/0x580 [ 1709.923908][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.931361][ T1680] INITIAL READ USE at: [ 1709.935684][ T1680] lock_acquire+0x106/0x350 [ 1709.942183][ T1680] _raw_read_lock_irqsave+0x48/0x60 [ 1709.949381][ T1680] kill_fasync+0x199/0x4d0 [ 1709.955800][ T1680] sock_wake_async+0x137/0x160 [ 1709.962560][ T1680] sk_wake_async+0x184/0x280 [ 1709.969150][ T1680] unix_release_sock+0x74f/0xc80 [ 1709.976104][ T1680] unix_release+0x92/0xd0 [ 1709.982443][ T1680] sock_close+0xc3/0x240 [ 1709.988681][ T1680] __fput+0x44f/0xa60 [ 1709.994670][ T1680] task_work_run+0x1d9/0x270 [ 1710.001261][ T1680] exit_to_user_mode_loop+0x193/0x680 [ 1710.008634][ T1680] do_syscall_64+0x353/0x580 [ 1710.015223][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.023127][ T1680] } [ 1710.025630][ T1680] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1710.034312][ T1680] ... acquired at: [ 1710.038115][ T1680] _raw_read_lock_irqsave+0x48/0x60 [ 1710.043493][ T1680] kill_fasync+0x199/0x4d0 [ 1710.048084][ T1680] evdev_pass_values+0x627/0xbd0 [ 1710.053198][ T1680] evdev_events+0x1e6/0x340 [ 1710.057870][ T1680] input_pass_values+0x288/0x890 [ 1710.062975][ T1680] input_event_dispose+0x330/0x6b0 [ 1710.068261][ T1680] input_inject_event+0x1dc/0x330 [ 1710.073462][ T1680] evdev_write+0x325/0x4c0 [ 1710.078049][ T1680] vfs_write+0x29a/0xb90 [ 1710.082469][ T1680] ksys_write+0x150/0x270 [ 1710.086978][ T1680] do_syscall_64+0x174/0x580 [ 1710.091741][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.097803][ T1680] [ 1710.100127][ T1680] [ 1710.100127][ T1680] stack backtrace: [ 1710.106029][ T1680] CPU: 1 UID: 0 PID: 1680 Comm: syz.0.8659 Tainted: G L syzkaller #0 PREEMPT(full) [ 1710.106050][ T1680] Tainted: [L]=SOFTLOCKUP [ 1710.106055][ T1680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1710.106065][ T1680] Call Trace: [ 1710.106070][ T1680] [ 1710.106076][ T1680] dump_stack_lvl+0xe8/0x150 [ 1710.106093][ T1680] __lock_acquire+0x2a94/0x2cf0 [ 1710.106115][ T1680] ? kill_fasync+0x199/0x4d0 [ 1710.106134][ T1680] lock_acquire+0x106/0x350 [ 1710.106148][ T1680] ? kill_fasync+0x199/0x4d0 [ 1710.106169][ T1680] ? do_raw_spin_lock+0x12b/0x2f0 [ 1710.106190][ T1680] _raw_read_lock_irqsave+0x48/0x60 [ 1710.106212][ T1680] ? kill_fasync+0x199/0x4d0 [ 1710.106231][ T1680] kill_fasync+0x199/0x4d0 [ 1710.106251][ T1680] ? kill_fasync+0x53/0x4d0 [ 1710.106271][ T1680] evdev_pass_values+0x627/0xbd0 [ 1710.106288][ T1680] ? evdev_pass_values+0x5f1/0xbd0 [ 1710.106304][ T1680] evdev_events+0x1e6/0x340 [ 1710.106317][ T1680] ? evdev_events+0x79/0x340 [ 1710.106331][ T1680] ? input_pass_values+0x8d/0x890 [ 1710.106343][ T1680] input_pass_values+0x288/0x890 [ 1710.106358][ T1680] ? input_handle_event+0x70c/0xf30 [ 1710.106378][ T1680] input_event_dispose+0x330/0x6b0 [ 1710.106398][ T1680] input_inject_event+0x1dc/0x330 [ 1710.106417][ T1680] ? input_inject_event+0xb5/0x330 [ 1710.106436][ T1680] evdev_write+0x325/0x4c0 [ 1710.106450][ T1680] ? __lock_acquire+0x6b5/0x2cf0 [ 1710.106475][ T1680] ? __pfx_evdev_write+0x10/0x10 [ 1710.106490][ T1680] ? bpf_lsm_file_permission+0x9/0x20 [ 1710.106511][ T1680] ? security_file_permission+0x75/0x260 [ 1710.106529][ T1680] ? rw_verify_area+0x255/0x4d0 [ 1710.106548][ T1680] ? __pfx_evdev_write+0x10/0x10 [ 1710.106563][ T1680] vfs_write+0x29a/0xb90 [ 1710.106585][ T1680] ? __pfx_vfs_write+0x10/0x10 [ 1710.106605][ T1680] ? __fget_files+0x2a/0x420 [ 1710.106623][ T1680] ? __fget_files+0x2a/0x420 [ 1710.106639][ T1680] ? __fget_files+0x3a0/0x420 [ 1710.106654][ T1680] ? __fget_files+0x2a/0x420 [ 1710.106674][ T1680] ksys_write+0x150/0x270 [ 1710.106694][ T1680] ? __pfx_ksys_write+0x10/0x10 [ 1710.106716][ T1680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.106731][ T1680] do_syscall_64+0x174/0x580 [ 1710.106744][ T1680] ? trace_irq_disable+0x3b/0x140 [ 1710.106765][ T1680] ? clear_bhb_loop+0x40/0x90 [ 1710.106781][ T1680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.106795][ T1680] RIP: 0033:0x7fed5939ce59 [ 1710.106808][ T1680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.106820][ T1680] RSP: 002b:00007fed5a272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.106835][ T1680] RAX: ffffffffffffffda RBX: 00007fed59615fa0 RCX: 00007fed5939ce59 [ 1710.106846][ T1680] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 1710.106855][ T1680] RBP: 00007fed59432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1710.106865][ T1680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.106873][ T1680] R13: 00007fed59616038 R14: 00007fed59615fa0 R15: 00007fed5973fa48 [ 1710.106889][ T1680] [ 1710.441483][T23882] usb 6-1: USB disconnect, device number 35 [ 1710.706108][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8658'. [ 1710.717952][ T1688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.726579][ T1688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.747184][T32391] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1710.926181][T32391] usb 1-1: Using ep0 maxpacket: 8 [ 1710.932545][T32391] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.954721][T32391] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1710.963934][T32391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.972094][T32391] usb 1-1: Product: syz [ 1710.976354][T32391] usb 1-1: Manufacturer: syz [ 1710.980954][T32391] usb 1-1: SerialNumber: syz [ 1710.987171][T32391] usb 1-1: config 0 descriptor?? [ 1710.994067][T32391] usb 1-1: No union descriptors [ 1710.999898][T32391] usb 1-1: unsupported MDLM descriptors [ 1711.005870][T32391] cdc_acm 1-1:0.0: Zero length descriptor references [ 1711.012680][T32391] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 1711.238260][ T1680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.246860][ T1680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.326795][T23882] usb 1-1: USB disconnect, device number 72 [ 1711.790232][T32382] usbhid 5-1:0.0: can't add hid device: -71 [ 1711.796279][T32382] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1711.806863][T32382] usb 5-1: USB disconnect, device number 109