last executing test programs: 8.380763572s ago: executing program 1 (id=1362): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000000000000201000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x30, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x80000001, 0x404140) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc"], 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 8.200145077s ago: executing program 2 (id=1363): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = epoll_create(0x3) ppoll(&(0x7f00000000c0)=[{r1, 0x10}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) close(r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@llc={0x4, {@snap={0xaa, 0xab, "0f", "6c0dee", 0x8}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r7 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r7) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r8 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), 0x0) io_uring_enter(r8, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 7.82221035s ago: executing program 2 (id=1364): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80d}], 0x1c) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x14) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008088}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) ftruncate(r6, 0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1ac, &(0x7f0000000100)=ANY=[@ANYBLOB="9b00004e7f438ca6f27e3a266286de6805d06d1644993f7b05e8247d6915cc18a0244d38f09100a7e9157c8e3e2abb777bc88c08c7e29bf6df0f8ad6a7fd867dc78da442259c49259eb5bf6f863a297831f445939925cd4ad7df0f6b11987129fb5b9d02b186e5f2c9c674a59cee69fcd2b3f6a6ae9f04ead606eaea2a21ef0ad992bd1c1f90d75d6d1cfff4600a2f6590e06f2eb2868fc3ca31d541bfdf93001d00004e8d"]) 7.46929227s ago: executing program 0 (id=1367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) 7.410805826s ago: executing program 0 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001300)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x2400a010) (fail_nth: 1) 7.143092624s ago: executing program 0 (id=1369): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000400"/20, @ANYRES32=0x0, @ANYBLOB="000000003dad00001c0012800b00010067726574617000000c000280060002000500000008000300", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) 7.035066019s ago: executing program 0 (id=1371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x75d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x18000) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002340)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0xc0236}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000210)="01", 0x1) read(r5, &(0x7f0000800000)=""/8, 0x8) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001600000426bd7000fddbdf25021002ff", @ANYRES32=r8, @ANYBLOB="08000900040000000800261a79090002000000080001004abf2c6a08000100ffffffff0800080000010000080008000a"], 0x48}}, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100049000904004b028d4add060905070b"], 0x0) 6.58081986s ago: executing program 3 (id=1373): r0 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') fstat64(r1, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newneigh={0x24, 0x1c, 0x4, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x1, 0x2, 0x8}, [@NDA_NH_ID={0x8, 0xd, 0x8a9}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000000700", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000ee10003d0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=0x0, @ANYBLOB="05220000318f5c4b0a000100aaaaaaaaaabb0000"], 0x54}, 0x1, 0x0, 0x0, 0xd4}, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0xfffe, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0x3ff, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0x1, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0xa, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x8, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000009c0)={@in6={{0xa, 0x4e20, 0xffffffff, @remote, 0x8}}, 0x0, 0x0, 0x19, 0x0, "806be402c382887c7017ce6bbd5f433e63cbbfe094124789013dfd2186f0f5e3238496a6b2104c7ac4421eac5ab5c59a3ef7d404de12b986892756f229b60a71314fc9b5baf4ede1f536b83fd77e1f92"}, 0xd8) 6.13000085s ago: executing program 3 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x4, 0x0, [{0xba8, 0x0, 0x5}, {0xb79, 0x0, 0xe42b}, {0x918, 0x0, 0x9}, {0x9af, 0x0, 0x64}]}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="1a04040000000000000047c5001c", 0xe, 0x4000004, &(0x7f0000000000)={0x11, 0x18, r5, 0x1, 0xc, 0x6, @remote}, 0x14) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r8 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r9, &(0x7f0000000100)='``', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r8, &(0x7f0000000080)='maps\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) write$binfmt_elf64(r7, 0x0, 0x78) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r11, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0xa, 0x3}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r12) 5.761606834s ago: executing program 2 (id=1375): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0xffffffff}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={r1, 0xe9, "aa8fbc6480607d89a33d89b7b532dbbacb8fa806594a20b37892920deab0cc1b0f0bf18fbd096a0b7ed71c7754f3cbc5bc5076ad5be6b32da5a1f5d846bd8a4499f119cfb67e026ea671070f9998e449c342fad7a55a320517b4c74279edbb9c008eb89e67bb8812a10656794ec782ff12dbe058f5348507100d0b76618a172ec8b8bfe9096f7dfed3c36b9bd62b79431a7f2d8fd1eab0a1340827e6926e4fadd306f012a11f21333ac857ae33a2ebe1ba9763fea001935a854634f790b393d61d0c5816b3dddcaa71c2429f7624723f1d873324c31e6793768f0c844e8a31c8efebaaea97bc5f5e1a"}, &(0x7f0000000840)=0xf1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x9}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x73e9}) file_getattr(r3, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x18, 0x800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4e}, {0x0}], 0x2}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {r8}}, './file0\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40040100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x104, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xd4, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6dc6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x908e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xbe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa89a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400000c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x90) getrandom(&(0x7f0000000100)=""/81, 0x51, 0x1) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x410a9, 0x0) 5.467287292s ago: executing program 2 (id=1376): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x140) chdir(0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) renameat2(r2, &(0x7f00000001c0)='./file1\x00', r4, &(0x7f0000000000)='./file1\x00', 0x0) 5.418305102s ago: executing program 2 (id=1377): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4bfa, &(0x7f0000002f80)=""/61) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$TIOCCONS(r0, 0x541d) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0x2, &(0x7f0000000140)={0x7, 0x6e, 0x0, 0x80080, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x2, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000100)=0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10080) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000002400)={0x6, 0x0, @ioapic={0x60000, 0x1, 0x2, 0x4, 0x0, [{0xd, 0x9, 0xf, '\x00', 0xa}, {0x1, 0x4, 0xc2, '\x00', 0x37}, {0xff, 0xcf, 0xc, '\x00', 0x4}, {0x6, 0xf, 0x9, '\x00', 0xb}, {0x10, 0x6, 0xff, '\x00', 0xdc}, {0x76, 0xff, 0x1, '\x00', 0xac}, {0x5, 0x4, 0x1c, '\x00', 0x6}, {0x3, 0x0, 0xca, '\x00', 0x2}, {0xdf, 0x3, 0x1, '\x00', 0x8b}, {0x11, 0x4, 0xb, '\x00', 0xaf}, {0x4, 0x80, 0xc, '\x00', 0x61}, {0x9, 0xa, 0x2, '\x00', 0x3}, {0x6, 0x6, 0x8, '\x00', 0xc7}, {0x9b, 0x80, 0xf0, '\x00', 0x6d}, {0x1, 0xfd, 0x6, '\x00', 0xd1}, {0x6, 0x5, 0x3, '\x00', 0x1}, {0x6, 0xfc, 0x6, '\x00', 0x6}, {0xff, 0x6, 0x40, '\x00', 0x7f}, {0xc, 0x1, 0x5, '\x00', 0x2}, {0x3a, 0x29, 0x0, '\x00', 0x9}, {0x6, 0x2, 0xa, '\x00', 0x4}, {0xd, 0x7, 0x8, '\x00', 0x5}, {0x40, 0x8, 0x5, '\x00', 0x1}, {0x2, 0xa, 0xf1, '\x00', 0x3}]}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x24800010}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="20000000150a09010000000000000000030000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 5.10369702s ago: executing program 1 (id=1378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) 5.021666513s ago: executing program 1 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400001c00128009000100626f6e65037d7120b83d727d0bd9b96400000000"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e23, @empty}}, 0xfffc}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x101, 0x1, 0x4, 0x7, r9}, &(0x7f0000000180)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) 4.452603325s ago: executing program 3 (id=1380): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1b0000019}) (fail_nth: 4) 4.33984436s ago: executing program 3 (id=1381): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f00000003c0)={0x200000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000240)=0x0, {}, &(0x7f0000000280)=""/112, 0x70, &(0x7f0000000300)=""/65, &(0x7f0000000380)=[0x0], 0x1, {r2}}, 0x58) r4 = syz_open_procfs(r3, &(0x7f0000000440)='sessionid\x00') signalfd(r4, &(0x7f0000000480)={[0xd32, 0x1661]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r6, 0x0, 0x80, 0x8) socket$l2tp6(0xa, 0x2, 0x73) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffff7ec]}, 0x0, 0x8) r9 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r9}, &(0x7f0000000140)=0x0) timer_settime(r10, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) 3.858889705s ago: executing program 0 (id=1382): getpgrp(0x0) syz_usb_connect$midi(0x0, 0x3a, &(0x7f0000003140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0x2, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x4a, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0xff, 0x0, [], 0x9}], [{{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x9d, 0xe, {0x6, 0x25, 0x1, 0x2, "62ff"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="230000000c000000040000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB="a2ffab564a48000000000000000000000e", @ANYRES32], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f0000000140)='./file0\x00', 0x8a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x20000044) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) sendmsg$IPSET_CMD_TEST(r2, 0x0, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@report={0x174, 0x20, 0x1, 0x70bd2c, 0x25dfdbfb, {0x33, {@in6=@mcast1, @in=@multicast1, 0x7ff, 0x6, 0x4e20, 0x0, 0x0, 0x30, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @sa={0xe0, 0x6, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e20, 0x5, 0x4e24, 0x0, 0x0, 0x0, 0xa0, 0x1d}, {@in6=@remote, 0x4d5, 0x3c}, @in=@multicast2, {0x1c0000000002, 0x0, 0x4, 0xa90d, 0x1, 0x3, 0x4, 0x2}, {0x8000, 0x4, 0x5, 0x7ff}, {0xe, 0x1, 0x9}, 0x70bd26, 0x0, 0x2, 0x7, 0x8, 0x8}}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x20008800) syz_usb_connect$uac1(0x6, 0x10e, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x99, 0x90, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x30}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x403, 0x6, 0xb, 0x9, 0xfb, 0xec}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x3, 0x4, [0x1, 0x7, 0x1, 0x5], 0x56}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x0, "cace1f42"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5, 0x3, "fc33ac9f0c0a0a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x44, 0x9, "dd14460b5c3e6d1ed1"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7f, 0x1, 0xd, 0xf0, "", "ae75"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4e, 0x9, 0x40, {0x7, 0x25, 0x1, 0x4, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xfc, 0x2, 0xb, 0x4, "9471a4c714a43dd2"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0xe, 0xf3, "d36950", '$'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x5, 0x8, 0xe, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf, 0x8}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1f, 0x3, 0x3, 0x6, "0220810e05c06c"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0xa6, 0x1, "fd86872820148e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0xcd, 0x1, {0x7, 0x25, 0x1, 0xc, 0x7, 0x9ae}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0xf5, 0x0, 0xfe, 0xff, 0xfd}, 0x3a, &(0x7f00000007c0)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x1, 0x76ce}, @ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x6, 0xff00, 0xf, [0xffc0, 0x3f00, 0xffff30]}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x10001, 0xff00, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0xe, 0x8}]}, 0x6, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x457}}, {0x6f, &(0x7f0000000900)=@string={0x6f, 0x3, "77e9472ad381b996e452811618def5d9562d9d757c5dd0f7f00867febbe3f4f87e35ec5c210f470e6623286c62a6c67c91330934d1ce3f950ce7d837c60200ee345fba0118d7b3c52ad670d6d2e9bf1e71f24de8e0ea26be8956477a2921b9718551a9d0dee773700cb3b549e1"}}, {0xd0, &(0x7f0000000980)=@string={0xd0, 0x3, "e30cd7cc1ab21e0f430746e807113732c6664705bb7fbecf3d1b5f1c4cb3deedce606b3d398e728aa9f079610d3fc38e271e45388e3a83f8136ab3423b98487f172abdc0992e2e6c4a0a215353273245f6249096bc15938397bd039d78cce5885fa110908a013d091116324d4b0f1341028d39007e4bcb80e9e3cefd4b300b3edb55470119ad2dcffce89ee85a54610cf0b27572aa76ef90e3181c6d8e25d8e119f0aa770b081253aac6ab8200848b450b9076bd0d4f99e5f4dd4bf8cb6c668589bbcb01def5e76844aa7a686733"}}, {0x50, &(0x7f0000000a80)=@string={0x50, 0x3, "d46f8a96514ac2a5455aa8f3e09aadfe9e5fdbe63e64fe62999939fa60a8038f393123ebab100f6471789fd52c76846b4d418d8e9888d00194bde2515b4d355f91d6dbb30e9d08d64688639c04dd"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x458}}]}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0x3}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x82, 0x100002, 0x5, 0x99, 0x17, 0x4, 0x8}}]}}]}, 0x44}}, 0x24000814) 3.719369726s ago: executing program 2 (id=1383): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f00000002c0), 0xc8500, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x0, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x1, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0x1}, {0x0, 0x3, 0x8, 0x5}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040005}, 0x24040084) fcntl$notify(r0, 0x402, 0x37) r5 = syz_open_procfs(0x0, &(0x7f0000002900)='sessionid\x00') r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) r9 = socket(0x2d, 0x80002, 0x0) sendto$inet6(r9, &(0x7f00000001c0)="78c45c15d7e8e8cc5e7408ca236c1325eeafe98d2553ecab089c20184328623d442cdfb3b4da74a23f8c2fc7", 0x2c, 0x20000841, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1f}, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x6, &(0x7f0000000000)={0xe, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) syz_usb_control_io$hid(r7, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000002200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xba, 0x6b, 0x100, 0x4, 0x4, 0x7, "8baa59911af3be4afd3193a21cbe15b2d3836095d2b9676aa813ddfa0420a873693ba62c7fdeb97dbc6fc202ece09e9c6fecc05be027809e050afc71d0db2a8f706cc90f10c259b9c4c7be945e3d75b59f6771525499c9442232211705d165fb39605750bd806b31d73c08bf19a8174630fdc797239b066d7172a1b08b1c71966a23056fb4ed343f2583c956eeaa7274491192071a325d8960099fdb0bbcfb9be6974ff0e99fbe952dca5c18e888c1a1a151aa577460397ae390"}}, 0x1d2) r11 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0xe, 0x5, 0x0, 0x20, 0xf9}, 0x24, &(0x7f0000000280)={0x5, 0xf, 0x24, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xd, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xf1, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x8, 0x8, 0xfff, 0x6}]}, 0x9, [{0x36, &(0x7f0000000380)=@string={0x36, 0x3, "7f8bcbfe44a90331fc25e1a223aaea72a8cfacec9d96d18e782675417d8c2dddcb6276e1d03056ecc917644beab49a34990d3e83"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "5208b61fd5e91ead959b4b96bc"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x344a}}, {0x96, &(0x7f0000001040)=@string={0x96, 0x3, "281269b50bec98cf3b982581aabc159f8b064dde077cd4b5aed7fcf83552c1fbba98b4ee63f04a86b84e3e42634f360a6e986102f33bceddbb0fd41cbcee6ce30e16a3d5ea347e9c447eae69f086d1d19404c2ff7fc44c4ac43ea3d7fd32c834b3a9d9ed938ac7d16fee3030ea18a46ff2572727dac468154925307fc9a1fca29839ccf9a9eb3cd157aa16aab3b946021e753e86"}}, {0x9a, &(0x7f0000000a00)=@string={0x9a, 0x3, "38c89336bdfd15283559a11270f1173fcc043c2503c2c09cf158e4d244edb623e76435f44a47172a0497b9bb7a3fc753059fe0ff1abf94285718dad6ba3cf67cc09fddc00856390f70d8e7de0cc9455467ec2166384432370de3453a3d3f31156abc5c4ebb68b0fd5333c0ab9ec102519cd62ce961418fdbe525d966cb69a24feb5bc8c23b336bf2b587025a9d7871b090735c020118c097"}}, {0xc9, &(0x7f0000000ac0)=@string={0xc9, 0x3, "963b670b4e52cd40d0dfc6cdeb2556c36d3b74954af05213981edfb5bef8ce03730e8da2a84a0dda7fcbce5c83b6fea8e46cc2137ec0b05fe7fc52e3590242c9028ccc1752fc87c1d70ea7fda1b5c35316ba03fb64f21b8df09fefc60a4e37ddf59becb2fa39377b6686ce53071b2e75784b52a1e6c878622d655eba0e67b385fb6bad5e66c58d76c94b8f249386b15b7bfad8bcc4e86d245827776e00b31f00e7ce326f13e41f6bcb18043d2c8915ffb75d60a0663348ad6df4f3cfe0fe510e544d47d28244b7"}}, {0x5a, &(0x7f0000000bc0)=@string={0x5a, 0x3, "628dfaac5c9f892ae6af9f56698c3ffd5431f486c862be97eb704a6cc734f8fed9a2469d103f19044cc693fe6f8fc47f39fa172ca7366796beabf3b915039cfa6499f41651f81013a92992e9a710748d30ab703eec90eb82"}}]}) syz_usb_control_io$printer(r11, &(0x7f0000000dc0)={0xc, &(0x7f0000000cc0)={0x0, 0x23, 0xa1, {0xa1, 0x4, "76340004ec20dfe135cc60bed4adbea79ed1df32f5b05045706ffb14fc9e8d2dab5c2b42539d45a8e8779988eead4c1296252cdaae21a7fa37e6b4c34467183c9667d9e3a388c89454e44963e1a92c35efe2c57805056a83594337e2071cc049322ab136fe0997a0332d5f0326fac16e835a3fc3f7887dea929c50546b591848f3cd8b42ee9717f13b15be9291ea9869fa6905aa821d29298111c1ff6b8c13"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000001000)={0x1c, &(0x7f0000000e00)=ANY=[@ANYBLOB="401469000000a1b1a46902ebebb0010829129d8b50498686c82055f17c1d584d3695c5eca45406c6c8d4ef11e2f639717cbcfdabcc59f15936d40747df2e549129257d6585e0a410c172e0646b1cddad923d1f84be9cd9962b1fb8e1b40c30bff1dc1418e0061a22b834d566e39069"], &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000f00)={0x20, 