last executing test programs: 7.828741039s ago: executing program 2 (id=3749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0x44, 0x4, 0x4bc, 0xffffffff, 0x160, 0x160, 0x32c, 0xffffffff, 0xffffffff, 0x3f4, 0x3f4, 0x3f4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7b}}, [0xffffff00, 0xff, 0x68010000, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0x7e5debfdf7c2f28d], 'nr0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x3a, 0xf, 0x0, 0x4}, 0x203, 0x12c, 0x160, 0x8502, {}, [@common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0xff000000, 0xff000000, 0xffffffff], 0x0, 0x0, {0x2}}}, @common=@hbh={{0x48}, {0x5, 0x2, 0x1, [0x8007, 0xfffd, 0x8000, 0x9f, 0x8200, 0xb4f3, 0xffff, 0x6, 0x41, 0x7, 0xfffc, 0x6, 0x8, 0x1, 0x8, 0xd], 0x11}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x3, 0x3}, {0xffffffffffffffff, 0x3, 0x4}, {0x1, 0x4, 0x1dcf681b167b0536}, 0x5, 0x7fffffff}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0x0, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x89, 0x5, 0x4, 0x20}, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x200000, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x518) 7.68283727s ago: executing program 2 (id=3750): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) lsm_set_self_attr(0x0, &(0x7f0000001a80)={0x0, 0x0, 0x20}, 0x20, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r5 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r5}) fcntl$notify(r1, 0x402, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r6, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) fsopen(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.037328077s ago: executing program 3 (id=3751): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 6.70553806s ago: executing program 2 (id=3753): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) (fail_nth: 1) 6.533545915s ago: executing program 3 (id=3755): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x5, 0x0}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r5, 0x4d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x24, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @map_fd={0x18, 0x6}, @exit, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0xbc, &(0x7f0000000740)=""/188, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000800)=[0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x3, 0x5, 0xe, 0x2}, {0x4, 0x3, 0x10, 0x3}, {0x1, 0x1, 0xd}, {0x5, 0x3, 0x1, 0x8}, {0xf, 0x2, 0xf, 0x3}, {0x3, 0x3, 0x10}, {0x1, 0x1, 0xd, 0x5}, {0x4, 0x2, 0xe, 0x5}, {0x3, 0x1, 0x9, 0xa}, {0x0, 0x4, 0x6, 0xb}]}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x40901, 0x8) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0x118) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x26, 0x354d23c5f63ca71, r6, @void, @void, @void, @value=r4}, 0x20) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0x1f3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x10000, 0x10000, 0x2, r0, 0x8}) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 6.075237794s ago: executing program 2 (id=3756): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x67) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x200000000000000, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.599122972s ago: executing program 0 (id=3762): setns(0xffffffffffffffff, 0x80) 5.403012396s ago: executing program 0 (id=3763): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000015c0)) setns(r0, 0x80) 5.268067096s ago: executing program 0 (id=3765): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) 4.636763974s ago: executing program 4 (id=3767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x6, 0xffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x2, 0x3, 0x8}) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x0, 0x2, 0x5, 0x5}) close(0x3) 4.516983485s ago: executing program 4 (id=3768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0x14, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000600850000008600000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40080) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) set_tid_address(0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) pread64(r9, &(0x7f0000002840)=""/4096, 0x1000, 0x4) recvmsg(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}, 0x20) 4.39621565s ago: executing program 3 (id=3769): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00', @ANYBLOB="54463655eb140f52db58801b9e00db69577a894fca0c0be1a27c", @ANYRES64=0x0], 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x2}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c00c3"], 0x2c}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r8, r7, &(0x7f00000001c0)=0x1, 0x8) 4.226779485s ago: executing program 2 (id=3770): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000005c0)={'bridge0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) mmap(&(0x7f00001f5000/0x11000)=nil, 0x11000, 0x1000004, 0x11, r6, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x1, &(0x7f0000000040)='a') r8 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r9 = openat$vcsa(0xffffff9c, &(0x7f0000000440), 0xe100, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)) dup(r10) syz_usb_control_io$rtl8150(r8, &(0x7f0000000280)={0xc, &(0x7f00000000c0)={0x0, 0x10, 0xd6, {0xd6, 0x5, "9683f36ac11022d96ac21ec3612bb24d5937455db759dd79f0d013d4f5a29be5d185ace5485c708a718493e2a864b8cb76341ad3a6517c2a3a8b5c83d4825e92450d02efcd4389a5a77daf2070de57b41aea7ae697dd9b5e48cd4a2089324094a96ec12da204aaf72a386fded18b8cfb07524085c9b0b6dec87326b97cb5d9d2de98e13bc19bd0e6ef8e1a2ccc4f8be235cf3098ec1928672e6792241e608c1ec15b5af78335bec1bfc4d8c9520807c227feada57e81c3becebd294f43d4eb4d75df392aabc9a022a5e886de7424a62c7c350f17"}}, &(0x7f00000001c0)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "50773994d22fb03da79b1cc57cbec30f222f717eabb767b3c1f83f94897df618f8440666ec2c9fdb868f14a3ac98d736e6dcdcbac9aa20715feab89e04357708ce9852f1166ad70850a684f3abe8366df7d8d7b642d4c9e9b39e59865b0e7186464056d5f72f44ce01ee40d63215f002aac198fc3b80cd94e87fef53e40423eb41300f6e63c1c45970c2"}}}, &(0x7f0000000480)={0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="203047000000ddde8c1621ca49fb5eb829b82ea7187c57690e70cb5a062de38bdd1cf124defb406652d96ee4c82eb39b18693948afe6255c95503bfc25d6d8c07c47e686a56963c0ddde8f7979bbdbd41b29ff2c89d5adb573dc273194b1e23a0a00000000000000406c89051b7a368cf0ca569d103f8100c54fc53d41f79a157a328ef996d82f4a5da8c4e39d94c01f01bd8a7760b715e24eee7cf393a70fde7f21747289b5d805fca5e5df1fc0d7d9a801579042bc32ec856f99843af34b16917ab0ae8f69"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0xc0, 0x5, 0x2, "d563"}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000005baf1c46e8"]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r12, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="b8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.112883588s ago: executing program 4 (id=3771): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r0, &(0x7f0000000040)=0x800000000001e8, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) mbind(&(0x7f00003a1000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x17b12000, 0x1) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 3.818849453s ago: executing program 4 (id=3773): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xe}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7fd}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xc000, 0xa, 0xb, 0x9, r7}, &(0x7f0000000340)=0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r8, 0x0, 0x0, 0x8, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 3.757198716s ago: executing program 0 (id=3774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d001607000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.621550925s ago: executing program 3 (id=3776): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e24, 0xbf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000080)=0x7ff, 0x4) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000006a00030025bd7000fcdbdf25000000000100000000000900"], 0x1c}}, 0x4040000) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x10001) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r6, &(0x7f0000000000)=@known='system.posix_acl_default\x00') mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d46c9a6fe451c9a81602b6bb56f48c833fc34cce0580603cfccda9007ddf789d77d907a3aaa879e941c3f8e879d4ef71262ac655254ae", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.350650152s ago: executing program 3 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) syz_open_procfs$pagemap(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4240, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2ccd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) shutdown(r3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e20, 0x2, @loopback, 0x7}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c94c0b42a21d7214bf92594925208a0e2f964e654dc534a63207008cfcf19b49f3ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r3, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000000, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) fstatfs(r7, &(0x7f0000000140)=""/83) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc058560f, &(0x7f0000000180)={0x218, 0xa}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x884) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xea}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x18) 1.229079274s ago: executing program 1 (id=3778): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0xd51f, {"771c2e01f8ffffffffffee00", "0009000000000002000000000000000a"}, 0x7, 0x4}) 1.221939155s ago: executing program 0 (id=3779): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) 1.041248203s ago: executing program 4 (id=3780): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x5, 0x0}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r5, 0x4d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x24, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @map_fd={0x18, 0x6}, @exit, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0xbc, &(0x7f0000000740)=""/188, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000800)=[0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x3, 0x5, 0xe, 0x2}, {0x4, 0x3, 0x10, 0x3}, {0x1, 0x1, 0xd}, {0x5, 0x3, 0x1, 0x8}, {0xf, 0x2, 0xf, 0x3}, {0x3, 0x3, 0x10}, {0x1, 0x1, 0xd, 0x5}, {0x4, 0x2, 0xe, 0x5}, {0x3, 0x1, 0x9, 0xa}, {0x0, 0x4, 0x6, 0xb}]}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x40901, 0x8) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0x118) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x26, 0x354d23c5f63ca71, r6, @void, @void, @void, @value=r4}, 0x20) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0x1f3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x10000, 0x10000, 0x2, r0, 0x8}) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 878.851676ms ago: executing program 1 (id=3781): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) close(0x3) 813.070235ms ago: executing program 0 (id=3782): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = openat$ppp(0xffffff9c, &(0x7f0000000040), 0x2d44c2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_clone(0xc080200, &(0x7f0000000180)="3b6bac9f53490acbced7d94f1c6361ef888a4ca6c07a967b70df6f239cc9f6b44b478bc7a81fb95626c39d", 0x2b, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="e518720effc1a0bb83e712b4e632baf6f73c880c0bf80604e1ab90eab4c6238b61f6a3465aeb08d35acd7bc4e4535799b0883e6a12a90bd92a28cf7580412705edeea494c8237c7485fa7b9669a12e875216d86d34cf96b35480ebe7ab3540c027588d837e9e640d10697ccf1c81417f477373fb79107e33b8c5b8c3c69d4081a5982e59f1a32620a8fb29a7e35681e6d365725dbac4ba84bf16b31a8e7841b3a8c60bd404772ad8a670a2d1b72f237e119a185730c853953ecc745a13c2e5e4e7b5a0ee33a93bbec73b8700e8d9bafa98384436cdb4e51f3c17") r3 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000480)={0xffffffffffffffff, r1, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd9', @ANYRESHEX=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002140)={0x50, 0x0, r7, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r6, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) write$FUSE_INTERRUPT(r6, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r8}, 0x10) syz_fuse_handle_req(r6, &(0x7f0000004940)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0xffffffffffffff98}, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x6, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x5e6}}}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 707.404341ms ago: executing program 1 (id=3783): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r0, &(0x7f0000000040)=0x800000000001e8, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) mbind(&(0x7f00003a1000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x17b12000, 0x1) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 608.791589ms ago: executing program 3 (id=3784): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x93, "da18de000015a8fef6fbaf7649d041b5adfac29308080de77f0f7124f6b914c08bd9a50688a9cf7b95dba6f0ea4d3b2e2dfc3cbdd309178967e8d75d4ccbf569898732f4972c2baf19fd555c989629b6f6867b43ef033ca86cbfdaa8b8ff0eed78cdcf54d5a88f719d7476223f1cd4b8e087edcf4a025f1c54d84f04ccd930a402b7f519df86e16be0f37af315fe09d93405f6"}, 0x0, 0x0, 0x0, 0x0}) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x93, "da18de000015a8fef6fbaf7649d041b5adfac29308080de77f0f7124f6b914c08bd9a50688a9cf7b95dba6f0ea4d3b2e2dfc3cbdd309178967e8d75d4ccbf569898732f4972c2baf19fd555c989629b6f6867b43ef033ca86cbfdaa8b8ff0eed78cdcf54d5a88f719d7476223f1cd4b8e087edcf4a025f1c54d84f04ccd930a402b7f519df86e16be0f37af315fe09d93405f6"}, 0x0, 0x0, 0x0, 0x0}) (async) 531.398548ms ago: executing program 1 (id=3785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001"], 0xdc}}, 0x0) 530.211467ms ago: executing program 2 (id=3786): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00', @ANYBLOB="54463655eb140f52db58801b9e00db69577a894fca0c0be1a27c", @ANYRES64=0x0], 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x2}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c00c3"], 0x2c}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r8, r7, &(0x7f00000001c0)=0x1, 0x8) 452.750363ms ago: executing program 1 (id=3787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0x14, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000600850000008600000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40080) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) set_tid_address(0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) pread64(r9, &(0x7f0000002840)=""/4096, 0x1000, 0x4) recvmsg(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}, 0x20) 316.16118ms ago: executing program 1 (id=3788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0xff80, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 4 (id=3789): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e, 0x20}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): d notification: 0 [ 