last executing test programs: 23.213961316s ago: executing program 2 (id=803): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)="d07d", 0x2, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x3}, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101042) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000100), 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="9b9f2580", 0x4}], 0x1) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz0\x00', {0x7, 0x7, 0x1, 0x5}, 0x3a, [0xcee6, 0x2, 0xcb, 0x0, 0x0, 0xc2, 0x65e, 0x100, 0x6, 0x3, 0xf, 0x1, 0x9, 0x80, 0x4e2, 0x4, 0x6, 0x9, 0xc, 0xb1, 0x1, 0x3, 0x9, 0x7de824e9, 0x3, 0xa, 0x18, 0x6b3, 0xcb84, 0x5, 0x7, 0x4, 0x69, 0x3, 0x1000, 0x808, 0x6, 0x4, 0x8, 0x10000, 0x4, 0x4, 0x1, 0x7, 0x7, 0xffffff01, 0x7a31, 0xb, 0x4, 0x2, 0xff, 0x3, 0x8, 0xfffffff9, 0x3ff, 0x42, 0x9, 0xe8f, 0xfffff23c, 0xe, 0x3, 0x9, 0x100, 0x8], [0xc, 0x6, 0x0, 0x56d8, 0xfffffffd, 0x2, 0x1, 0x3, 0x1, 0x0, 0x800, 0x3, 0x35a, 0x7, 0x0, 0x543fb59c, 0xc7d, 0x5, 0x8, 0x3, 0x4, 0x8, 0x80, 0x989, 0xffffff00, 0x0, 0x0, 0x1, 0x3, 0xff, 0x4, 0x1cb, 0x0, 0x2, 0xed, 0x401, 0x10000, 0x8000, 0xfffffdda, 0xff, 0x1, 0x5d, 0xfffffff8, 0x7, 0x3, 0x5, 0x3, 0x7f, 0x2ad1, 0x8, 0x5, 0x200, 0xfffff001, 0x6, 0xfffffff7, 0x9, 0x3, 0x2, 0x95b, 0x4, 0x8, 0x5, 0x5, 0x1e], [0xfffffffd, 0x0, 0x2, 0x7ff, 0xe, 0x5df8, 0x8000, 0x2, 0x8000, 0x4, 0x4, 0xf7e, 0x9, 0x2, 0x6625, 0xfffffe01, 0x7, 0x2a, 0x4, 0xf502, 0xa, 0x7, 0x9, 0x4d9, 0x6, 0x883c, 0x700000, 0x4, 0x6b1, 0x7ff, 0xab, 0x1, 0x9, 0xa3, 0xc, 0x5, 0x0, 0x4, 0x10000, 0x1fdf, 0x100, 0x80000001, 0xb938, 0x1, 0x3, 0x1, 0x7, 0x7, 0xad0, 0xfffffff7, 0x66, 0xa334, 0x3, 0x10, 0x36, 0x9, 0x445, 0x3, 0x833d, 0x6, 0x8, 0x4, 0x7, 0x3], [0x1, 0x2, 0xfff, 0x1ff, 0x200, 0x3, 0x8a, 0x3800, 0x1, 0x6, 0x2, 0x5, 0x7, 0xc7, 0x91a, 0xffff, 0x0, 0x8, 0xffff0001, 0x9, 0x606, 0x95, 0x2, 0x3, 0xfff, 0x97e, 0x1, 0x242, 0x8000, 0xe, 0xf, 0xc, 0x2, 0x6, 0x7fffffff, 0x8, 0x400, 0x0, 0x8001, 0xfffffff9, 0x7ff, 0x7, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x5, 0x80000001, 0x5, 0x8001, 0x8448959, 0x5, 0x3, 0x6, 0x1, 0x3, 0x1, 0xe, 0x2, 0x9, 0x3, 0x4]}, 0x45c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x800, 0x103) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="0010", 0x2}], 0x1}}], 0x1, 0x6081) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) 22.242323712s ago: executing program 2 (id=810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a"], 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) lsm_list_modules(0x0, &(0x7f0000000000)=0xffffffffffffff74, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6eb70d9d001406fffe8000000000000000000000000000aaff0200000000000000000000000000014e214e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="56010009907808a9f07c45b331d640f15c31e4063573821c68ad975cb8d70e00a0f7349e4f4bba20aad797a64456ddc9eee416bdceceac1ee601a5ab06c2509c226281b3db40322599f6afb33813c98c920d81d5da44999a9fb0600440a29efa5f14b5bbd0fded9b3b01220e2bbfdc859147fd6c3e30e4a27bb32db280ccc80cb06bbf2346052bbf79ea4e33cd1011a02682eb17546f18c27285ea204a59fb6c1d788c50ff882a89f79e668d1e6d143c2cbba4e882f11893b0e71c0884c41e487ba7"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 19.862080857s ago: executing program 3 (id=822): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) r0 = fanotify_init(0x200, 0x0) mlock2(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x0) fanotify_mark(r0, 0x101, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001000000"], 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180004ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x26e8}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000180)={0x300000000000000, 0x0, 0x4, 0x2, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0xd559, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8], 0x58000, 0x240046}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000540)={&(0x7f00000004c0)=[{0x3ff, 0x3a11, 0x0, 0x0}, {0x0, 0x9a00, 0x0, 0x0}], 0x2}) 19.088856643s ago: executing program 2 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000bdbb000020000e80130001"], 0x48}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x6, &(0x7f0000000040)={0x9, "810556c721393f4084c89ea7f77d040b00"}}) 18.205403946s ago: executing program 0 (id=829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080), 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r5 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x9000001c}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) recvmsg(0xffffffffffffffff, 0x0, 0x40000040) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x24008084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xe0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xcc, 0x1, [@m_bpf={0xc8, 0xe, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x2, 0x33, 0x200}, {0x800, 0x4, 0xe, 0xd}, {0x8, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x69, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4884b) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xe0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xcc, 0x1, [@m_bpf={0xc8, 0xe, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x2, 0x33, 0x200}, {0x800, 0x4, 0xe, 0xd}, {0x8, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x69, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4884b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x88402, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x6, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x6, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) 18.049047176s ago: executing program 3 (id=831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x7fffffffffffffff}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="400d010600001d"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x24) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r4, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x10, 0x20, 0x9739, 0x7fff, {{0x1d, 0x4, 0x0, 0x3, 0x74, 0x66, 0x0, 0x8c, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x7, 0x5b, [@remote]}, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x7, "22566d68cc"}, {0x7, 0x11, "232cba4eebe374a74a82ba08bd5b64"}, {0x6, 0xc, "b8407c9c1d41367297d7"}]}, @rr={0x7, 0x17, 0x5a, [@rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x13, 0x25, [@rand_addr=0x64010102, @broadcast, @private=0xa010101, @local]}]}}}}}) syz_usb_control_io$uac2(r1, &(0x7f0000000540)={0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "f282c6fd76098c737e4d5f94788b7c99e85990fecc9ae609dd88cba0a51699601a83165023ae7753a7eb9838b5aaf184b698199cd24686c68c0573754b2f6551e9197c17e93e41e0024077d88158b0a46fe935e61751b44fc35cf4f6dc4577bd81064b14c56f478f81f577eee9598ab16366533dec95a1486eac97b260851ce4ea1f7def962aab96b1822fbb931d11a9f60b235e2596e827"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000580)={0x40, 0x9, 0xd5, "50f17d035b661a65a6e453f69503ba70218838864d4fd40b38e86859fd9bb9485d5bb5141e8c5e43e0ceae16fdfbeea7c2a90e0f836b422e8cc4a31a263e7779fab95b997b85df6ace82d17210a9539a9c3579ec55e783899cc87ed7b26778a3b4b5e1faa52383dceb2286d3d5af0e9aa03ce36ec9b4430533af8d334b1fefde53cb33df3674df2cd046af28a8e5ae7feea569593e73a47d830b0c9a54ec1c7af8e2907f33f50f81c1322abad340838fdfb530d517dd8aaf9b5aeb01711ebb6afb4f2c342a8a8fe1430f6e00aade4ab565c5bc522d"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0x20, 0x81, 0x2, 'Z\v'}, &(0x7f00000002c0)=ANY=[@ANYBLOB="08d4cb31e707f373999479d4b7efddb42d9877e77cf5f0069bdf8cbf51cb7791556aed88bb13241c25eb917a7d38fd47040a719772b08acd6c36842f24ad764e013bee9b1a9fe89365000000a939ed9594e3f8cb1f031e6487b889d5b0ae3e92f4d5b963949fa97355291ffd0d5dd091ceaf8c1735043bfd97c1eb07ef5ea008b3da0840755442584053d168339826cb4d46469b013f0fbbe1a2f06dc4a2215313c9e25a3fe2a7940e4132b7049df95d8f6b57cafec0fd3178b18ac5ba688e64814e3e2184e5632ae0f700ec2a"], &(0x7f0000000800)={0x20, 0x83, 0x3, "c79de0"}, &(0x7f0000000840)={0x20, 0x84, 0x1, 'B'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "d0ea85"}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x40}]}}}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0x2}, {0xe, 0xfff2}, {0x9, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x85) 17.400162527s ago: executing program 4 (id=832): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x28}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x4010, r2, 0xd18cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}}, &(0x7f0000000040)=0x84) connect$unix(r5, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000180001002bbd7000000000000a14000275658a180000fd00"], 0x1c}, 0x1, 0x11}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x2c}}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in=@multicast1, @in6=@private0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000400)=0xe8) prlimit64(r3, 0xb, &(0x7f0000000000)={0xb, 0x1200000000000000}, &(0x7f0000000280)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604ad0c002b8008000400070000001400030076657468305f766c616e0000000000000a000100aa"], 0x4c}}, 0x48000) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) 17.227919883s ago: executing program 2 (id=833): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="f4a32564", 0x4}], 0x1000000000000229, 0xb, 0x7) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010000100000000000029f8ad2fa408f5d4b63ed0dd3f9b7a0000000100000a64000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b200012801c000180090001006c617374000000000c000280080001400000000008000340000001301400000011"], 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000154000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 16.117790935s ago: executing program 1 (id=834): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xfffffebd, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x48004) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) 14.942772294s ago: executing program 3 (id=835): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)="d07d", 0x2, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x3}, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101042) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000100), 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="9b9f2580", 0x4}], 0x1) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz0\x00', {0x7, 0x7, 0x1, 0x5}, 0x3a, [0xcee6, 0x2, 0xcb, 0x0, 0x0, 0xc2, 0x65e, 0x100, 0x6, 0x3, 0xf, 0x1, 0x9, 0x80, 0x4e2, 0x4, 0x6, 0x9, 0xc, 0xb1, 0x1, 0x3, 0x9, 0x7de824e9, 0x3, 0xa, 0x18, 0x6b3, 0xcb84, 0x5, 0x7, 0x4, 0x69, 0x3, 0x1000, 0x808, 0x6, 0x4, 0x8, 0x10000, 0x4, 0x4, 0x1, 0x7, 0x7, 0xffffff01, 0x7a31, 0xb, 0x4, 0x2, 0xff, 0x3, 0x8, 0xfffffff9, 0x3ff, 0x42, 0x9, 0xe8f, 0xfffff23c, 0xe, 0x3, 0x9, 0x100, 0x8], [0xc, 0x6, 0x0, 0x56d8, 0xfffffffd, 0x2, 0x1, 0x3, 0x1, 0x0, 0x800, 0x3, 0x35a, 0x7, 0x0, 0x543fb59c, 0xc7d, 0x5, 0x8, 0x3, 0x4, 0x8, 0x80, 0x989, 0xffffff00, 0x0, 0x0, 0x1, 0x3, 0xff, 0x4, 0x1cb, 0x0, 0x2, 0xed, 0x401, 0x10000, 0x8000, 0xfffffdda, 0xff, 0x1, 0x5d, 0xfffffff8, 0x7, 0x3, 0x5, 0x3, 0x7f, 0x2ad1, 0x8, 0x5, 0x200, 0xfffff001, 0x6, 0xfffffff7, 0x9, 0x3, 0x2, 0x95b, 0x4, 0x8, 0x5, 0x5, 0x1e], [0xfffffffd, 0x0, 0x2, 0x7ff, 0xe, 0x5df8, 0x8000, 0x2, 0x8000, 0x4, 0x4, 0xf7e, 0x9, 0x2, 0x6625, 0xfffffe01, 0x7, 0x2a, 0x4, 0xf502, 0xa, 0x7, 0x9, 0x4d9, 0x6, 0x883c, 0x700000, 0x4, 0x6b1, 0x7ff, 0xab, 0x1, 0x9, 0xa3, 0xc, 0x5, 0x0, 0x4, 0x10000, 0x1fdf, 0x100, 0x80000001, 0xb938, 0x1, 0x3, 0x1, 0x7, 0x7, 0xad0, 0xfffffff7, 0x66, 0xa334, 0x3, 0x10, 0x36, 0x9, 0x445, 0x3, 0x833d, 0x6, 0x8, 0x4, 0x7, 0x3], [0x1, 0x2, 0xfff, 0x1ff, 0x200, 0x3, 0x8a, 0x3800, 0x1, 0x6, 0x2, 0x5, 0x7, 0xc7, 0x91a, 0xffff, 0x0, 0x8, 0xffff0001, 0x9, 0x606, 0x95, 0x2, 0x3, 0xfff, 0x97e, 0x1, 0x242, 0x8000, 0xe, 0xf, 0xc, 0x2, 0x6, 0x7fffffff, 0x8, 0x400, 0x0, 0x8001, 0xfffffff9, 0x7ff, 0x7, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x5, 0x80000001, 0x5, 0x8001, 0x8448959, 0x5, 0x3, 0x6, 0x1, 0x3, 0x1, 0xe, 0x2, 0x9, 0x3, 0x4]}, 0x45c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x800, 0x103) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="0010", 0x2}], 0x1}}], 0x1, 0x6081) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) 13.290045426s ago: executing program 2 (id=836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xfffffebd, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x48004) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) 11.751490213s ago: executing program 1 (id=837): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x13, 0x13, 0xffffffffffffffff, 0x80000000) r1 = gettid() r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001, 0x3}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) 11.689527021s ago: executing program 4 (id=838): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff3d}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff"], 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.208925892s ago: executing program 3 (id=839): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x42200, 0x60) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0xffffff01, 0x2, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000010401010000000000000000020000020500010003000000b96fe2e5168d74a01ccde22d3e222c12fd81778b167b4bc65d96d386a5a49b28ec71fe48bb69a0929ad81229bd455768be6916672a0f346782d833951c12fc2dd51a24ed7209661899761e03d615"], 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0x8000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000008000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000100000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000076080000010000008500000084000f560dd50000000000009500000002000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, 0x0, 0x41004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0xfa, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc, 0xfff3}, {0x0, 0xd}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) 11.080732465s ago: executing program 4 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x25, 0x301, 0x670bf22, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="7d0d98719d139b5dc99eccbeb51b"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r1 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x25, 0x301, 0x670bf22, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="7d0d98719d139b5dc99eccbeb51b"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async) gettid() (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) 10.377823683s ago: executing program 1 (id=841): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x5ca, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, 0x0, 0x40408c4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000041c0), 0x40000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x80000) r4 = epoll_create1(0x0) r5 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000300)={0x20000002}) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000001280), 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) 10.377384033s ago: executing program 4 (id=842): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff77}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000640)=""/170, 0xaa}], 0x6, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x40000000) r4 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) migrate_pages(0x0, 0x8, &(0x7f00000002c0)=0x7fff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000140)) write$P9_RGETLOCK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1f000000370100020001000000000000ad96935200000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000280)="f30fae673f66b9390600000f3267f30f70000066b9800000c00f326635002000000f300f060f09db950000b80e018ed02e0f01df9a8000c800", 0x39}], 0x1, 0x4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 9.892970904s ago: executing program 0 (id=843): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x6, &(0x7f0000000040)={0x9, "810556c721393f4084c89ea7f77d040b00"}}) 7.841027647s ago: executing program 0 (id=844): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r1, 0x201, &(0x7f00000001c0)={&(0x7f00000000c0)=""/255, 0xff}) (async) chroot(&(0x7f0000000440)='./file0\x00') getcwd(&(0x7f0000000680)=""/247, 0xf7) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x3f, &(0x7f00000000c0)=0xfffffffd, 0x4) fcntl$getown(r2, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@register_looper, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x3}], 0xca, 0x0, &(0x7f0000000240)="8e54d0ab550159c314e9455abc31200b23a7784e7b1ebca4d0e340c0c3600430c6bf18e8579eb65ad350e83c605b8a4efeedd3d00880b63d49182df35d27b365c9155742de56444c64a931671370f4c569171901368288a0ad838e3da0f40e64797a0028c22c0efb5aaed5e5c774a6024bd24ca6d6f8c6679b141630441d4a5a0286a1952197efd29d8864201f120932c7f630b0dd28ae53c4558c185524c850468e0cd4e10a6afec8a11d0ec8b45bbba3d9bf824831564f6b39f620ebf3f3b5a511c0044e0d3c274a12"}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x3) 6.203096044s ago: executing program 4 