0x0, 0x67, {0x65, "367c07ede0faeb2d0b0921886bfface5d4fc84f83c64a9be4ab964e0a0c83b5ac251e610634a70e6a4b2000b7f93fcc8b626f527ece64ecac1cae95f6cc52346c4af1e6fbdd0f301bfddfbaa4c6387441906225eb489104adfb3be92cc226f92eb401e5352"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x9}}) write$UHID_CREATE(r6, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) 3.498610512s ago: executing program 1 (id=1384): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f1fb67dd3f707c94e026591ee54be34042074fa27c1c60477", 0x1a) 3.431511451s ago: executing program 4 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x30, r1, 0x20, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) 3.417564887s ago: executing program 1 (id=1386): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000040)=0x1) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000280)={0x20, 0x31, 0x1, 't'}, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000080)={{r0}, "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"}) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) 3.343389454s ago: executing program 4 (id=1387): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000003c0)={0x40f0f000, 0x8, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0xfffffffffffffffa, 0x4, 0x1, 0x20000, 0x8}) 3.3092448s ago: executing program 4 (id=1388): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4bfa, &(0x7f0000002f80)=""/61) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$TIOCCONS(r0, 0x541d) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0x2, &(0x7f0000000140)={0x7, 0x6e, 0x0, 0x80080, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x2, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000100)=0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10080) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000002400)={0x6, 0x0, @ioapic={0x60000, 0x1, 0x2, 0x4, 0x0, [{0xd, 0x9, 0xf, '\x00', 0xa}, {0x1, 0x4, 0xc2, '\x00', 0x37}, {0xff, 0xcf, 0xc, '\x00', 0x4}, {0x6, 0xf, 0x9, '\x00', 0xb}, {0x10, 0x6, 0xff, '\x00', 0xdc}, {0x76, 0xff, 0x1, '\x00', 0xac}, {0x5, 0x4, 0x1c, '\x00', 0x6}, {0x3, 0x0, 0xca, '\x00', 0x2}, {0xdf, 0x3, 0x1, '\x00', 0x8b}, {0x11, 0x4, 0xb, '\x00', 0xaf}, {0x4, 0x80, 0xc, '\x00', 0x61}, {0x9, 0xa, 0x2, '\x00', 0x3}, {0x6, 0x6, 0x8, '\x00', 0xc7}, {0x9b, 0x80, 0xf0, '\x00', 0x6d}, {0x1, 0xfd, 0x6, '\x00', 0xd1}, {0x6, 0x5, 0x3, '\x00', 0x1}, {0x6, 0xfc, 0x6, '\x00', 0x6}, {0xff, 0x6, 0x40, '\x00', 0x7f}, {0xc, 0x1, 0x5, '\x00', 0x2}, {0x3a, 0x29, 0x0, '\x00', 0x9}, {0x6, 0x2, 0xa, '\x00', 0x4}, {0xd, 0x7, 0x8, '\x00', 0x5}, {0x40, 0x8, 0x5, '\x00', 0x1}, {0x2, 0xa, 0xf1, '\x00', 0x3}]}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x24800010}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="20000000150a09010000000000000000030000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r9, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 2.852254264s ago: executing program 4 (id=1389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) 2.772682733s ago: executing program 4 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x1d, 0x0, 0xe00000000000000, {0x2, 0xf0, 0x2}}, 0x18, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x4814}, 0x10) (fail_nth: 1) 1.240883004s ago: executing program 4 (id=1391): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f00000002c0), 0xc8500, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x0, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x1, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0x1}, {0x0, 0x3, 0x8, 0x5}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040005}, 0x24040084) fcntl$notify(r0, 0x402, 0x37) r5 = syz_open_procfs(0x0, &(0x7f0000002900)='sessionid\x00') r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) r9 = socket(0x2d, 0x80002, 0x0) sendto$inet6(r9, &(0x7f00000001c0)="78c45c15d7e8e8cc5e7408ca236c1325eeafe98d2553ecab089c20184328623d442cdfb3b4da74a23f8c2fc7", 0x2c, 0x20000841, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1f}, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x6, &(0x7f0000000000)={0xe, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) syz_usb_control_io$hid(r7, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000002200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xba, 0x6b, 0x100, 0x4, 0x4, 0x7, "8baa59911af3be4afd3193a21cbe15b2d3836095d2b9676aa813ddfa0420a873693ba62c7fdeb97dbc6fc202ece09e9c6fecc05be027809e050afc71d0db2a8f706cc90f10c259b9c4c7be945e3d75b59f6771525499c9442232211705d165fb39605750bd806b31d73c08bf19a8174630fdc797239b066d7172a1b08b1c71966a23056fb4ed343f2583c956eeaa7274491192071a325d8960099fdb0bbcfb9be6974ff0e99fbe952dca5c18e888c1a1a151aa577460397ae390"}}, 0x1d2) r11 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0xe, 0x5, 0x0, 0x20, 0xf9}, 0x24, &(0x7f0000000280)={0x5, 0xf, 0x24, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xd, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xf1, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x8, 0x8, 0xfff, 0x6}]}, 0x9, [{0x36, &(0x7f0000000380)=@string={0x36, 0x3, "7f8bcbfe44a90331fc25e1a223aaea72a8cfacec9d96d18e782675417d8c2dddcb6276e1d03056ecc917644beab49a34990d3e83"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "5208b61fd5e91ead959b4b96bc"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x344a}}, {0x96, &(0x7f0000001040)=@string={0x96, 0x3, "281269b50bec98cf3b982581aabc159f8b064dde077cd4b5aed7fcf83552c1fbba98b4ee63f04a86b84e3e42634f360a6e986102f33bceddbb0fd41cbcee6ce30e16a3d5ea347e9c447eae69f086d1d19404c2ff7fc44c4ac43ea3d7fd32c834b3a9d9ed938ac7d16fee3030ea18a46ff2572727dac468154925307fc9a1fca29839ccf9a9eb3cd157aa16aab3b946021e753e86"}}, {0x9a, &(0x7f0000000a00)=@string={0x9a, 0x3, "38c89336bdfd15283559a11270f1173fcc043c2503c2c09cf158e4d244edb623e76435f44a47172a0497b9bb7a3fc753059fe0ff1abf94285718dad6ba3cf67cc09fddc00856390f70d8e7de0cc9455467ec2166384432370de3453a3d3f31156abc5c4ebb68b0fd5333c0ab9ec102519cd62ce961418fdbe525d966cb69a24feb5bc8c23b336bf2b587025a9d7871b090735c020118c097"}}, {0xc9, &(0x7f0000000ac0)=@string={0xc9, 0x3, "963b670b4e52cd40d0dfc6cdeb2556c36d3b74954af05213981edfb5bef8ce03730e8da2a84a0dda7fcbce5c83b6fea8e46cc2137ec0b05fe7fc52e3590242c9028ccc1752fc87c1d70ea7fda1b5c35316ba03fb64f21b8df09fefc60a4e37ddf59becb2fa39377b6686ce53071b2e75784b52a1e6c878622d655eba0e67b385fb6bad5e66c58d76c94b8f249386b15b7bfad8bcc4e86d245827776e00b31f00e7ce326f13e41f6bcb18043d2c8915ffb75d60a0663348ad6df4f3cfe0fe510e544d47d28244b7"}}, {0x5a, &(0x7f0000000bc0)=@string={0x5a, 0x3, "628dfaac5c9f892ae6af9f56698c3ffd5431f486c862be97eb704a6cc734f8fed9a2469d103f19044cc693fe6f8fc47f39fa172ca7366796beabf3b915039cfa6499f41651f81013a92992e9a710748d30ab703eec90eb82"}}]}) syz_usb_control_io$printer(r11, &(0x7f0000000dc0)={0xc, &(0x7f0000000cc0)={0x0, 0x23, 0xa1, {0xa1, 0x4, "76340004ec20dfe135cc60bed4adbea79ed1df32f5b05045706ffb14fc9e8d2dab5c2b42539d45a8e8779988eead4c1296252cdaae21a7fa37e6b4c34467183c9667d9e3a388c89454e44963e1a92c35efe2c57805056a83594337e2071cc049322ab136fe0997a0332d5f0326fac16e835a3fc3f7887dea929c50546b591848f3cd8b42ee9717f13b15be9291ea9869fa6905aa821d29298111c1ff6b8c13"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000001000)={0x1c, &(0x7f0000000e00)=ANY=[@ANYBLOB="401469000000a1b1a46902ebebb0010829129d8b50498686c82055f17c1d584d3695c5eca45406c6c8d4ef11e2f639717cbcfdabcc59f15936d40747df2e549129257d6585e0a410c172e0646b1cddad923d1f84be9cd9962b1fb8e1b40c30bff1dc1418e0061a22b834d566e39069"], &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000f00)={0x20, 0x0, 0x67, {0x65, "367c07ede0faeb2d0b0921886bfface5d4fc84f83c64a9be4ab964e0a0c83b5ac251e610634a70e6a4b2000b7f93fcc8b626f527ece64ecac1cae95f6cc52346c4af1e6fbdd0f301bfddfbaa4c6387441906225eb489104adfb3be92cc226f92eb401e5352"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x9}}) write$UHID_CREATE(r6, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) 787.225931ms ago: executing program 0 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x75d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x18000) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002340)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0xc0236}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000210)="01", 0x1) read(r5, &(0x7f0000800000)=""/8, 0x8) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001600000426bd7000fddbdf25021002ff", @ANYRES32=r8, @ANYBLOB="08000900040000000800261a79090002000000080001004abf2c6a08000100ffffffff0800080000010000080008000a"], 0x48}}, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100049000904004b028d4add060905070b"], 0x0) 743.830311ms ago: executing program 3 (id=1393): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2a, 0x80000, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xb}}, './cgroup.cpu/cgroup.procs\x00'}) ppoll(&(0x7f00000003c0)=[{r3}, {r6, 0x8100}, {r2, 0x1041}], 0x3, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000440)={[0x3ff, 0x8001]}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 275.564117ms ago: executing program 1 (id=1394): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) close(0x3) 0s ago: executing program 3 (id=1395): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x101, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x9]}, {0x5, 0x5, 0x1, 0xfffffffffffffff7}}, 0xd287, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xa}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000404e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x18}, 0x38) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000200)="a8", 0x1) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) execve(0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=""/115, 0x73}, 0x3f2}], 0x1, 0x18103, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="48000000140081fb7059ae08060c040002ff0fe78f00c6627326c5c39f113c6e00000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200", 0x48}], 0x1}, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r6, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1a, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x5, 0xe, 0x5, 0x9}], &(0x7f00000005c0)='GPL\x00', 0x3, 0xd0, &(0x7f0000000600)=""/208, 0x40f00, 0x13}, 0x94) kernel console output (not intermixed with test programs): 36.508709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 336.999403][ T9533] netlink: 108 bytes leftover after parsing attributes in process `syz.1.967'. [ 337.048711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 337.667492][ T9543] fuse: Bad value for 'fd' [ 338.527907][ T9551] openvswitch: netlink: Message has 8 unknown bytes. [ 338.616202][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 338.933260][ T9559] F2FS-fs: Conflicting test_dummy_encryption options [ 338.969101][ T5699] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 338.984592][ T9561] FAULT_INJECTION: forcing a failure. [ 338.984592][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.008208][ T9561] CPU: 0 UID: 0 PID: 9561 Comm: syz.2.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.008247][ T9561] Tainted: [L]=SOFTLOCKUP [ 339.008255][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.008269][ T9561] Call Trace: [ 339.008278][ T9561] [ 339.008287][ T9561] dump_stack_lvl+0xe8/0x150 [ 339.008324][ T9561] should_fail_ex+0x40c/0x560 [ 339.008358][ T9561] _copy_from_user+0x2d/0xb0 [ 339.008381][ T9561] get_compat_msghdr+0xb3/0x4c0 [ 339.008414][ T9561] ? __pfx_get_compat_msghdr+0x10/0x10 [ 339.008454][ T9561] ___sys_sendmsg+0x201/0x360 [ 339.008481][ T9561] ? __lock_acquire+0x683/0x2cf0 [ 339.008515][ T9561] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.008541][ T9561] ? get_pid_task+0x20/0x1f0 [ 339.008570][ T9561] ? get_pid_task+0x20/0x1f0 [ 339.008598][ T9561] ? get_pid_task+0x20/0x1f0 [ 339.008666][ T9561] ? __fget_files+0x2a/0x420 [ 339.008694][ T9561] ? __fget_files+0x3a2/0x420 [ 339.008733][ T9561] __sys_sendmsg+0x177/0x240 [ 339.008762][ T9561] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.008807][ T9561] __do_fast_syscall_32+0x23e/0x6f0 [ 339.008839][ T9561] ? do_fast_syscall_32+0x33/0x70 [ 339.008867][ T9561] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.008893][ T9561] ? asm_int80_emulation+0x1a/0x20 [ 339.008914][ T9561] ? do_int80_emulation+0x29f/0x550 [ 339.008941][ T9561] ? trace_irq_disable+0x3b/0x140 [ 339.008972][ T9561] do_fast_syscall_32+0x33/0x70 [ 339.009001][ T9561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.009026][ T9561] RIP: 0023:0xf7fb80ec [ 339.009046][ T9561] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 339.009065][ T9561] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 339.009088][ T9561] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080006040 [ 339.009102][ T9561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.009113][ T9561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.009125][ T9561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.009136][ T9561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.009177][ T9561] [ 339.161319][ T9563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'. [ 339.319453][ T5759] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 339.329028][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 339.336415][ T5699] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 339.344830][ T5699] usb 1-1: config 179 has no interface number 0 [ 339.351503][ T5699] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 339.363810][ T5699] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 339.376129][ T5699] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 339.388033][ T5699] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 339.400353][ T5699] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.414834][ T5699] usb 1-1: config 179 interface 65 has no altsetting 0 [ 339.431275][ T5699] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 339.487445][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.504119][ T5759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.519871][ T5759] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 339.532357][ T5759] usb 5-1: config 4 has no interface number 0 [ 339.548806][ T5759] usb 5-1: config 4 interface 9 has no altsetting 0 [ 339.572098][ T5759] usb 5-1: New USB device found, idVendor=2357, idProduct=0602, bcdDevice=91.75 [ 339.598813][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.621461][ T5759] usb 5-1: Product: syz [ 339.654775][ T5699] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input42 [ 339.675883][ T5759] usb 5-1: Manufacturer: syz [ 339.695489][ T5759] usb 5-1: SerialNumber: syz [ 339.742372][ T5759] r8152-cfgselector 5-1: Unknown version 0x0000 [ 339.763557][ T4978] input input42: unable to receive magic message: -110 [ 339.875591][ T5699] usb 1-1: USB disconnect, device number 39 [ 339.881972][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 339.901570][ T9567] fuse: Invalid rootmode [ 339.907132][ T5721] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 340.031893][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.074883][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.086373][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.099214][ T5721] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.132983][ T5721] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 340.142587][ T5759] r8152 5-1:4.9: Expected endpoints are not found [ 340.147835][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.167134][ T5721] usb 3-1: SerialNumber: syz [ 340.204457][ T5759] r8152-cfgselector 5-1: USB disconnect, device number 39 [ 340.374289][ T30] audit: type=1800 audit(1785949344.138:638): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.968" name="bus" dev="ramfs" ino=38425 res=0 errno=0 [ 340.523273][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.558664][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.659634][ T9573] fuse: Bad value for 'fd' [ 340.855931][ T5721] usb 3-1: 0:2 : does not exist [ 340.957805][ T5721] usb 3-1: USB disconnect, device number 35 [ 341.006677][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.149071][ T5699] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 341.157617][ T5707] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 341.332027][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.345545][ T5707] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 341.360807][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 341.374635][ T5707] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 341.391042][ T5707] usb 1-1: config 0 has no interface number 0 [ 341.400249][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 341.418593][ T5707] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 341.442597][ T5699] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 341.461893][ T5707] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.482275][ T5699] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 341.494765][ T5707] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 341.516868][ T5699] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 341.550400][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.563480][ T5699] usb 5-1: Manufacturer: syz [ 341.634909][ T5699] usb 5-1: config 0 descriptor?? [ 341.668384][ T5707] usb 1-1: config 0 descriptor?? [ 341.858091][ T9587] loop9: detected capacity change from 0 to 7 [ 341.906015][ T9587] Dev loop9: unable to read RDB block 7 [ 341.959259][ T9587] loop9: unable to read partition table [ 342.006854][ T9587] loop9: partition table beyond EOD, truncated [ 342.070114][ T9587] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 342.103613][ T5699] rc_core: IR keymap rc-hauppauge not found [ 342.125230][ T9576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.981'. [ 342.139942][ T5699] Registered IR keymap rc-empty [ 342.169863][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.197829][ T5707] usb 1-1: USB disconnect, device number 40 [ 342.230425][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.311615][ T5699] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 