681.502849][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.508840][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.514866][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.521449][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.527438][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.533406][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.539389][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.545354][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.551325][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.557277][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.563227][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.569212][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.575260][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.581215][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.587213][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.593222][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.599214][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.605198][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.611168][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.617146][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.623639][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.629650][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.635669][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.641669][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.647737][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.653761][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.659811][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.665834][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.671853][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.677879][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.683902][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.689953][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.695982][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.701985][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.708022][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.714132][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.717152][T17084] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3325'. [ 681.720139][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.735422][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.741631][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.747668][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.753695][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.759726][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.765769][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.771800][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.777843][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.783879][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.789907][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.795935][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.801971][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.807988][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.814181][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.821311][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.827696][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.833707][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.839688][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 681.861884][T17084] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3325'. [ 681.929172][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.968713][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.999447][T13070] usb 1-1: USB disconnect, device number 117 [ 682.037955][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.061194][ T30] audit: type=1326 audit(1779530066.043:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.1.3325" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 682.097364][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.116273][ T30] audit: type=1326 audit(1779530066.043:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.1.3325" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 682.146163][ T30] audit: type=1326 audit(1779530066.043:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.1.3325" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 682.172832][ T30] audit: type=1326 audit(1779530066.043:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.1.3325" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 682.271422][ T30] audit: type=1326 audit(1779530066.043:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.1.3325" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 682.397885][ T30] audit: type=1326 audit(1779530066.043:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.1.3325" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 682.466050][ T30] audit: type=1326 audit(1779530066.043:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.1.3325" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x7ffc0000 [ 682.662400][ T89] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.040249][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 683.106400][ T89] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.303693][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.322815][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.333514][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.345350][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.356285][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.643426][T17125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3337'. [ 683.673225][ T89] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.710419][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 683.776163][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 684.004133][ T89] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.461366][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 684.615717][T17141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3341'. [ 684.830891][T17149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.862821][T17149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.907304][T17149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.949942][T17149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.345664][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.391594][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.414090][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 685.415963][ T89] bond0 (unregistering): Released all slaves [ 685.423335][ T5631] Bluetooth: hci3: command tx timeout [ 685.541089][ T89] bond1 (unregistering): Released all slaves [ 685.658638][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.666225][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.854673][T17161] dummy0: entered allmulticast mode [ 685.913246][T17171] FAULT_INJECTION: forcing a failure. [ 685.913246][T17171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.957640][T17171] CPU: 1 UID: 0 PID: 17171 Comm: syz.1.3347 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.957669][T17171] Tainted: [L]=SOFTLOCKUP [ 685.957676][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.957691][T17171] Call Trace: [ 685.957698][T17171] [ 685.957707][T17171] dump_stack_lvl+0xe8/0x150 [ 685.957736][T17171] should_fail_ex+0x412/0x560 [ 685.957766][T17171] _copy_to_user+0x31/0xb0 [ 685.957795][T17171] simple_read_from_buffer+0xe1/0x170 [ 685.957824][T17171] proc_fail_nth_read+0x1bb/0x230 [ 685.957852][T17171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 685.957877][T17171] ? rw_verify_area+0x2a6/0x4d0 [ 685.957901][T17171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 685.957923][T17171] vfs_read+0x20c/0xa70 [ 685.957949][T17171] ? __pfx___mutex_lock+0x10/0x10 [ 685.957967][T17171] ? __pfx_vfs_read+0x10/0x10 [ 685.957992][T17171] ? __fget_files+0x2a/0x420 [ 685.958024][T17171] ? __fget_files+0x3a0/0x420 [ 685.958045][T17171] ? __fget_files+0x2a/0x420 [ 685.958076][T17171] ksys_read+0x150/0x270 [ 685.958105][T17171] ? __pfx_ksys_read+0x10/0x10 [ 685.958135][T17171] ? asm_int80_emulation+0x1a/0x20 [ 685.958160][T17171] do_int80_emulation+0x181/0x530 [ 685.958179][T17171] ? trace_irq_disable+0x3b/0x140 [ 685.958205][T17171] ? asm_int80_emulation+0x1a/0x20 [ 685.958222][T17171] ? clear_bhb_loop+0x40/0x90 [ 685.958239][T17171] ? clear_bhb_loop+0x40/0x90 [ 685.958259][T17171] asm_int80_emulation+0x1a/0x20 [ 685.958277][T17171] RIP: 0023:0xf71f61ab [ 685.958295][T17171] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 685.958309][T17171] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 685.958327][T17171] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54ad5d0 [ 685.958339][T17171] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 685.958350][T17171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 685.958360][T17171] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 685.958370][T17171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 685.958395][T17171] [ 686.728349][T17118] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.753439][T17118] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.781285][T17118] bridge_slave_0: entered allmulticast mode [ 686.829616][T17118] bridge_slave_0: entered promiscuous mode [ 686.852910][T17118] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.901455][T17118] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.925252][T17118] bridge_slave_1: entered allmulticast mode [ 686.965377][T17118] bridge_slave_1: entered promiscuous mode [ 687.091547][T17201] loop5: detected capacity change from 0 to 7 [ 687.102423][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.151788][T17201] Dev loop5: unable to read RDB block 7 [ 687.165250][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.196643][T17201] loop5: unable to read partition table [ 687.226428][T17201] loop5: partition table beyond EOD, truncated [ 687.233109][T17201] loop_reread_partitions: partition scan of loop5 (þ被– Œ) failed (rc=-5) [ 687.399477][T17118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.463306][ T89] hsr_slave_0: left promiscuous mode [ 687.470698][ T89] hsr_slave_1: left promiscuous mode [ 687.480334][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.488387][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.496073][ T5631] Bluetooth: hci3: command tx timeout [ 687.510073][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.519943][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.565097][ T89] veth1_macvtap: left promiscuous mode [ 687.576590][ T89] veth0_macvtap: left promiscuous mode [ 687.591313][ T89] veth1_vlan: left promiscuous mode [ 687.604104][ T89] veth0_vlan: left promiscuous mode [ 687.674897][T13070] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 687.834099][ T89] team0 (unregistering): Port device vlan0 removed [ 687.844536][T13070] usb 2-1: Using ep0 maxpacket: 16 [ 687.858909][T13070] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 687.882796][T13070] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 687.896767][T13070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.927633][T13070] usb 2-1: Product: syz [ 687.939124][T13070] usb 2-1: Manufacturer: syz [ 687.948913][T13070] usb 2-1: SerialNumber: syz [ 687.966819][T13070] r8152-cfgselector 2-1: Unknown version 0x0000 [ 687.979951][T13070] r8152-cfgselector 2-1: config 0 descriptor?? [ 688.069544][T17229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.080783][T17229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.114246][T17229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.128951][ T89] team0 (unregistering): Port device team_slave_1 removed [ 688.138626][T17229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.162647][ T89] team0 (unregistering): Port device team_slave_0 removed [ 688.352576][T17118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.372620][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 688.431666][T17118] team0: Port device team_slave_0 added [ 688.441048][T17118] team0: Port device team_slave_1 added [ 688.507415][T17118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.514555][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.541184][T17118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.553762][T17118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.561817][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.589414][T17118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.662284][T17118] hsr_slave_0: entered promiscuous mode [ 688.668932][T17118] hsr_slave_1: entered promiscuous mode [ 688.675417][T17118] debugfs: 'hsr0' already exists in 'hsr' [ 688.681185][T17118] Cannot create hsr debugfs directory [ 688.988559][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 689.065645][T17248] hsr_slave_0: left promiscuous mode [ 689.077491][T17248] hsr_slave_1: left promiscuous mode [ 689.218665][T17259] syzkaller1: entered promiscuous mode [ 689.251195][T17259] syzkaller1: entered allmulticast mode [ 689.300333][T17262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.329002][T17262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.497960][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 689.534206][T17270] kAFS: unable to lookup cell 'ÿ' [ 689.587567][ T5631] Bluetooth: hci3: command tx timeout [ 689.725407][ T30] audit: type=1326 audit(1779530073.713:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.2.3363" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f5601c code=0x0 [ 689.786003][T17277] loop5: detected capacity change from 0 to 7 [ 689.808120][T17277] loop5: [ 689.817416][T17277] loop5: partition table partially beyond EOD, truncated [ 689.826733][T17274] netlink: 'syz.2.3363': attribute type 4 has an invalid length. [ 689.911827][T17274] netlink: 'syz.2.3363': attribute type 4 has an invalid length. [ 689.943987][T17278] netlink: 'syz.2.3363': attribute type 4 has an invalid length. [ 690.205616][ T5700] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 690.389893][ T5700] usb 1-1: not running at top speed; connect to a high speed hub [ 690.418025][ T5700] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 690.468755][ T5700] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24 [ 690.487156][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.520791][ T5700] usb 1-1: Product: syz [ 690.531713][ T5700] usb 1-1: Manufacturer: syz [ 690.548836][ T5700] usb 1-1: SerialNumber: syz [ 690.568962][ T5728] r8152-cfgselector 2-1: USB disconnect, device number 81 [ 690.654704][T13071] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 690.755070][T17118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 690.769560][T17118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.793275][ T5700] qmi_wwan 1-1:6.0: invalid descriptor buffer length [ 690.804460][T17118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 690.820108][ T5700] qmi_wwan 1-1:6.0: probe with driver qmi_wwan failed with error -22 [ 690.861104][T17118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.877094][ T5700] usb 1-1: USB disconnect, device number 118 [ 690.886543][T17118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 690.932273][T17118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.978148][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3368'. [ 691.011350][T17118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 691.056194][T17118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.384272][T17118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.498904][T17118] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.561130][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.568300][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.655012][ T5631] Bluetooth: hci3: command tx timeout [ 691.670676][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.677902][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.689139][T17319] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3372'. [ 691.707006][T17315] syzkaller0: entered promiscuous mode [ 691.715144][T17315] syzkaller0: entered allmulticast mode [ 691.774484][ T5700] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 691.924459][ T5700] usb 1-1: device descriptor read/64, error -71 [ 691.940039][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 692.048231][T17118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.139376][T17118] veth0_vlan: entered promiscuous mode [ 692.159676][T17118] veth1_vlan: entered promiscuous mode [ 692.169289][ T5700] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 692.260876][T17118] veth0_macvtap: entered promiscuous mode [ 692.282894][T17118] veth1_macvtap: entered promiscuous mode [ 692.315430][ T5700] usb 1-1: device descriptor read/64, error -71 [ 692.326059][T17118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.362938][T17118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.403701][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.423860][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.435951][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.455397][ T5700] usb usb1-port1: attempt power cycle [ 692.474813][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.673190][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.693044][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.741443][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.750891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.835207][ T5700] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 692.875442][ T5700] usb 1-1: device descriptor read/8, error -71 [ 693.134849][ T5700] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 693.165081][ T5700] usb 1-1: device descriptor read/8, error -71 [ 693.284934][ T5700] usb usb1-port1: unable to enumerate USB device [ 693.329334][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3379'. [ 693.365070][T17362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.382119][T17362] bond1: entered promiscuous mode [ 693.392986][T17362] bond1: entered allmulticast mode [ 693.408551][T17362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.419487][T17362] team0: Port device bond1 added [ 693.444077][T17362] bond1: (slave vcan1): refused to change device type [ 693.504432][ T7142] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 693.628400][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3381'. [ 693.664414][ T7142] usb 4-1: Using ep0 maxpacket: 16 [ 693.673781][T17371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.683129][ T7142] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 693.696339][ T7142] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 693.709633][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3381'. [ 693.718720][ T7142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.727501][ T7142] usb 4-1: Product: syz [ 693.732371][ T7142] usb 4-1: Manufacturer: syz [ 693.742471][ T7142] usb 4-1: SerialNumber: syz [ 693.764610][ T7142] r8152-cfgselector 4-1: Unknown version 0x0000 [ 693.775328][ T7142] r8152-cfgselector 4-1: config 0 descriptor?? [ 693.791406][T17371] bond1 (unregistering): Released all slaves [ 694.061499][T17378] veth1: entered promiscuous mode [ 694.069358][T17378] macsec1: entered promiscuous mode [ 694.075409][T17378] macsec1: entered allmulticast mode [ 694.080979][T17378] veth1: entered allmulticast mode [ 694.098009][T17378] veth1: left allmulticast mode [ 694.103330][T17378] veth1: left promiscuous mode [ 694.587018][T17391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'. [ 694.794136][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3390'. [ 694.811466][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3390'. [ 694.915804][T17403] FAULT_INJECTION: forcing a failure. [ 694.915804][T17403] name failslab, interval 1, probability 0, space 0, times 0 [ 694.943453][T17403] CPU: 0 UID: 0 PID: 17403 Comm: syz.4.3391 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.943487][T17403] Tainted: [L]=SOFTLOCKUP [ 694.943494][T17403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.943506][T17403] Call Trace: [ 694.943515][T17403] [ 694.943524][T17403] dump_stack_lvl+0xe8/0x150 [ 694.943542][T17403] should_fail_ex+0x412/0x560 [ 694.943560][T17403] should_failslab+0xa8/0x100 [ 694.943577][T17403] ? skb_clone+0x212/0x3a0 [ 694.943587][T17403] kmem_cache_alloc_noprof+0x87/0x650 [ 694.943605][T17403] skb_clone+0x212/0x3a0 [ 694.943617][T17403] __netlink_deliver_tap+0x404/0x850 [ 694.943638][T17403] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.943653][T17403] netlink_deliver_tap+0x19c/0x1b0 [ 694.943668][T17403] netlink_sendskb+0x68/0x140 [ 694.943683][T17403] netlink_rcv_skb+0x2b6/0x4b0 [ 694.943697][T17403] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 694.943712][T17403] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 694.943732][T17403] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.943746][T17403] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.943762][T17403] netlink_unicast+0x75c/0x8e0 [ 694.943780][T17403] netlink_sendmsg+0x813/0xb40 [ 694.943799][T17403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.943816][T17403] ? aa_sock_msg_perm+0xf1/0x1b0 [ 694.943833][T17403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.943850][T17403] ____sys_sendmsg+0x972/0x9f0 [ 694.943870][T17403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.943887][T17403] ? kstrtoull+0x12f/0x1d0 [ 694.943903][T17403] ___sys_sendmsg+0x2a5/0x360 [ 694.943917][T17403] ? __lock_acquire+0x6b5/0x2cf0 [ 694.943931][T17403] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.943946][T17403] ? get_pid_task+0x20/0x1f0 [ 694.943959][T17403] ? get_pid_task+0x20/0x1f0 [ 694.943970][T17403] ? get_pid_task+0x20/0x1f0 [ 694.943996][T17403] ? __fget_files+0x2a/0x420 [ 694.944007][T17403] ? __fget_files+0x3a0/0x420 [ 694.944024][T17403] __sys_sendmsg+0x183/0x260 [ 694.944044][T17403] ? __pfx___sys_sendmsg+0x10/0x10 [ 694.944096][T17403] __do_fast_syscall_32+0x229/0x6e0 [ 694.944115][T17403] ? do_fast_syscall_32+0x33/0x70 [ 694.944132][T17403] ? lockdep_hardirqs_on+0x7a/0x110 [ 694.944158][T17403] ? asm_int80_emulation+0x1a/0x20 [ 694.944168][T17403] ? do_int80_emulation+0x286/0x530 [ 694.944177][T17403] ? trace_irq_disable+0x3b/0x140 [ 694.944194][T17403] do_fast_syscall_32+0x33/0x70 [ 694.944204][T17403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 694.944217][T17403] RIP: 0023:0xf6fcf01c [ 694.944228][T17403] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 694.944236][T17403] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 694.944248][T17403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 694.944256][T17403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.944262][T17403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 694.944268][T17403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 694.944274][T17403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.944291][T17403] [ 694.996580][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880598ea000: rx timeout, send abort [ 695.262256][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880598ea000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 695.315741][T17404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.350247][T17404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.472676][T17406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.489665][T17406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.508308][T17406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.519246][T17406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.639419][T17411] FAULT_INJECTION: forcing a failure. [ 695.639419][T17411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.665840][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 695.675627][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.2.3394 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.675658][T17411] Tainted: [L]=SOFTLOCKUP [ 695.675666][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.675676][T17411] Call Trace: [ 695.675682][T17411] [ 695.675690][T17411] dump_stack_lvl+0xe8/0x150 [ 695.675707][T17411] should_fail_ex+0x412/0x560 [ 695.675727][T17411] _copy_from_user+0x2d/0xb0 [ 695.675744][T17411] input_event_from_user+0x100/0x290 [ 695.675757][T17411] ? __pfx_input_event_from_user+0x10/0x10 [ 695.675774][T17411] evdev_write+0x2c7/0x4c0 [ 695.675784][T17411] ? __lock_acquire+0x6b5/0x2cf0 [ 695.675798][T17411] ? __pfx_evdev_write+0x10/0x10 [ 695.675809][T17411] ? bpf_lsm_file_permission+0x9/0x20 [ 695.675824][T17411] ? security_file_permission+0x75/0x260 [ 695.675836][T17411] ? rw_verify_area+0x255/0x4d0 [ 695.675851][T17411] ? __pfx_evdev_write+0x10/0x10 [ 695.675862][T17411] vfs_write+0x29a/0xb90 [ 695.675880][T17411] ? __pfx_vfs_write+0x10/0x10 [ 695.675895][T17411] ? __fget_files+0x2a/0x420 [ 695.675909][T17411] ? __fget_files+0x2a/0x420 [ 695.675920][T17411] ? __fget_files+0x3a0/0x420 [ 695.675931][T17411] ? __fget_files+0x2a/0x420 [ 695.675947][T17411] ksys_write+0x150/0x270 [ 695.675962][T17411] ? __pfx_ksys_write+0x10/0x10 [ 695.675987][T17411] __do_fast_syscall_32+0x229/0x6e0 [ 695.675999][T17411] ? do_fast_syscall_32+0x33/0x70 [ 695.676008][T17411] ? lockdep_hardirqs_on+0x7a/0x110 [ 695.676022][T17411] ? asm_int80_emulation+0x1a/0x20 [ 695.676032][T17411] ? do_int80_emulation+0x286/0x530 [ 695.676041][T17411] ? trace_irq_disable+0x3b/0x140 [ 695.676058][T17411] do_fast_syscall_32+0x33/0x70 [ 695.676069][T17411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 695.676081][T17411] RIP: 0023:0xf7f5601c [ 695.676092][T17411] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 695.676101][T17411] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 695.676113][T17411] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 695.676120][T17411] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.676127][T17411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 695.676135][T17411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 695.676141][T17411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.676156][T17411] [ 696.166366][T17420] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3398'. [ 696.181477][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 696.463701][ T5728] r8152-cfgselector 4-1: USB disconnect, device number 119 [ 696.554588][T13074] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 696.724441][T13074] usb 3-1: Using ep0 maxpacket: 8 [ 696.747964][T13074] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 696.771706][T13074] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.811717][T13074] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.848625][T13074] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.882394][T13074] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.915141][T13074] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 696.924692][T13074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.093738][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3404'. [ 697.097065][T17441] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3405'. [ 697.115962][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3404'. [ 697.644486][T13069] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 697.819528][T13069] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.842964][T13069] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.857693][T13069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.866796][T13069] usb 2-1: Product: syz [ 697.871178][T13069] usb 2-1: Manufacturer: syz [ 697.877671][T13069] usb 2-1: SerialNumber: syz [ 698.013005][T17464] program syz.4.3414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.034450][T13074] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 698.100127][T17446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.127169][T17446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.151380][T17446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.179354][T17446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.187811][T17470] loop2: detected capacity change from 0 to 7 [ 698.194099][T17467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.204905][T13074] usb 1-1: Using ep0 maxpacket: 16 [ 698.207276][T17470] loop2: [ 698.213663][T17467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.216311][T13074] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 698.235571][T17470] loop2: partition table partially beyond EOD, truncated [ 698.252590][T13074] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 698.264435][T13074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.275954][T13074] usb 1-1: Product: syz [ 698.281789][T13074] usb 1-1: Manufacturer: syz [ 698.323246][T13074] usb 1-1: SerialNumber: syz [ 698.337012][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.364164][T17476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.372481][T17446] input: syz0 as /devices/virtual/input/input193 [ 698.376720][T13074] r8152-cfgselector 1-1: Unknown version 0x0000 [ 698.392183][T13074] r8152-cfgselector 1-1: config 0 descriptor?? [ 698.401872][T17476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.413468][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.434593][T17476] tipc: Can't bind to reserved service type 2 [ 698.503993][T13069] cdc_ether 2-1:1.0: skipping garbage [ 698.532117][T13069] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 698.556201][T13069] usb 2-1: USB disconnect, device number 82 [ 698.954543][T13074] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 699.124726][T13074] usb 4-1: Using ep0 maxpacket: 16 [ 699.127657][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 699.147082][T13074] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 699.176916][T13074] usb 4-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.40 [ 699.195497][T13074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.208721][T13074] usb 4-1: Product: æšÉ”뽢譺鈋é³ê¸¦êº‹ë…‡í„¹ì‰âžŸä¦¸å­¨å²¾á˜„兽躓녯뫴┦ਬɟ衳ꋶ渟 [ 699.227058][T13074] usb 4-1: Manufacturer: ዬ㔢å«ì£•è‡¨è«‘梃∠냵컡鷪蓦뺕焋ⰴ褊䀢儧蒯눋蟔뇿緊퓠묬ᵷï³ç—·ï¶î½£ãµê²’ç‹€ã«á¨“鮯弩䵾뻖묬郶鞖æ辶兄攒å‘抧垑瞇á¦ç‹ºç⹟ïºåŠ‡ê´Œèžñ¥´€íœ˜â„¡å•„ê¼á‰˜ì³šèš™á¸ˆâº˜ä‰¬à¤ªîž¹ì¤£â½€â¿¡ [ 699.292854][T17467] usbtmc 3-1:16.0: simple usb_control_msg failed -71 [ 699.293230][T13069] usb 3-1: USB disconnect, device number 123 [ 699.423717][T17499] FAULT_INJECTION: forcing a failure. [ 699.423717][T17499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.454994][T17499] CPU: 0 UID: 0 PID: 17499 Comm: syz.1.3425 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.455024][T17499] Tainted: [L]=SOFTLOCKUP [ 699.455030][T17499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.455040][T17499] Call Trace: [ 699.455048][T17499] [ 699.455056][T17499] dump_stack_lvl+0xe8/0x150 [ 699.455084][T17499] should_fail_ex+0x412/0x560 [ 699.455114][T17499] _copy_from_user+0x2d/0xb0 [ 699.455142][T17499] get_compat_msghdr+0xb3/0x4c0 [ 699.455173][T17499] ? __pfx_get_compat_msghdr+0x10/0x10 [ 699.455203][T17499] ? kfree+0x4d/0x640 [ 699.455230][T17499] ___sys_recvmsg+0x1dd/0x590 [ 699.455256][T17499] ? __lock_acquire+0x6b5/0x2cf0 [ 699.455280][T17499] ? __pfx____sys_recvmsg+0x10/0x10 [ 699.455310][T17499] ? __fget_files+0x2a/0x420 [ 699.455359][T17499] do_recvmmsg+0x3a5/0x800 [ 699.455394][T17499] ? __pfx_do_recvmmsg+0x10/0x10 [ 699.455430][T17499] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 699.455454][T17499] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 699.455480][T17499] __sys_recvmmsg+0x1a5/0x290 [ 699.455509][T17499] ? __pfx___sys_recvmmsg+0x10/0x10 [ 699.455536][T17499] ? ksys_write+0x242/0x270 [ 699.455565][T17499] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 