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x7fffffffffffffff}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="400d010600001d"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x24) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, 0x0, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x801) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x10, 0x20, 0x9739, 0x7fff, {{0x1d, 0x4, 0x0, 0x3, 0x74, 0x66, 0x0, 0x8c, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x7, 0x5b, [@remote]}, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x7, "22566d68cc"}, {0x7, 0x11, "232cba4eebe374a74a82ba08bd5b64"}, {0x6, 0xc, "b8407c9c1d41367297d7"}]}, @rr={0x7, 0x17, 0x5a, [@rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x13, 0x25, [@rand_addr=0x64010102, @broadcast, @private=0xa010101, @local]}]}}}}}) syz_usb_control_io$uac2(r1, &(0x7f0000000540)={0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002284000000840c375538e70a906123758fe6dfbfa3ca9fe74290e784cd2a66a0913e5f3224a1d2d101b1dc04ebb8797863daf48f3bd6d605fc411bab825caf0f0b331a5f8b547baee6c9a9ff460fca3c091563963a67fb9e80b28d063555cf73e103c5b70863146904dadf00c94762df00d04188e3f020e11df30e5ce95886fdfcabab204a058c7761efabe2453386446fe87f07a26ce1581366d3c2dd2562a2ed6a577368d442f224a6e4dbae4a8c49f5511353c6fcb72a43ab649da99d9b8c2c9b2d61e456435792d972d642e77dd114b2ad51ec485541f63a8d5c07df8a8be6f6e63e2e5e47d296df08ca6e26f5b79255925e424c437aca3c61838619bbc6d260e902e56125152209abaa658852b9d35d1953a446ca6eec9a252ea55ee802718b6447947dca24ad81d1b78d1b52347d35ac56152c354344916feb5550052cb500cb2fa67ba42af116fb02f92db96ca7eb662b832740174a821b56f39bdd"], &(0x7f0000000440)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "f282c6fd76098c737e4d5f94788b7c99e85990fecc9ae609dd88cba0a51699601a83165023ae7753a7eb9838b5aaf184b698199cd24686c68c0573754b2f6551e9197c17e93e41e0024077d88158b0a46fe935e61751b44fc35cf4f6dc4577bd81064b14c56f478f81f577eee9598ab16366533dec95a1486eac97b260851ce4ea1f7def962aab96b1822fbb931d11a9f60b235e2596e827"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000580)={0x40, 0x9, 0xd5, "50f17d035b661a65a6e453f69503ba70218838864d4fd40b38e86859fd9bb9485d5bb5141e8c5e43e0ceae16fdfbeea7c2a90e0f836b422e8cc4a31a263e7779fab95b997b85df6ace82d17210a9539a9c3579ec55e783899cc87ed7b26778a3b4b5e1faa52383dceb2286d3d5af0e9aa03ce36ec9b4430533af8d334b1fefde53cb33df3674df2cd046af28a8e5ae7feea569593e73a47d830b0c9a54ec1c7af8e2907f33f50f81c1322abad340838fdfb530d517dd8aaf9b5aeb01711ebb6afb4f2c342a8a8fe1430f6e00aade4ab565c5bc522d"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0x20, 0x81, 0x2, 'Z\v'}, &(0x7f00000002c0)=ANY=[@ANYBLOB="08d4cb31e707f373999479d4b7efddb42d9877e77cf5f0069bdf8cbf51cb7791556aed88bb13241c25eb917a7d38fd47040a719772b08acd6c36842f24ad764e013bee9b1a9fe89365000000a939ed9594e3f8cb1f031e6487b889d5b0ae3e92f4d5b963949fa97355291ffd0d5dd091ceaf8c1735043bfd97c1eb07ef5ea008b3da0840755442584053d168339826cb4d46469b013f0fbbe1a2f06dc4a2215313c9e25a3fe2a7940e4132b7049df95d8f6b57cafec0fd3178b18ac5ba688e64814e3e2184e5632ae0f700ec2a"], &(0x7f0000000800)={0x20, 0x83, 0x3, "c79de0"}, &(0x7f0000000840)={0x20, 0x84, 0x1, 'B'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "d0ea85"}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x40}]}}}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0x2}, {0xe, 0xfff2}, {0x9, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x85) 5.877356535s ago: executing program 0 (id=846): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000bdbb000020000e80130001"], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0x2, 0x4e20, 0x0, @local, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x6, &(0x7f0000000040)={0x9, "810556c721393f4084c89ea7f77d040b00"}}) 5.055714294s ago: executing program 2 (id=847): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xc21, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)=0x8000) ppoll(&(0x7f0000000380)=[{}, {0xffffffffffffffff, 0x8000}], 0x2, 0x0, 0x0, 0x0) write$dsp(r6, &(0x7f0000002200)="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", 0x1000) socket$key(0xf, 0x3, 0x2) 3.598838149s ago: executing program 1 (id=848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x200, @mcast2, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) inotify_init() r1 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.462498507s ago: executing program 0 (id=849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r2], 0x80}}], 0x1, 0x4084) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r6, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x80003, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) socket$inet6(0xa, 0x1, 0x0) 2.869967299s ago: executing program 3 (id=850): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff3d}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 2.284223303s ago: executing program 3 (id=851): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x8}}}}, 0xa0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x4d9b6eaf) 2.242256721s ago: executing program 1 (id=852): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x40000000015, 0x5, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x800, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0x6, 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="00140000000000003000128008000100736974002400028006000f000267"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000044}, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0xbe, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r10 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0xf0ff7f) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r11, 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x10}]}) close_range(r12, 0xffffffffffffffff, 0x0) 404.969228ms ago: executing program 1 (id=853): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f0000001580)={0xa, 0x2, 0x80000000, @empty, 0x6}, 0x1c, 0x0, 0xe0ff, &(0x7f0000001780)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffd}}], 0x18}, 0x4000010) 354.343954ms ago: executing program 4 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r7, 0x0, 0x0, 0x5028ce1c6d9ffa16, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x9000}, {r5, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x270bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x5a}]}]}, 0x28}}, 0x0) 0s ago: executing program 0 (id=855): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff77}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000640)=""/170, 0xaa}], 0x6, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x40000000) r4 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) migrate_pages(0x0, 0x8, &(0x7f00000002c0)=0x7fff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000140)) write$P9_RGETLOCK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1f000000370100020001000000000000ad96935200000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000280)="f30fae673f66b9390600000f3267f30f70000066b9800000c00f326635002000000f300f060f09db950000b80e018ed02e0f01df9a8000c800", 0x39}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): 967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 220.140881][ T29] audit: type=1326 audit(1778498460.649:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 220.255096][ T29] audit: type=1326 audit(1778498460.659:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 220.349667][ T9] usb 3-1: USB disconnect, device number 12 [ 220.393952][ T29] audit: type=1326 audit(1778498460.659:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 220.509074][ T29] audit: type=1326 audit(1778498460.659:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 220.612323][ T29] audit: type=1326 audit(1778498460.669:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 220.788807][ T29] audit: type=1326 audit(1778498460.669:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 220.881118][ T7544] fuse: Bad value for 'fd' [ 220.913170][ T29] audit: type=1326 audit(1778498460.669:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 221.075268][ T29] audit: type=1326 audit(1778498460.669:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 221.785248][ T5725] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 222.007971][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 222.022503][ T5725] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 222.046727][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.086017][ T5725] usb 4-1: config 0 descriptor?? [ 222.333499][ T5725] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 222.385640][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.434274][ T5725] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 222.475887][ T5725] usb 4-1: media controller created [ 222.541365][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.510'. [ 222.576573][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.688993][ T7568] FAULT_INJECTION: forcing a failure. [ 222.688993][ T7568] name failslab, interval 1, probability 0, space 0, times 0 [ 222.765860][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.1.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.765896][ T7568] Tainted: [L]=SOFTLOCKUP [ 222.765904][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.765917][ T7568] Call Trace: [ 222.765925][ T7568] [ 222.765934][ T7568] dump_stack_lvl+0xe8/0x150 [ 222.765964][ T7568] should_fail_ex+0x412/0x560 [ 222.765997][ T7568] should_failslab+0xa8/0x100 [ 222.766030][ T7568] __kmalloc_cache_noprof+0x88/0x660 [ 222.766062][ T7568] ? tcf_proto_create+0x65/0x330 [ 222.766088][ T7568] tcf_proto_create+0x65/0x330 [ 222.766114][ T7568] tc_new_tfilter+0x12ff/0x1780 [ 222.766171][ T7568] ? __pfx_tc_new_tfilter+0x10/0x10 [ 222.766219][ T7568] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 222.766279][ T7568] ? __pfx_tc_new_tfilter+0x10/0x10 [ 222.766310][ T7568] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 222.766341][ T7568] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 222.766368][ T7568] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.766392][ T7568] ? ref_tracker_free+0x693/0x840 [ 222.766423][ T7568] ? __pfx_ref_tracker_free+0x10/0x10 [ 222.766449][ T7568] ? __asan_memcpy+0x40/0x70 [ 222.766474][ T7568] ? __skb_clone+0x63/0x7a0 [ 222.766512][ T7568] netlink_rcv_skb+0x232/0x4b0 [ 222.766542][ T7568] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.766570][ T7568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.766620][ T7568] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.766648][ T7568] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.766681][ T7568] netlink_unicast+0x75c/0x8e0 [ 222.766718][ T7568] netlink_sendmsg+0x813/0xb40 [ 222.766758][ T7568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.766792][ T7568] ? aa_sock_msg_perm+0xf1/0x1b0 [ 222.766821][ T7568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.766854][ T7568] ____sys_sendmsg+0x972/0x9f0 [ 222.766887][ T7568] ? __might_fault+0xaf/0x130 [ 222.766921][ T7568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.766960][ T7568] ? import_iovec+0x73/0xa0 [ 222.766994][ T7568] ___sys_sendmsg+0x2a5/0x360 [ 222.767021][ T7568] ? __lock_acquire+0x6b5/0x2cf0 [ 222.767050][ T7568] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.767112][ T7568] ? __fget_files+0x2a/0x420 [ 222.767135][ T7568] ? __fget_files+0x3a0/0x420 [ 222.767169][ T7568] __x64_sys_sendmsg+0x1bd/0x2a0 [ 222.767202][ T7568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.767241][ T7568] ? __pfx_ksys_write+0x10/0x10 [ 222.767278][ T7568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.767300][ T7568] do_syscall_64+0x15f/0xf80 [ 222.767330][ T7568] ? trace_irq_disable+0x3b/0x140 [ 222.767361][ T7568] ? clear_bhb_loop+0x40/0x90 [ 222.767385][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.767405][ T7568] RIP: 0033:0x7fb44d59cdd9 [ 222.767425][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.767444][ T7568] RSP: 002b:00007fb44e410028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.767467][ T7568] RAX: ffffffffffffffda RBX: 00007fb44d815fa0 RCX: 00007fb44d59cdd9 [ 222.767482][ T7568] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 222.767494][ T7568] RBP: 00007fb44e410090 R08: 0000000000000000 R09: 0000000000000000 [ 222.767507][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.767519][ T7568] R13: 00007fb44d816038 R14: 00007fb44d815fa0 R15: 00007fb44d93fa48 [ 222.767552][ T7568] [ 223.234868][ T5725] az6027: usb out operation failed. (-71) [ 223.283157][ T5725] stb0899_attach: Driver disabled by Kconfig [ 223.314752][ T5725] az6027: no front-end attached [ 223.314752][ T5725] [ 223.351700][ T7577] netlink: 80 bytes leftover after parsing attributes in process `syz.2.515'. [ 223.388237][ T5725] az6027: usb out operation failed. (-71) [ 223.422595][ T5725] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 223.524954][ T5725] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 223.621584][ T5725] dvb-usb: schedule remote query interval to 400 msecs. [ 223.655623][ T5725] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 223.701528][ T5725] usb 4-1: USB disconnect, device number 17 [ 223.829386][ T7584] fuse: Bad value for 'fd' [ 223.895586][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 224.031438][ T5725] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 224.748631][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 224.988242][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 225.011115][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.062389][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 225.133752][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.207563][ T24] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 225.232541][ T24] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 225.256833][ T24] usb 3-1: Product: syz [ 225.273248][ T24] usb 3-1: Manufacturer: syz [ 225.291699][ T24] usb 3-1: SerialNumber: syz [ 225.317100][ T24] usb 3-1: config 0 descriptor?? [ 225.478147][ T24] rc_core: IR keymap rc-imon-rsc not found [ 225.519529][ T24] Registered IR keymap rc-empty [ 225.626879][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 225.670817][ T7616] vivid-007: ================= START STATUS ================= [ 225.679492][ T7616] vivid-007: Generate PTS: true [ 225.686718][ T7616] vivid-007: Generate SCR: true [ 225.702114][ T7616] tpg source WxH: 320x240 (Y'CbCr) [ 225.711366][ T24] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 225.720400][ T7616] tpg field: 1 [ 225.746033][ T7616] tpg crop: (0,0)/320x240 [ 225.783945][ T7616] tpg compose: (0,0)/320x240 [ 225.803172][ T7616] tpg colorspace: 8 [ 225.804709][ T24] usb 3-1: USB disconnect, device number 13 [ 225.839963][ T7616] tpg transfer function: 0/0 [ 225.867252][ T7616] tpg Y'CbCr encoding: 0/0 [ 225.899410][ T7616] tpg quantization: 0/0 [ 225.913575][ T7616] tpg RGB range: 0/2 [ 225.926389][ T7616] vivid-007: ================== END STATUS ================== [ 226.244448][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 226.244468][ T29] audit: type=1326 audit(1778498466.949:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 226.295479][ T7631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.312538][ T29] audit: type=1326 audit(1778498466.949:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 226.339488][ T7631] FAULT_INJECTION: forcing a failure. [ 226.339488][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 226.386386][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.2.