342.367995][ T5699] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input44 [ 342.415460][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.982'. [ 342.445914][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.509216][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.563691][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.610504][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.627908][ T9594] F2FS-fs: Conflicting test_dummy_encryption options [ 342.659428][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.704183][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.760750][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.800832][ T9594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.986'. [ 342.816665][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.859547][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 342.920717][ T5699] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 343.014684][ T5699] mceusb 5-1:0.0: Registered й with mce emulator interface version 1 [ 343.051693][ T5699] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 344.458349][ T5759] usb 5-1: USB disconnect, device number 40 [ 344.832774][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.993'. [ 344.868634][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.993'. [ 345.468695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 345.487927][ T9625] kAFS: unable to lookup cell '(,c¾Ì' [ 345.607960][ T30] audit: type=1326 audit(1785949349.358:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.4.997" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af0ec code=0x0 [ 345.631696][ T5699] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 345.782186][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 345.844295][ T5699] usb 2-1: not running at top speed; connect to a high speed hub [ 346.015215][ T5699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.055957][ T5699] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 346.088148][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.145604][ T5699] usb 2-1: Product: syz [ 346.170148][ T5699] usb 2-1: Manufacturer: syz [ 346.189739][ T5699] usb 2-1: SerialNumber: syz [ 346.227766][ T5699] usb 2-1: config 0 descriptor?? [ 346.246650][ T9623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.264308][ T9623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.311768][ T9634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.333160][ C0] usb 2-1: NFC: Urb failure (status -71) [ 346.383843][ C0] usb 2-1: NFC: Urb failure (status -71) [ 346.412356][ T5699] usb 2-1: NFC: Unable to get FW version [ 346.444589][ T5699] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -71 [ 346.550290][ T9623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.589657][ T9623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.658065][ T5699] usb 2-1: USB disconnect, device number 39 [ 347.580622][ T30] audit: type=1804 audit(1785949351.348:640): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.997" name="/newroot/216/file1" dev="tmpfs" ino=1169 res=1 errno=0 [ 348.479397][ T5707] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 348.646458][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 348.690147][ T5707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.741085][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.851104][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.874873][ T5707] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 348.897233][ T5707] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.959535][ T5707] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 348.970782][ T5759] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 348.981480][ T5707] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 349.006048][ T5707] usb 1-1: Manufacturer: syz [ 349.046843][ T5707] usb 1-1: config 0 descriptor?? [ 349.159036][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 349.196001][ T5759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.213163][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.283230][ T5759] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 349.296532][ T9659] fuse: Unknown parameter '00000000000000000000' [ 349.342872][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.355736][ T9656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 349.386876][ T5759] usb 3-1: Product: syz [ 349.397891][ T9656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1006'. [ 349.410442][ T5759] usb 3-1: Manufacturer: syz [ 349.426298][ T5759] usb 3-1: SerialNumber: syz [ 349.480340][ T5759] usb 3-1: config 0 descriptor?? [ 349.643072][ T5707] rc_core: IR keymap rc-hauppauge not found [ 349.660096][ T5707] Registered IR keymap rc-empty [ 349.669262][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 349.699723][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 349.743767][ T5707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 349.816124][ T5707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input45 [ 349.874867][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 349.893690][ T9666] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 349.928953][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 349.961045][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 349.992880][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 350.030029][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 350.065542][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 350.101134][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 350.129505][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 350.150718][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 350.169196][ T5699] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 350.179057][ T5707] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 350.214876][ T5707] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 350.235497][ T5707] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 350.272589][ T5707] usb 1-1: USB disconnect, device number 41 [ 350.340913][ T5699] usb 4-1: config 0 has no interfaces? [ 350.351230][ T5699] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.382406][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.418125][ T5699] usb 4-1: config 0 descriptor?? [ 350.550803][ T9672] Invalid argument reading file caps for ./file0 [ 350.592913][ T9672] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1009'. [ 350.614391][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 350.722898][ T5759] usb 4-1: USB disconnect, device number 43 [ 351.760294][ T5707] usb 3-1: USB disconnect, device number 36 [ 351.934794][ T30] audit: type=1326 audit(1785949355.698:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701f0ec code=0x0 [ 352.102668][ T9701] F2FS-fs: Conflicting test_dummy_encryption options [ 352.415446][ T9701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1018'. [ 352.831229][ T30] audit: type=1804 audit(1785949356.598:642): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1015" name="/newroot/189/file1" dev="tmpfs" ino=1028 res=1 errno=0 [ 352.908702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 352.918761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 354.039396][ T9723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.076814][ T9723] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1023'. [ 354.339482][ T9723] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1023'. [ 354.408767][ T5699] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 354.481760][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 354.559036][ T5699] usb 3-1: device descriptor read/64, error -71 [ 354.566807][ T9718] openvswitch: netlink: Multiple metadata blocks provided [ 354.828757][ T5699] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 354.978835][ T5699] usb 3-1: device descriptor read/64, error -71 [ 355.110042][ T5699] usb usb3-port1: attempt power cycle [ 355.299217][ T5691] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 355.458793][ T5699] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 355.479741][ T5691] usb 1-1: Using ep0 maxpacket: 16 [ 355.504439][ T5691] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.525792][ T5699] usb 3-1: device descriptor read/8, error -71 [ 355.544878][ T5691] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.575433][ T5691] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.594200][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.612262][ T5691] usb 1-1: Product: syz [ 355.634748][ T5691] usb 1-1: Manufacturer: syz [ 355.644551][ T5691] usb 1-1: SerialNumber: syz [ 355.676260][ T5691] usb 1-1: config 0 descriptor?? [ 355.789071][ T5699] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 355.819966][ T5699] usb 3-1: device descriptor read/8, error -71 [ 355.940165][ T5699] usb usb3-port1: unable to enumerate USB device [ 356.818750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 357.363943][ T9764] Invalid argument reading file caps for ./file0 [ 357.391853][ T5706] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 357.563324][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.579420][ T5706] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.596231][ T5706] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.614907][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.655646][ T5706] usb 2-1: SerialNumber: syz [ 357.955391][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.982545][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.122794][ T5691] usb 1-1: USB disconnect, device number 42 [ 358.206515][ T5706] usb 2-1: 0:2 : does not exist [ 358.278981][ T5629] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 358.430845][ T5706] usb 2-1: USB disconnect, device number 40 [ 358.469426][ T5629] usb 5-1: Using ep0 maxpacket: 32 [ 358.496165][ T5629] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 358.536788][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.568382][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.570558][ T5629] usb 5-1: config 0 descriptor?? [ 358.629794][ T5629] gspca_main: sunplus-2.14.0 probing 041e:400b [ 359.288773][ T5707] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 359.456082][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 49424, setting to 64 [ 359.493504][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 359.527395][ T5707] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 359.547506][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.588255][ T5707] usb 4-1: Product: syz [ 359.616636][ T5707] usb 4-1: Manufacturer: syz [ 359.631752][ T5707] usb 4-1: SerialNumber: syz [ 359.718106][ T5707] usb 4-1: config 0 descriptor?? [ 359.951558][ T9787] fuse: Bad value for 'rootmode' [ 360.064822][ T9778] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1038'. [ 360.164063][ T9792] netlink: 'syz.4.1038': attribute type 10 has an invalid length. [ 360.178818][ T9792] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1038'. [ 360.261453][ T9793] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1040'. [ 360.284400][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.329361][ T5629] gspca_sunplus: reg_w_riv err -110 [ 360.335713][ T5629] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 360.429279][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.505958][ T5707] usb 4-1: USB disconnect, device number 44 [ 360.899765][ T5699] usb 5-1: USB disconnect, device number 41 [ 361.421251][ T5629] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 361.608914][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 361.630191][ T5629] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 361.652641][ T5629] usb 3-1: config 0 has no interface number 0 [ 361.671008][ T5629] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 361.703785][ T5629] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 361.730310][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.742293][ T5629] usb 3-1: Product: syz [ 361.747040][ T5629] usb 3-1: Manufacturer: syz [ 361.753834][ T5629] usb 3-1: SerialNumber: syz [ 361.767006][ T5629] usb 3-1: config 0 descriptor?? [ 361.795207][ T5629] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 361.868558][ T9798] F2FS-fs: Conflicting test_dummy_encryption options [ 361.950116][ T9798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1043'. [ 361.985736][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 362.431097][ T9802] F2FS-fs: Conflicting test_dummy_encryption options [ 362.499087][ T5759] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 362.683929][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1046'. [ 362.725556][ T5759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.761275][ T5759] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 362.782419][ T5759] usb 5-1: can't read configurations, error -71 [ 363.769770][ T9822] FAULT_INJECTION: forcing a failure. [ 363.769770][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.787725][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.4.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.787761][ T9822] Tainted: [L]=SOFTLOCKUP [ 363.787769][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.787790][ T9822] Call Trace: [ 363.787876][ T9822] [ 363.787944][ T9822] dump_stack_lvl+0xe8/0x150 [ 363.788097][ T9822] should_fail_ex+0x40c/0x560 [ 363.788198][ T9822] _copy_to_user+0x31/0xb0 [ 363.788325][ T9822] simple_read_from_buffer+0xe1/0x170 [ 363.788392][ T9822] proc_fail_nth_read+0x1bb/0x230 [ 363.788435][ T9822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.788497][ T9822] ? rw_verify_area+0x24a/0x4c0 [ 363.788534][ T9822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.788563][ T9822] vfs_read+0x213/0xa80 [ 363.788588][ T9822] ? __pfx___mutex_lock+0x10/0x10 [ 363.788722][ T9822] ? __pfx_vfs_read+0x10/0x10 [ 363.788744][ T9822] ? __fget_files+0x2a/0x420 [ 363.788778][ T9822] ? __fget_files+0x3a2/0x420 [ 363.788806][ T9822] ? __fget_files+0x2a/0x420 [ 363.788844][ T9822] ksys_read+0x150/0x270 [ 363.788868][ T9822] ? __pfx_ksys_read+0x10/0x10 [ 363.788894][ T9822] ? asm_int80_emulation+0x1a/0x20 [ 363.788943][ T9822] do_int80_emulation+0x19a/0x550 [ 363.788999][ T9822] ? asm_int80_emulation+0x1a/0x20 [ 363.789019][ T9822] ? clear_bhb_loop+0x40/0x90 [ 363.789040][ T9822] ? clear_bhb_loop+0x40/0x90 [ 363.789066][ T9822] asm_int80_emulation+0x1a/0x20 [ 363.789087][ T9822] RIP: 0023:0xf71e74eb [ 363.789115][ T9822] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 363.789133][ T9822] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 363.789186][ T9822] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f549d5d0 [ 363.789200][ T9822] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 363.789211][ T9822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.789222][ T9822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 363.789259][ T9822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.789290][ T9822] [ 364.209522][ T9826] tipc: Started in network mode [ 364.214577][ T9826] tipc: Node identity 3, cluster identity 4711 [ 364.220776][ T9826] tipc: Node number set to 3 [ 364.261034][ T5629] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 364.282576][ T5629] usb 3-1: USB disconnect, device number 41 [ 364.307102][ T5629] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 364.323491][ T5629] cypress_m8 3-1:0.35: device disconnected [ 364.376212][ T30] audit: type=1326 audit(1785949368.128:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f470ec code=0x0 [ 364.629429][ T5691] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 364.650573][ T9835] F2FS-fs: Conflicting test_dummy_encryption options [ 364.667495][ T30] audit: type=1804 audit(1785949368.398:644): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1054" name="/newroot/200/file1" dev="tmpfs" ino=1084 res=1 errno=0 [ 364.805478][ T9836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1056'. [ 364.821654][ T5691] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 364.835419][ T5691] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 364.847461][ T5691] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 364.859613][ T5691] usb 5-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.873345][ T5691] usb 5-1: config 16 interface 0 has no altsetting 0 [ 364.880857][ T5691] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 364.891569][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.955299][ T9837] binder: 9831:9837 ioctl 4018620d 80000300 returned -22 [ 365.050082][ T5629] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 365.177332][ T5691] usb 5-1: string descriptor 0 read error: -71 [ 365.192418][ T5691] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 365.205530][ T5691] imon 5-1:16.0: unable to initialize intf0, err -19 [ 365.213168][ T5691] imon:imon_probe: failed to initialize context! [ 365.221309][ T5691] imon 5-1:16.0: unable to register, err -19 [ 365.232691][ T5691] usb 5-1: USB disconnect, device number 44 [ 365.482070][ T5706] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 365.987780][ T9847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1059'. [ 366.135767][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 366.355265][ T5629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.365421][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 366.376383][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 366.387261][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 366.786635][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.796833][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.807821][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 366.818356][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.832016][ T5629] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.841152][ T5629] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.849193][ T5629] usb 3-1: Manufacturer: syz [ 366.857197][ T5629] usb 3-1: config 0 descriptor?? [ 366.897612][ T5759] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 366.978229][ T9856] fuse: Unknown parameter '00000000000000000000' [ 367.227714][ T5706] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.236855][ T5706] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.244893][ T5706] usb 4-1: Manufacturer: syz [ 367.274783][ T5706] usb 4-1: config 0 descriptor?? [ 367.455898][ T8372] tipc: Subscription rejected, illegal request [ 367.705095][ T5629] rc_core: IR keymap rc-hauppauge not found [ 367.711089][ T5629] Registered IR keymap rc-empty [ 367.783169][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 367.999442][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 368.113320][ T5629] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 368.126862][ T5629] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46 [ 368.223493][ T5759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.231760][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 368.437617][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 368.547984][ T5759] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 368.555630][ T5759] usb 2-1: can't read configurations, error -71 [ 368.663106][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 368.688448][ T9888] fuse: Unknown parameter 'rµÏJp_id' [ 368.816870][ T24] usb 4-1: USB disconnect, device number 45 [ 368.890736][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 369.112085][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 369.240746][ T9916] fuse: Unknown parameter 'user00000000000000000000' [ 369.286680][ T8080] tipc: Subscription rejected, illegal request [ 369.324584][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 369.455559][ T30] audit: type=1326 audit(1785949373.208:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9923 comm="syz.1.1078" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f470ec code=0x0 [ 369.551783][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 369.574595][ T30] audit: type=1326 audit(1785949373.318:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.0.1079" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701f0ec code=0x0 [ 369.769373][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 369.818301][ T30] audit: type=1804 audit(1785949373.538:647): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1078" name="/newroot/205/file1" dev="tmpfs" ino=1111 res=1 errno=0 [ 369.988816][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 370.036712][ T30] audit: type=1804 audit(1785949373.748:648): pid=9929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1079" name="/newroot/199/file1" dev="tmpfs" ino=1082 res=1 errno=0 [ 370.071257][ T9928] binder: 9923:9928 ioctl 4018620d 80000300 returned -22 [ 370.136564][ T9931] binder: 9926:9931 ioctl 4018620d 80000300 returned -22 [ 370.208553][ T5629] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 370.244499][ T5629] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 370.254883][ T5629] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 370.281100][ T5629] usb 3-1: USB disconnect, device number 42 [ 370.835705][ T5759] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 370.943357][ T5629] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 371.210351][ T9943] F2FS-fs: Conflicting test_dummy_encryption options [ 371.274186][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1082'. [ 371.497743][ T9947] syzkaller0: entered promiscuous mode [ 371.503260][ T9947] syzkaller0: entered allmulticast mode [ 372.133600][ T5759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 372.472722][ T5629] usb 3-1: unable to read config index 0 descriptor/all [ 372.479763][ T5629] usb 3-1: can't read configurations, error -71 [ 372.486273][ T5759] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 372.491449][ T8080] tipc: Subscription rejected, illegal request [ 372.493891][ T5759] usb 2-1: can't read configurations, error -71 [ 372.600378][ T9964] warning: `syz.4.1091' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 373.971287][ T9993] fuse: Unknown parameter 'user00000000000000000000' [ 374.983386][ T8080] tipc: Subscription rejected, illegal request [ 375.306483][T10014] F2FS-fs: Conflicting test_dummy_encryption options [ 375.462748][T10014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1104'. [ 376.599349][ T5691] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 376.668905][T10016] syzkaller1: entered promiscuous mode [ 376.674426][T10016] syzkaller1: entered allmulticast mode [ 376.870969][ T5691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.882664][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 376.906609][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 376.920655][ T5691] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 377.152105][ T5691] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.193383][ T5691] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.332233][ T5691] usb 2-1: Manufacturer: syz [ 377.362913][ T5691] usb 2-1: config 0 descriptor?? [ 377.759075][ T5691] rc_core: IR keymap rc-hauppauge not found [ 377.783336][ T5691] Registered IR keymap rc-empty [ 377.807064][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 377.859852][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 377.878286][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1108'. [ 377.930860][ T5691] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 377.976387][ T5691] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47 [ 378.057540][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.089776][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.160589][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.272702][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.319433][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.389945][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.577908][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.683321][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.811332][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 378.860986][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.863358][T10063] fuse: Unknown parameter 'user_i00000000000000000000' [ 378.879424][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.977311][ T5691] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 379.064803][ T5691] mceusb 2-1:0.0: Registered й with mce emulator interface version 1 [ 379.094778][ T5691] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 379.108151][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1116'. [ 379.150242][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1116'. [ 379.696517][T10076] kAFS: unable to lookup cell '(,c¾Ì' [ 380.135728][ T5763] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 381.031546][ T5691] usb 2-1: USB disconnect, device number 45 [ 381.460441][ T5763] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 381.468831][ T5763] usb 1-1: config 128 has no interface number 0 [ 381.475126][ T5763] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 381.485515][ T5763] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 381.512682][ T5763] usb 1-1: config 128 interface 148 has no altsetting 0 [ 381.526812][T10092] kAFS: unable to lookup cell '(,c¾Ì' [ 382.349624][ T5763] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 382.358725][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.377659][ T5763] usb 1-1: Product: syz [ 382.381848][ T5763] usb 1-1: Manufacturer: syz [ 382.386475][ T5763] usb 1-1: SerialNumber: syz [ 383.113318][ T5763] usb 1-1: USB disconnect, device number 43 [ 383.463722][ T5699] logitech-hidpp-device 0005:046D:B012.0015: unknown main item tag 0x0 [ 383.473177][T10116] qrtr: Invalid version 0 [ 383.502118][ T5699] logitech-hidpp-device 0005:046D:B012.0015: unknown main item tag 0x0 [ 383.546367][ T5699] logitech-hidpp-device 0005:046D:B012.0015: unknown main item tag 0x1 [ 383.589308][ T5699] logitech-hidpp-device 0005:046D:B012.0015: collection stack underflow [ 383.618224][ T5699] logitech-hidpp-device 0005:046D:B012.0015: item 0 0 0 12 parsing failed [ 383.662663][ T5699] logitech-hidpp-device 0005:046D:B012.0015: hidpp_probe:parse failed [ 383.694033][ T5699] logitech-hidpp-device 0005:046D:B012.0015: probe with driver logitech-hidpp-device failed with error -22 [ 383.980428][ T5759] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 384.593476][ T30] audit: type=1326 audit(1785949388.348:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.2.1135" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb80ec code=0x0 [ 384.708828][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 385.052672][T10147] kAFS: unable to lookup cell '(,c¾Ì' [ 385.121674][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1138'. [ 385.130841][T10145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1138'. [ 385.606006][T10153] netlink: Conntrack attr has 4 unknown bytes [ 385.606059][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.754746][T10157] sctp: [Deprecated]: syz.0.1140 (pid 10157) Use of int in maxseg socket option. [ 385.754746][T10157] Use struct sctp_assoc_value instead [ 386.271547][ T12] tipc: Subscription rejected, illegal request [ 386.765694][ T147] tipc: Subscription rejected, illegal request [ 386.789442][T10168] fuse: Unknown parameter 'user_id00000000000000000000' [ 387.474425][ T5759] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 387.905738][ T5759] usb 5-1: device descriptor read/64, error -71 [ 388.239442][ T5759] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 388.478107][T10192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1150'. [ 388.487462][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1150'. [ 388.666040][ T5759] usb 5-1: device descriptor read/64, error -71 [ 388.777725][ T5759] usb usb5-port1: attempt power cycle [ 389.167200][T10197] syzkaller0: entered promiscuous mode [ 389.172860][T10197] syzkaller0: entered allmulticast mode [ 389.180167][T10204] team0: entered promiscuous mode [ 389.185529][T10204] team_slave_0: entered promiscuous mode [ 389.191469][T10204] team_slave_1: entered promiscuous mode [ 389.197422][T10204] team0: entered allmulticast mode [ 389.202679][T10204] team_slave_0: entered allmulticast mode [ 389.225235][T10204] team_slave_1: entered allmulticast mode [ 389.231902][T10204] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 389.264907][ T5759] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 389.382357][ T30] audit: type=1326 audit(1785949393.108:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.0.1156" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701f0ec code=0x0 [ 389.579937][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 389.687701][ T5759] usb 5-1: device descriptor read/8, error -71 [ 390.028794][ T5759] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 390.204077][T10221] capability: warning: `syz.4.1161' uses deprecated v2 capabilities in a way that may be insecure [ 390.217158][ T5707] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 390.361884][ T5759] usb 5-1: device descriptor read/8, error -71 [ 390.467168][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 390.473522][ T5759] usb usb5-port1: unable to enumerate USB device [ 390.493860][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.510700][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.537060][ T5707] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 390.566268][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.595093][ T5707] usb 3-1: config 0 descriptor?? [ 391.036428][ T5707] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 391.058771][ T5707] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 391.269621][ T5707] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 391.601089][ T5707] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 393.382383][T10227] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 393.413482][T10248] netlink: 'syz.4.1167': attribute type 2 has an invalid length. [ 393.449392][T10248] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 393.486109][ T5707] ft260 0003:0403:6030.0016: failed to retrieve status: -71, no wakeup [ 393.500338][T10255] fuse: Unknown parameter 'user_id00000000000000000000' [ 393.522712][ T5707] ft260 0003:0403:6030.0016: failed to retrieve status: -71 [ 393.550313][ T5707] ft260 0003:0403:6030.0016: failed to reset I2C controller: -71 [ 393.601106][ T5707] usb 3-1: USB disconnect, device number 45 [ 393.866780][ T5706] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 393.898589][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 393.907531][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 393.916448][T10270] netlink: 'syz.4.1175': attribute type 19 has an invalid length. [ 393.924320][T10270] netlink: 'syz.4.1175': attribute type 20 has an invalid length. [ 393.951320][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 393.960622][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 393.972153][ T8080] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.981887][ T8080] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.991409][T10270] netlink: 'syz.4.1175': attribute type 19 has an invalid length. [ 394.003657][ T8080] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.016068][T10270] netlink: 'syz.4.1175': attribute type 20 has an invalid length. [ 394.024213][ T8080] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.106404][ T5763] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 394.163071][T10276] F2FS-fs: Conflicting test_dummy_encryption options [ 394.214299][ T5759] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 394.294995][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1177'. [ 394.774297][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 394.885079][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 395.220001][ T5706] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 395.230285][ T5706] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 395.241270][ T5706] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 395.251122][ T5706] usb 1-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.264102][ T5706] usb 1-1: config 16 interface 0 has no altsetting 0 [ 395.270844][ T5706] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 395.279905][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.497240][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.507445][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.518379][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 395.528943][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.563164][ T5759] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 395.572137][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 395.585157][ T5759] usb 3-1: config 0 interface 0 has no altsetting 1 [ 395.993261][ T5706] usb 1-1: string descriptor 0 read error: -71 [ 396.002205][ T5706] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 396.009923][ T5706] imon 1-1:16.0: unable to initialize intf0, err -19 [ 396.016747][ T5763] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 396.025810][ T5763] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 396.033849][ T5763] usb 2-1: Manufacturer: syz [ 396.039977][ T5759] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 396.049486][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 396.050631][ T5707] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 396.057605][ T5759] usb 3-1: SerialNumber: syz [ 396.062098][ T5706] imon:imon_probe: failed to initialize context! [ 396.077134][ T5706] imon 1-1:16.0: unable to register, err -19 [ 396.086116][ T5759] usb 3-1: config 0 descriptor?? [ 396.091314][ T5763] usb 2-1: config 0 descriptor?? [ 396.120509][ T5706] usb 1-1: USB disconnect, device number 45 [ 396.319949][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 396.327320][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.339286][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.350376][ T5707] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 396.362808][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.374911][ T5707] usb 4-1: config 0 descriptor?? [ 396.520716][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 396.533031][T10293] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1183'. [ 396.542141][T10293] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1183'. [ 396.612464][T10266] fuse: Bad value for 'group_id' [ 396.617836][T10266] fuse: Bad value for 'group_id' [ 396.964999][ T5707] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 396.977066][ T5707] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 397.051533][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 397.102163][T10291] openvswitch: netlink: Multiple metadata blocks provided [ 397.115876][ T5707] ft260 0003:0403:6030.0017: chip code: 0000 0000 [ 397.325439][ T5707] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 397.540215][T10308] FAULT_INJECTION: forcing a failure. [ 397.540215][T10308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.553420][T10308] CPU: 0 UID: 0 PID: 10308 Comm: syz.2.1186 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.553454][T10308] Tainted: [L]=SOFTLOCKUP [ 397.553459][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.553468][T10308] Call Trace: [ 397.553475][T10308] [ 397.553482][T10308] dump_stack_lvl+0xe8/0x150 [ 397.553511][T10308] should_fail_ex+0x40c/0x560 [ 397.553539][T10308] strncpy_from_user+0x36/0x2c0 [ 397.553645][T10308] do_getname+0x77/0x250 [ 397.553667][T10308] do_readlinkat+0xc8/0x510 [ 397.553690][T10308] ? __pfx_do_readlinkat+0x10/0x10 [ 397.553711][T10308] ? ksys_write+0x242/0x270 [ 397.553732][T10308] __ia32_sys_readlinkat+0x9a/0xb0 [ 397.553753][T10308] __do_fast_syscall_32+0x23e/0x6f0 [ 397.553776][T10308] ? do_fast_syscall_32+0x33/0x70 [ 397.553794][T10308] ? lockdep_hardirqs_on+0x7a/0x110 [ 397.553812][T10308] ? asm_int80_emulation+0x1a/0x20 [ 397.553826][T10308] ? do_int80_emulation+0x29f/0x550 [ 397.553845][T10308] ? trace_irq_disable+0x3b/0x140 [ 397.553881][T10308] do_fast_syscall_32+0x33/0x70 [ 397.553901][T10308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.553919][T10308] RIP: 0023:0xf7fb80ec [ 397.553932][T10308] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 397.553944][T10308] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000131 [ 397.553960][T10308] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 397.553969][T10308] RDX: 00000000800021c0 RSI: 0000000000019000 RDI: 0000000000000000 [ 397.553978][T10308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.553986][T10308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 397.553994][T10308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.554014][T10308] [ 397.858204][ T5759] usb-storage 3-1:0.0: USB Mass Storage device detected [ 397.878694][ T5763] usb 2-1: USB disconnect, device number 46 [ 397.906936][ T5759] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 397.919872][ T5707] ft260 0003:0403:6030.0017: failed to retrieve status: -71, no wakeup [ 397.929775][ T5707] ft260 0003:0403:6030.0017: failed to retrieve status: -71 [ 397.937853][ T5707] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 397.959593][T10316] xt_connbytes: Forcing CT accounting to be enabled [ 398.031660][ T5707] usb 4-1: USB disconnect, device number 46 [ 398.037975][T10318] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1189'. [ 398.099547][ T5759] usb 3-1: USB disconnect, device number 46 [ 398.351214][T10322] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 398.351214][T10322] program syz.0.1191 not setting count and/or reply_len properly [ 398.736885][ T5759] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 398.744857][ T5706] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 398.753722][ T5763] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 399.008964][ T5707] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 399.167381][ T5759] usb 3-1: device descriptor read/64, error -71 [ 399.273073][ T5707] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 399.292596][ T5707] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 399.303824][ T5707] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 399.313781][ T5707] usb 5-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.327599][ T5707] usb 5-1: config 16 interface 0 has no altsetting 0 [ 399.334899][ T5707] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 399.344486][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.394106][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 399.399954][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 399.506010][ T5759] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 399.609377][ T5707] usb 5-1: string descriptor 0 read error: -71 [ 399.634773][ T5707] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 399.669705][ T5707] imon 5-1:16.0: unable to initialize intf0, err -19 [ 399.697465][ T5707] imon:imon_probe: failed to initialize context! [ 399.718930][ T5707] imon 5-1:16.0: unable to register, err -19 [ 399.740059][ T5707] usb 5-1: USB disconnect, device number 49 [ 399.953489][ T5759] usb 3-1: device descriptor read/64, error -71 [ 400.063373][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.073552][ T5763] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.082725][ T5706] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.093641][ T5706] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.106641][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 400.113587][ T5759] usb usb3-port1: attempt power cycle [ 400.119699][ T5706] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 400.128788][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.139699][ T5706] usb 1-1: config 0 descriptor?? [ 400.611681][ T5759] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 400.720273][ T5706] hid (null): unknown global tag 0xc [ 400.728278][ T5706] itetech 0003:258A:6A88.0018: unknown main item tag 0x3 [ 400.739943][ T5706] itetech 0003:258A:6A88.0018: unknown main item tag 0x0 [ 400.752838][ T5706] itetech 0003:258A:6A88.0018: unknown global tag 0xc [ 400.765956][ T5706] itetech 0003:258A:6A88.0018: item 0 1 1 12 parsing failed [ 400.774489][ T5706] itetech 0003:258A:6A88.0018: probe with driver itetech failed with error -22 [ 400.935259][ T5763] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.944364][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.952443][ T5763] usb 2-1: Product: syz [ 400.956614][ T5763] usb 2-1: Manufacturer: syz [ 400.961230][ T5763] usb 2-1: SerialNumber: syz [ 400.967123][ T5759] usb 3-1: device descriptor read/8, error -71 [ 401.003258][ T5721] usb 1-1: USB disconnect, device number 46 [ 401.158179][ T5763] usb 2-1: can't set config #1, error -71 [ 401.165299][ T5763] usb 2-1: USB disconnect, device number 47 [ 401.759605][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 401.776234][T10352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1201'. [ 402.686357][ T5629] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 402.768587][T10369] kAFS: unable to lookup cell '(,c¾Ì' [ 403.351091][ T5629] usb 3-1: Using ep0 maxpacket: 32 [ 403.723780][ T30] audit: type=1326 audit(1785949407.438:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.0.1208" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701f0ec code=0x0 [ 404.005254][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.016222][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.026050][ T5629] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 404.035136][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.065659][ T30] audit: type=1326 audit(1785949407.828:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f290ec code=0x0 [ 404.097361][ T5629] usb 3-1: config 0 descriptor?? [ 404.890989][ T5629] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 404.897969][ T5629] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 405.014626][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 405.280647][ T5629] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 405.513894][ T5707] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 405.564260][ T5629] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 405.784688][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 405.789923][ T5629] ft260 0003:0403:6030.0019: failed to retrieve status: -71, no wakeup [ 405.843394][ T5707] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 405.867770][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.896070][ T5707] usb 2-1: Product: syz [ 405.911461][ T5707] usb 2-1: Manufacturer: syz [ 405.962215][ T5707] usb 2-1: SerialNumber: syz [ 405.967707][ T5629] ft260 0003:0403:6030.0019: failed to retrieve status: -71 [ 406.037547][ T5629] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 406.037986][ T5707] r8152-cfgselector 2-1: Unknown version 0x0000 [ 406.138768][ T5707] r8152-cfgselector 2-1: config 0 descriptor?? [ 406.155890][ T5629] usb 3-1: USB disconnect, device number 51 [ 406.204574][T10418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1213'. [ 406.259967][T10418] FAULT_INJECTION: forcing a failure. [ 406.259967][T10418] name failslab, interval 1, probability 0, space 0, times 0 [ 406.282299][T10418] CPU: 1 UID: 0 PID: 10418 Comm: syz.3.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.282334][T10418] Tainted: [L]=SOFTLOCKUP [ 406.282342][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.282354][T10418] Call Trace: [ 406.282363][T10418] [ 406.282373][T10418] dump_stack_lvl+0xe8/0x150 [ 406.282411][T10418] should_fail_ex+0x40c/0x560 [ 406.282446][T10418] should_failslab+0xa8/0x100 [ 406.282515][T10418] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 406.282552][T10418] ? security_inode_alloc+0x39/0x310 [ 406.282667][T10418] ? security_inode_alloc+0x39/0x310 [ 406.282701][T10418] security_inode_alloc+0x39/0x310 [ 406.282729][T10418] inode_init_always_gfp+0x97e/0xd30 [ 406.282764][T10418] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 406.282843][T10418] alloc_inode+0x82/0x1b0 [ 406.282872][T10418] new_inode+0x1f/0x170 [ 406.282905][T10418] debugfs_create_dir+0x68/0x350 [ 406.282955][T10418] ieee80211_debugfs_key_add+0x17b/0x5a0 [ 406.283070][T10418] ? __pfx_ieee80211_debugfs_key_add+0x10/0x10 [ 406.283126][T10418] ieee80211_key_link+0x1132/0x16e0 [ 406.283261][T10418] ? __pfx_ieee80211_key_link+0x10/0x10 [ 406.283292][T10418] ? __local_bh_enable_ip+0xd0/0x130 [ 406.283339][T10418] ? lockdep_hardirqs_on+0x7a/0x110 [ 406.283368][T10418] ? kernel_fpu_end+0x62/0x80 [ 406.283403][T10418] ? __local_bh_enable_ip+0xd0/0x130 [ 406.283428][T10418] ? ieee80211_key_alloc+0x1bfd/0x2ab0 [ 406.283462][T10418] ? __asan_memcpy+0x40/0x70 [ 406.283489][T10418] ? ieee80211_key_alloc+0x1bfd/0x2ab0 [ 406.283530][T10418] ieee80211_add_key+0x97d/0xc30 [ 406.283619][T10418] rdev_add_key+0x134/0x300 [ 406.283685][T10418] nl80211_new_key+0x71c/0x860 [ 406.283733][T10418] ? __pfx_netdev_run_todo+0x10/0x10 [ 406.283850][T10418] ? __pfx_nl80211_new_key+0x10/0x10 [ 406.283887][T10418] ? nl80211_pre_doit+0x53d/0x890 [ 406.283956][T10418] genl_family_rcv_msg_doit+0x233/0x340 [ 406.284038][T10418] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 406.284074][T10418] ? bpf_lsm_capable+0x9/0x20 [ 406.284114][T10418] ? security_capable+0x7e/0x2c0 [ 406.284145][T10418] genl_rcv_msg+0x614/0x7a0 [ 406.284173][T10418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.284192][T10418] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 406.284221][T10418] ? __pfx_nl80211_new_key+0x10/0x10 [ 406.284241][T10418] ? __pfx_nl80211_post_doit+0x10/0x10 [ 406.284274][T10418] ? __pfx_ref_tracker_free+0x10/0x10 [ 406.284305][T10418] ? __asan_memcpy+0x40/0x70 [ 406.284330][T10418] ? __skb_clone+0x5c/0x6c0 [ 406.284389][T10418] netlink_rcv_skb+0x226/0x4a0 [ 406.284419][T10418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.284442][T10418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.284487][T10418] ? down_read+0x2be/0x330 [ 406.284521][T10418] genl_rcv+0x28/0x40 [ 406.284550][T10418] netlink_unicast+0x7bb/0x940 [ 406.284588][T10418] netlink_sendmsg+0x813/0xb40 [ 406.284628][T10418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.284661][T10418] ? aa_sock_msg_perm+0xf1/0x1b0 [ 406.284726][T10418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.284753][T10418] sock_sendmsg_nosec+0x13a/0x180 [ 406.284835][T10418] ____sys_sendmsg+0x54e/0x850 [ 406.284869][T10418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.284915][T10418] ___sys_sendmsg+0x2a5/0x360 [ 406.284948][T10418] ? __lock_acquire+0x683/0x2cf0 [ 406.284998][T10418] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.285024][T10418] ? get_pid_task+0x20/0x1f0 [ 406.285060][T10418] ? get_pid_task+0x20/0x1f0 [ 406.285087][T10418] ? get_pid_task+0x20/0x1f0 [ 406.285151][T10418] ? __fget_files+0x2a/0x420 [ 406.285180][T10418] ? __fget_files+0x3a2/0x420 [ 406.285221][T10418] __sys_sendmsg+0x177/0x240 [ 406.285251][T10418] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.285299][T10418] __do_fast_syscall_32+0x23e/0x6f0 [ 406.285330][T10418] ? do_fast_syscall_32+0x33/0x70 [ 406.285357][T10418] ? lockdep_hardirqs_on+0x7a/0x110 [ 406.285383][T10418] ? asm_int80_emulation+0x1a/0x20 [ 406.285404][T10418] ? do_int80_emulation+0x29f/0x550 [ 406.285430][T10418] ? trace_irq_disable+0x3b/0x140 [ 406.285463][T10418] do_fast_syscall_32+0x33/0x70 [ 406.285493][T10418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.285518][T10418] RIP: 0023:0xf7f290ec [ 406.285538][T10418] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 406.285577][T10418] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 406.285601][T10418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 406.285615][T10418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.285626][T10418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.285638][T10418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 406.285649][T10418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.285682][T10418] [ 406.285745][T10418] debugfs: out of free dentries, can not create directory '0' [ 406.561395][ T5707] r8152-cfgselector 2-1: Needed 1 retries to read version [ 407.463705][ T5706] r8152-cfgselector 2-1: USB disconnect, device number 48 [ 407.702862][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1219'. [ 407.712644][T10436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1219'. [ 408.068973][ T5707] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 408.246340][T10447] kAFS: unable to lookup cell '(,c¾Ì' [ 408.402711][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.430857][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.453392][ T5707] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 408.463561][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.508359][ T5707] usb 3-1: config 0 descriptor?? [ 408.725894][ T5706] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 408.939033][ T5721] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 408.970110][ T5707] steelseries 0003:1038:12B6.001A: reserved main item tag 0xd [ 408.988755][ T5707] steelseries 0003:1038:12B6.001A: unknown main item tag 0x7 [ 409.024088][ T5707] steelseries 0003:1038:12B6.001A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 409.161218][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 49424, setting to 64 [ 409.193364][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 409.224099][ T5707] steelseries 0003:1038:12B6.001A: hid_hw_raw_request() failed with -71 [ 409.245877][ T5721] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 409.264573][ T5707] usb 3-1: USB disconnect, device number 52 [ 409.283256][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.314060][ T5721] usb 4-1: Product: syz [ 409.334995][ T5721] usb 4-1: Manufacturer: syz [ 409.342063][ T5721] usb 4-1: SerialNumber: syz [ 409.365933][ T5721] usb 4-1: config 0 descriptor?? [ 409.620551][T10451] fuse: Bad value for 'rootmode' [ 409.646759][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1229'. [ 409.710650][ T5721] usb 4-1: USB disconnect, device number 47 [ 409.775196][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.845454][T10469] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1229'. [ 409.937757][ T5629] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 410.025390][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'. [ 410.048104][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 49424, setting to 64 [ 410.059391][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 410.162144][T10471] fuse: Unknown parameter '000000000000000000000120x0000000000000003' [ 410.859443][ T5721] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 410.918504][ T5706] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 410.927598][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.935641][ T5706] usb 5-1: Product: syz [ 410.939823][ T5706] usb 5-1: Manufacturer: syz [ 410.944440][ T5706] usb 5-1: SerialNumber: syz [ 410.963746][ T5706] usb 5-1: config 0 descriptor?? [ 411.131275][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.150247][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 411.162029][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 411.173233][ T5721] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 411.188268][ T5721] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.199411][ T5721] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.207505][ T5721] usb 3-1: Manufacturer: syz [ 411.222389][ T5721] usb 3-1: config 0 descriptor?? [ 411.318629][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 411.420046][T10475] openvswitch: netlink: Multiple metadata blocks provided [ 411.442599][T10481] openvswitch: netlink: Duplicate or invalid key (type 0). [ 411.451287][T10481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.479511][ T5629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.490784][T10481] input: syz0 as /devices/virtual/input/input49 [ 411.542108][ T5706] usb 5-1: USB disconnect, device number 50 [ 411.579860][ T5721] rc_core: IR keymap rc-hauppauge not found [ 411.608405][ T5721] Registered IR keymap rc-empty [ 411.624036][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.650352][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.709463][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 411.712969][ T5721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 411.828311][ T5721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 411.887462][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.920009][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.934810][ T5629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.944970][ T5629] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 411.954010][ T5629] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.989714][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.042252][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.113458][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.159634][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.220592][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.269473][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.284060][ T5706] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 412.297167][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.341450][ T5721] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 412.370879][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 412.392679][ T5721] mceusb 3-1:0.0: Registered й with mce emulator interface version 1 [ 412.398569][ T5763] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 412.413496][ T5721] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 412.453169][T10488] openvswitch: netlink: Multiple metadata blocks provided [ 412.798933][T10497] kAFS: unable to lookup cell '(,c¾Ì' [ 412.843999][ T5629] usb 2-1: string descriptor 0 read error: -71 [ 412.850373][ T5629] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 412.859831][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.954279][ T5629] usb 2-1: can't set config #1, error -71 [ 412.962070][ T5629] usb 2-1: USB disconnect, device number 49 [ 412.970071][ T5706] usb 5-1: Using ep0 maxpacket: 8 [ 413.063955][ T5763] usb 1-1: Using ep0 maxpacket: 16 [ 413.210980][T10499] sctp: [Deprecated]: syz.3.1240 (pid 10499) Use of int in maxseg socket option. [ 413.210980][T10499] Use struct sctp_assoc_value instead [ 413.730088][ T5763] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.740319][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.771250][ T5763] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 413.786301][ T5763] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.065682][ T5707] usb 3-1: USB disconnect, device number 53 [ 414.177441][ T5763] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 414.186581][ T5763] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 414.194609][ T5763] usb 1-1: Manufacturer: syz [ 414.216907][ T5763] usb 1-1: config 0 descriptor?? [ 414.247011][T10505] netlink: 'syz.2.1243': attribute type 10 has an invalid length. [ 414.267780][T10505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1243'. [ 414.280609][T10505] bond0: entered promiscuous mode [ 414.285774][T10505] bond_slave_0: entered promiscuous mode [ 414.296077][ T24] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 414.308414][T10505] bond_slave_1: entered promiscuous mode [ 414.321011][T10505] bridge0: port 3(bond0) entered blocking state [ 414.344638][T10505] bridge0: port 3(bond0) entered disabled state [ 414.400724][T10505] bond0: entered allmulticast mode [ 414.419024][T10505] bond_slave_0: entered allmulticast mode [ 414.424941][T10505] bond_slave_1: entered allmulticast mode [ 414.485993][T10511] fuse: fd is not a fuse device [ 414.529440][ T5706] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 414.538581][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.546628][ T5706] usb 5-1: Product: syz [ 414.550830][ T5706] usb 5-1: Manufacturer: syz [ 414.585097][ T5706] usb 5-1: config 0 descriptor?? [ 414.591892][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 414.635130][ T5706] usb 5-1: can't set config #0, error -71 [ 414.642803][ T5706] usb 5-1: USB disconnect, device number 51 [ 414.751032][ T24] usb 4-1: device descriptor read/64, error -71 [ 414.759580][ T5721] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 414.971068][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 49424, setting to 64 [ 414.982610][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 415.013506][ T5721] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 415.032647][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.049558][ T5721] usb 2-1: Product: syz [ 415.058387][ T5721] usb 2-1: Manufacturer: syz [ 415.067991][ T5721] usb 2-1: SerialNumber: syz [ 415.136806][ T24] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 415.142688][ T5721] usb 2-1: config 0 descriptor?? [ 415.448127][T10509] fuse: Bad value for 'rootmode' [ 415.619974][ T5721] usb 2-1: USB disconnect, device number 50 [ 415.655247][ T24] usb 4-1: device descriptor read/64, error -71 [ 415.821483][ T24] usb usb4-port1: attempt power cycle [ 415.965248][ T5691] usb 1-1: USB disconnect, device number 47 [ 416.321978][ T24] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 416.758159][ T24] usb 4-1: device descriptor read/8, error -71 [ 416.809160][ T5691] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 417.099480][ T24] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 417.110393][ T5691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.136117][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 417.218749][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 417.341791][ T5691] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 417.369877][ T5691] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 417.390302][ T5691] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 417.419500][ T5691] usb 5-1: Manufacturer: syz [ 417.427959][ T24] usb 4-1: device not accepting address 51, error -71 [ 417.443247][ T24] usb usb4-port1: unable to enumerate USB device [ 417.451348][ T5691] usb 5-1: config 0 descriptor?? [ 417.666561][T10560] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1256'. [ 417.809316][ T5691] rc_core: IR keymap rc-hauppauge not found [ 417.817922][ T5691] Registered IR keymap rc-empty [ 417.831115][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 417.859564][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 417.882984][ T5691] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 417.897826][ T5691] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 417.911290][T10546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1253'. [ 417.928431][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 417.981060][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 417.994172][T10569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1260'. [ 418.039692][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.092090][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.159693][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.212607][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.269645][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.321241][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.329239][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 418.379394][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.430873][ T5691] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 418.454081][ T5691] mceusb 5-1:0.0: Registered й with mce emulator interface version 1 [ 418.463457][ T5691] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 418.535169][T10573] F2FS-fs: Conflicting test_dummy_encryption options [ 418.699642][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1262'. [ 418.836177][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1264'. [ 418.845930][T10578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1264'. [ 419.002007][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 419.063280][T10580] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 419.677511][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.687711][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.698622][ T24] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 419.709185][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.100102][ T5706] usb 5-1: USB disconnect, device number 52 [ 420.123513][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 420.132637][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 420.141224][ T24] usb 4-1: Manufacturer: syz [ 420.171455][ T24] usb 4-1: config 0 descriptor?? [ 420.253354][ T30] audit: type=1326 audit(1785949424.008:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.2.1267" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb80ec code=0x0 [ 420.301335][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1269'. [ 420.331159][T10592] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 420.470176][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'. [ 420.525793][ T30] audit: type=1804 audit(1785949424.288:654): pid=10597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1267" name="/newroot/240/file1" dev="tmpfs" ino=1289 res=1 errno=0 [ 420.584016][T10593] sctp: [Deprecated]: syz.4.1270 (pid 10593) Use of int in maxseg socket option. [ 420.584016][T10593] Use struct sctp_assoc_value instead [ 420.805268][T10597] binder: 10586:10597 ioctl 4018620d 80000300 returned -22 [ 421.459660][ T5721] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 421.652901][ T5763] usb 4-1: USB disconnect, device number 52 [ 421.675319][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 421.709896][ T5721] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 421.764471][ T5721] usb 1-1: config 0 has no interface number 0 [ 421.808966][ T5721] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 421.842275][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.862343][ T5721] usb 1-1: Product: syz [ 421.880223][ T5721] usb 1-1: Manufacturer: syz [ 421.900322][ T5721] usb 1-1: SerialNumber: syz [ 421.918509][ T5721] usb 1-1: config 0 descriptor?? [ 422.136087][ T5721] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 422.154648][ T5721] uvcvideo 1-1:0.31: No valid video chain found. [ 422.198419][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 422.283360][T10615] openvswitch: netlink: Multiple metadata blocks provided [ 423.057835][ T5691] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 423.100350][ T5763] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 423.209214][ T5699] usb 1-1: USB disconnect, device number 48 [ 423.312205][ T5691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.312261][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 423.312290][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 423.312319][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 423.313848][ T5691] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 423.313877][ T5691] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 423.313900][ T5691] usb 4-1: Manufacturer: syz [ 423.322648][ T5691] usb 4-1: config 0 descriptor?? [ 423.357077][T10638] sctp: [Deprecated]: syz.0.1282 (pid 10638) Use of int in maxseg socket option. [ 423.357077][T10638] Use struct sctp_assoc_value instead [ 423.499154][T10640] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1283'. [ 423.656342][ T5691] rc_core: IR keymap rc-hauppauge not found [ 423.663312][ T5691] Registered IR keymap rc-empty [ 423.669085][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 423.699607][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 423.750394][ T5691] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 423.764726][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 423.774972][ T5691] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 [ 423.797115][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 423.817600][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 423.879386][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 423.950990][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.000532][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.019453][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.070320][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.121308][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.181561][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.197312][T10652] fuse: Bad value for 'fd' [ 424.233335][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.299448][ T5691] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 424.353788][ T5691] mceusb 4-1:0.0: Registered й with mce emulator interface version 1 [ 424.385780][ T5691] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 424.489815][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 424.702078][ T5763] usb 5-1: unable to get BOS descriptor or descriptor too short [ 425.145823][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 425.811209][ T24] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 426.041577][ T10] usb 4-1: USB disconnect, device number 53 [ 426.257892][ T5763] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 426.267032][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.275134][ T5763] usb 5-1: Product: syz [ 426.361727][ T5763] usb 5-1: can't set config #1, error -71 [ 426.369400][ T5763] usb 5-1: USB disconnect, device number 53 [ 426.679535][T10677] sctp: [Deprecated]: syz.2.1295 (pid 10677) Use of int in maxseg socket option. [ 426.679535][T10677] Use struct sctp_assoc_value instead [ 426.707607][ T24] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 426.716735][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.724769][ T24] usb 2-1: Product: syz [ 426.728968][ T24] usb 2-1: Manufacturer: syz [ 426.739011][ T24] usb 2-1: SerialNumber: syz [ 426.753171][ T24] usb 2-1: config 0 descriptor?? [ 426.764942][ T5691] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 426.962805][ T24] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 426.971399][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 426.988737][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.050982][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 427.060336][ T24] usb 2-1: media controller created [ 427.080292][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.093181][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 49424, setting to 64 [ 427.121732][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 427.147041][ T5691] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 427.163610][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.200591][ T5691] usb 1-1: Product: syz [ 427.215537][ T5691] usb 1-1: Manufacturer: syz [ 427.246594][ T5691] usb 1-1: SerialNumber: syz [ 427.296341][ T5691] usb 1-1: config 0 descriptor?? [ 427.304079][T10687] netlink: 'syz.1.1299': attribute type 4 has an invalid length. [ 427.315409][ T24] usb 2-1: selecting invalid altsetting 7 [ 427.321214][ T24] cxusb: set interface failed [ 427.325947][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 427.401278][T10687] netlink: 'syz.1.1299': attribute type 4 has an invalid length. [ 427.491861][T10687] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.513844][T10687] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.530414][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 427.536789][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 427.547591][T10675] fuse: Bad value for 'rootmode' [ 427.558509][T10687] batman_adv: batadv0: Interface deactivated: dummy0 [ 427.668692][T10687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.683338][T10687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.692145][T10696] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1294'. [ 427.837069][ T5691] usb 1-1: USB disconnect, device number 49 [ 427.871982][ T24] rc_core: IR keymap rc-dvico-portable not found [ 427.878416][ T24] Registered IR keymap rc-empty [ 427.974357][ T24] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 428.019730][ T24] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input52 [ 428.051451][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 428.058493][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 428.209155][ T808] dvb-usb: bulk message failed: -22 (1/0) [ 428.250742][ T24] usb 2-1: USB disconnect, device number 51 [ 428.289703][T10687] batman_adv: batadv0: Interface deactivated: geneve2 [ 428.319286][T10687] geneve2: left allmulticast mode [ 428.334116][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 428.529245][ T147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.572472][ T147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.588686][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1302'. [ 428.594605][ T147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.779556][ T1030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.789330][T10706] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 429.117460][T10710] batman_adv: batadv0: Removing interface: dummy0 [ 429.149699][T10710] bridge_slave_0: left allmulticast mode [ 429.155418][T10710] bridge_slave_0: left promiscuous mode [ 429.176324][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.207983][T10710] bridge_slave_1: left allmulticast mode [ 429.224253][T10710] bridge_slave_1: left promiscuous mode [ 429.247885][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.291251][T10710] team0: Port device team_slave_0 removed [ 429.315714][ T24] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 429.390699][T10710] team0: Port device team_slave_1 removed [ 429.391312][T10710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.391328][T10710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.392637][T10710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.392652][T10710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.394442][T10710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 429.719463][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 429.864772][T10719] vlan3: entered promiscuous mode [ 429.879824][T10719] bond0: entered promiscuous mode [ 429.910762][T10722] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1307'. [ 429.947868][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 430.007816][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 430.116615][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 430.331161][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 430.418701][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 430.616494][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 430.627783][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 430.650073][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 431.020927][T10738] syz_tun: entered allmulticast mode [ 431.035250][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 431.248676][T10738] syz_tun (unregistering): left allmulticast mode [ 431.287214][T10738] bond1: (slave syz_tun): Removing an active aggregator [ 431.321971][T10738] bond1: (slave syz_tun): Releasing backup interface [ 431.487795][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 431.496988][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 431.505198][ T24] usb 2-1: Product: syz [ 431.509826][ T24] usb 2-1: Manufacturer: syz [ 431.514435][ T24] usb 2-1: SerialNumber: syz [ 431.624343][ T24] usb 2-1: config 0 descriptor?? [ 431.702618][ T24] usb 2-1: can't set config #0, error -71 [ 431.710517][ T24] usb 2-1: USB disconnect, device number 52 [ 432.466264][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 433.457873][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 433.506823][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 433.555359][T10773] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 433.603250][T10773] bond2 (unregistering): Released all slaves [ 433.800424][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.810983][ T24] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 433.824003][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 434.636512][T10788] sctp: [Deprecated]: syz.1.1325 (pid 10788) Use of int in maxseg socket option. [ 434.636512][T10788] Use struct sctp_assoc_value instead [ 435.108380][ T24] usb 3-1: string descriptor 0 read error: -22 [ 435.114772][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 435.123846][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.216628][ T24] usb 3-1: can't set config #1, error -71 [ 435.223711][ T24] usb 3-1: USB disconnect, device number 54 [ 435.247873][T10792] Invalid option length (64260) for dns_resolver key [ 435.475860][T10797] FAULT_INJECTION: forcing a failure. [ 435.475860][T10797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.515207][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.4.1329 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.515242][T10797] Tainted: [L]=SOFTLOCKUP [ 435.515250][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.515263][T10797] Call Trace: [ 435.515272][T10797] [ 435.515281][T10797] dump_stack_lvl+0xe8/0x150 [ 435.515320][T10797] should_fail_ex+0x40c/0x560 [ 435.515369][T10797] _copy_to_user+0x31/0xb0 [ 435.515393][T10797] simple_read_from_buffer+0xe1/0x170 [ 435.515430][T10797] proc_fail_nth_read+0x1bb/0x230 [ 435.515465][T10797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.515498][T10797] ? rw_verify_area+0x24a/0x4c0 [ 435.515519][T10797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.515548][T10797] vfs_read+0x213/0xa80 [ 435.515574][T10797] ? __pfx___mutex_lock+0x10/0x10 [ 435.515603][T10797] ? __pfx_vfs_read+0x10/0x10 [ 435.515625][T10797] ? __fget_files+0x2a/0x420 [ 435.515658][T10797] ? __fget_files+0x3a2/0x420 [ 435.515685][T10797] ? __fget_files+0x2a/0x420 [ 435.515724][T10797] ksys_read+0x150/0x270 [ 435.515747][T10797] ? __pfx_ksys_read+0x10/0x10 [ 435.515772][T10797] ? asm_int80_emulation+0x1a/0x20 [ 435.515799][T10797] do_int80_emulation+0x19a/0x550 [ 435.515828][T10797] ? trace_irq_disable+0x3b/0x140 [ 435.515855][T10797] ? asm_int80_emulation+0x1a/0x20 [ 435.515875][T10797] ? clear_bhb_loop+0x40/0x90 [ 435.515894][T10797] ? clear_bhb_loop+0x40/0x90 [ 435.515920][T10797] asm_int80_emulation+0x1a/0x20 [ 435.515940][T10797] RIP: 0023:0xf71e74eb [ 435.515959][T10797] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 435.515977][T10797] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 435.515998][T10797] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f549d5d0 [ 435.516012][T10797] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 435.516024][T10797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.516036][T10797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 435.516048][T10797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.516079][T10797] [ 435.785658][T10800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1330'. [ 435.852810][T10800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1330'. [ 436.286542][ T30] audit: type=1326 audit(1785949440.008:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 436.311570][T10814] kAFS: unable to lookup cell '(,c¾Ì' [ 436.396957][T10811] netlink: 'syz.0.1334': attribute type 4 has an invalid length. [ 436.410710][ T30] audit: type=1326 audit(1785949440.008:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 436.496797][ T30] audit: type=1326 audit(1785949440.008:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 436.539394][T10811] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1334'. [ 436.623028][ T30] audit: type=1326 audit(1785949440.008:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 436.718707][ T30] audit: type=1326 audit(1785949440.008:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 436.780096][ T30] audit: type=1326 audit(1785949440.008:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 436.922397][ T30] audit: type=1326 audit(1785949440.008:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 437.056120][ T30] audit: type=1326 audit(1785949440.008:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 437.137490][ T30] audit: type=1326 audit(1785949440.008:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 437.265958][ T30] audit: type=1326 audit(1785949440.088:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10810 comm="syz.0.1334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 437.355361][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 437.438659][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 437.523217][T10816] openvswitch: netlink: Multiple metadata blocks provided [ 437.953533][T10832] geneve2: entered allmulticast mode [ 438.600003][ T5691] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 438.879411][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 438.886503][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.906859][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.928460][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.948744][ T5691] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 438.968742][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.009283][ T5691] usb 5-1: config 0 descriptor?? [ 439.049265][ T5699] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 439.321310][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.332744][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.339868][ T24] usb 1-1: config 7 has an invalid interface number: 246 but max is 0 [ 439.350785][ T24] usb 1-1: config 7 has no interface number 0 [ 439.360603][ T5699] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.374211][ T5699] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.383978][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.394774][ T5699] usb 2-1: config 0 descriptor?? [ 439.634047][ T5691] usbhid 5-1:0.0: can't add hid device: -32 [ 439.642603][ T5691] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 439.814566][ T5699] plantronics 0003:047F:FFFF.001B: item fetching failed at offset 0/15 [ 439.825352][ T5699] plantronics 0003:047F:FFFF.001B: parse failed [ 439.838199][ T5699] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 439.855006][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 439.905047][T10858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1348'. [ 440.068858][ T5699] usb 2-1: USB disconnect, device number 53 [ 440.261747][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.270482][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.315759][ T24] usb 1-1: New USB device found, idVendor=8c29, idProduct=eaed, bcdDevice=be.a0 [ 440.324894][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.425799][ T24] usb 1-1: can't set config #7, error -71 [ 440.438354][ T24] usb 1-1: USB disconnect, device number 50 [ 440.699764][ T5699] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 440.975292][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 440.994731][ T5699] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 441.010614][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.041829][ T5699] usb 4-1: config 0 descriptor?? [ 441.062265][ T5699] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 441.197777][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'. [ 441.267043][T10877] openvswitch: netlink: Multiple metadata blocks provided [ 442.034858][ T5691] usb 5-1: USB disconnect, device number 54 [ 442.197099][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 442.197117][ T30] audit: type=1326 audit(1785949445.958:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.4.1356" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af0ec code=0x0 [ 442.479382][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 442.692753][ T10] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 442.707545][ T10] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 442.725923][ T10] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 442.752742][ T30] audit: type=1804 audit(1785949446.518:771): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1356" name="/newroot/302/file1" dev="tmpfs" ino=1618 res=1 errno=0 [ 442.764209][ T10] usb 2-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.788111][ T10] usb 2-1: config 16 interface 0 has no altsetting 0 [ 442.795331][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 442.811722][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.019738][ T5721] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 443.033813][ T10] usb 2-1: string descriptor 0 read error: -71 [ 443.059147][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 443.066966][T10889] binder: 10884:10889 ioctl 4018620d 80000300 returned -22 [ 443.087339][ T10] imon 2-1:16.0: unable to initialize intf0, err -19 [ 443.094832][ T10] imon:imon_probe: failed to initialize context! [ 443.102195][ T10] imon 2-1:16.0: unable to register, err -19 [ 443.117208][ T10] usb 2-1: USB disconnect, device number 54 [ 443.303425][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 443.329790][ T5721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 443.343916][ T5721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 443.359939][ T5721] usb 3-1: string descriptor 0 read error: -22 [ 443.366677][ T5721] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 443.377208][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.390893][T10895] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 443.398455][T10895] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 443.413000][ T5721] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.159694][ T5699] gspca_vc032x: reg_r err -110 [ 444.164910][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.172336][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.183632][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.194479][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.204770][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.216553][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.225932][ T10] usb 3-1: USB disconnect, device number 55 [ 444.238057][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.250707][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.264951][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.279234][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.296690][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.316680][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.332873][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 444.341140][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.346848][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.359068][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.372006][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.390942][ T5691] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 444.400859][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.414599][ T5699] gspca_vc032x: Unknown sensor... [ 444.430761][ T5699] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 444.569042][ T5691] usb 2-1: device descriptor read/64, error -71 [ 444.840081][ T5691] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 444.915808][ T5759] usb 4-1: USB disconnect, device number 54 [ 445.057884][T10921] FAULT_INJECTION: forcing a failure. [ 445.057884][T10921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.060001][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 445.071143][T10921] CPU: 1 UID: 0 PID: 10921 Comm: syz.0.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.071175][T10921] Tainted: [L]=SOFTLOCKUP [ 445.071182][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.071193][T10921] Call Trace: [ 445.071201][T10921] [ 445.071210][T10921] dump_stack_lvl+0xe8/0x150 [ 445.071248][T10921] should_fail_ex+0x40c/0x560 [ 445.071278][T10921] _copy_from_user+0x2d/0xb0 [ 445.071301][T10921] get_compat_msghdr+0xb3/0x4c0 [ 445.071461][T10921] ? __pfx_get_compat_msghdr+0x10/0x10 [ 445.071585][T10921] ___sys_sendmsg+0x201/0x360 [ 445.071680][T10921] ? __lock_acquire+0x683/0x2cf0 [ 445.071777][T10921] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.071841][T10921] ? get_pid_task+0x20/0x1f0 [ 445.071923][T10921] ? get_pid_task+0x20/0x1f0 [ 445.071999][T10921] ? get_pid_task+0x20/0x1f0 [ 445.072157][T10921] ? __fget_files+0x2a/0x420 [ 445.072236][T10921] ? __fget_files+0x3a2/0x420 [ 445.072331][T10921] __sys_sendmsg+0x177/0x240 [ 445.072408][T10921] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.072526][T10921] __do_fast_syscall_32+0x23e/0x6f0 [ 445.072614][T10921] ? do_fast_syscall_32+0x33/0x70 [ 445.072689][T10921] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.072756][T10921] ? asm_int80_emulation+0x1a/0x20 [ 445.072812][T10921] ? do_int80_emulation+0x29f/0x550 [ 445.072877][T10921] ? trace_irq_disable+0x3b/0x140 [ 445.072968][T10921] do_fast_syscall_32+0x33/0x70 [ 445.073068][T10921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.073135][T10921] RIP: 0023:0xf701f0ec [ 445.073189][T10921] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 445.073235][T10921] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 445.073297][T10921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001600 [ 445.073324][T10921] RDX: 000000002400a010 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.073358][T10921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.073398][T10921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.073430][T10921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.073506][T10921] [ 445.309725][ T5691] usb 2-1: device descriptor read/64, error -71 [ 445.389375][ T5691] usb usb2-port1: attempt power cycle [ 445.605538][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 445.615264][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.623416][ T10] usb 3-1: Product: syz [ 445.627933][ T10] usb 3-1: Manufacturer: syz [ 445.632650][ T10] usb 3-1: SerialNumber: syz [ 445.718986][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 49424, setting to 64 [ 445.730432][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 445.745741][ T5699] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 445.769278][ T5691] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 445.819894][ T5691] usb 2-1: device descriptor read/8, error -71 [ 445.852605][ T5759] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 445.893152][T10934] F2FS-fs: Conflicting test_dummy_encryption options [ 445.951600][T10934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1373'. [ 446.109072][ T5691] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 446.160067][ T5691] usb 2-1: device descriptor read/8, error -71 [ 446.289329][ T5691] usb usb2-port1: unable to enumerate USB device [ 446.364519][ T30] audit: type=1326 audit(1785949450.108:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.3.1374" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f290ec code=0x0 [ 446.464964][ T30] audit: type=1804 audit(1785949450.178:773): pid=10939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1374" name="/newroot/282/file1" dev="tmpfs" ino=1513 res=1 errno=0 [ 446.486617][T10939] binder: 10937:10939 ioctl 4018620d 80000300 returned -22 [ 446.498971][ T5691] usb 3-1: USB disconnect, device number 56 [ 446.623068][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.632239][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.640264][ T24] usb 5-1: Product: syz [ 446.644466][ T24] usb 5-1: Manufacturer: syz [ 446.649179][ T24] usb 5-1: SerialNumber: syz [ 446.671525][ T24] usb 5-1: config 0 descriptor?? [ 446.699671][T10941] fuse: Unknown parameter '0x0000000000000004' [ 446.740466][T10941] bond1: entered allmulticast mode [ 446.759289][T10941] gre1: entered promiscuous mode [ 446.764391][T10941] gre1: entered allmulticast mode [ 446.770092][T10941] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 446.780751][T10941] bond1: (slave gre1): Error -95 calling set_mac_address [ 446.789220][ T5699] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 446.798574][ T5699] ath9k_htc: Failed to initialize the device [ 446.809150][ T5691] usb 3-1: ath9k_htc: USB layer deinitialized [ 447.042375][T10906] fuse: Bad value for 'rootmode' [ 447.128661][T10952] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1361'. [ 447.172423][ T5759] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 447.182705][ T5759] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 447.193699][ T5759] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 447.210663][ T5759] usb 1-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.225422][ T5759] usb 1-1: config 16 interface 0 has no altsetting 0 [ 447.232208][ T5759] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 447.242979][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.287511][T10947] sctp: [Deprecated]: syz.2.1377 (pid 10947) Use of int in maxseg socket option. [ 447.287511][T10947] Use struct sctp_assoc_value instead [ 447.372334][ T24] usb 5-1: USB disconnect, device number 55 [ 447.845058][ T5759] usb 1-1: string descriptor 0 read error: -71 [ 447.852950][ T5759] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 447.878890][ T5759] imon 1-1:16.0: unable to initialize intf0, err -19 [ 447.885668][ T5759] imon:imon_probe: failed to initialize context! [ 447.893688][ T5759] imon 1-1:16.0: unable to register, err -19 [ 447.920513][ T5759] usb 1-1: USB disconnect, device number 51 [ 448.069620][T10959] FAULT_INJECTION: forcing a failure. [ 448.069620][T10959] name failslab, interval 1, probability 0, space 0, times 0 [ 448.082749][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.3.