699.455587][T17499] __do_fast_syscall_32+0x229/0x6e0 [ 699.455610][T17499] ? do_fast_syscall_32+0x33/0x70 [ 699.455626][T17499] ? lockdep_hardirqs_on+0x7a/0x110 [ 699.455660][T17499] ? asm_int80_emulation+0x1a/0x20 [ 699.455677][T17499] ? do_int80_emulation+0x286/0x530 [ 699.455698][T17499] ? trace_irq_disable+0x3b/0x140 [ 699.455727][T17499] do_fast_syscall_32+0x33/0x70 [ 699.455745][T17499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.455766][T17499] RIP: 0023:0xf70bf01c [ 699.455783][T17499] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 699.455798][T17499] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 699.455817][T17499] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00 [ 699.455829][T17499] RDX: 00000000ffffff2e RSI: 00000000400000de RDI: 0000000000000000 [ 699.455840][T17499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.455852][T17499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.455863][T17499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.455890][T17499] [ 699.715493][T13074] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 699.729049][T17502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.738148][T17502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.761988][T13074] usb 4-1: USB disconnect, device number 120 [ 699.820863][T17488] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 700.031798][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'. [ 700.496031][T17517] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 700.506362][T17517] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 700.611893][T17517] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 700.833860][ T5728] r8152-cfgselector 1-1: USB disconnect, device number 123 [ 701.043696][T17521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3430'. [ 701.072032][T17521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3430'. [ 701.262846][T17521] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 702.040708][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3432'. [ 702.061807][T17527] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3432'. [ 702.438749][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'. [ 702.604197][T17536] binder: 17535:17536 ioctl c0306201 80000180 returned -14 [ 703.018246][T17544] netlink: 'syz.4.3439': attribute type 61 has an invalid length. [ 703.464407][ T5728] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 703.554603][ T7145] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 703.654467][ T5728] usb 3-1: Using ep0 maxpacket: 16 [ 703.662358][ T5728] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 703.682623][ T5728] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 703.696953][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.745027][ T7145] usb 4-1: Using ep0 maxpacket: 32 [ 703.751623][ T5728] usb 3-1: Product: syz [ 703.760270][ T7145] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 703.774078][ T5728] usb 3-1: Manufacturer: syz [ 703.789954][ T5728] usb 3-1: SerialNumber: syz [ 703.798272][ T7145] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 703.822138][ T5728] r8152-cfgselector 3-1: Unknown version 0x0000 [ 703.830479][ T7145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.845705][ T5728] r8152-cfgselector 3-1: config 0 descriptor?? [ 703.854425][ T7145] usb 4-1: Product: syz [ 703.870440][ T7145] usb 4-1: Manufacturer: syz [ 703.885045][ T7145] usb 4-1: SerialNumber: syz [ 704.120782][ T7145] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 704.146025][ T7145] gspca_stv06xx: st6422 sensor detected [ 704.425400][ T7145] STV06xx 4-1:1.0: probe with driver STV06xx failed with error -71 [ 704.454001][ T7145] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 704.472488][ T7145] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 704.566644][ T7145] usb 4-1: USB disconnect, device number 121 [ 704.567270][T17556] sctp: [Deprecated]: syz.4.3443 (pid 17556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 704.567270][T17556] Use struct sctp_sack_info instead [ 704.874787][T17559] syzkaller0: entered promiscuous mode [ 704.889985][T17559] syzkaller0: entered allmulticast mode [ 704.954479][ T7145] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 705.115793][ T7145] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 4 [ 705.158222][ T7145] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 705.197565][ T7145] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 705.214707][ T7145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.231365][ T7145] usb 4-1: Product: syz [ 705.241495][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.252946][ T7145] usb 4-1: Manufacturer: syz [ 705.264780][ T7145] usb 4-1: SerialNumber: syz [ 705.281165][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.402876][T17563] netlink: 'syz.4.3446': attribute type 61 has an invalid length. [ 705.410979][T17563] netlink: 'syz.4.3446': attribute type 55 has an invalid length. [ 705.584614][ T7145] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 705.591113][ T7145] gspca_stv06xx: st6422 sensor detected [ 705.693086][T17565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.709129][T17565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.856717][ T7145] STV06xx 4-1:1.0: probe with driver STV06xx failed with error -71 [ 705.878820][ T7145] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 705.894811][ T7145] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 705.982041][ T7145] usb 4-1: USB disconnect, device number 122 [ 706.229591][T17580] vlan3: entered promiscuous mode [ 706.236552][T17580] bridge0: entered promiscuous mode [ 706.334739][T17583] block device autoloading is deprecated and will be removed. [ 706.458508][T17589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3455'. [ 706.480620][ T7145] r8152-cfgselector 3-1: USB disconnect, device number 124 [ 706.508467][T17589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3455'. [ 707.330163][T17624] syzkaller1: entered promiscuous mode [ 707.352255][T17624] syzkaller1: entered allmulticast mode [ 707.409691][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 707.420833][T17627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'. [ 707.449314][T17627] netlink: 'syz.3.3466': attribute type 19 has an invalid length. [ 707.854599][T13069] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 708.034451][T13069] usb 3-1: Using ep0 maxpacket: 16 [ 708.056508][T13069] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 708.087760][T13069] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 708.098701][T13069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.107309][T13069] usb 3-1: Product: syz [ 708.112211][T13069] usb 3-1: Manufacturer: syz [ 708.117374][T13069] usb 3-1: SerialNumber: syz [ 708.138386][T13069] r8152-cfgselector 3-1: Unknown version 0x0000 [ 708.146273][T13069] r8152-cfgselector 3-1: config 0 descriptor?? [ 708.234426][ T7144] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 708.406759][ T7144] usb 4-1: config 251 has an invalid interface number: 199 but max is 0 [ 708.422903][ T7144] usb 4-1: config 251 has no interface number 0 [ 708.439621][ T7144] usb 4-1: config 251 interface 199 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 708.464485][ T7142] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 708.472473][ T7144] usb 4-1: config 251 interface 199 has no altsetting 0 [ 708.489596][ T7144] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffa8, bcdDevice= b.49 [ 708.505787][ T7144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.520551][ T7144] usb 4-1: Product: syz [ 708.531541][ T7144] usb 4-1: Manufacturer: syz [ 708.551426][ T7144] usb 4-1: SerialNumber: syz [ 708.636606][ T7142] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 708.667529][ T7142] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 708.690132][ T7142] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 708.717494][ T7142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.746272][T17654] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 708.789936][ T7142] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 708.798041][ T7144] option 4-1:251.199: GSM modem (1-port) converter detected [ 708.855199][ T7144] usb 4-1: USB disconnect, device number 123 [ 708.926586][ T7144] option 4-1:251.199: device disconnected [ 709.016125][ T7142] usb 1-1: USB disconnect, device number 124 [ 709.433862][T17662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.465705][T17662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.601650][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 709.642783][T17664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.630398][ T5700] r8152-cfgselector 3-1: USB disconnect, device number 125 [ 710.687708][T17685] batadv_slave_1: entered promiscuous mode [ 710.794396][ T7142] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 710.996461][ T7142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 711.012132][ T7142] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 711.044594][ T5700] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 711.056588][ T7142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 711.086614][ T7142] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 711.101863][ T7142] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 711.115729][ T7142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.130689][ T7142] usb 1-1: config 0 descriptor?? [ 711.224631][ T5700] usb 3-1: device descriptor read/64, error -71 [ 711.241173][T17685] batadv_slave_1: left promiscuous mode [ 711.354682][ T7142] hdpvr 1-1:0.0: firmware version 0xd9 dated ÚL–W@ô‚Ôõ'^£ñR"Î5ËçèÝD¤ÙBUN§Æ=rp]’ÑEÈ/ [ 711.364975][ T7142] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 711.474411][ T5700] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 711.555702][ T30] audit: type=1326 audit(1779530095.543:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 711.597643][T13069] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 711.621725][ T30] audit: type=1326 audit(1779530095.543:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 711.624387][ T5700] usb 3-1: device descriptor read/64, error -71 [ 711.689989][ T30] audit: type=1326 audit(1779530095.543:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 711.730055][ T30] audit: type=1326 audit(1779530095.543:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 711.780028][ T30] audit: type=1326 audit(1779530095.543:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 711.805074][ T30] audit: type=1326 audit(1779530095.543:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 711.817601][T13069] usb 4-1: Using ep0 maxpacket: 8 [ 711.836700][ T5700] usb usb3-port1: attempt power cycle [ 711.842970][ T30] audit: type=1326 audit(1779530095.543:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 711.864969][T13069] usb 4-1: config index 0 descriptor too short (expected 57652, got 308) [ 711.887230][T13069] usb 4-1: config 9 has too many interfaces: 59, using maximum allowed: 32 [ 711.914447][T13069] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 711.923520][T13069] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 711.934658][T13069] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 59 [ 711.976752][T13069] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 712.007110][T13069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.033975][T13069] usb 4-1: Product: syz [ 712.045975][T13069] usb 4-1: Manufacturer: syz [ 712.060406][T13069] usb 4-1: SerialNumber: syz [ 712.089956][ T30] audit: type=1326 audit(1779530096.073:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 712.134529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 712.184572][ T5700] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 712.204023][ T30] audit: type=1326 audit(1779530096.073:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17687 comm="syz.0.3488" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 712.240667][ T5700] usb 3-1: device descriptor read/8, error -71 [ 712.296222][T17702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.313138][T17702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.333002][T13069] usb 4-1: USB disconnect, device number 124 [ 712.484501][ T5700] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 712.515175][ T5700] usb 3-1: device descriptor read/8, error -71 [ 712.624816][ T5700] usb usb3-port1: unable to enumerate USB device [ 712.705269][T13073] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 712.884381][T13073] usb 2-1: Using ep0 maxpacket: 8 [ 712.906593][T13073] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 712.932622][T13073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.972206][T13073] usb 2-1: Product: syz [ 712.977110][T13073] usb 2-1: Manufacturer: syz [ 712.992890][T13073] usb 2-1: SerialNumber: syz [ 713.163374][T17719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 713.189339][T17719] vlan2: entered promiscuous mode [ 713.194891][T17719] gretap0: entered promiscuous mode [ 713.223247][T17715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.243587][T17715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.314736][ T7144] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 713.334718][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 713.474425][ T7144] usb 4-1: Using ep0 maxpacket: 32 [ 713.488843][ T7144] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 713.498322][ T7144] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 713.507632][ T7144] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 713.520454][ T7144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.530799][ T7144] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 713.542266][ T7144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.554626][ T7144] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 713.584562][ T7144] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 713.622485][ T7144] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 713.638900][ T7144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.667727][ T7144] usb 4-1: config 0 descriptor?? [ 713.767507][ T7142] hdpvr 1-1:0.0: device init failed [ 713.782626][ T7142] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 713.833808][ T7142] usb 1-1: USB disconnect, device number 125 [ 713.910375][T17717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.936444][T17717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.979250][T17717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.010567][T17717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.065609][ T7144] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 125 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 714.112309][ T7144] usb 4-1: USB disconnect, device number 125 [ 714.158667][ T7144] usblp0: removed [ 714.554519][ T7144] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 714.705905][T17732] fuse: Bad value for 'fd' [ 714.714473][ T7144] usb 4-1: Using ep0 maxpacket: 32 [ 714.733516][ T7144] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 714.757938][ T7144] usb 4-1: config 0 has no interface number 0 [ 714.779615][ T7144] usb 4-1: too many endpoints for config 0 interface 46 altsetting 0: 223, using maximum allowed: 30 [ 714.809105][ T7144] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 714.847701][ T7144] usb 4-1: config 0 interface 46 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 714.876496][ T7144] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 