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.386412][ T7631] Tainted: [L]=SOFTLOCKUP [ 226.386417][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.386426][ T7631] Call Trace: [ 226.386433][ T7631] [ 226.386441][ T7631] dump_stack_lvl+0xe8/0x150 [ 226.386463][ T7631] should_fail_ex+0x412/0x560 [ 226.386487][ T7631] should_failslab+0xa8/0x100 [ 226.386511][ T7631] __kmalloc_noprof+0xe8/0x760 [ 226.386556][ T7631] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 226.386593][ T7631] tomoyo_realpath_from_path+0xe3/0x5d0 [ 226.386627][ T7631] ? tomoyo_domain+0xd7/0x130 [ 226.386663][ T7631] ? tomoyo_path_number_perm+0x219/0x630 [ 226.386690][ T7631] tomoyo_path_number_perm+0x246/0x630 [ 226.386709][ T7631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 226.386726][ T7631] ? __lock_acquire+0x6b5/0x2cf0 [ 226.386753][ T7631] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 226.386791][ T7631] ? __fget_files+0x2a/0x420 [ 226.386811][ T7631] ? __fget_files+0x2a/0x420 [ 226.386828][ T7631] ? __fget_files+0x3a0/0x420 [ 226.386845][ T7631] ? __fget_files+0x2a/0x420 [ 226.386865][ T7631] security_file_ioctl+0xc3/0x2a0 [ 226.386883][ T7631] __se_sys_ioctl+0x47/0x170 [ 226.386906][ T7631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.386923][ T7631] do_syscall_64+0x15f/0xf80 [ 226.386945][ T7631] ? trace_irq_disable+0x3b/0x140 [ 226.387000][ T7631] ? clear_bhb_loop+0x40/0x90 [ 226.387019][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.387033][ T7631] RIP: 0033:0x7fe2d8b9cdd9 [ 226.387048][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.387060][ T7631] RSP: 002b:00007fe2d9a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.387076][ T7631] RAX: ffffffffffffffda RBX: 00007fe2d8e15fa0 RCX: 00007fe2d8b9cdd9 [ 226.387086][ T7631] RDX: 00002000000003c0 RSI: 0000000000003b8a RDI: 0000000000000003 [ 226.387096][ T7631] RBP: 00007fe2d9a10090 R08: 0000000000000000 R09: 0000000000000000 [ 226.387106][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.387115][ T7631] R13: 00007fe2d8e16038 R14: 00007fe2d8e15fa0 R15: 00007fe2d8f3fa48 [ 226.387138][ T7631] [ 226.387154][ T7631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.640175][ T29] audit: type=1326 audit(1778498466.989:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 226.698250][ T29] audit: type=1326 audit(1778498466.989:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 226.752330][ T29] audit: type=1326 audit(1778498466.989:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 226.893805][ T29] audit: type=1326 audit(1778498466.989:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 226.992434][ T29] audit: type=1326 audit(1778498466.989:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 227.074991][ T29] audit: type=1326 audit(1778498466.989:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 227.192362][ T29] audit: type=1326 audit(1778498466.989:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 227.339231][ T29] audit: type=1326 audit(1778498466.999:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 227.482407][ T7643] netlink: 'syz.4.531': attribute type 3 has an invalid length. [ 227.777611][ T7650] tls_set_device_offload_rx: netdev not found [ 227.805882][ T7648] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 228.442532][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.456499][ T7664] batadv_slave_1: entered promiscuous mode [ 228.639471][ T7672] fuse: Bad value for 'fd' [ 228.687994][ T1225] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.764000][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 228.869994][ T1225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.899755][ T1225] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 228.912690][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.938662][ T1225] usb 5-1: config 0 descriptor?? [ 228.959112][ T1225] pwc: Askey VC010 type 2 USB webcam detected. [ 229.377189][ T1225] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.402227][ T1225] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.419842][ T1225] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.444706][ T1225] pwc: recv_control_msg error -32 req 04 val 1000 [ 229.482619][ T1225] pwc: recv_control_msg error -32 req 04 val 1300 [ 229.514319][ T1225] pwc: recv_control_msg error -32 req 04 val 1400 [ 229.540154][ T1225] pwc: recv_control_msg error -32 req 02 val 2000 [ 229.558607][ T1225] pwc: recv_control_msg error -32 req 02 val 2100 [ 229.574269][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.631851][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.668172][ T5725] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 229.689535][ T1225] pwc: recv_control_msg error -32 req 04 val 1500 [ 229.717005][ T1225] pwc: recv_control_msg error -32 req 02 val 2500 [ 229.745837][ T1225] pwc: recv_control_msg error -32 req 02 val 2400 [ 229.776397][ T1225] pwc: recv_control_msg error -32 req 02 val 2600 [ 229.811015][ T1225] pwc: recv_control_msg error -32 req 02 val 2900 [ 229.836340][ T1225] pwc: recv_control_msg error -32 req 02 val 2800 [ 230.006460][ T7688] FAULT_INJECTION: forcing a failure. [ 230.006460][ T7688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.079261][ T1225] pwc: recv_control_msg error -71 req 04 val 1200 [ 230.088357][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.0.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.088391][ T7688] Tainted: [L]=SOFTLOCKUP [ 230.088400][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.088412][ T7688] Call Trace: [ 230.088421][ T7688] [ 230.088429][ T7688] dump_stack_lvl+0xe8/0x150 [ 230.088460][ T7688] should_fail_ex+0x412/0x560 [ 230.088494][ T7688] _copy_to_user+0x31/0xb0 [ 230.088527][ T7688] simple_read_from_buffer+0xe1/0x170 [ 230.088559][ T7688] proc_fail_nth_read+0x1bb/0x230 [ 230.088590][ T7688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.088620][ T7688] ? rw_verify_area+0x2a6/0x4d0 [ 230.088649][ T7688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.088679][ T7688] vfs_read+0x20c/0xa70 [ 230.088743][ T7688] ? __pfx___mutex_lock+0x10/0x10 [ 230.088775][ T7688] ? __pfx_vfs_read+0x10/0x10 [ 230.088807][ T7688] ? __fget_files+0x2a/0x420 [ 230.088836][ T7688] ? __fget_files+0x3a0/0x420 [ 230.088860][ T7688] ? __fget_files+0x2a/0x420 [ 230.088894][ T7688] ksys_read+0x150/0x270 [ 230.088925][ T7688] ? __pfx_ksys_read+0x10/0x10 [ 230.088968][ T7688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.088991][ T7688] do_syscall_64+0x15f/0xf80 [ 230.089022][ T7688] ? clear_bhb_loop+0x40/0x90 [ 230.089048][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.089069][ T7688] RIP: 0033:0x7fab03f5d60e [ 230.089088][ T7688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.089107][ T7688] RSP: 002b:00007fab04ebefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.089129][ T7688] RAX: ffffffffffffffda RBX: 00007fab04ebf6c0 RCX: 00007fab03f5d60e [ 230.089145][ T7688] RDX: 000000000000000f RSI: 00007fab04ebf0a0 RDI: 0000000000000004 [ 230.089158][ T7688] RBP: 00007fab04ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 230.089171][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.089184][ T7688] R13: 00007fab04216038 R14: 00007fab04215fa0 R15: 00007fab0433fa48 [ 230.089219][ T7688] [ 230.538488][ T1225] pwc: Registered as video103. [ 230.545610][ T1225] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 230.599360][ T1225] usb 5-1: USB disconnect, device number 12 [ 230.703903][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.782780][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.817081][ T7694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'. [ 231.716936][ T7713] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 232.993490][ T7722] FAULT_INJECTION: forcing a failure. [ 232.993490][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 233.068255][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.0.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.068293][ T7722] Tainted: [L]=SOFTLOCKUP [ 233.068301][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.068312][ T7722] Call Trace: [ 233.068321][ T7722] [ 233.068330][ T7722] dump_stack_lvl+0xe8/0x150 [ 233.068358][ T7722] should_fail_ex+0x412/0x560 [ 233.068390][ T7722] should_failslab+0xa8/0x100 [ 233.068421][ T7722] ? skb_clone+0x212/0x3a0 [ 233.068451][ T7722] kmem_cache_alloc_noprof+0x87/0x650 [ 233.068480][ T7722] ? __netlink_lookup+0xc6/0x8b0 [ 233.068515][ T7722] skb_clone+0x212/0x3a0 [ 233.068548][ T7722] __netlink_deliver_tap+0x404/0x850 [ 233.068588][ T7722] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.068617][ T7722] netlink_deliver_tap+0x19c/0x1b0 [ 233.068641][ T7722] netlink_unicast+0x730/0x8e0 [ 233.068678][ T7722] netlink_sendmsg+0x813/0xb40 [ 233.068709][ T7722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.068734][ T7722] ? aa_sock_msg_perm+0xf1/0x1b0 [ 233.068758][ T7722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.068784][ T7722] ____sys_sendmsg+0x972/0x9f0 [ 233.068808][ T7722] ? __might_fault+0xaf/0x130 [ 233.068834][ T7722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.068865][ T7722] ? import_iovec+0x73/0xa0 [ 233.068893][ T7722] ___sys_sendmsg+0x2a5/0x360 [ 233.068915][ T7722] ? __lock_acquire+0x6b5/0x2cf0 [ 233.068937][ T7722] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.068989][ T7722] ? __fget_files+0x2a/0x420 [ 233.069008][ T7722] ? __fget_files+0x3a0/0x420 [ 233.069037][ T7722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.069062][ T7722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.069094][ T7722] ? __pfx_ksys_write+0x10/0x10 [ 233.069116][ T7722] ? handle_softirqs+0x715/0x840 [ 233.069140][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.069158][ T7722] do_syscall_64+0x15f/0xf80 [ 233.069184][ T7722] ? clear_bhb_loop+0x40/0x90 [ 233.069205][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.069223][ T7722] RIP: 0033:0x7fab03f9cdd9 [ 233.069238][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.069253][ T7722] RSP: 002b:00007fab04ebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.069271][ T7722] RAX: ffffffffffffffda RBX: 00007fab04215fa0 RCX: 00007fab03f9cdd9 [ 233.069284][ T7722] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000006 [ 233.069295][ T7722] RBP: 00007fab04ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 233.069305][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.069315][ T7722] R13: 00007fab04216038 R14: 00007fab04215fa0 R15: 00007fab0433fa48 [ 233.069343][ T7722] [ 233.452547][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.461835][ T5725] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 233.469997][ T5725] usb 4-1: can't read configurations, error -71 [ 233.654387][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.687070][ T7723] batadv_slave_1: entered promiscuous mode [ 233.862461][ T808] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 234.122088][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 234.177192][ T808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 234.213268][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.304084][ T808] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.334333][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.374688][ T808] usb 2-1: Product: syz [ 234.395360][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 234.406408][ T808] usb 2-1: Manufacturer: syz [ 234.416707][ T808] usb 2-1: SerialNumber: syz [ 234.449274][ T808] usb 2-1: config 0 descriptor?? [ 234.456460][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 234.480546][ T808] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 234.516635][ T808] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 235.119824][ T808] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 235.134402][ T808] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 235.144008][ T808] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 235.156448][ T808] em28xx 2-1:0.0: No AC97 audio processor [ 235.346757][ T7746] FAULT_INJECTION: forcing a failure. [ 235.346757][ T7746] name failslab, interval 1, probability 0, space 0, times 0 [ 235.422324][ T7746] CPU: 0 UID: 0 PID: 7746 Comm: syz.0.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.422358][ T7746] Tainted: [L]=SOFTLOCKUP [ 235.422366][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.422378][ T7746] Call Trace: [ 235.422388][ T7746] [ 235.422397][ T7746] dump_stack_lvl+0xe8/0x150 [ 235.422428][ T7746] should_fail_ex+0x412/0x560 [ 235.422462][ T7746] should_failslab+0xa8/0x100 [ 235.422495][ T7746] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 235.422526][ T7746] ? __get_vm_area_node+0x13f/0x300 [ 235.422552][ T7746] ? __lock_acquire+0x6b5/0x2cf0 [ 235.422578][ T7746] __get_vm_area_node+0x13f/0x300 [ 235.422609][ T7746] __vmalloc_node_range_noprof+0x36a/0x1750 [ 235.422638][ T7746] ? ethtool_get_stats+0x202/0x3b0 [ 235.422665][ T7746] ? kasan_save_track+0x3e/0x80 [ 235.422712][ T7746] ? __might_fault+0xaf/0x130 [ 235.422742][ T7746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.422781][ T7746] ? ethtool_get_stats+0x202/0x3b0 [ 235.422804][ T7746] vzalloc_noprof+0xb2/0xe0 [ 235.422831][ T7746] ? ethtool_get_stats+0x202/0x3b0 [ 235.422856][ T7746] ethtool_get_stats+0x202/0x3b0 [ 235.422881][ T7746] ? __pfx_ethtool_get_stats+0x10/0x10 [ 235.422905][ T7746] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.422935][ T7746] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.422967][ T7746] dev_ethtool+0xb92/0x1ae0 [ 235.423001][ T7746] ? __pfx_dev_ethtool+0x10/0x10 [ 235.423019][ T7746] ? dev_load+0x21/0x1f0 [ 235.423060][ T7746] ? dev_load+0x21/0x1f0 [ 235.423086][ T7746] dev_ioctl+0x392/0x1150 [ 235.423115][ T7746] sock_do_ioctl+0x23e/0x320 [ 235.423140][ T7746] ? __pfx_sock_do_ioctl+0x10/0x10 [ 235.423167][ T7746] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 235.423215][ T7746] sock_ioctl+0x5c6/0x7f0 [ 235.423238][ T7746] ? __pfx_sock_ioctl+0x10/0x10 [ 235.423258][ T7746] ? __fget_files+0x2a/0x420 [ 235.423281][ T7746] ? __fget_files+0x3a0/0x420 [ 235.423305][ T7746] ? __fget_files+0x2a/0x420 [ 235.423332][ T7746] ? bpf_lsm_file_ioctl+0x9/0x20 [ 235.423367][ T7746] ? __pfx_sock_ioctl+0x10/0x10 [ 235.423387][ T7746] __se_sys_ioctl+0xfc/0x170 [ 235.423418][ T7746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.423441][ T7746] do_syscall_64+0x15f/0xf80 [ 235.423469][ T7746] ? trace_irq_disable+0x3b/0x140 [ 235.423500][ T7746] ? clear_bhb_loop+0x40/0x90 [ 235.423526][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.423546][ T7746] RIP: 0033:0x7fab03f9cdd9 [ 235.423566][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.423583][ T7746] RSP: 002b:00007fab04ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.423605][ T7746] RAX: ffffffffffffffda RBX: 00007fab04215fa0 RCX: 00007fab03f9cdd9 [ 235.423620][ T7746] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 235.423634][ T7746] RBP: 00007fab04ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.423647][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.423659][ T7746] R13: 00007fab04216038 R14: 00007fab04215fa0 R15: 00007fab0433fa48 [ 235.423692][ T7746] [ 235.426119][ T7746] syz.0.557: vmalloc error: size 240, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.908909][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.0.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.908957][ T7746] Tainted: [L]=SOFTLOCKUP [ 235.908968][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.908981][ T7746] Call Trace: [ 235.908989][ T7746] [ 235.908998][ T7746] dump_stack_lvl+0xe8/0x150 [ 235.909028][ T7746] warn_alloc+0x249/0x340 [ 235.909063][ T7746] ? __pfx_warn_alloc+0x10/0x10 [ 235.909094][ T7746] ? __get_vm_area_node+0x13f/0x300 [ 235.909125][ T7746] ? __get_vm_area_node+0x2b5/0x300 [ 235.909160][ T7746] __vmalloc_node_range_noprof+0x38f/0x1750 [ 235.909193][ T7746] ? kasan_save_track+0x3e/0x80 [ 235.909240][ T7746] ? __might_fault+0xaf/0x130 [ 235.909269][ T7746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.909308][ T7746] ? ethtool_get_stats+0x202/0x3b0 [ 235.909332][ T7746] vzalloc_noprof+0xb2/0xe0 [ 235.909359][ T7746] ? ethtool_get_stats+0x202/0x3b0 [ 235.909384][ T7746] ethtool_get_stats+0x202/0x3b0 [ 235.909416][ T7746] ? __pfx_ethtool_get_stats+0x10/0x10 [ 235.909440][ T7746] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.909469][ T7746] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.909501][ T7746] dev_ethtool+0xb92/0x1ae0 [ 235.909535][ T7746] ? __pfx_dev_ethtool+0x10/0x10 [ 235.909553][ T7746] ? dev_load+0x21/0x1f0 [ 235.909594][ T7746] ? dev_load+0x21/0x1f0 [ 235.909620][ T7746] dev_ioctl+0x392/0x1150 [ 235.909650][ T7746] sock_do_ioctl+0x23e/0x320 [ 235.909674][ T7746] ? __pfx_sock_do_ioctl+0x10/0x10 [ 235.909693][ T7746] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 235.909741][ T7746] sock_ioctl+0x5c6/0x7f0 [ 235.909764][ T7746] ? __pfx_sock_ioctl+0x10/0x10 [ 235.909785][ T7746] ? __fget_files+0x2a/0x420 [ 235.909808][ T7746] ? __fget_files+0x3a0/0x420 [ 235.909832][ T7746] ? __fget_files+0x2a/0x420 [ 235.909860][ T7746] ? bpf_lsm_file_ioctl+0x9/0x20 [ 235.909891][ T7746] ? __pfx_sock_ioctl+0x10/0x10 [ 235.909910][ T7746] __se_sys_ioctl+0xfc/0x170 [ 235.909941][ T7746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.909964][ T7746] do_syscall_64+0x15f/0xf80 [ 235.909992][ T7746] ? trace_irq_disable+0x3b/0x140 [ 235.910023][ T7746] ? clear_bhb_loop+0x40/0x90 [ 235.910049][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.910070][ T7746] RIP: 0033:0x7fab03f9cdd9 [ 235.910088][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.910106][ T7746] RSP: 002b:00007fab04ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.910127][ T7746] RAX: ffffffffffffffda RBX: 00007fab04215fa0 RCX: 00007fab03f9cdd9 [ 235.910141][ T7746] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 235.910155][ T7746] RBP: 00007fab04ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.910168][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.910180][ T7746] R13: 00007fab04216038 R14: 00007fab04215fa0 R15: 00007fab0433fa48 [ 235.910215][ T7746] [ 236.357222][ T7746] Mem-Info: [ 236.360467][ T7746] active_anon:7983 inactive_anon:0 isolated_anon:0 [ 236.360467][ T7746] active_file:3993 inactive_file:40041 isolated_file:0 [ 236.360467][ T7746] unevictable:768 dirty:336 writeback:0 [ 236.360467][ T7746] slab_reclaimable:10433 