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.082784][T10959] Tainted: [L]=SOFTLOCKUP [ 448.082792][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.082805][T10959] Call Trace: [ 448.082813][T10959] [ 448.082822][T10959] dump_stack_lvl+0xe8/0x150 [ 448.082869][T10959] should_fail_ex+0x40c/0x560 [ 448.082902][T10959] should_failslab+0xa8/0x100 [ 448.082937][T10959] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 448.082965][T10959] ? ep_ptable_queue_proc+0x5c/0x200 [ 448.082998][T10959] ? ep_ptable_queue_proc+0x5c/0x200 [ 448.083029][T10959] ep_ptable_queue_proc+0x5c/0x200 [ 448.083055][T10959] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 448.083079][T10959] random_poll+0x5b/0xb0 [ 448.083203][T10959] ? __pfx_random_poll+0x10/0x10 [ 448.083230][T10959] ep_insert+0x11d8/0x1ae0 [ 448.083268][T10959] ? __pfx_ep_insert+0x10/0x10 [ 448.083288][T10959] ? __pfx___mutex_lock+0x10/0x10 [ 448.083318][T10959] ? rcu_is_watching+0x15/0xb0 [ 448.083349][T10959] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 448.083377][T10959] ? security_capable+0xb9/0x2c0 [ 448.083407][T10959] do_epoll_ctl_file+0x8c2/0xee0 [ 448.083438][T10959] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 448.083463][T10959] ? __fget_files+0x3a2/0x420 [ 448.083491][T10959] ? __fget_files+0x2a/0x420 [ 448.083528][T10959] __se_sys_epoll_ctl+0x162/0x230 [ 448.083554][T10959] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 448.083587][T10959] __do_fast_syscall_32+0x23e/0x6f0 [ 448.083617][T10959] ? do_fast_syscall_32+0x33/0x70 [ 448.083645][T10959] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.083671][T10959] ? asm_int80_emulation+0x1a/0x20 [ 448.083691][T10959] ? do_int80_emulation+0x29f/0x550 [ 448.083726][T10959] ? trace_irq_disable+0x3b/0x140 [ 448.083758][T10959] do_fast_syscall_32+0x33/0x70 [ 448.083787][T10959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.083812][T10959] RIP: 0023:0xf7f290ec [ 448.083832][T10959] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 448.083851][T10959] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 448.083873][T10959] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 448.083887][T10959] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000 [ 448.083899][T10959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.083911][T10959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 448.083923][T10959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.083954][T10959] [ 448.600578][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 448.727816][T10957] openvswitch: netlink: Multiple metadata blocks provided [ 449.083028][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 449.272745][T10981] sctp: [Deprecated]: syz.4.1388 (pid 10981) Use of int in maxseg socket option. [ 449.272745][T10981] Use struct sctp_assoc_value instead [ 449.299201][ T5759] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 449.349599][ T5699] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 449.619155][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 449.626097][ T5699] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 449.637137][ T5699] usb 2-1: config 0 has no interface number 0 [ 449.644057][ T5699] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 449.656955][ T5699] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 449.666673][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.675099][ T5699] usb 2-1: Product: syz [ 449.681379][ T5699] usb 2-1: Manufacturer: syz [ 449.686081][ T5699] usb 2-1: SerialNumber: syz [ 449.694517][ T5699] usb 2-1: config 0 descriptor?? [ 449.709816][ T5699] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 449.719865][ T5699] em28xx 2-1:0.132: Video interface 132 found: [ 449.728929][T10985] FAULT_INJECTION: forcing a failure. [ 449.728929][T10985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.768398][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 449.773956][T10985] CPU: 1 UID: 0 PID: 10985 Comm: syz.4.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.773989][T10985] Tainted: [L]=SOFTLOCKUP [ 449.773997][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.774009][T10985] Call Trace: [ 449.774017][T10985] [ 449.774025][T10985] dump_stack_lvl+0xe8/0x150 [ 449.774063][T10985] should_fail_ex+0x40c/0x560 [ 449.774096][T10985] _copy_from_user+0x2d/0xb0 [ 449.774120][T10985] get_compat_msghdr+0xb3/0x4c0 [ 449.774152][T10985] ? __pfx_get_compat_msghdr+0x10/0x10 [ 449.774195][T10985] ___sys_sendmsg+0x201/0x360 [ 449.774215][T10985] ? __lock_acquire+0x683/0x2cf0 [ 449.774261][T10985] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.774287][T10985] ? get_pid_task+0x20/0x1f0 [ 449.774315][T10985] ? get_pid_task+0x20/0x1f0 [ 449.774346][T10985] ? get_pid_task+0x20/0x1f0 [ 449.774388][T10985] ? __fget_files+0x2a/0x420 [ 449.774431][T10985] ? __fget_files+0x3a2/0x420 [ 449.774469][T10985] __sys_sendmsg+0x177/0x240 [ 449.774502][T10985] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.774533][T10985] __do_fast_syscall_32+0x23e/0x6f0 [ 449.774571][T10985] ? do_fast_syscall_32+0x33/0x70 [ 449.774600][T10985] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.774631][T10985] ? asm_int80_emulation+0x1a/0x20 [ 449.774656][T10985] ? do_int80_emulation+0x29f/0x550 [ 449.774677][T10985] ? trace_irq_disable+0x3b/0x140 [ 449.774699][T10985] do_fast_syscall_32+0x33/0x70 [ 449.774738][T10985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.774764][T10985] RIP: 0023:0xf70af0ec [ 449.774783][T10985] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 449.774800][T10985] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 449.774825][T10985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000780 [ 449.774835][T10985] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.774844][T10985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.774852][T10985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 449.774861][T10985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.774904][T10985] [ 450.213440][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 450.306718][ T5699] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 450.648550][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.659509][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.669309][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 450.678374][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.689805][ T24] usb 3-1: config 0 descriptor?? [ 451.091432][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b0d400: rx timeout, send abort [ 451.103050][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021b0d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 451.120611][ T5759] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.538383][ T5706] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 451.761386][ T5699] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 451.777073][ T5699] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 451.784053][ T5699] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 451.784644][ T5759] usb 1-1: string descriptor 0 read error: -71 [ 451.799316][ T5759] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 451.808387][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.816502][ T5699] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 451.832815][ T5699] em28xx 2-1:0.132: analog set to bulk mode. [ 451.845080][ T5721] em28xx 2-1:0.132: Registering V4L2 extension [ 451.885378][ T5759] usb 1-1: can't set config #1, error -71 [ 451.910381][ T5759] usb 1-1: USB disconnect, device number 52 [ 451.988430][ T24] usbhid 3-1:0.0: can't add hid device: -32 [ 451.994507][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 452.040335][ T5721] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 452.098485][ T5721] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 452.112889][ T5721] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 452.131194][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 452.133114][ T24] usb 2-1: USB disconnect, device number 59 [ 452.146051][ T24] em28xx 2-1:0.132: Disconnecting em28xx [ 452.147764][ T5721] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 452.291023][ T5721] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 452.302599][ T5721] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 452.310734][ T5721] em28xx 2-1:0.132: No AC97 audio processor [ 452.324837][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 452.429225][ T5721] usb 2-1: Decoder not found [ 452.467734][ T5721] em28xx 2-1:0.132: failed to create media graph [ 452.492517][ T5721] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 452.519446][T11003] ================================================================== [ 452.520475][ T5721] em28xx 2-1:0.132: Remote control support is not available for this card. [ 452.527669][T11003] BUG: KASAN: slab-use-after-free in v4l2_open+0x397/0x3a0 [ 452.543591][T11003] Read of size 4 at addr ffff88807c7b0860 by task v4l_id/11003 [ 452.551204][T11003] [ 452.553621][T11003] CPU: 1 UID: 0 PID: 11003 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 452.553654][T11003] Tainted: [L]=SOFTLOCKUP [ 452.553660][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.553669][T11003] Call Trace: [ 452.553677][T11003] [ 452.553684][T11003] dump_stack_lvl+0xe8/0x150 [ 452.553711][T11003] print_address_description+0x55/0x1e0 [ 452.553742][T11003] ? v4l2_open+0x397/0x3a0 [ 452.553761][T11003] print_report+0x58/0x70 [ 452.553780][T11003] kasan_report+0x117/0x150 [ 452.553803][T11003] ? v4l2_open+0x397/0x3a0 [ 452.553824][T11003] v4l2_open+0x397/0x3a0 [ 452.553845][T11003] chrdev_open+0x4d9/0x600 [ 452.553863][T11003] ? __pfx_chrdev_open+0x10/0x10 [ 452.553879][T11003] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 452.553897][T11003] ? __pfx_chrdev_open+0x10/0x10 [ 452.553918][T11003] do_dentry_open+0x816/0x1380 [ 452.553941][T11003] vfs_open+0x3b/0x340 [ 452.553959][T11003] ? path_openat+0x2e2d/0x3830 [ 452.553974][T11003] path_openat+0x2e44/0x3830 [ 452.553989][T11003] ? kasan_save_track+0x3e/0x80 [ 452.554009][T11003] ? do_sys_openat2+0xcc/0x200 [ 452.554028][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.554051][T11003] do_file_open+0x23e/0x4a0 [ 452.554067][T11003] ? __pfx_do_file_open+0x10/0x10 [ 452.554089][T11003] ? _raw_spin_unlock+0x28/0x50 [ 452.554136][T11003] ? alloc_fd+0x651/0x6c0 [ 452.554159][T11003] do_sys_openat2+0x115/0x200 [ 452.554180][T11003] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.554199][T11003] ? exc_page_fault+0x6a/0xc0 [ 452.554219][T11003] ? do_user_addr_fault+0xc4a/0x1340 [ 452.554242][T11003] __x64_sys_openat+0x138/0x170 [ 452.554263][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.554278][T11003] do_syscall_64+0x174/0x580 [ 452.554297][T11003] ? trace_irq_disable+0x3b/0x140 [ 452.554316][T11003] ? clear_bhb_loop+0x40/0x90 [ 452.554333][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.554347][T11003] RIP: 0033:0x7f75900a7407 [ 452.554362][T11003] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 452.554375][T11003] RSP: 002b:00007fff1651eab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 452.554390][T11003] RAX: ffffffffffffffda RBX: 00007f75907e6880 RCX: 00007f75900a7407 [ 452.554402][T11003] RDX: 0000000000000000 RSI: 00007fff1651ff1b RDI: ffffffffffffff9c [ 452.554414][T11003] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 452.554423][T11003] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 452.554432][T11003] R13: 00007fff1651ed00 R14: 00007f759094d000 R15: 0000560ba8f4a4d8 [ 452.554450][T11003] [ 452.554454][T11003] [ 452.819593][T11003] Allocated by task 5721: [ 452.823997][T11003] kasan_save_track+0x3e/0x80 [ 452.828712][T11003] __kasan_kmalloc+0x93/0xb0 [ 452.833332][T11003] __kmalloc_cache_noprof+0x32d/0x660 [ 452.838721][T11003] em28xx_v4l2_init+0x103/0x3300 [ 452.843854][T11003] em28xx_init_extension+0x120/0x1d0 [ 452.849155][T11003] process_scheduled_works+0xa8e/0x14e0 [ 452.854713][T11003] worker_thread+0xa47/0xfb0 [ 452.859421][T11003] kthread+0x388/0x470 [ 452.863515][T11003] ret_from_fork+0x514/0xb70 [ 452.868113][T11003] ret_from_fork_asm+0x1a/0x30 [ 452.872892][T11003] [ 452.875308][T11003] Freed by task 5721: [ 452.879303][T11003] kasan_save_track+0x3e/0x80 [ 452.883999][T11003] kasan_save_free_info+0x40/0x50 [ 452.889038][T11003] __kasan_slab_free+0x5c/0x80 [ 452.893931][T11003] kfree+0x1c5/0x640 [ 452.897834][T11003] em28xx_v4l2_init+0x1919/0x3300 [ 452.902963][T11003] em28xx_init_extension+0x120/0x1d0 [ 452.908276][T11003] process_scheduled_works+0xa8e/0x14e0 [ 452.913845][T11003] worker_thread+0xa47/0xfb0 [ 452.918453][T11003] kthread+0x388/0x470 [ 452.922529][T11003] ret_from_fork+0x514/0xb70 [ 452.927126][T11003] ret_from_fork_asm+0x1a/0x30 [ 452.931896][T11003] [ 452.934233][T11003] The buggy address belongs to the object at ffff88807c7b0000 [ 452.934233][T11003] which belongs to the cache kmalloc-8k of size 8192 [ 452.948294][T11003] The buggy address is located 2144 bytes inside of [ 452.948294][T11003] freed 8192-byte region [ffff88807c7b0000, ffff88807c7b2000) [ 452.962359][T11003] [ 452.964690][T11003] The buggy address belongs to the physical page: [ 452.971192][T11003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c7b0 [ 452.980089][T11003] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 452.988604][T11003] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 452.996203][T11003] page_type: f5(slab) [ 453.000191][T11003] raw: 00fff00000000040 ffff88801b002280 dead000000000122 0000000000000000 [ 453.008792][T11003] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 453.017392][T11003] head: 00fff00000000040 ffff88801b002280 dead000000000122 0000000000000000 [ 453.026068][T11003] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 453.034744][T11003] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 453.043422][T11003] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 453.052094][T11003] page dumped because: kasan: bad access detected [ 453.058516][T11003] page_owner tracks the page as allocated [ 453.064230][T11003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10825, tgid 10821 (syz.2.1336), ts 437041845922, free_ts 391262162224 [ 453.085608][T11003] post_alloc_hook+0x1f9/0x250 [ 453.090395][T11003] get_page_from_freelist+0x21fa/0x2270 [ 453.095952][T11003] __alloc_frozen_pages_noprof+0x18d/0x380 [ 453.101767][T11003] allocate_slab+0x79/0x5e0 [ 453.106275][T11003] refill_objects+0x2d5/0x350 [ 453.110956][T11003] __pcs_replace_empty_main+0x2bf/0x6b0 [ 453.116504][T11003] __kvmalloc_node_noprof+0x66b/0x860 [ 453.121885][T11003] snd_pcm_plugin_alloc+0x19c/0x790 [ 453.127185][T11003] snd_pcm_plug_alloc+0x1d7/0x280 [ 453.132235][T11003] snd_pcm_oss_change_params_locked+0x2680/0x3c80 [ 453.138713][T11003] snd_pcm_oss_write+0x26e/0xb40 [ 453.143687][T11003] vfs_write+0x296/0xba0 [ 453.147936][T11003] ksys_write+0x150/0x270 [ 453.152282][T11003] __do_fast_syscall_32+0x23e/0x6f0 [ 453.157592][T11003] do_fast_syscall_32+0x33/0x70 [ 453.162453][T11003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.168805][T11003] page last free pid 10211 tgid 10211 stack trace: [ 453.175315][T11003] __free_frozen_pages+0xc1e/0xd10 [ 453.180461][T11003] __slab_free+0x274/0x2c0 [ 453.184912][T11003] qlist_free_all+0x99/0x100 [ 453.189527][T11003] kasan_quarantine_reduce+0x148/0x160 [ 453.195017][T11003] __kasan_slab_alloc+0x22/0x80 [ 453.199876][T11003] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 453.205344][T11003] jbd2__journal_start+0x145/0x5c0 [ 453.210467][T11003] __ext4_journal_start_sb+0x203/0x5d0 [ 453.215960][T11003] ext4_dirty_inode+0x93/0x110 [ 453.220729][T11003] __mark_inode_dirty+0x3a8/0x13b0 [ 453.225860][T11003] file_update_time_flags+0x3ee/0x4a0 [ 453.231236][T11003] ext4_page_mkwrite+0x224/0x1140 [ 453.236269][T11003] do_page_mkwrite+0x147/0x310 [ 453.241040][T11003] do_pte_missing+0x757/0x34b0 [ 453.245817][T11003] handle_mm_fault+0x1b36/0x3080 [ 453.250765][T11003] do_user_addr_fault+0xa4d/0x1340 [ 453.255897][T11003] [ 453.258224][T11003] Memory state around the buggy address: [ 453.263926][T11003] ffff88807c7b0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.271992][T11003] ffff88807c7b0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.280113][T11003] >ffff88807c7b0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.288186][T11003] ^ [ 453.295418][T11003] ffff88807c7b0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.303490][T11003] ffff88807c7b0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.311561][T11003] ================================================================== [ 453.392063][ T5759] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 453.413906][ T808] usb 3-1: USB disconnect, device number 57 [ 453.446586][T11003] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.453867][T11003] CPU: 1 UID: 0 PID: 11003 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 453.464508][T11003] Tainted: [L]=SOFTLOCKUP [ 453.468854][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.478939][T11003] Call Trace: [ 453.482243][T11003] [ 453.485191][T11003] vpanic+0x56c/0xa60 [ 453.489210][T11003] ? __pfx_vpanic+0x10/0x10 [ 453.493768][T11003] panic+0xc5/0xd0 [ 453.497521][T11003] ? __pfx_panic+0x10/0x10 [ 453.501963][T11003] ? preempt_schedule_thunk+0x16/0x40 [ 453.507419][T11003] ? preempt_schedule_thunk+0x16/0x40 [ 453.512925][T11003] ? v4l2_open+0x397/0x3a0 [ 453.517380][T11003] check_panic_on_warn+0x89/0xb0 [ 453.522353][T11003] ? v4l2_open+0x397/0x3a0 [ 453.526795][T11003] end_report+0x73/0x170 [ 453.531059][T11003] ? v4l2_open+0x397/0x3a0 [ 453.535524][T11003] kasan_report+0x128/0x150 [ 453.540066][T11003] ? v4l2_open+0x397/0x3a0 [ 453.544503][T11003] v4l2_open+0x397/0x3a0 [ 453.548770][T11003] chrdev_open+0x4d9/0x600 [ 453.553209][T11003] ? __pfx_chrdev_open+0x10/0x10 [ 453.558173][T11003] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 453.564521][T11003] ? __pfx_chrdev_open+0x10/0x10 [ 453.569480][T11003] do_dentry_open+0x816/0x1380 [ 453.574362][T11003] vfs_open+0x3b/0x340 [ 453.578449][T11003] ? path_openat+0x2e2d/0x3830 [ 453.583257][T11003] path_openat+0x2e44/0x3830 [ 453.587875][T11003] ? kasan_save_track+0x3e/0x80 [ 453.592753][T11003] ? do_sys_openat2+0xcc/0x200 [ 453.597549][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.603648][T11003] do_file_open+0x23e/0x4a0 [ 453.608182][T11003] ? __pfx_do_file_open+0x10/0x10 [ 453.613236][T11003] ? _raw_spin_unlock+0x28/0x50 [ 453.618109][T11003] ? alloc_fd+0x651/0x6c0 [ 453.622469][T11003] do_sys_openat2+0x115/0x200 [ 453.627176][T11003] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.632395][T11003] ? exc_page_fault+0x6a/0xc0 [ 453.637101][T11003] ? do_user_addr_fault+0xc4a/0x1340 [ 453.642437][T11003] __x64_sys_openat+0x138/0x170 [ 453.647335][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.653434][T11003] do_syscall_64+0x174/0x580 [ 453.658055][T11003] ? trace_irq_disable+0x3b/0x140 [ 453.663099][T11003] ? clear_bhb_loop+0x40/0x90 [ 453.667796][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.673723][T11003] RIP: 0033:0x7f75900a7407 [ 453.678168][T11003] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 453.697883][T11003] RSP: 002b:00007fff1651eab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 453.706329][T11003] RAX: ffffffffffffffda RBX: 00007f75907e6880 RCX: 00007f75900a7407 [ 453.714327][T11003] RDX: 0000000000000000 RSI: 00007fff1651ff1b RDI: ffffffffffffff9c [ 453.722319][T11003] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000