714.910000][ T7144] usb 4-1: config 0 interface 46 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 714.936191][ T7144] usb 4-1: config 0 interface 46 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 714.973202][ T7144] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 714.992735][ T7144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.004640][ T7144] usb 4-1: Product: syz [ 715.008947][ T7144] usb 4-1: Manufacturer: syz [ 715.016488][ T7144] usb 4-1: SerialNumber: syz [ 715.031397][ T7144] usb 4-1: config 0 descriptor?? [ 715.049995][ T7144] ums-karma 4-1:0.46: USB Mass Storage device detected [ 715.073338][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3505'. [ 715.211651][T17747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.221969][ T7144] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 715.248561][T17717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.284032][T17717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.305871][T13073] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 715.340714][T13073] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 715.353078][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'. [ 715.376896][T13069] usb 4-1: USB disconnect, device number 126 [ 715.387362][T13073] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 715.428590][T13073] usb 2-1: USB disconnect, device number 83 [ 715.491443][T17759] xt_TCPMSS: Only works on TCP SYN packets [ 715.624429][ T7145] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 715.784372][ T7145] usb 1-1: Using ep0 maxpacket: 32 [ 715.792131][ T7145] usb 1-1: unable to get BOS descriptor or descriptor too short [ 715.847844][ T7145] usb 1-1: config 12 has an invalid interface number: 183 but max is 1 [ 715.867831][ T7145] usb 1-1: config 12 has an invalid interface number: 229 but max is 1 [ 715.891801][ T7145] usb 1-1: config 12 has no interface number 0 [ 715.945625][ T7145] usb 1-1: config 12 has no interface number 1 [ 715.987485][ T7145] usb 1-1: too many endpoints for config 12 interface 229 altsetting 48: 120, using maximum allowed: 30 [ 716.065538][ T7145] usb 1-1: config 12 interface 229 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 716.109896][ T7145] usb 1-1: config 12 interface 183 has no altsetting 0 [ 716.127251][ T7145] usb 1-1: config 12 interface 229 has no altsetting 0 [ 716.149219][ T7145] usb 1-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 716.171716][ T7145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.198142][ T7145] usb 1-1: Product: syz [ 716.215348][ T7145] usb 1-1: Manufacturer: syz [ 716.235259][ T7145] usb 1-1: SerialNumber: syz [ 716.267121][T13069] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 716.437355][T13069] usb 4-1: Using ep0 maxpacket: 16 [ 716.451003][T13069] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.462990][T13069] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.505497][T13069] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.505827][ T7145] usb 1-1: USB disconnect, device number 126 [ 716.521550][T13069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.587654][T13069] usb 4-1: Product: syz [ 716.602198][T13069] usb 4-1: Manufacturer: syz [ 716.627753][T13069] usb 4-1: SerialNumber: syz [ 716.672271][T13069] usb 4-1: 0:2 : does not exist [ 716.688614][T13069] usb 4-1: unit 9 not found! [ 716.896530][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.242268][T17794] loop2: detected capacity change from 0 to 7 [ 717.255037][ T7145] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 717.266037][T17794] Dev loop2: unable to read RDB block 7 [ 717.287396][T17794] loop2: unable to read partition table [ 717.298378][T17794] loop2: partition table beyond EOD, truncated [ 717.306090][T17794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 717.426141][ T7145] usb 3-1: config 1 interface 0 has no altsetting 0 [ 717.442530][ T7145] usb 3-1: string descriptor 0 read error: -22 [ 717.449605][ T7145] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.40 [ 717.472002][ T7145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.936010][ T5728] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 718.094492][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 718.109466][ T5728] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 718.131149][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.156068][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.169569][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.186427][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.200687][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.215565][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.230048][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.248594][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.265820][ T5728] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 718.276897][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 718.293585][ T5728] usb 1-1: SerialNumber: syz [ 718.332106][ T5728] usb 1-1: config 0 descriptor?? [ 718.385919][ T5728] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input196 [ 718.739333][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3524'. [ 718.741526][T13069] usb 4-1: USB disconnect, device number 127 [ 718.948721][ T4978] bcm5974 1-1:0.0: could not read from device [ 718.961348][ T4978] bcm5974 1-1:0.0: could not read from device [ 718.984173][ T4978] bcm5974 1-1:0.0: could not read from device [ 718.986157][ T5728] usb 1-1: USB disconnect, device number 127 [ 719.003273][T17824] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3529'. [ 719.029413][ T4978] bcm5974 1-1:0.0: could not read from device [ 719.855674][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3532'. [ 719.870218][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3532'. [ 720.021582][ T7145] usbhid 3-1:1.0: can't add hid device: -71 [ 720.112694][ T7145] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 720.157269][T17845] input: syz0 as /devices/virtual/input/input197 [ 720.166609][ T7145] usb 3-1: USB disconnect, device number 4 [ 720.354457][ T7144] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 720.365713][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'. [ 720.536900][ T7144] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 720.584588][ T7144] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 720.646701][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3527'. [ 720.658113][ T7144] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 720.668259][ T7144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.697190][ T7144] usb 1-1: Product: syz [ 720.711163][ T7144] usb 1-1: Manufacturer: syz [ 720.725102][ T7144] usb 1-1: SerialNumber: syz [ 722.031887][T17841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.079165][T17841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.166689][ T7144] cdc_ncm 1-1:1.0: bind() failure [ 722.205840][ T7144] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 722.233652][ T7144] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 722.258617][ T7144] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 722.292728][ T7144] usb 1-1: USB disconnect, device number 2 [ 722.344432][ T5700] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 722.524528][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 722.535692][ T5700] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 722.556302][ T5700] usb 4-1: config 0 has no interface number 0 [ 722.572535][ T5700] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 722.603340][ T5700] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 722.633408][ T5700] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 722.665300][ T5700] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 722.703363][ T5700] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 722.718471][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.731221][ T5700] usb 4-1: config 0 descriptor?? [ 722.782936][ T5700] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 723.102876][ T7144] usb 4-1: USB disconnect, device number 2 [ 723.137644][ T7144] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 723.437542][T17893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.492106][T17893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.614409][ T7144] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 723.685353][ T5700] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 723.767267][ T7144] usb 4-1: Using ep0 maxpacket: 16 [ 723.787369][ T7144] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 723.802792][ T7144] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 723.820606][ T7144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.854511][ T7144] usb 4-1: Product: syz [ 723.864421][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 723.865873][ T7144] usb 4-1: Manufacturer: syz [ 723.889966][T17903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.901964][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.908800][ T7144] usb 4-1: SerialNumber: syz [ 723.947103][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.968911][T17903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.000514][ T7144] r8152-cfgselector 4-1: Unknown version 0x0000 [ 724.007644][ T5700] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 724.033363][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.063033][ T7144] r8152-cfgselector 4-1: config 0 descriptor?? [ 724.076752][ T5700] usb 1-1: config 0 descriptor?? [ 724.133237][ T5700] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 724.151917][ T5700] usbhid 1-1:0.0: can't add hid device: -22 [ 724.160851][ T5700] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 725.391656][T17921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.442356][T17921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.580434][T17925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3562'. [ 726.477855][ T5700] usb 1-1: USB disconnect, device number 3 [ 726.592355][ T7145] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 726.651527][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'. [ 726.684241][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a4ce400: rx timeout, send abort [ 726.694427][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a4ce400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.965098][T17937] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 727.255312][ T7145] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 727.424415][ T7145] usb 1-1: Using ep0 maxpacket: 16 [ 727.432815][ T7145] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 727.442871][ T7145] usb 1-1: config 0 has no interface number 0 [ 727.452061][ T7145] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 727.462125][ T7145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.470684][ T7145] usb 1-1: Product: syz [ 727.475876][ T7145] usb 1-1: Manufacturer: syz [ 727.480704][ T7145] usb 1-1: SerialNumber: syz [ 727.489786][ T7145] usb 1-1: config 0 descriptor?? [ 727.510510][ T7145] hub 1-1:0.132: bad descriptor, ignoring hub [ 727.519117][ T7145] hub 1-1:0.132: probe with driver hub failed with error -5 [ 727.537902][ T7145] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input201 [ 727.727783][T17935] netlink: 'syz.0.3566': attribute type 4 has an invalid length. [ 727.735949][T17935] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3566'. [ 727.949026][ T5728] usb 1-1: USB disconnect, device number 4 [ 727.972040][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a4cf000: rx timeout, send abort [ 727.980735][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a4cf000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 728.283211][T17958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3573'. [ 728.610127][T17972] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3578'. [ 729.166741][T18000] FAULT_INJECTION: forcing a failure. [ 729.166741][T18000] name failslab, interval 1, probability 0, space 0, times 0 [ 729.186190][T18000] CPU: 0 UID: 0 PID: 18000 Comm: syz.4.3586 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.186220][T18000] Tainted: [L]=SOFTLOCKUP [ 729.186227][T18000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 729.186239][T18000] Call Trace: [ 729.186247][T18000] [ 729.186256][T18000] dump_stack_lvl+0xe8/0x150 [ 729.186283][T18000] should_fail_ex+0x412/0x560 [ 729.186315][T18000] should_failslab+0xa8/0x100 [ 729.186341][T18000] ? skb_clone+0x212/0x3a0 [ 729.186358][T18000] kmem_cache_alloc_noprof+0x87/0x650 [ 729.186389][T18000] skb_clone+0x212/0x3a0 [ 729.186409][T18000] __netlink_deliver_tap+0x404/0x850 [ 729.186444][T18000] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.186469][T18000] netlink_deliver_tap+0x19c/0x1b0 [ 729.186507][T18000] netlink_sendskb+0x68/0x140 [ 729.186532][T18000] nfnetlink_rcv+0x251a/0x27b0 [ 729.186571][T18000] ? __local_bh_enable_ip+0xd0/0x130 [ 729.186608][T18000] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 729.186648][T18000] ? ref_tracker_free+0x693/0x840 [ 729.186676][T18000] ? __pfx_ref_tracker_free+0x10/0x10 [ 729.186699][T18000] ? __asan_memcpy+0x40/0x70 [ 729.186720][T18000] ? __skb_clone+0x63/0x7a0 [ 729.186751][T18000] ? __skb_clone+0x483/0x7a0 [ 729.186784][T18000] ? skb_clone+0x246/0x3a0 [ 729.186805][T18000] ? __netlink_deliver_tap+0x807/0x850 [ 729.186830][T18000] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.186862][T18000] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.186886][T18000] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.186917][T18000] netlink_unicast+0x75c/0x8e0 [ 729.186951][T18000] netlink_sendmsg+0x813/0xb40 [ 729.186986][T18000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.187016][T18000] ? aa_sock_msg_perm+0xf1/0x1b0 [ 729.187041][T18000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 729.187069][T18000] ____sys_sendmsg+0x972/0x9f0 [ 729.187096][T18000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.187121][T18000] ? kstrtoull+0x12f/0x1d0 [ 729.187145][T18000] ___sys_sendmsg+0x2a5/0x360 [ 729.187165][T18000] ? __lock_acquire+0x6b5/0x2cf0 [ 729.187184][T18000] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.187207][T18000] ? get_pid_task+0x20/0x1f0 [ 729.187225][T18000] ? get_pid_task+0x20/0x1f0 [ 729.187241][T18000] ? get_pid_task+0x20/0x1f0 [ 729.187278][T18000] ? __fget_files+0x2a/0x420 [ 729.187295][T18000] ? __fget_files+0x3a0/0x420 [ 729.187320][T18000] __sys_sendmsg+0x183/0x260 [ 729.187342][T18000] ? __pfx___sys_sendmsg+0x10/0x10 [ 729.187379][T18000] __do_fast_syscall_32+0x229/0x6e0 [ 729.187394][T18000] ? do_fast_syscall_32+0x33/0x70 [ 729.187407][T18000] ? lockdep_hardirqs_on+0x7a/0x110 [ 729.187427][T18000] ? asm_int80_emulation+0x1a/0x20 [ 729.187442][T18000] ? do_int80_emulation+0x286/0x530 [ 729.187455][T18000] ? trace_irq_disable+0x3b/0x140 [ 729.187485][T18000] do_fast_syscall_32+0x33/0x70 [ 729.187500][T18000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 729.187518][T18000] RIP: 0023:0xf6fcf01c [ 729.187532][T18000] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 729.187545][T18000] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 729.187562][T18000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 729.187573][T18000] RDX: 00000000040000c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 729.187582][T18000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 729.187591][T18000] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 729.187600][T18000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 