slab_unreclaimable:96042 [ 236.360467][ T7746] mapped:33833 shmem:2090 pagetables:1305 [ 236.360467][ T7746] sec_pagetables:0 bounce:0 [ 236.360467][ T7746] kernel_misc_reclaimable:0 [ 236.360467][ T7746] free:1323070 free_pcp:9908 free_cma:0 [ 236.608809][ T7746] Node 0 active_anon:31968kB inactive_anon:0kB active_file:16972kB inactive_file:159968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140832kB dirty:1340kB writeback:0kB shmem:8224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12300kB pagetables:4988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 236.725452][ T7746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 236.814439][ T7746] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.899655][ T7746] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 236.919263][ T7746] Node 0 DMA32 free:1327080kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34468kB inactive_anon:0kB active_file:17972kB inactive_file:159968kB unevictable:1536kB writepending:1340kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:37352kB local_pcp:17928kB free_cma:0kB [ 236.996522][ T7746] lowmem_reserve[]: 0 0 0 0 0 [ 237.017416][ T7746] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 237.085572][ T7746] lowmem_reserve[]: 0 0 0 0 0 [ 237.101908][ T7746] Node 1 Normal free:3947140kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.133864][ T7480] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 237.144408][ T7746] lowmem_reserve[]: 0 0 0 0 0 [ 237.149506][ T7746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 237.204947][ T7746] Node 0 DMA32: 3675*4kB (UME) 1819*8kB (UE) 1234*16kB (U) 354*32kB (U) 112*64kB (U) 151*128kB (UME) 112*256kB (UME) 44*512kB (UM) 16*1024kB (UM) 1*2048kB (E) 286*4096kB (M) = 1327908kB [ 237.224843][ T7746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 237.237332][ T7746] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 12*16kB (UM) 13*32kB (UM) 8*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3947140kB [ 237.256781][ T7746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.269411][ T7746] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 237.283781][ T7746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.295618][ T7746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.306898][ T7480] usb 3-1: Using ep0 maxpacket: 32 [ 237.319652][ T7480] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.329083][ T7480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.345970][ T7746] 48726 total pagecache pages [ 237.355250][ T7480] usb 3-1: config 0 descriptor?? [ 237.361238][ T7746] 0 pages in swap cache [ 237.370163][ T7746] Free swap = 124996kB [ 237.384748][ T7746] Total swap = 124996kB [ 237.397719][ T7746] 2097051 pages RAM [ 237.407470][ T7746] 0 pages HighMem/MovableOnly [ 237.420916][ T7746] 427115 pages reserved [ 237.437019][ T7746] 0 pages cma reserved [ 237.584174][ T7480] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 237.606609][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.616519][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.655657][ T7480] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.679340][ T7480] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 237.699290][ T7480] usb 3-1: media controller created [ 237.780113][ T7764] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 237.801444][ T7480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.821026][ T7760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.560'. [ 237.981034][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.010538][ T7480] az6027: usb out operation failed. (-71) [ 238.017070][ T7480] az6027: usb out operation failed. (-71) [ 238.026987][ T7480] stb0899_attach: Driver disabled by Kconfig [ 238.043178][ T7480] az6027: no front-end attached [ 238.043178][ T7480] [ 238.071904][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.104159][ T7480] az6027: usb out operation failed. (-71) [ 238.122897][ T7480] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 238.175136][ T7480] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 238.224012][ T7480] dvb-usb: schedule remote query interval to 400 msecs. [ 238.244386][ T7480] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 238.281368][ T7480] usb 3-1: USB disconnect, device number 14 [ 238.508552][ T7480] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 238.801450][ T1172] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.833321][ T1172] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.872452][ T1172] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.911340][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 238.922788][ T1172] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.143855][ T7778] fuse: Bad value for 'rootmode' [ 239.308351][ T7772] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 239.483706][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 239.483725][ T29] audit: type=1326 audit(1778498480.189:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 239.531751][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.562699][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.572288][ T5699] usb 2-1: USB disconnect, device number 13 [ 239.596717][ T5699] em28xx 2-1:0.0: Disconnecting em28xx [ 239.636448][ T5699] em28xx 2-1:0.0: Freeing device [ 239.650163][ T29] audit: type=1326 audit(1778498480.239:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 239.738106][ T29] audit: type=1326 audit(1778498480.259:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 239.802794][ T29] audit: type=1326 audit(1778498480.259:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 239.873180][ T29] audit: type=1326 audit(1778498480.259:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 239.935234][ T29] audit: type=1326 audit(1778498480.259:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 239.988061][ T29] audit: type=1326 audit(1778498480.259:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 240.047990][ T1225] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 240.061049][ T29] audit: type=1326 audit(1778498480.259:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 240.128234][ T29] audit: type=1326 audit(1778498480.259:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 240.187973][ T5699] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 240.204859][ T29] audit: type=1326 audit(1778498480.259:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.567" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee06f9cdd9 code=0x7ffc0000 [ 240.315945][ T1225] usb 3-1: Using ep0 maxpacket: 32 [ 240.359281][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 240.389635][ T1225] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 240.402749][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.428066][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.440461][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.485931][ T5699] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 240.495789][ T1225] usb 3-1: config 0 descriptor?? [ 240.534245][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.569061][ T5699] usb 2-1: config 0 descriptor?? [ 240.766987][ T1225] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 240.832830][ T1225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.854906][ T5699] usbhid 2-1:0.0: can't add hid device: -71 [ 240.875283][ T5699] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 240.890684][ T1225] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 240.923755][ T1225] usb 3-1: media controller created [ 240.948386][ T5699] usb 2-1: USB disconnect, device number 14 [ 240.975142][ T7794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.569'. [ 241.030578][ T1225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.087310][ T7801] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 241.150277][ T7801] syzkaller0: entered promiscuous mode [ 241.160356][ T7801] syzkaller0: entered allmulticast mode [ 241.207724][ T1225] az6027: usb out operation failed. (-71) [ 241.232286][ T1225] az6027: usb out operation failed. (-71) [ 241.255383][ T1225] stb0899_attach: Driver disabled by Kconfig [ 241.280371][ T1225] az6027: no front-end attached [ 241.280371][ T1225] [ 241.311142][ T1225] az6027: usb out operation failed. (-71) [ 241.329549][ T1225] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 241.389893][ T1225] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 241.486382][ T1225] dvb-usb: schedule remote query interval to 400 msecs. [ 241.515746][ T1225] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 241.566471][ T1225] usb 3-1: USB disconnect, device number 15 [ 241.774691][ T1225] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 242.003547][ T7806] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 242.258027][ T808] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 242.436534][ T808] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 242.449606][ T808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 242.484689][ T808] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 242.513549][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.547253][ T808] usb 4-1: Product: syz [ 242.567485][ T808] usb 4-1: Manufacturer: syz [ 242.589465][ T808] usb 4-1: SerialNumber: syz [ 242.666000][ T808] usb 4-1: config 0 descriptor?? [ 242.696578][ T808] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 242.935814][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'. [ 242.986484][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.577'. [ 243.349579][ T7820] fuse: Bad value for 'rootmode' [ 243.436035][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.462048][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.492986][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.541848][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.550843][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.551493][ T7826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.579'. [ 243.573024][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.611785][ T9] usb 4-1: USB disconnect, device number 20 [ 243.640713][ T7830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.579'. [ 243.657293][ T7824] pim6reg1: entered promiscuous mode [ 243.668456][ T1225] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.677902][ T7824] pim6reg1: entered allmulticast mode [ 243.808017][ T1225] usb 5-1: device descriptor read/64, error -71 [ 244.039545][ T7838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.229466][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 245.170065][ T7859] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 246.683230][ T7881] netlink: 52 bytes leftover after parsing attributes in process `syz.0.592'. [ 246.761944][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.592'. [ 246.826637][ T7883] FAULT_INJECTION: forcing a failure. [ 246.826637][ T7883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.854653][ T7883] CPU: 1 UID: 0 PID: 7883 Comm: syz.2.594 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.854694][ T7883] Tainted: [L]=SOFTLOCKUP [ 246.854702][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.854724][ T7883] Call Trace: [ 246.854732][ T7883] [ 246.854741][ T7883] dump_stack_lvl+0xe8/0x150 [ 246.854772][ T7883] should_fail_ex+0x412/0x560 [ 246.854805][ T7883] _copy_from_user+0x2d/0xb0 [ 246.854836][ T7883] __sys_bpf+0x229/0x950 [ 246.854870][ T7883] ? __pfx___sys_bpf+0x10/0x10 [ 246.854917][ T7883] ? ksys_write+0x242/0x270 [ 246.854951][ T7883] ? __pfx_ksys_write+0x10/0x10 [ 246.854983][ T7883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.855004][ T7883] __x64_sys_bpf+0x7c/0x90 [ 246.855030][ T7883] do_syscall_64+0x15f/0xf80 [ 246.855055][ T7883] ? trace_irq_disable+0x3b/0x140 [ 246.855083][ T7883] ? clear_bhb_loop+0x40/0x90 [ 246.855106][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.855124][ T7883] RIP: 0033:0x7fe2d8b9cdd9 [ 246.855143][ T7883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.855161][ T7883] RSP: 002b:00007fe2d9a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.855183][ T7883] RAX: ffffffffffffffda RBX: 00007fe2d8e15fa0 RCX: 00007fe2d8b9cdd9 [ 246.855197][ T7883] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 246.855209][ T7883] RBP: 00007fe2d9a10090 R08: 0000000000000000 R09: 0000000000000000 [ 246.855222][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.855234][ T7883] R13: 00007fe2d8e16038 R14: 00007fe2d8e15fa0 R15: 00007fe2d8f3fa48 [ 246.855263][ T7883] [ 247.351190][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 247.420135][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 247.542193][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'. [ 247.590686][ T9] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 247.624267][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 247.656701][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 247.675503][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.711303][ T9] usb 5-1: Product: syz [ 247.723114][ T9] usb 5-1: Manufacturer: syz [ 247.744282][ T9] usb 5-1: SerialNumber: syz [ 247.797627][ T9] usb 5-1: config 0 descriptor?? [ 247.824939][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 248.217868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 248.707079][ T5699] usb 5-1: USB disconnect, device number 15 [ 249.447790][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 249.524195][ T7921] syzkaller0: entered promiscuous mode [ 249.535732][ T7921] syzkaller0: entered allmulticast mode [ 250.568972][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 250.739344][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 250.775812][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.826589][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 250.908735][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 250.946776][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 250.981469][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.009708][ T9] usb 5-1: Product: syz [ 251.031352][ T9] usb 5-1: Manufacturer: syz [ 251.057593][ T9] usb 5-1: SerialNumber: syz [ 251.084300][ T9] usb 5-1: config 0 descriptor?? [ 251.510422][ T9] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 251.555224][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 251.622337][ T9] usb 5-1: USB disconnect, device number 16 [ 251.880706][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 251.896548][ T7947] netlink: 44 bytes leftover after parsing attributes in process `syz.3.607'. [ 252.104731][ T7952] netlink: 52 bytes leftover after parsing attributes in process `syz.2.609'. [ 252.183048][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.609'. [ 252.878197][ T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 252.938960][ T5699] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.000535][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 253.049217][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 253.060530][ T42] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 253.079097][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.107480][ T7977] syzkaller0: entered promiscuous mode [ 253.115196][ T42] usb 3-1: config 0 descriptor?? [ 253.120942][ T5699] usb 5-1: Using ep0 maxpacket: 16 [ 253.127794][ T7977] syzkaller0: entered allmulticast mode [ 253.146015][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.190403][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.214119][ T5699] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 253.225236][ T7981] xt_hashlimit: size too large, truncated to 1048576 [ 253.238591][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.264722][ T5699] usb 5-1: config 0 descriptor?? [ 253.376288][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 253.427762][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.470582][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 253.494747][ T42] usb 3-1: media controller created [ 253.556500][ T5699] usbhid 5-1:0.0: can't add hid device: -71 [ 253.578625][ T5699] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 253.587343][ T7969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 253.597340][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.633595][ T5699] usb 5-1: USB disconnect, device number 17 [ 253.699150][ T42] az6027: usb out operation failed. (-71) [ 253.714226][ T42] az6027: usb out operation failed. (-71) [ 253.724646][ T42] stb0899_attach: Driver disabled by Kconfig [ 253.739841][ T42] az6027: no front-end attached [ 253.739841][ T42] [ 253.753653][ T42] az6027: usb out operation failed. (-71) [ 253.765271][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 253.783571][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 253.835276][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 253.854665][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 253.899820][ T42] usb 3-1: USB disconnect, device number 16 [ 254.060300][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 254.359927][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 254.627980][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 254.817900][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 254.836984][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.853524][ T5699] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 254.878141][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.909061][ T42] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 254.935077][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.981857][ T42] usb 5-1: config 0 descriptor?? [ 255.058112][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 255.073085][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.098126][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.109483][ T5699] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 255.119442][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.150247][ T5699] usb 3-1: config 0 descriptor?? [ 255.245939][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 255.275834][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 255.294696][ T42] usb 5-1: USB disconnect, device number 18 [ 255.503252][ T5699] usbhid 3-1:0.0: can't add hid device: -71 [ 255.532346][ T5699] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.597402][ T5699] usb 3-1: USB disconnect, device number 17 [ 255.859798][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.868170][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.987960][ T42] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.150157][ T808] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 256.180166][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 256.205677][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.226463][ T42] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 256.248236][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.271771][ T42] usb 2-1: Product: syz [ 256.290614][ T42] usb 2-1: Manufacturer: syz [ 256.304804][ T42] usb 2-1: SerialNumber: syz [ 256.338025][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 256.355173][ T808] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 256.395373][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.438775][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 256.458286][ T808] usb 5-1: config 0 descriptor?? [ 256.599521][ T42] usb 2-1: selecting invalid altsetting 1 [ 256.617562][ T42] catc 2-1:8.0: Can't set altsetting 1. [ 256.661915][ T42] catc 2-1:8.0: probe with driver catc failed with error -5 [ 256.712166][ T808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 256.731025][ T42] usb 2-1: USB disconnect, device number 15 [ 256.792626][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.816404][ T808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 256.831798][ T808] usb 5-1: media controller created [ 256.928171][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.939346][ T8039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.625'. [ 256.955904][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 257.041776][ T808] az6027: usb out operation failed. (-71) [ 257.065308][ T808] az6027: usb out operation failed. (-71) [ 257.076362][ T8063] syzkaller0: entered promiscuous mode [ 257.118010][ T8063] syzkaller0: entered allmulticast mode [ 257.144362][ T808] stb0899_attach: Driver disabled by Kconfig [ 257.208234][ T808] az6027: no front-end attached [ 257.208234][ T808] [ 257.321557][ T808] az6027: usb out operation failed. (-71) [ 257.345478][ T808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 257.379588][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 257.415095][ T808] dvb-usb: schedule remote query interval to 400 msecs. [ 257.448498][ T808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 257.461871][ T808] usb 5-1: USB disconnect, device number 19 [ 257.571292][ T808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 258.387916][ T42] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 258.569883][ T8096] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 258.607725][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.646355][ T8096] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.683567][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.733674][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.821009][ T42] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 258.861606][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.937059][ T42] usb 4-1: config 0 descriptor?? [ 259.167600][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 259.199214][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 259.242971][ T42] usb 4-1: USB disconnect, device number 21 [ 259.897967][ T42] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 260.098917][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 260.144878][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.188171][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.217967][ T42] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 260.251363][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.288054][ T42] usb 2-1: config 0 descriptor?? [ 260.468047][ T5653] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 260.680026][ T5653] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 260.703543][ T5653] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 260.733659][ T5653] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 260.757954][ T5653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.781130][ T5653] usb 4-1: Product: syz [ 260.790606][ T5653] usb 4-1: Manufacturer: syz [ 260.801543][ T5653] usb 4-1: SerialNumber: syz [ 260.812451][ T5653] usb 4-1: config 0 descriptor?? [ 260.822399][ T5653] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 260.961160][ T42] usb 2-1: USB disconnect, device number 16 [ 261.202694][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'. [ 261.212884][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 261.651667][ T8114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.681831][ T8114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.711019][ T5725] usb 4-1: USB disconnect, device number 22 [ 262.927923][ T5653] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 263.127944][ T5653] usb 3-1: Using ep0 maxpacket: 32 [ 263.149590][ T5653] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 263.174967][ T5653] usb 3-1: config 2 has no interface number 0 [ 263.195255][ T5653] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 263.229748][ T5653] usb 3-1: config 2 interface 88 has no altsetting 0 [ 263.259933][ T5653] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 263.301068][ T5653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.333023][ T5653] usb 3-1: Product: syz [ 263.347928][ T5653] usb 3-1: Manufacturer: syz [ 263.365260][ T5653] usb 3-1: SerialNumber: syz [ 263.405458][ T8152] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.650974][ T8150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.021477][ T8161] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.290307][ T5653] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 264.319856][ T5653] asix 3-1:2.88: probe with driver asix failed with error -71 [ 264.355886][ T5653] usb 3-1: USB disconnect, device number 18 [ 265.299757][ T808] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 265.488191][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 265.512879][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.545019][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.576928][ T808] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 265.599720][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.636174][ T808] usb 4-1: config 0 descriptor?? [ 265.968507][ T5725] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 266.141944][ T5725] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 266.166069][ T5725] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 266.190839][ T5725] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 266.200478][ T7480] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 266.208269][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.221550][ T5725] usb 5-1: Product: syz [ 266.230991][ T5725] usb 5-1: Manufacturer: syz [ 266.239674][ T5725] usb 5-1: SerialNumber: syz [ 266.262854][ T5725] usb 5-1: config 0 descriptor?? [ 266.277712][ T5725] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 266.300194][ T5653] usb 4-1: USB disconnect, device number 23 [ 266.312657][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 266.312681][ T29] audit: type=1326 audit(1778498507.019:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.369588][ T7480] usb 2-1: Using ep0 maxpacket: 32 [ 266.389064][ T7480] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 266.400738][ T7480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.406841][ T29] audit: type=1326 audit(1778498507.019:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.455653][ T7480] usb 2-1: config 0 descriptor?? [ 266.472797][ T29] audit: type=1326 audit(1778498507.049:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.522405][ T29] audit: type=1326 audit(1778498507.219:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.563299][ T29] audit: type=1326 audit(1778498507.219:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.619508][ T29] audit: type=1326 audit(1778498507.319:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.664225][ T29] audit: type=1326 audit(1778498507.349:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.703859][ T7480] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 266.711452][ T29] audit: type=1326 audit(1778498507.349:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.749165][ T7480] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.772185][ T29] audit: type=1326 audit(1778498507.349:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.776927][ T7480] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 266.834221][ T7480] usb 2-1: media controller created [ 266.871112][ T29] audit: type=1326 audit(1778498507.359:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.658" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 266.906648][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'. [ 266.995381][ T7480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.064793][ T7480] az6027: usb out operation failed. (-71) [ 267.077172][ T7480] az6027: usb out operation failed. (-71) [ 267.091834][ T7480] stb0899_attach: Driver disabled by Kconfig [ 267.108893][ T7480] az6027: no front-end attached [ 267.108893][ T7480] [ 267.131306][ T7480] az6027: usb out operation failed. (-71) [ 267.146989][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.168372][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.181627][ T7480] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 267.217019][ T7480] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 267.244986][ T5725] usb 5-1: USB disconnect, device number 20 [ 267.289257][ T7480] dvb-usb: schedule remote query interval to 400 msecs. [ 267.309280][ T7480] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 267.337439][ T7480] usb 2-1: USB disconnect, device number 17 [ 267.434866][ T7480] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 267.710409][ T8198] syzkaller0: entered promiscuous mode [ 267.727781][ T8198] syzkaller0: entered allmulticast mode [ 267.753031][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 267.917406][ T8200] bridge0: port 3(veth0_to_bridge) entered blocking state [ 267.935633][ T8200] bridge0: port 3(veth0_to_bridge) entered disabled state [ 267.955576][ T8200] veth0_to_bridge: entered allmulticast mode [ 267.975818][ T8200] veth0_to_bridge: entered promiscuous mode [ 268.014223][ T7480] hid-generic 0081:0011:FFFFFF81.000B: item fetching failed at offset 2/5 [ 268.055948][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 268.067064][ T7480] hid-generic 0081:0011:FFFFFF81.000B: probe with driver hid-generic failed with error -22 [ 268.176377][ T8202] syzkaller0: entered promiscuous mode [ 268.215156][ T8202] syzkaller0: entered allmulticast mode [ 270.219407][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.270744][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.343235][ T8241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.671'. [ 270.640737][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 270.671193][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 270.877994][ T5653] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 270.962666][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 271.049763][ T5653] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 271.065175][ T5653] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 271.100383][ T5653] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 271.117218][ T5653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.139156][ T5653] usb 2-1: Product: syz [ 271.150264][ T5653] usb 2-1: Manufacturer: syz [ 271.164498][ T5653] usb 2-1: SerialNumber: syz [ 271.200155][ T5653] usb 2-1: config 0 descriptor?? [ 271.227105][ T5653] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 271.849533][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.877363][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.974697][ T5653] gspca_sunplus: reg_r err -71 [ 271.987936][ T5653] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 272.050900][ T5653] usb 2-1: USB disconnect, device number 18 [ 272.878783][ T8269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.680'. [ 272.954568][ T8269] netlink: 60 bytes leftover after parsing attributes in process `syz.1.680'. [ 273.638625][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 273.638645][ T29] audit: type=1326 audit(1778498514.339:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 273.750934][ T29] audit: type=1326 audit(1778498514.379:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 273.788303][ T29] audit: type=1326 audit(1778498514.379:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 273.814208][ T29] audit: type=1326 audit(1778498514.379:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 273.894099][ T29] audit: type=1326 audit(1778498514.389:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 273.947778][ T5725] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.966556][ T29] audit: type=1326 audit(1778498514.389:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 274.008953][ T8291] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 274.036859][ T29] audit: type=1326 audit(1778498514.389:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 274.071498][ T8291] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 274.090674][ T29] audit: type=1326 audit(1778498514.389:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 274.153134][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 274.177487][ T5725] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 274.189420][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.200809][ T29] audit: type=1326 audit(1778498514.389:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 274.266207][ T5725] usb 4-1: config 0 descriptor?? [ 274.275871][ T29] audit: type=1326 audit(1778498514.389:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.0.682" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab03f9cdd9 code=0x7ffc0000 [ 274.560068][ T5725] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 274.574409][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.593336][ T5725] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 274.604760][ T5725] usb 4-1: media controller created [ 274.641258][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.755586][ T8289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.686'. [ 274.789098][ T5725] az6027: usb out operation failed. (-71) [ 274.818516][ T5725] az6027: usb out operation failed. (-71) [ 274.837292][ T5725] stb0899_attach: Driver disabled by Kconfig [ 274.850664][ T5725] az6027: no front-end attached [ 274.850664][ T5725] [ 274.878848][ T5725] az6027: usb out operation failed. (-71) [ 274.911793][ T5725] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 274.937045][ T5725] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 274.984343][ T5725] dvb-usb: schedule remote query interval to 400 msecs. [ 275.015395][ T5725] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 275.047611][ T5725] usb 4-1: USB disconnect, device number 24 [ 275.924342][ T5725] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 276.030401][ T8307] netlink: 52 bytes leftover after parsing attributes in process `syz.2.691'. [ 276.067649][ T8307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.691'. [ 276.208558][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.242767][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.310172][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.342008][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.608097][ T5725] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 276.783001][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 276.812756][ T5725] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 276.847395][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.892235][ T5725] usb 3-1: config 0 descriptor?? [ 277.147257][ T8321] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 277.172064][ T5725] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 277.205584][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.226885][ T5725] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 277.243347][ T8321] FAULT_INJECTION: forcing a failure. [ 277.243347][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.258204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 277.294238][ T5725] usb 3-1: media controller created [ 277.337348][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.0.