729.187622][T18000] [ 729.684686][ T7145] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 729.725290][T18004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3587'. [ 729.970421][T18010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.996046][T18010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.012655][ T7145] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 730.040171][ T7145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.062595][ T7145] usb 2-1: Product: syz [ 730.081127][ T7145] usb 2-1: Manufacturer: syz [ 730.103127][ T7145] usb 2-1: SerialNumber: syz [ 730.121962][ T7145] usb 2-1: config 0 descriptor?? [ 730.141197][ T7145] hub 2-1:0.0: bad descriptor, ignoring hub [ 730.152166][ T7145] hub 2-1:0.0: probe with driver hub failed with error -5 [ 730.324550][ T7142] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 730.334524][T13070] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 730.378708][ T7145] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 730.399929][ T7145] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 730.426112][ T7145] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 730.460635][ T7145] usb 2-1: media controller created [ 730.494597][ T7142] usb 4-1: Using ep0 maxpacket: 16 [ 730.504412][T13070] usb 3-1: Using ep0 maxpacket: 16 [ 730.512990][ T7142] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 730.513855][T13070] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 730.527794][ T7145] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 730.531227][T13070] usb 3-1: config 0 has no interface number 0 [ 730.553057][ T7142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.554991][T13070] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 730.575061][T13070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.586818][T13070] usb 3-1: Product: syz [ 730.588290][ T7142] usb 4-1: Product: syz [ 730.591139][T13070] usb 3-1: Manufacturer: syz [ 730.617193][ T7142] usb 4-1: Manufacturer: syz [ 730.619989][T13070] usb 3-1: SerialNumber: syz [ 730.630687][T13070] usb 3-1: config 0 descriptor?? [ 730.649717][T13070] hub 3-1:0.132: bad descriptor, ignoring hub [ 730.660078][T13070] hub 3-1:0.132: probe with driver hub failed with error -5 [ 730.676050][ T7142] usb 4-1: SerialNumber: syz [ 730.690712][T13070] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input203 [ 730.712747][ T7142] usb 4-1: config 0 descriptor?? [ 730.733199][ T7142] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 730.787024][ T7145] DVB: Unable to find symbol dib7000p_attach() [ 730.833042][ T7145] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 730.959207][ T7142] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 730.967186][T18008] netlink: 'syz.2.3589': attribute type 4 has an invalid length. [ 731.003541][T18008] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3589'. [ 731.025240][ T7145] rc_core: IR keymap rc-dib0700-rc5 not found [ 731.042000][ T7145] Registered IR keymap rc-empty [ 731.068139][ T7145] dvb-usb: could not initialize remote control. [ 731.093522][T18008] .`: renamed from bond0 (while UP) [ 731.115644][ T7145] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 731.147515][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3594'. [ 731.214690][T18028] qrtr: Invalid version 49 [ 731.229317][ T30] audit: type=1326 audit(1779530115.213:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18025 comm="syz.4.3594" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcf01c code=0x0 [ 731.324679][T13069] usb 3-1: USB disconnect, device number 5 [ 732.128238][T18042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3599'. [ 732.174110][T18044] Invalid logical block size (1048576) [ 732.258142][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3600'. [ 733.222441][T18062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.231940][T18062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.338233][ T7144] usb 4-1: USB disconnect, device number 4 [ 733.374152][T13070] usb 2-1: USB disconnect, device number 84 [ 733.463458][T13070] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 733.749027][T18073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3610'. [ 733.924561][T13069] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 734.007558][T18075] fuse: root generation should be zero [ 734.096016][T13069] usb 1-1: Using ep0 maxpacket: 32 [ 734.106208][T13069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.119079][T13069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.130597][T13069] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 734.143580][T13069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.160887][T13069] usb 1-1: config 0 descriptor?? [ 734.171439][T13069] hub 1-1:0.0: USB hub found [ 734.308261][T18082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.334801][T18082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.370448][T13069] hub 1-1:0.0: 1 port detected [ 734.384961][ T7147] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 734.409549][T18083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.424928][T18083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.558604][ T7147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.577704][T13069] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 734.577759][ T7147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.594382][T13069] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 734.596547][T13069] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 734.609998][ T7147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 734.627543][ T7147] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 734.632915][T13069] usbhid 1-1:0.0: can't add hid device: -22 [ 734.637324][ T7147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.640555][ T7147] usb 2-1: config 0 descriptor?? [ 734.656770][T13069] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 734.685880][T13069] usb 1-1: USB disconnect, device number 5 [ 735.061980][T18095] netlink: 'syz.4.3618': attribute type 4 has an invalid length. [ 735.210579][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.252378][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.559312][ T7147] usbhid 2-1:0.0: can't add hid device: -71 [ 735.587482][ T7147] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 735.618537][ T7147] usb 2-1: USB disconnect, device number 85 [ 735.652549][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3621'. [ 735.925186][T18112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3623'. [ 735.955414][T18112] batadv0: entered promiscuous mode [ 736.035522][T18117] binfmt_misc: register: failed to install interpreter file ./file0 [ 736.052385][T18115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3624'. [ 736.334517][ T5700] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 736.474519][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.507000][ T5700] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 736.534626][ T5700] usb 4-1: config 0 has no interface number 0 [ 736.560388][ T5700] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 736.573113][ T5700] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 736.590311][ T5700] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 736.603566][ T5700] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 736.617226][ T5700] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 736.631022][ T5700] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 736.671397][ T5700] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 736.681222][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.711824][ T5700] usb 4-1: config 0 descriptor?? [ 736.730353][T18115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.756126][T18115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.783934][ T5700] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 736.943844][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3633'. [ 737.012322][T18115] ldusb 4-1:0.55: Write buffer overflow, 102 bytes dropped [ 737.057629][T13070] usb 4-1: USB disconnect, device number 5 [ 737.092598][T13070] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 737.175288][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.303950][T18148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3635'. [ 737.495019][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.774160][T18150] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3636'. [ 738.009278][T18154] FAULT_INJECTION: forcing a failure. [ 738.009278][T18154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.057837][T18154] CPU: 1 UID: 0 PID: 18154 Comm: syz.3.3638 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.057860][T18154] Tainted: [L]=SOFTLOCKUP [ 738.057867][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 738.057877][T18154] Call Trace: [ 738.057883][T18154] [ 738.057890][T18154] dump_stack_lvl+0xe8/0x150 [ 738.057916][T18154] should_fail_ex+0x412/0x560 [ 738.057947][T18154] _copy_to_user+0x31/0xb0 [ 738.057977][T18154] simple_read_from_buffer+0xe1/0x170 [ 738.058005][T18154] proc_fail_nth_read+0x1bb/0x230 [ 738.058032][T18154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 738.058059][T18154] ? rw_verify_area+0x2a6/0x4d0 [ 738.058084][T18154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 738.058109][T18154] vfs_read+0x20c/0xa70 [ 738.058148][T18154] ? __pfx___mutex_lock+0x10/0x10 [ 738.058171][T18154] ? __pfx_vfs_read+0x10/0x10 [ 738.058198][T18154] ? __fget_files+0x2a/0x420 [ 738.058224][T18154] ? __fget_files+0x3a0/0x420 [ 738.058243][T18154] ? __fget_files+0x2a/0x420 [ 738.058271][T18154] ksys_read+0x150/0x270 [ 738.058299][T18154] ? __pfx_ksys_read+0x10/0x10 [ 738.058328][T18154] ? asm_int80_emulation+0x1a/0x20 [ 738.058352][T18154] do_int80_emulation+0x181/0x530 [ 738.058370][T18154] ? trace_irq_disable+0x3b/0x140 [ 738.058396][T18154] ? asm_int80_emulation+0x1a/0x20 [ 738.058413][T18154] ? clear_bhb_loop+0x40/0x90 [ 738.058431][T18154] ? clear_bhb_loop+0x40/0x90 [ 738.058455][T18154] asm_int80_emulation+0x1a/0x20 [ 738.058472][T18154] RIP: 0023:0xf71761ab [ 738.058489][T18154] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 738.058506][T18154] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 738.058526][T18154] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54365d0 [ 738.058539][T18154] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 738.058550][T18154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 738.058561][T18154] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 738.058571][T18154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 738.058595][T18154] [ 738.327804][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d12ac00: rx timeout, send abort [ 738.336946][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d12ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 738.538176][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.665284][T18160] netlink: 37 bytes leftover after parsing attributes in process `syz.0.3641'. [ 738.710738][T18160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.778351][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3642'. [ 738.938135][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 739.075237][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3648'. [ 739.137203][T18175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 739.172828][T18175] bond1: entered promiscuous mode [ 739.172856][T18175] bond1: entered allmulticast mode [ 739.174160][T18175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 739.184259][T18175] team0: Port device bond1 added [ 739.193554][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 739.223035][T18175] bond1: (slave vcan1): refused to change device type [ 739.577878][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.715042][ T7145] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 739.753680][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3660'. [ 739.854851][ T7145] usb 1-1: device descriptor read/64, error -71 [ 739.986863][T18217] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 740.075188][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.104602][ T7145] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 740.216153][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.255526][ T7145] usb 1-1: device descriptor read/64, error -71 [ 740.375533][ T7145] usb usb1-port1: attempt power cycle [ 740.434370][ T7144] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 740.434371][ T5700] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 740.587864][ T7144] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 740.597241][ T7144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.606706][ T7144] usb 2-1: Product: syz [ 740.610982][ T7144] usb 2-1: Manufacturer: syz [ 740.616584][ T7144] usb 2-1: SerialNumber: syz [ 740.621273][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.633431][ T5700] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.644613][ T5700] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.658012][ T5700] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 740.667908][ T7147] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 740.675835][ T5700] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 740.686325][ T5700] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.699988][ T5700] usb 4-1: config 1 interface 1 has no altsetting 0 [ 740.709278][ T5700] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.714453][ T7145] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 740.726672][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.736012][ T5700] usb 4-1: Product: syz [ 740.740261][ T5700] usb 4-1: Manufacturer: syz [ 740.744962][ T5700] usb 4-1: SerialNumber: syz [ 740.746221][ T7145] usb 1-1: device descriptor read/8, error -71 [ 740.770985][ T5700] cdc_ncm 4-1:1.0: skipping garbage [ 740.776338][ T5700] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 740.783882][ T5700] cdc_ncm 4-1:1.0: bind() failure [ 740.834431][ T7147] usb 3-1: Using ep0 maxpacket: 16 [ 740.842705][ T7147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.857246][ T7147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.881703][ T7147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 740.898046][ T7147] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 740.908152][ T7147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.940462][ T7147] usb 3-1: config 0 descriptor?? [ 740.994453][ T7145] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 741.026226][ T7145] usb 1-1: device descriptor read/8, error -71 [ 741.118798][ T7144] usb 2-1: USB disconnect, device number 86 [ 741.148898][ T7145] usb usb1-port1: unable to enumerate USB device [ 741.204776][ T7147] usbhid 3-1:0.0: can't add hid device: -71 [ 741.236335][ T7147] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 741.244235][ T7147] usb 3-1: USB disconnect, device number 6 [ 741.316642][T18248] FAULT_INJECTION: forcing a failure. [ 741.316642][T18248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.333461][ T5700] usb 4-1: USB disconnect, device number 6 [ 741.334124][T18248] CPU: 0 UID: 0 PID: 18248 Comm: syz.2.3674 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.334153][T18248] Tainted: [L]=SOFTLOCKUP [ 741.334160][T18248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.334171][T18248] Call Trace: [ 741.334180][T18248] [ 741.334188][T18248] dump_stack_lvl+0xe8/0x150 [ 741.334214][T18248] should_fail_ex+0x412/0x560 [ 741.334244][T18248] _copy_to_user+0x31/0xb0 [ 741.334276][T18248] simple_read_from_buffer+0xe1/0x170 [ 741.334313][T18248] proc_fail_nth_read+0x1bb/0x230 [ 741.334339][T18248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.334364][T18248] ? rw_verify_area+0x2a6/0x4d0 [ 741.334388][T18248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.334413][T18248] vfs_read+0x20c/0xa70 [ 741.334441][T18248] ? __pfx___mutex_lock+0x10/0x10 [ 741.334461][T18248] ? __pfx_vfs_read+0x10/0x10 [ 741.334486][T18248] ? __fget_files+0x2a/0x420 [ 741.334511][T18248] ? __fget_files+0x3a0/0x420 [ 741.334532][T18248] ? __fget_files+0x2a/0x420 [ 741.334559][T18248] ksys_read+0x150/0x270 [ 741.334586][T18248] ? __pfx_ksys_read+0x10/0x10 [ 741.334614][T18248] ? asm_int80_emulation+0x1a/0x20 [ 741.334637][T18248] do_int80_emulation+0x181/0x530 [ 741.334655][T18248] ? trace_irq_disable+0x3b/0x140 [ 741.334679][T18248] ? asm_int80_emulation+0x1a/0x20 [ 741.334696][T18248] ? clear_bhb_loop+0x40/0x90 [ 741.334714][T18248] ? clear_bhb_loop+0x40/0x90 [ 741.334736][T18248] asm_int80_emulation+0x1a/0x20 [ 741.334753][T18248] RIP: 0023:0xf71561ab [ 741.334770][T18248] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 741.334785][T18248] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 741.334804][T18248] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54165d0 [ 741.334817][T18248] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 741.334829][T18248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 741.334839][T18248] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 741.334850][T18248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 741.334877][T18248] [ 741.552560][T18252] netlink: 'syz.2.3677': attribute type 1 has an invalid length. [ 741.655774][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.702347][T18256] bond0: (slave geneve2): making interface the new active one [ 741.711388][T18256] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 741.721042][ T89] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 741.738631][ T89] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 741.751088][T18252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3677'. [ 741.753064][ T89] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 741.769510][ T89] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 741.791768][T18252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.843032][T18264] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3679'. [ 741.898647][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 742.124726][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3679'. [ 742.319741][T18275] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3683'. [ 742.322705][T18264] pimreg3: entered allmulticast mode [ 742.482912][T18282] FAULT_INJECTION: forcing a failure. [ 742.482912][T18282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.532676][T18282] CPU: 0 UID: 0 PID: 18282 Comm: syz.3.3686 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.532704][T18282] Tainted: [L]=SOFTLOCKUP [ 742.532710][T18282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.532722][T18282] Call Trace: [ 742.532729][T18282] [ 742.532738][T18282] dump_stack_lvl+0xe8/0x150 [ 742.532762][T18282] should_fail_ex+0x412/0x560 [ 742.532790][T18282] _copy_from_user+0x2d/0xb0 [ 742.532816][T18282] get_compat_msghdr+0xb3/0x4c0 [ 742.532847][T18282] ? __pfx_get_compat_msghdr+0x10/0x10 [ 742.532876][T18282] ? kfree+0x4d/0x640 [ 742.532904][T18282] ___sys_recvmsg+0x1dd/0x590 [ 742.532929][T18282] ? __lock_acquire+0x6b5/0x2cf0 [ 742.532952][T18282] ? __pfx____sys_recvmsg+0x10/0x10 [ 742.532983][T18282] ? __fget_files+0x2a/0x420 [ 742.533028][T18282] do_recvmmsg+0x3a5/0x800 [ 742.533060][T18282] ? __pfx_do_recvmmsg+0x10/0x10 [ 742.533100][T18282] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 742.533125][T18282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 742.533151][T18282] __sys_recvmmsg+0x1a5/0x290 [ 742.533180][T18282] ? __pfx___sys_recvmmsg+0x10/0x10 [ 742.533216][T18282] ? ksys_write+0x242/0x270 [ 742.533248][T18282] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 742.533270][T18282] __do_fast_syscall_32+0x229/0x6e0 [ 742.533288][T18282] ? do_fast_syscall_32+0x33/0x70 [ 742.533304][T18282] ? lockdep_hardirqs_on+0x7a/0x110 [ 742.533330][T18282] ? asm_int80_emulation+0x1a/0x20 [ 742.533347][T18282] ? do_int80_emulation+0x286/0x530 [ 742.533364][T18282] ? trace_irq_disable+0x3b/0x140 [ 742.533393][T18282] do_fast_syscall_32+0x33/0x70 [ 742.533412][T18282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 742.533435][T18282] RIP: 0023:0xf7f7601c [ 742.533452][T18282] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 742.533467][T18282] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 742.533486][T18282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005c80 [ 742.533498][T18282] RDX: 000000000400030f RSI: 0000000000000000 RDI: 0000000000000000 [ 742.533509][T18282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.533521][T18282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 742.533532][T18282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 742.533557][T18282] [ 742.817634][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.258117][T13074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.416497][T18300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3692'. [ 743.434493][ T5700] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 743.574202][T18307] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 743.606608][ T5700] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.653871][ T5700] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 743.683557][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 743.703321][ T5700] usb 2-1: Product: syz [ 743.732212][ T5700] usb 2-1: Manufacturer: syz [ 743.734889][ T30] audit: type=1800 audit(1779530127.713:1304): pid=18315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3695" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 743.771862][T18307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.780306][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 743.791975][ T5700] usb 2-1: SerialNumber: syz [ 743.895708][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.054994][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 744.077752][T18316] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 744.121300][ T57] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 744.167993][ T57] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 744.222625][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 744.245596][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 744.409831][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 744.624798][T18330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3700'. [ 744.637263][T18330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3700'. [ 744.784456][ T7145] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 744.934981][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.954511][ T7145] usb 1-1: Using ep0 maxpacket: 16 [ 744.968651][ T7145] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.997639][ T7145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 745.029601][ T7145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 745.064059][ T7145] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 745.089986][ T7145] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 745.111616][ T7145] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 745.128470][ T7145] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 745.141508][ T7145] usb 1-1: Manufacturer: syz [ 745.168450][ T7145] usb 1-1: config 0 descriptor?? [ 745.429534][T18338] FAULT_INJECTION: forcing a failure. [ 745.429534][T18338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.448233][T18338] CPU: 0 UID: 0 PID: 18338 Comm: syz.2.3703 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.448264][T18338] Tainted: [L]=SOFTLOCKUP [ 745.448271][T18338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.448281][T18338] Call Trace: [ 745.448289][T18338] [ 745.448296][T18338] dump_stack_lvl+0xe8/0x150 [ 745.448321][T18338] should_fail_ex+0x412/0x560 [ 745.448349][T18338] _copy_from_user+0x2d/0xb0 [ 745.448376][T18338] get_compat_msghdr+0xb3/0x4c0 [ 745.448409][T18338] ? __pfx_get_compat_msghdr+0x10/0x10 [ 745.448438][T18338] ? kfree+0x4d/0x640 [ 745.448463][T18338] ___sys_recvmsg+0x1dd/0x590 [ 745.448487][T18338] ? __lock_acquire+0x6b5/0x2cf0 [ 745.448508][T18338] ? __pfx____sys_recvmsg+0x10/0x10 [ 745.448538][T18338] ? __fget_files+0x2a/0x420 [ 745.448580][T18338] do_recvmmsg+0x3a5/0x800 [ 745.448614][T18338] ? __pfx_do_recvmmsg+0x10/0x10 [ 745.448650][T18338] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 745.448674][T18338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 745.448699][T18338] __sys_recvmmsg+0x1a5/0x290 [ 745.448729][T18338] ? __pfx___sys_recvmmsg+0x10/0x10 [ 745.448752][T18338] ? ksys_write+0x242/0x270 [ 745.448770][T18338] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 745.448783][T18338] __do_fast_syscall_32+0x229/0x6e0 [ 745.448794][T18338] ? do_fast_syscall_32+0x33/0x70 [ 745.448806][T18338] ? lockdep_hardirqs_on+0x7a/0x110 [ 745.448830][T18338] ? asm_int80_emulation+0x1a/0x20 [ 745.448848][T18338] ? do_int80_emulation+0x286/0x530 [ 745.448866][T18338] ? trace_irq_disable+0x3b/0x140 [ 745.448901][T18338] do_fast_syscall_32+0x33/0x70 [ 745.448912][T18338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.448924][T18338] RIP: 0023:0xf7f5601c [ 745.448935][T18338] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 745.448944][T18338] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 745.448957][T18338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00 [ 745.448970][T18338] RDX: 00000000ffffff2e RSI: 00000000400000de RDI: 0000000000000000 [ 745.448982][T18338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.448993][T18338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 745.449004][T18338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.449033][T18338] [ 745.697847][ T7145] rc_core: IR keymap rc-hauppauge not found [ 745.703804][ T7145] Registered IR keymap rc-empty [ 745.709489][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.734590][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.756038][ T7145] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 745.759477][ T7145] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input205 [ 745.763247][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.775355][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.794614][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.815406][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.816787][T13074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.834701][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.854578][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.874689][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.954533][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.974768][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 745.986740][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.995345][ T7145] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 746.051021][ T7145] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 746.073815][ T7145] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 746.088987][ T5700] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 746.128273][ T5700] usb 2-1: USB disconnect, device number 87 [ 746.149184][ T7145] usb 1-1: USB disconnect, device number 10 [ 746.158759][T13074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.174091][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 746.202897][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.222849][ T5700] usblp0: removed [ 746.240340][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.261096][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.276769][T13074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.303471][T13074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.305076][ T7142] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 746.342827][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.496870][ T7142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.528597][ T7142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.558049][ T7142] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 746.583049][ T7142] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 746.609511][ T7142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.636940][ T7142] usb 3-1: config 0 descriptor?? [ 747.015007][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.092503][T18347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.104559][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 747.118482][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.126627][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.184811][T18347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.420849][ T7142] usbhid 3-1:0.0: can't add hid device: -71 [ 747.438559][ T7142] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 747.468050][ T7142] usb 3-1: USB disconnect, device number 7 [ 747.634574][T13074] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 747.678733][T18390] __nla_validate_parse: 5 callbacks suppressed [ 747.678748][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'. [ 747.734777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.784500][T13074] usb 1-1: device descriptor read/64, error -71 [ 747.846337][T18392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.045063][T13074] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 748.054827][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.214582][T13074] usb 1-1: device descriptor read/64, error -71 [ 748.334698][T13074] usb usb1-port1: attempt power cycle [ 748.684762][T13074] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 748.725194][T13074] usb 1-1: device descriptor read/8, error -71 [ 748.984625][T13074] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 749.016296][T13074] usb 1-1: device descriptor read/8, error -71 [ 749.061218][T18413] netlink: 'syz.4.3728': attribute type 61 has an invalid length. [ 749.097688][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.125013][T13074] usb usb1-port1: unable to enumerate USB device [ 749.194406][ T7142] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 749.342592][T13074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.374521][ T7147] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 749.547739][ T7147] usb 4-1: Using ep0 maxpacket: 8 [ 749.560900][ T7147] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 749.584634][ T7147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.605140][ T7147] usb 4-1: Product: syz [ 749.610417][ T7147] usb 4-1: Manufacturer: syz [ 749.620290][ T7147] usb 4-1: SerialNumber: syz [ 749.632444][ T7147] usb 4-1: config 0 descriptor?? [ 749.664402][ T7145] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 749.828571][ T7145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.841713][ T7145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.860225][ T7147] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 749.874019][ T7145] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 749.899237][ T7145] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 749.909941][ T7145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.924895][ T7145] usb 3-1: config 0 descriptor?? [ 