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.337383][ T8321] Tainted: [L]=SOFTLOCKUP [ 277.337390][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.337403][ T8321] Call Trace: [ 277.337411][ T8321] [ 277.337420][ T8321] dump_stack_lvl+0xe8/0x150 [ 277.337450][ T8321] should_fail_ex+0x412/0x560 [ 277.337482][ T8321] _copy_to_user+0x31/0xb0 [ 277.337515][ T8321] simple_read_from_buffer+0xe1/0x170 [ 277.337547][ T8321] proc_fail_nth_read+0x1bb/0x230 [ 277.337578][ T8321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.337608][ T8321] ? rw_verify_area+0x2a6/0x4d0 [ 277.337636][ T8321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.337664][ T8321] vfs_read+0x20c/0xa70 [ 277.337699][ T8321] ? __pfx___mutex_lock+0x10/0x10 [ 277.337729][ T8321] ? __pfx_vfs_read+0x10/0x10 [ 277.337760][ T8321] ? __fget_files+0x2a/0x420 [ 277.337801][ T8321] ? __fget_files+0x3a0/0x420 [ 277.337824][ T8321] ? __fget_files+0x2a/0x420 [ 277.337858][ T8321] ksys_read+0x150/0x270 [ 277.337890][ T8321] ? __pfx_ksys_read+0x10/0x10 [ 277.337928][ T8321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.337951][ T8321] do_syscall_64+0x15f/0xf80 [ 277.337980][ T8321] ? trace_irq_disable+0x3b/0x140 [ 277.338012][ T8321] ? clear_bhb_loop+0x40/0x90 [ 277.338038][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.338059][ T8321] RIP: 0033:0x7fab03f5d60e [ 277.338078][ T8321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.338096][ T8321] RSP: 002b:00007fab04ebefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.338119][ T8321] RAX: ffffffffffffffda RBX: 00007fab04ebf6c0 RCX: 00007fab03f5d60e [ 277.338134][ T8321] RDX: 000000000000000f RSI: 00007fab04ebf0a0 RDI: 0000000000000004 [ 277.338147][ T8321] RBP: 00007fab04ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 277.338160][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.338172][ T8321] R13: 00007fab04216038 R14: 00007fab04215fa0 R15: 00007fab0433fa48 [ 277.338206][ T8321] [ 277.343928][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.532838][ T8322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.693'. [ 277.829433][ T5725] az6027: usb out operation failed. (-71) [ 277.865370][ T5725] az6027: usb out operation failed. (-71) [ 277.900000][ T5725] stb0899_attach: Driver disabled by Kconfig [ 277.932930][ T5725] az6027: no front-end attached [ 277.932930][ T5725] [ 277.970072][ T5725] az6027: usb out operation failed. (-71) [ 277.992103][ T5725] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 278.011564][ T5725] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 278.053034][ T8335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 278.067793][ T5725] dvb-usb: schedule remote query interval to 400 msecs. [ 278.077069][ T5725] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 278.101623][ T5725] usb 3-1: USB disconnect, device number 19 [ 278.183443][ T5725] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 278.521000][ T5653] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 278.640136][ T8348] netlink: 52 bytes leftover after parsing attributes in process `syz.4.703'. [ 278.697876][ T5653] usb 2-1: Using ep0 maxpacket: 16 [ 278.714166][ T8348] netlink: 60 bytes leftover after parsing attributes in process `syz.4.703'. [ 278.730972][ T5653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.751328][ T5653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.771342][ T5653] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 278.786601][ T5653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.809602][ T5653] usb 2-1: config 0 descriptor?? [ 278.937940][ T5725] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 279.097914][ T5725] usb 3-1: Using ep0 maxpacket: 16 [ 279.106111][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.123443][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.142315][ T5725] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 279.161081][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.177541][ T5725] usb 3-1: config 0 descriptor?? [ 279.446566][ T7480] usb 2-1: USB disconnect, device number 19 [ 279.794557][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 279.805229][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 279.818799][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 279.839093][ T7480] usb 3-1: USB disconnect, device number 20 [ 279.991550][ T9] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 280.010660][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 280.027170][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 280.050555][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.058912][ T9] usb 5-1: Product: syz [ 280.063184][ T9] usb 5-1: Manufacturer: syz [ 280.068117][ T9] usb 5-1: SerialNumber: syz [ 280.078192][ T9] usb 5-1: config 0 descriptor?? [ 280.089924][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 280.734785][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.773457][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.806117][ T9] gspca_sunplus: reg_r err -71 [ 280.825934][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 280.853276][ T9] usb 5-1: USB disconnect, device number 21 [ 280.863634][ T8377] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 281.076273][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.086179][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.098725][ T8383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.716'. [ 281.114510][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.134206][ T8383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.716'. [ 281.369570][ T5653] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 281.591008][ T5653] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 281.623984][ T5653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 281.657572][ T5653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 281.675748][ T5653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 281.701469][ T5653] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 281.712609][ T5653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.726224][ T5653] usb 4-1: Product: syz [ 281.737279][ T5653] usb 4-1: Manufacturer: syz [ 281.748271][ T5653] usb 4-1: SerialNumber: syz [ 281.760023][ T5653] usb 4-1: config 0 descriptor?? [ 281.782736][ T5653] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 282.196898][ T8398] syzkaller0: entered promiscuous mode [ 282.215915][ T8398] syzkaller0: entered allmulticast mode [ 282.590152][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 282.608983][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 282.687915][ T5653] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 282.870270][ T5653] usb 5-1: Using ep0 maxpacket: 16 [ 282.892333][ T5653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.932818][ T5653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.984845][ T5653] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 283.017877][ T5653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.061884][ T5653] usb 5-1: config 0 descriptor?? [ 283.378249][ T5725] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 283.487064][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.521362][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.554430][ T5725] usb 3-1: Using ep0 maxpacket: 16 [ 283.577332][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 283.598601][ T5725] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 283.609318][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.618150][ T5725] usb 3-1: Product: syz [ 283.642325][ T5725] usb 3-1: Manufacturer: syz [ 283.653590][ T5725] usb 3-1: SerialNumber: syz [ 283.675139][ T5725] usb 3-1: config 0 descriptor?? [ 283.699858][ T5725] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 283.723503][ T5725] usb 3-1: Detected FT232R [ 283.737049][ T5653] usb 5-1: USB disconnect, device number 22 [ 283.914002][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.928601][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.976643][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 284.026047][ T5725] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 284.079357][ T5725] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 284.095503][ T5653] usb 4-1: USB disconnect, device number 25 [ 284.168198][ T5725] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 284.197220][ T5725] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 284.227580][ T5725] usb 3-1: USB disconnect, device number 21 [ 284.250081][ T5725] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 284.273527][ T5725] ftdi_sio 3-1:0.0: device disconnected [ 285.358111][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 285.538256][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 285.552624][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.582042][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.606792][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 285.617762][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.645538][ T9] usb 3-1: Product: syz [ 285.654433][ T9] usb 3-1: Manufacturer: syz [ 285.665958][ T9] usb 3-1: SerialNumber: syz [ 285.686948][ T9] usb 3-1: config 0 descriptor?? [ 285.807526][ T8439] fuse: Bad value for 'rootmode' [ 286.069862][ T10] usb 3-1: USB disconnect, device number 22 [ 286.082063][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 286.125933][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 286.125948][ T29] audit: type=1326 audit(1778498526.829:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.191596][ T29] audit: type=1326 audit(1778498526.869:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.274667][ T29] audit: type=1326 audit(1778498526.869:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.311029][ T29] audit: type=1326 audit(1778498526.879:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.374801][ T29] audit: type=1326 audit(1778498526.879:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.454476][ T29] audit: type=1326 audit(1778498526.879:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.530941][ T29] audit: type=1326 audit(1778498526.879:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.598042][ T29] audit: type=1326 audit(1778498526.879:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.686271][ T29] audit: type=1326 audit(1778498526.879:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.756494][ T8454] fuse: Bad value for 'fd' [ 286.785878][ T29] audit: type=1326 audit(1778498526.879:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6039cdd9 code=0x7ffc0000 [ 286.931802][ T8459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 287.170452][ T8464] fuse: Bad value for 'fd' [ 288.837168][ T8488] fuse: Bad value for 'rootmode' [ 288.901414][ T8489] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 288.929984][ T8489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.674352][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 289.712472][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 289.888062][ T7480] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 290.062982][ T7480] usb 4-1: Using ep0 maxpacket: 32 [ 290.087504][ T7480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.135774][ T7480] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.188444][ T7480] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 290.230846][ T7480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.275844][ T7480] usb 4-1: Product: syz [ 290.293841][ T7480] usb 4-1: Manufacturer: syz [ 290.315864][ T7480] usb 4-1: SerialNumber: syz [ 290.336993][ T7480] usb 4-1: config 0 descriptor?? [ 290.711889][ T8508] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.991230][ T9] usb 4-1: USB disconnect, device number 26 [ 291.336977][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 291.336996][ T29] audit: type=1326 audit(1778498532.039:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 291.440586][ T29] audit: type=1326 audit(1778498532.039:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.750" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 292.025988][ T8530] fuse: Bad value for 'rootmode' [ 292.427998][ T7480] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 292.588680][ T7480] usb 3-1: Using ep0 maxpacket: 16 [ 292.606775][ T7480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.643883][ T7480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.676866][ T7480] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 292.710490][ T7480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.745413][ T7480] usb 3-1: config 0 descriptor?? [ 293.034522][ T7480] usbhid 3-1:0.0: can't add hid device: -71 [ 293.061951][ T7480] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 293.113428][ T7480] usb 3-1: USB disconnect, device number 23 [ 293.788387][ T8551] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 293.838029][ T8551] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 294.048308][ T5653] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 294.207968][ T5653] usb 3-1: Using ep0 maxpacket: 32 [ 294.216319][ T5653] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.236831][ T5653] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.301321][ T5653] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 294.341890][ T5653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.394143][ T5653] usb 3-1: Product: syz [ 294.414388][ T5653] usb 3-1: Manufacturer: syz [ 294.431349][ T5653] usb 3-1: SerialNumber: syz [ 294.449783][ T5653] usb 3-1: config 0 descriptor?? [ 294.548054][ T8562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 294.831010][ T7480] usb 3-1: USB disconnect, device number 24 [ 295.117948][ T5653] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 295.287986][ T5653] usb 2-1: Using ep0 maxpacket: 32 [ 295.301892][ T5653] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 295.333583][ T5653] usb 2-1: config 2 has no interface number 0 [ 295.354909][ T5653] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 295.397510][ T5653] usb 2-1: config 2 interface 88 has no altsetting 0 [ 295.427057][ T5653] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 295.472094][ T5653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.491487][ T8575] bridge0: port 3(veth0_to_bridge) entered blocking state [ 295.508153][ T5653] usb 2-1: Product: syz [ 295.517220][ T5653] usb 2-1: Manufacturer: syz [ 295.525576][ T8575] bridge0: port 3(veth0_to_bridge) entered disabled state [ 295.538598][ T5653] usb 2-1: SerialNumber: syz [ 295.562173][ T8575] veth0_to_bridge: entered allmulticast mode [ 295.573817][ T8570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.615354][ T7480] hid-generic 0081:0011:FFFFFF81.000F: item fetching failed at offset 2/5 [ 295.656011][ T8575] veth0_to_bridge: entered promiscuous mode [ 295.665181][ T8583] fuse: Bad value for 'rootmode' [ 295.671806][ T7480] hid-generic 0081:0011:FFFFFF81.000F: probe with driver hid-generic failed with error -22 [ 295.674946][ T8575] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.763594][ T8575] bridge0: port 3(veth0_to_bridge) entered blocking state [ 295.770975][ T8575] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 295.830207][ T8566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.776371][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 296.943975][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.974332][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.987170][ T8570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 297.000839][ T9] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 297.011859][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.025418][ T9] usb 4-1: config 0 descriptor?? [ 297.259504][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 297.286586][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.320758][ T9] usb 4-1: USB disconnect, device number 27 [ 297.672834][ T5653] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 297.692742][ T5653] asix 2-1:2.88: probe with driver asix failed with error -71 [ 297.722066][ T5653] usb 2-1: USB disconnect, device number 20 [ 297.827959][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 297.908295][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.924749][ T8607] batadv_slave_1: entered promiscuous mode [ 298.016311][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.054063][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.082417][ T8609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 298.099378][ T9] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 298.127073][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.152541][ T9] usb 4-1: config 0 descriptor?? [ 298.414978][ T8615] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 298.454606][ T8617] FAULT_INJECTION: forcing a failure. [ 298.454606][ T8617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.496988][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.4.779 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.497023][ T8617] Tainted: [L]=SOFTLOCKUP [ 298.497031][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.497043][ T8617] Call Trace: [ 298.497055][ T8617] [ 298.497064][ T8617] dump_stack_lvl+0xe8/0x150 [ 298.497094][ T8617] should_fail_ex+0x412/0x560 [ 298.497127][ T8617] _copy_from_iter+0x1d3/0x1670 [ 298.497158][ T8617] ? rcu_is_watching+0x15/0xb0 [ 298.497189][ T8617] ? __pfx__copy_from_iter+0x10/0x10 [ 298.497214][ T8617] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 298.497254][ T8617] ? netlink_sendmsg+0x650/0xb40 [ 298.497281][ T8617] ? skb_put+0x11b/0x210 [ 298.497312][ T8617] netlink_sendmsg+0x6c0/0xb40 [ 298.497350][ T8617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.497382][ T8617] ? aa_sock_msg_perm+0xf1/0x1b0 [ 298.497412][ T8617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.497442][ T8617] ____sys_sendmsg+0x972/0x9f0 [ 298.497470][ T8617] ? __might_fault+0xaf/0x130 [ 298.497502][ T8617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.497539][ T8617] ? import_iovec+0x73/0xa0 [ 298.497572][ T8617] ___sys_sendmsg+0x2a5/0x360 [ 298.497599][ T8617] ? __lock_acquire+0x6b5/0x2cf0 [ 298.497626][ T8617] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.497657][ T8617] ? kstrtouint+0x6e/0xe0 [ 298.497697][ T8617] ? __fget_files+0x2a/0x420 [ 298.497717][ T8617] ? __fget_files+0x3a0/0x420 [ 298.497745][ T8617] __sys_sendmmsg+0x27c/0x4e0 [ 298.497775][ T8617] ? __pfx___sys_sendmmsg+0x10/0x10 [ 298.497798][ T8617] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 298.497849][ T8617] ? ksys_write+0x242/0x270 [ 298.497876][ T8617] ? __pfx_ksys_write+0x10/0x10 [ 298.497898][ T8617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.497937][ T8617] __x64_sys_sendmmsg+0xa0/0xc0 [ 298.497967][ T8617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.497985][ T8617] do_syscall_64+0x15f/0xf80 [ 298.498009][ T8617] ? trace_irq_disable+0x3b/0x140 [ 298.498035][ T8617] ? clear_bhb_loop+0x40/0x90 [ 298.498060][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.498077][ T8617] RIP: 0033:0x7faf6039cdd9 [ 298.498094][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.498109][ T8617] RSP: 002b:00007faf612ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 298.498128][ T8617] RAX: ffffffffffffffda RBX: 00007faf60615fa0 RCX: 00007faf6039cdd9 [ 298.498142][ T8617] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 298.498156][ T8617] RBP: 00007faf612ae090 R08: 0000000000000000 R09: 0000000000000000 [ 298.498168][ T8617] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 298.498179][ T8617] R13: 00007faf60616038 R14: 00007faf60615fa0 R15: 00007faf6073fa48 [ 298.498210][ T8617] [ 299.459642][ T8624] fuse: Bad value for 'rootmode' [ 299.525710][ T8627] bridge0: port 3(veth0_to_bridge) entered blocking state [ 299.563749][ T8627] bridge0: port 3(veth0_to_bridge) entered disabled state [ 299.597252][ T8627] veth0_to_bridge: entered allmulticast mode [ 299.685821][ T8627] veth0_to_bridge: entered promiscuous mode [ 299.770775][ T8627] bridge0: port 3(veth0_to_bridge) entered blocking state [ 299.778130][ T8627] bridge0: port 3(veth0_to_bridge) entered listening state [ 300.020438][ C0] bridge0: port 3(veth0_to_bridge) entered blocking state [ 300.058580][ T8636] FAULT_INJECTION: forcing a failure. [ 300.058580][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 300.117965][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.1.784 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.118000][ T8636] Tainted: [L]=SOFTLOCKUP [ 300.118008][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.118020][ T8636] Call Trace: [ 300.118028][ T8636] [ 300.118036][ T8636] dump_stack_lvl+0xe8/0x150 [ 300.118067][ T8636] should_fail_ex+0x412/0x560 [ 300.118099][ T8636] should_failslab+0xa8/0x100 [ 300.118135][ T8636] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 300.118167][ T8636] ? key_alloc+0x356/0x1020 [ 300.118191][ T8636] ? kmem_cache_alloc_noprof+0x307/0x650 [ 300.118215][ T8636] ? key_alloc+0x312/0x1020 [ 300.118243][ T8636] kmemdup_noprof+0x2b/0x70 [ 300.118265][ T8636] key_alloc+0x356/0x1020 [ 300.118303][ T8636] keyring_alloc+0x45/0xb0 [ 300.118336][ T8636] lookup_user_key+0x42b/0x1170 [ 300.118371][ T8636] ? __pfx_lookup_user_key+0x10/0x10 [ 300.118395][ T8636] ? __might_fault+0xaf/0x130 [ 300.118424][ T8636] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 300.118467][ T8636] __se_sys_add_key+0x315/0x420 [ 300.118490][ T8636] ? __pfx___se_sys_add_key+0x10/0x10 [ 300.118533][ T8636] ? __x64_sys_add_key+0x20/0xc0 [ 300.118564][ T8636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.118588][ T8636] do_syscall_64+0x15f/0xf80 [ 300.118617][ T8636] ? trace_irq_disable+0x3b/0x140 [ 300.118646][ T8636] ? clear_bhb_loop+0x40/0x90 [ 300.118672][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.118693][ T8636] RIP: 0033:0x7fb44d59cdd9 [ 300.118718][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.118736][ T8636] RSP: 002b:00007fb44e410028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 300.118758][ T8636] RAX: ffffffffffffffda RBX: 00007fb44d815fa0 RCX: 00007fb44d59cdd9 [ 300.118773][ T8636] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000200000000280 [ 300.118787][ T8636] RBP: 00007fb44e410090 R08: ffffffffffffffff R09: 0000000000000000 [ 300.118800][ T8636] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 300.118813][ T8636] R13: 00007fb44d816038 R14: 00007fb44d815fa0 R15: 00007fb44d93fa48 [ 300.118844][ T8636] [ 300.478511][ T8638] netlink: 620 bytes leftover after parsing attributes in process `syz.4.785'. [ 300.488672][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 300.536237][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 300.652436][ T9] usb 4-1: USB disconnect, device number 28 [ 301.049452][ T5653] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 301.059496][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 301.207972][ T24] usb 2-1: device descriptor read/64, error -71 [ 301.228040][ T5653] usb 5-1: Using ep0 maxpacket: 32 [ 301.235694][ T8657] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 301.242328][ T5653] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 301.270244][ T5653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.293771][ T5653] usb 5-1: config 0 descriptor?? [ 301.458141][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 301.508431][ T5653] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 301.545113][ T5653] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.566034][ T5653] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 301.581777][ T5653] usb 5-1: media controller created [ 301.598158][ T24] usb 2-1: device descriptor read/64, error -71 [ 301.624135][ T5653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.710534][ T8647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 301.721914][ T24] usb usb2-port1: attempt power cycle [ 301.732966][ T5653] az6027: usb out operation failed. (-71) [ 301.748187][ T5653] az6027: usb out operation failed. (-71) [ 301.757668][ T5653] stb0899_attach: Driver disabled by Kconfig [ 301.766425][ T5653] az6027: no front-end attached [ 301.766425][ T5653] [ 301.775247][ T5653] az6027: usb out operation failed. (-71) [ 301.781417][ T5653] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 301.797342][ T5653] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 301.837364][ T5653] dvb-usb: schedule remote query interval to 400 msecs. [ 301.844965][ T5653] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 301.866949][ T5653] usb 5-1: USB disconnect, device number 23 [ 301.941369][ T5653] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 302.088335][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 302.118934][ T24] usb 2-1: device descriptor read/8, error -71 [ 302.401183][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 302.429004][ T8670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.453035][ T24] usb 2-1: device descriptor read/8, error -71 [ 302.471704][ T8670] batadv_slave_1: entered promiscuous mode [ 302.588207][ T24] usb usb2-port1: unable to enumerate USB device [ 303.055802][ T8683] netlink: 68 bytes leftover after parsing attributes in process `syz.0.800'. [ 303.403797][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'. [ 303.457764][ T8692] trusted_key: encrypted_key: insufficient parameters specified [ 303.985771][ T8707] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 304.628079][ T42] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 304.788144][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 304.803343][ T42] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.814446][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.825948][ T42] usb 5-1: config 0 descriptor?? [ 304.998234][ T7480] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 305.038001][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 305.046845][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 305.063401][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.074367][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 305.083223][ T42] usb 5-1: media controller created [ 305.102727][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.160100][ T7480] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 305.172209][ T7480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 305.183694][ T7480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 305.193782][ T7480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 305.207045][ T7480] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 305.216669][ T7480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.225492][ T7480] usb 3-1: Product: syz [ 305.230175][ T7480] usb 3-1: Manufacturer: syz [ 305.235180][ T7480] usb 3-1: SerialNumber: syz [ 305.235720][ T24] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 305.250033][ T8714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.807'. [ 305.259327][ T7480] usb 3-1: config 0 descriptor?? [ 305.265233][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 305.280361][ T42] az6027: usb out operation failed. (-71) [ 305.282968][ T7480] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 305.292417][ T42] az6027: usb out operation failed. (-71) [ 305.308580][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 305.328373][ T42] stb0899_attach: Driver disabled by Kconfig [ 305.334462][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.343934][ T42] az6027: no front-end attached [ 305.343934][ T42] [ 305.351098][ T24] usb 2-1: Product: syz [ 305.355647][ T24] usb 2-1: Manufacturer: syz [ 305.360527][ T42] az6027: usb out operation failed. (-71) [ 305.366471][ T24] usb 2-1: SerialNumber: syz [ 305.371642][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 305.384295][ T24] usb 2-1: config 0 descriptor?? [ 305.396066][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 305.410488][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 305.426680][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 305.433876][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 305.446719][ T42] usb 5-1: USB disconnect, device number 24 [ 305.484615][ T7480] usb 3-1: USB disconnect, device number 25 [ 305.558355][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 305.987695][ T8736] IPVS: Error connecting to the multicast addr [ 306.253051][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.283340][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.302650][ T24] usb 2-1: USB disconnect, device number 25 [ 307.347479][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 307.362349][ T29] audit: type=1326 audit(1778498548.069:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.4.823" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf6039cdd9 code=0x0 [ 307.386531][ T1225] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 307.395704][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 307.557975][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 307.563392][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 307.571227][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 307.581455][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.592101][ T1225] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.605342][ T1225] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.619217][ T1225] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 307.628892][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.637085][ T1225] usb 4-1: Product: syz [ 307.643906][ T1225] usb 4-1: Manufacturer: syz [ 307.658809][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 307.666263][ T1225] usb 4-1: SerialNumber: syz [ 307.672449][ T24] pvrusb2: ********** [ 307.681635][ T1225] usb 4-1: config 0 descriptor?? [ 307.691195][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 307.719262][ T24] pvrusb2: Important functionality might not be entirely working. [ 307.734682][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 307.754304][ T24] pvrusb2: ********** [ 307.932537][ T2367] pvrusb2: Invalid write control endpoint [ 307.947214][ T24] usb 2-1: USB disconnect, device number 26 [ 308.117906][ T1225] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 308.176139][ T42] usb 4-1: USB disconnect, device number 29 [ 308.200502][ T2367] pvrusb2: Invalid write control endpoint [ 308.238121][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 308.282473][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 308.292259][ T1225] usb 3-1: Using ep0 maxpacket: 32 [ 308.317438][ T1225] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 308.333202][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 308.350303][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.363660][ T2367] pvrusb2: Device being rendered inoperable [ 308.381862][ T2367] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 308.403457][ T2367] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 308.460395][ T1225] usb 3-1: config 0 descriptor?? [ 308.499112][ T2367] pvrusb2: Attached sub-driver cx25840 [ 308.546374][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 308.604549][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 308.707123][ T1225] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 308.854467][ T1225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.900084][ T1225] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 308.916264][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.825'. [ 308.965608][ T1225] usb 3-1: media controller created [ 309.091660][ T1225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.195864][ T1225] az6027: usb out operation failed. (-71) [ 309.240270][ T1225] az6027: usb out operation failed. (-71) [ 309.260080][ T1225] stb0899_attach: Driver disabled by Kconfig [ 309.281692][ T1225] az6027: no front-end attached [ 309.281692][ T1225] [ 309.309103][ T1225] az6027: usb out operation failed. (-71) [ 309.326692][ T1225] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 309.352167][ T1225] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 309.369989][ T1225] dvb-usb: schedule remote query interval to 400 msecs. [ 309.377181][ T1225] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 309.386873][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 309.405649][ T1225] usb 3-1: USB disconnect, device number 26 [ 309.448015][ T5653] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 309.548976][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 309.569150][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 309.604116][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.616866][ T1225] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 309.639587][ T5653] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 309.672579][ T24] usb 2-1: config 0 has no interface number 0 [ 309.683747][ T5653] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 309.723755][ T24] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 309.742988][ T5653] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 309.763073][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.774558][ T5653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.794523][ T24] usb 2-1: Product: syz [ 309.800941][ T5653] usb 4-1: Product: syz [ 309.806815][ T24] usb 2-1: Manufacturer: syz [ 309.817575][ T5653] usb 4-1: Manufacturer: syz [ 309.827164][ T24] usb 2-1: SerialNumber: syz [ 309.840538][ T5653] usb 4-1: SerialNumber: syz [ 309.855055][ T24] usb 2-1: config 0 descriptor?? [ 309.872546][ T5653] usb 4-1: config 0 descriptor?? [ 309.896353][ T24] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 309.928270][ T5653] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 309.956833][ T24] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 310.145922][ T24] usb 2-1: USB disconnect, device number 27 [ 310.783176][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.844543][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.984103][ T5653] usb 4-1: USB disconnect, device number 30 [ 311.481658][ T29] audit: type=1326 audit(1778498552.189:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 311.757586][ T29] audit: type=1326 audit(1778498552.219:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 312.131694][ T29] audit: type=1326 audit(1778498552.229:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 312.391403][ T29] audit: type=1326 audit(1778498552.229:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 312.548490][ T29] audit: type=1326 audit(1778498552.229:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 313.443427][ T29] audit: type=1326 audit(1778498552.229:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 313.795076][ T29] audit: type=1326 audit(1778498552.229:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 313.944418][ T29] audit: type=1326 audit(1778498552.229:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 314.068066][ T29] audit: type=1326 audit(1778498552.229:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 314.166225][ T29] audit: type=1326 audit(1778498552.229:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 314.241827][ T29] audit: type=1326 audit(1778498552.229:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 314.515249][ T29] audit: type=1326 audit(1778498552.229:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 314.777293][ T29] audit: type=1326 audit(1778498552.229:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.1.834" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb44d59cdd9 code=0x7ffc0000 [ 317.122855][ T5725] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 317.303323][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.321860][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.396319][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.547042][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.832828][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.883871][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.001769][ T5725] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 318.047130][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.197445][ T5725] usb 5-1: config 0 descriptor?? [ 318.570922][ T5725] usbhid 5-1:0.0: can't add hid device: -71 [ 318.576966][ T5725] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.658960][ T5725] usb 5-1: USB disconnect, device number 25 [ 319.409838][ T5725] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 320.611734][ T5725] usb 5-1: unable to read config index 0 descriptor/all [ 320.630614][ T5725] usb 5-1: can't read configurations, error -71 [ 321.720284][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.734765][ T5725] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 321.839128][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.303899][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.846'. [ 322.380129][ T5725] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 322.401358][ T5725] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 322.863851][ T5725] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 322.884768][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.952533][ T5725] usb 5-1: Product: syz [ 322.956736][ T5725] usb 5-1: Manufacturer: syz [ 322.991138][ T5725] usb 5-1: SerialNumber: syz [ 323.222030][ T5725] usb 5-1: config 0 descriptor?? [ 323.330546][ T5725] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 323.860540][ T5725] gspca_sunplus: reg_r err -110 [ 323.928973][ T5725] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 324.562359][ T8851] binder: 8847:8851 ioctl 8933 0 returned -22 [ 324.821741][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.926792][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.084635][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 325.153446][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 325.153466][ T29] audit: type=1326 audit(1778498565.859:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb44d59cdd9 code=0x0 [ 326.513991][ T5653] usb 5-1: USB disconnect, device number 27 [ 326.911390][ T30] INFO: task kworker/0:3:5631 blocked for more than 143 seconds. [ 326.973306][ T30] Tainted: G L syzkaller #0 [ 327.097536][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.208918][ T30] task:kworker/0:3 state:D stack:20704 pid:5631 tgid:5631 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 327.286010][ T30] Workqueue: usb_hub_wq hub_event [ 327.337171][ T30] Call Trace: [ 327.375322][ T30] [ 327.440036][ T30] __schedule+0x1821/0x5740 [ 327.498214][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.502763][ T30] ? irqentry_exit+0x218/0x760 [ 327.527202][ T30] ? __pfx___schedule+0x10/0x10 [ 327.558414][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.781514][ T30] ? schedule+0x90/0x360 [ 327.809962][ T30] schedule+0x164/0x360 [ 327.857884][ T30] schedule_timeout+0xc3/0x2c0 [ 327.862936][ T30] ? irqentry_exit+0x218/0x760 [ 327.914668][ T30] ? trace_irq_disable+0x3b/0x140 [ 327.926245][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 327.972763][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 328.003590][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.233882][ T30] ? preempt_schedule_common+0x82/0xd0 [ 328.912679][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 328.928127][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.964220][ T30] ? wait_for_completion+0x274/0x5e0 [ 328.987538][ T30] wait_for_completion+0x2cc/0x5e0 [ 329.018521][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 329.031157][ T30] i2c_del_adapter+0x5c0/0x790 [ 329.041628][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 329.053712][ T30] ? kfree+0x4d/0x640 [ 329.103525][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 329.132491][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 329.147031][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 329.175817][ T30] cxusb_probe+0x60f/0x710 [ 329.207440][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 329.222521][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 329.233928][ T30] usb_probe_interface+0x659/0xc70 [ 329.245242][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 329.333231][ T30] really_probe+0x267/0xaf0 [ 329.403823][ T30] __driver_probe_device+0x1ef/0x380 [ 329.416082][ T30] driver_probe_device+0x4f/0x240 [ 329.436935][ T30] __device_attach_driver+0x279/0x430 [ 329.455810][ T30] bus_for_each_drv+0x258/0x2f0 [ 329.492658][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 329.607095][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 329.622133][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 329.631615][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 329.643801][ T30] __device_attach+0x2c5/0x450 [ 329.653887][ T30] ? __pfx___device_attach+0x10/0x10 [ 329.706746][ T30] ? _raw_spin_unlock+0x28/0x50 [ 329.718488][ T30] device_initial_probe+0xa1/0xd0 [ 329.733914][ T30] bus_probe_device+0x12a/0x220 [ 329.739029][ T30] device_add+0x7e9/0xbb0 [ 329.748194][ T30] usb_set_configuration+0x1a87/0x2110 [ 329.867481][ T30] usb_generic_driver_probe+0x8d/0x150 [ 329.879652][ T30] usb_probe_device+0x1c4/0x3b0 [ 329.891822][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 329.962467][ T30] really_probe+0x267/0xaf0 [ 329.981892][ T30] __driver_probe_device+0x1ef/0x380 [ 330.007252][ T30] driver_probe_device+0x4f/0x240 [ 330.019357][ T30] __device_attach_driver+0x279/0x430 [ 330.053330][ T30] bus_for_each_drv+0x258/0x2f0 [ 330.064017][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 330.078083][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 330.267697][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 330.281311][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 330.341292][ T30] __device_attach+0x2c5/0x450 [ 330.357223][ T30] ? __pfx___device_attach+0x10/0x10 [ 330.393589][ T30] ? _raw_spin_unlock+0x28/0x50 [ 330.406258][ T30] device_initial_probe+0xa1/0xd0 [ 330.417634][ T30] bus_probe_device+0x12a/0x220 [ 330.456626][ T30] device_add+0x7e9/0xbb0 [ 330.465715][ T30] usb_new_device+0xa08/0x16f0 [ 330.478883][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 330.511615][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.520942][ T30] hub_event+0x2a1c/0x4f30 [ 330.529940][ T30] ? __pfx_hub_event+0x10/0x10 [ 330.562470][ T30] ? process_scheduled_works+0xa70/0x1860 [ 330.592536][ T30] ? process_scheduled_works+0xa70/0x1860 [ 330.608110][ T30] ? process_scheduled_works+0xa70/0x1860 [ 330.643252][ T30] process_scheduled_works+0xb5d/0x1860 [ 330.712414][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.726282][ T30] ? assign_work+0x3d5/0x5e0 [ 330.739897][ T30] worker_thread+0xa53/0xfc0 [ 330.753479][ T30] kthread+0x388/0x470 [ 330.781479][ T30] ? __pfx_worker_thread+0x10/0x10 [ 330.792747][ T30] ? __pfx_kthread+0x10/0x10 [ 330.803372][ T30] ret_from_fork+0x514/0xb70 [ 330.864388][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 330.900842][ T30] ? __switch_to+0xc79/0x1410 [ 330.961591][ T30] ? __pfx_kthread+0x10/0x10 [ 330.974431][ T30] ret_from_fork_asm+0x1a/0x30 [ 331.073424][ T30] [ 331.093000][ T30] [ 331.093000][ T30] Showing all locks held in the system: [ 331.127689][ T30] 2 locks held by kworker/u8:1/13: [ 331.313679][ T30] 1 lock held by rcu_exp_gp_kthr/18: [ 331.327301][ T30] 1 lock held by khungtaskd/30: [ 331.338913][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 331.407656][ T30] 2 locks held by getty/5382: [ 331.435638][ T30] #0: ffff8880326f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 331.505362][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 331.541472][ T30] 5 locks held by kworker/0:3/5631: [ 331.560554][ T30] #0: ffff888021a9bd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 331.595627][ T30] #1: ffffc90003ebfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 331.649353][ T30] #2: ffff888029ef51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 331.729155][ T30] #3: ffff88803382c1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 331.773991][ T30] #4: ffff88803382a1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 331.807604][ T30] 2 locks held by syz-executor/5649: [ 331.846213][ T30] 4 locks held by udevd/6180: [ 331.897135][ T30] #0: ffff88802ba343f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 331.935421][ T30] #1: ffff88805567bc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 331.955890][ T4994] udevd[4994]: worker [6180] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 332.106287][ T30] #2: ffff888033b982d8 (kn->active#24){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 332.159487][ T30] #3: ffff88803382c1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 332.227528][ T30] 1 lock held by syz.4.854/8866: [ 332.262505][ T30] #0: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 332.375469][ T30] [ 332.394229][ T30] ============================================= [ 332.394229][ T30] [ 332.504814][ T30] NMI backtrace for cpu 0 [ 332.504840][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 332.504869][ T30] Tainted: [L]=SOFTLOCKUP [ 332.504876][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.504889][ T30] Call Trace: [ 332.504897][ T30] [ 332.504907][ T30] dump_stack_lvl+0xe8/0x150 [ 332.504942][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 332.504967][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 332.504992][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 332.505018][ T30] sys_info+0x135/0x170 [ 332.505038][ T30] watchdog+0xfd3/0x1030 [ 332.505075][ T30] ? watchdog+0x1c9/0x1030 [ 332.505110][ T30] kthread+0x388/0x470 [ 332.505137][ T30] ? __pfx_watchdog+0x10/0x10 [ 332.505165][ T30] ? __pfx_kthread+0x10/0x10 [ 332.505193][ T30] ret_from_fork+0x514/0xb70 [ 332.505218][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 332.505240][ T30] ? __switch_to+0xc79/0x1410 [ 332.505272][ T30] ? __pfx_kthread+0x10/0x10 [ 332.505300][ T30] ret_from_fork_asm+0x1a/0x30 [ 332.505341][ T30] [ 332.505349][ T30] Sending NMI from CPU 0 to CPUs 1: [ 332.847285][ C1] NMI backtrace for cpu 1 [ 332.847315][ C1] CPU: 1 UID: 0 PID: 5653 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.847339][ C1] Tainted: [L]=SOFTLOCKUP [ 332.847346][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.847358][ C1] Workqueue: events_power_efficient gc_worker [ 332.847385][ C1] RIP: 0010:__lock_acquire+0x327/0x2cf0 [ 332.847407][ C1] Code: 0e 09 d6 8b 54 24 20 c1 e2 0f 0f b7 d2 09 f2 41 83 e5 03 41 c1 e5 10 41 09 d5 8b 54 24 10 83 e2 01 c1 e2 12 44 09 ea c1 e3 14 <09> d3 8b 14 24 c1 e2 13 41 c1 e4 15 41 09 d4 41 09 cc 41 09 dc 45 [ 332.847422][ C1] RSP: 0018:ffffc9000443f798 EFLAGS: 00000046 [ 332.847437][ C1] RAX: 000000000000000a RBX: 0000000000000000 RCX: 0000000000000007 [ 332.847448][ C1] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.847458][ C1] RBP: 0000000000000002 R08: ffffffff89cbca9d R09: ffffffff8e95cd60 [ 332.847471][ C1] R10: dffffc0000000000 R11: fffffbfff20616df R12: 0000000000000000 [ 332.847483][ C1] R13: 0000000000020000 R14: ffff8880298d1ec0 R15: ffff8880298d2a50 [ 332.847495][ C1] FS: 0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 332.847509][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.847521][ C1] CR2: 0000563fc19692e8 CR3: 0000000025eb4000 CR4: 00000000003526f0 [ 332.847537][ C1] Call Trace: [ 332.847543][ C1] [ 332.847558][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.847585][ C1] ? gc_worker+0x25d/0x1290 [ 332.847604][ C1] lock_acquire+0x106/0x350 [ 332.847624][ C1] ? gc_worker+0x25d/0x1290 [ 332.847656][ C1] gc_worker+0x281/0x1290 [ 332.847677][ C1] ? gc_worker+0x25d/0x1290 [ 332.847701][ C1] ? gc_worker+0x25d/0x1290 [ 332.847722][ C1] ? __pfx_gc_worker+0x10/0x10 [ 332.847744][ C1] ? process_scheduled_works+0xa70/0x1860 [ 332.847761][ C1] ? process_scheduled_works+0xa70/0x1860 [ 332.847780][ C1] process_scheduled_works+0xb5d/0x1860 [ 332.847812][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.847835][ C1] ? assign_work+0x3d5/0x5e0 [ 332.847856][ C1] worker_thread+0xa53/0xfc0 [ 332.847887][ C1] kthread+0x388/0x470 [ 332.847911][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.847929][ C1] ? __pfx_kthread+0x10/0x10 [ 332.847955][ C1] ret_from_fork+0x514/0xb70 [ 332.847976][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 332.847994][ C1] ? __switch_to+0xc79/0x1410 [ 332.848023][ C1] ? __pfx_kthread+0x10/0x10 [ 332.848047][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.848079][ C1] [ 333.571557][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 333.578506][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 333.589221][ T30] Tainted: [L]=SOFTLOCKUP [ 333.593580][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.603675][ T30] Call Trace: [ 333.606991][ T30] [ 333.609964][ T30] vpanic+0x56c/0xa60 [ 333.613993][ T30] ? __pfx___schedule+0x10/0x10 [ 333.618886][ T30] ? __pfx_vpanic+0x10/0x10 [ 333.623455][ T30] panic+0xc5/0xd0 [ 333.627224][ T30] ? __pfx_panic+0x10/0x10 [ 333.631686][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 333.637117][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 333.643317][ T30] watchdog+0x102c/0x1030 [ 333.647709][ T30] ? watchdog+0x1c9/0x1030 [ 333.652171][ T30] kthread+0x388/0x470 [ 333.656289][ T30] ? __pfx_watchdog+0x10/0x10 [ 333.661013][ T30] ? __pfx_kthread+0x10/0x10 [ 333.665650][ T30] ret_from_fork+0x514/0xb70 [ 333.670296][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 333.675462][ T30] ? __switch_to+0xc79/0x1410 [ 333.680186][ T30] ? __pfx_kthread+0x10/0x10 [ 333.684832][ T30] ret_from_fork_asm+0x1a/0x30 [ 333.689658][ T30] [ 333.693314][ T30] Kernel Offset: disabled [ 333.697648][ T30] Rebooting in 86400 seconds..