750.137920][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.296238][T13074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.335335][ T7147] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 750.363478][T18422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.367202][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'. [ 750.412362][T18422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.421298][T18444] fuse: Bad value for 'fd' [ 750.434700][ T7147] usb 4-1: USB disconnect, device number 7 [ 750.454485][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 750.490988][T18442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 750.537124][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 750.567010][T18445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.582093][T18445] bond2: (slave bond3): Enslaving as an active interface with an up link [ 750.599200][T18442] bond2 (unregistering): (slave bond3): Releasing backup interface [ 750.609539][T18442] bond2 (unregistering): Released all slaves [ 750.639423][T18448] vlan3: entered promiscuous mode [ 750.644922][T18448] bridge0: entered promiscuous mode [ 750.706805][ T7145] usbhid 3-1:0.0: can't add hid device: -71 [ 750.721175][ T7145] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 750.757898][ T7145] usb 3-1: USB disconnect, device number 8 [ 751.009911][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 751.175715][ T7143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.324527][ T7145] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 751.484527][ T7145] usb 1-1: Using ep0 maxpacket: 32 [ 751.505405][ T7145] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 751.527026][ T7145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 751.548026][ T7145] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 751.558573][ T7145] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 751.570769][ T7145] usb 1-1: Product: syz [ 751.578901][ T7145] usb 1-1: Manufacturer: syz [ 751.588929][ T7145] usb 1-1: SerialNumber: syz [ 751.605547][ T7145] usb 1-1: config 0 descriptor?? [ 751.639939][ T7145] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 751.833692][ T12] usb 1-1: Failed to submit usb control message: -71 [ 751.841547][T13069] usb 1-1: USB disconnect, device number 15 [ 751.852042][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 751.860347][ T12] usb 1-1: unable to get target info from device [ 751.872206][ T12] usb 1-1: could not get target info (-71) [ 751.878704][ T12] usb 1-1: could not probe fw (-71) [ 752.187011][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.210886][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.223012][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.236780][T13069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.274136][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.331222][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.564785][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.586682][T18487] FAULT_INJECTION: forcing a failure. [ 752.586682][T18487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.613795][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.635320][T18487] CPU: 1 UID: 0 PID: 18487 Comm: syz.2.3753 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.635350][T18487] Tainted: [L]=SOFTLOCKUP [ 752.635357][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.635368][T18487] Call Trace: [ 752.635376][T18487] [ 752.635385][T18487] dump_stack_lvl+0xe8/0x150 [ 752.635410][T18487] should_fail_ex+0x412/0x560 [ 752.635438][T18487] copy_fpstate_to_sigframe+0xaa3/0xd60 [ 752.635469][T18487] ? copy_fpstate_to_sigframe+0x196/0xd60 [ 752.635500][T18487] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 752.635528][T18487] ? ktime_get+0x1f5/0x220 [ 752.635568][T18487] ? fpu__alloc_mathframe+0xac/0x130 [ 752.635594][T18487] get_sigframe+0x5f7/0x820 [ 752.635626][T18487] ? __pfx_get_sigframe+0x10/0x10 [ 752.635652][T18487] ? posixtimer_deliver_signal+0x2ec/0x3f0 [ 752.635678][T18487] ia32_setup_rt_frame+0x110/0xae0 [ 752.635705][T18487] ? _raw_spin_unlock_irq+0x2e/0x50 [ 752.635729][T18487] ? get_signal+0x114f/0x1330 [ 752.635754][T18487] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 752.635785][T18487] arch_do_signal_or_restart+0x47e/0x840 [ 752.635813][T18487] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 752.635849][T18487] ? fput+0xa0/0xd0 [ 752.635878][T18487] exit_to_user_mode_loop+0x8c/0x4d0 [ 752.635897][T18487] ? rcu_is_watching+0x15/0xb0 [ 752.635920][T18487] ? do_fast_syscall_32+0x33/0x70 [ 752.635940][T18487] __do_fast_syscall_32+0x446/0x6e0 [ 752.635959][T18487] ? do_fast_syscall_32+0x33/0x70 [ 752.635976][T18487] ? lockdep_hardirqs_on+0x7a/0x110 [ 752.636000][T18487] ? asm_int80_emulation+0x1a/0x20 [ 752.636022][T18487] ? do_int80_emulation+0x286/0x530 [ 752.636039][T18487] ? trace_irq_disable+0x3b/0x140 [ 752.636068][T18487] do_fast_syscall_32+0x33/0x70 [ 752.636087][T18487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 752.636108][T18487] RIP: 0023:0xf7f5601c [ 752.636125][T18487] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 752.636145][T18487] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 752.636166][T18487] RAX: 0000000000000000 RBX: 0000000080000000 RCX: 0000000000600000 [ 752.636177][T18487] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 752.636189][T18487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 752.636206][T18487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 752.636218][T18487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 752.636241][T18487] [ 752.714393][ T7142] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 753.059279][ T7142] usb 2-1: device descriptor read/64, error -71 [ 753.174940][ T7142] usb usb2-port1: attempt power cycle [ 753.227489][T18501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3757'. [ 753.256921][ T7143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.270395][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3757'. [ 753.347756][T13069] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 753.514427][ T7142] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 753.514863][T13069] usb 4-1: Using ep0 maxpacket: 16 [ 753.533670][T13069] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 753.542597][T13069] usb 4-1: config 0 has no interface number 0 [ 753.549503][ T7142] usb 2-1: device descriptor read/8, error -71 [ 753.551286][T13069] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 753.566391][T13069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.575232][T13069] usb 4-1: Product: syz [ 753.583859][T13069] usb 4-1: Manufacturer: syz [ 753.594841][T13069] usb 4-1: SerialNumber: syz [ 753.619957][T13069] usb 4-1: config 0 descriptor?? [ 753.632563][T13069] hub 4-1:0.132: bad descriptor, ignoring hub [ 753.639615][T13069] hub 4-1:0.132: probe with driver hub failed with error -5 [ 753.666131][T13069] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input208 [ 753.824452][ T7142] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 753.875023][ T7142] usb 2-1: device descriptor read/8, error -71 [ 753.878183][T18492] netlink: 'syz.3.3755': attribute type 4 has an invalid length. [ 753.903413][ T30] audit: type=1326 audit(1779530137.883:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18519 comm="syz.4.3764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcf01c code=0x0 [ 753.906649][T18492] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3755'. [ 754.002997][T18492] .`: renamed from bond0 (while UP) [ 754.044915][ T7142] usb usb2-port1: unable to enumerate USB device [ 754.296250][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.767714][T18532] fuse: Bad value for 'user_id' [ 754.797063][T18532] fuse: Bad value for 'user_id' [ 755.224788][ T7142] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 755.255694][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.335239][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.396210][ T7142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.427481][ T7142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.460494][ T7142] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 755.501742][ T7142] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 755.530812][ T7142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.578569][ T7142] usb 3-1: config 0 descriptor?? [ 756.138411][T18557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.186140][T18557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.374969][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.248905][T13069] usb 4-1: USB disconnect, device number 8 [ 757.414785][ T7143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.872822][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.936400][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.949298][ T7142] usbhid 3-1:0.0: can't add hid device: -71 [ 757.961978][ T30] audit: type=1326 audit(1779530141.943:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 757.974451][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.001753][ T7142] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 758.005604][T18568] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 758.015184][ T7142] usb 3-1: USB disconnect, device number 9 [ 758.048133][T18568] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 758.061534][ T30] audit: type=1326 audit(1779530141.943:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 758.090180][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.096853][ T30] audit: type=1326 audit(1779530141.943:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 758.140133][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.151473][ T30] audit: type=1326 audit(1779530141.993:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 758.174623][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.199009][ T30] audit: type=1326 audit(1779530141.993:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 758.204693][T18564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.225088][ T30] audit: type=1326 audit(1779530141.993:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 758.281081][ T30] audit: type=1326 audit(1779530141.993:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 758.309324][ T30] audit: type=1326 audit(1779530141.993:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf71a9510 code=0x7ffc0000 [ 758.315802][T13069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.345691][T18578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.368279][T18578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.406238][T18578] netlink: 'syz.4.3780': attribute type 4 has an invalid length. [ 758.446950][T18578] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3780'. [ 758.457332][ T7142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.469444][ T30] audit: type=1326 audit(1779530141.993:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.3.3777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f7601c code=0x7ffc0000 [ 758.498394][T18582] fuse: Unknown parameter 'fd90x0000000000000000' [ 758.662305][T18590] sch_tbf: burst 127 is lower than device veth1_to_batadv mtu (1514) ! [ 758.673380][T18592] fuse: Unknown parameter 'group_id00000000000000000000' [ 758.744608][ T7142] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 758.802642][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 758.894444][ T7142] usb 4-1: Using ep0 maxpacket: 32 [ 758.901279][ T7142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.913080][ T7142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.924569][ T7142] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 758.938264][ T7142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.959913][ T7142] usb 4-1: config 0 descriptor?? [ 758.977234][ T7142] hub 4-1:0.0: USB hub found [ 759.054431][T13069] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 759.173287][ T7142] hub 4-1:0.0: 1 port detected [ 759.204430][T13069] usb 2-1: Using ep0 maxpacket: 16 [ 759.215912][T13069] usb 2-1: config 0 has no interfaces? [ 759.222229][T13069] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 759.232366][T13069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.245423][T13069] usb 2-1: config 0 descriptor?? [ 759.254462][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.263587][ T31] INFO: task kworker/1:1:29 blocked for more than 143 seconds. [ 759.273092][ T31] Tainted: G L syzkaller #0 [ 759.280608][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.291678][ T31] task:kworker/1:1 state:D stack:17440 pid:29 tgid:29 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 759.305019][ T31] Workqueue: usb_hub_wq hub_event [ 759.310213][ T31] Call Trace: [ 759.313649][ T31] [ 759.318060][ T31] __schedule+0x1821/0x5740 [ 759.322757][ T31] ? kasan_save_stack+0x3e/0x60 [ 759.328722][ T31] ? __device_attach_driver+0x279/0x430 [ 759.334909][ T31] ? bus_probe_device+0x12a/0x220 [ 759.340479][ T31] ? device_add+0x7e9/0xbb0 [ 759.346294][ T31] ? usb_set_configuration+0x1a87/0x2110 [ 759.352429][ T31] ? usb_probe_device+0x1c4/0x3b0 [ 759.358003][ T31] ? really_probe+0x267/0xaf0 [ 759.365824][ T31] ? __device_attach_driver+0x279/0x430 [ 759.371655][ T31] ? device_initial_probe+0xa1/0xd0 [ 759.380232][ T31] ? bus_probe_device+0x12a/0x220 [ 759.385839][ T31] ? look_up_lock_class+0x57/0x110 [ 759.391605][ T31] ? __pfx___schedule+0x10/0x10 [ 759.397102][ T31] ? schedule+0x90/0x360 [ 759.403705][ T31] schedule+0x164/0x360 [ 759.409055][ T31] schedule_timeout+0xc3/0x2c0 [ 759.414240][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 759.422778][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 759.432371][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.455629][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 759.475245][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 759.484727][ T31] ? wait_for_completion+0x274/0x5e0 [ 759.507191][ T31] wait_for_completion+0x2cc/0x5e0 [ 759.517711][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 759.525867][ T7143] usb 2-1: USB disconnect, device number 92 [ 759.543447][ T31] i2c_del_adapter+0x5c0/0x790 [ 759.556038][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 759.565928][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 759.576914][ T31] ? dvb_usbv2_exit+0x94c/0xb80 [ 759.594242][ T31] dvb_usbv2_probe+0x4c3/0x3d40 [ 759.601704][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 759.607862][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 759.617339][ T31] usb_probe_interface+0x659/0xc70 [ 759.624672][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 759.632083][ T31] really_probe+0x267/0xaf0 [ 759.637080][ T31] __driver_probe_device+0x1ef/0x380 [ 759.652779][ T31] driver_probe_device+0x4f/0x240 [ 759.662915][ T31] __device_attach_driver+0x279/0x430 [ 759.674203][ T31] bus_for_each_drv+0x258/0x2f0 [ 759.684254][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 759.697771][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 759.710574][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 759.726147][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 759.741385][ T31] __device_attach+0x2c5/0x450 [ 759.751467][ T31] ? __pfx___device_attach+0x10/0x10 [ 759.763238][ T31] ? _raw_spin_unlock+0x28/0x50 [ 759.773717][ T31] device_initial_probe+0xa1/0xd0 [ 759.778905][ T31] bus_probe_device+0x12a/0x220 [ 759.784151][ T31] device_add+0x7e9/0xbb0 [ 759.785418][ T7142] hub 4-1:0.0: activate --> -90 [ 759.788718][ T31] usb_set_configuration+0x1a87/0x2110 [ 759.801455][ T31] usb_generic_driver_probe+0x8d/0x150 [ 759.807087][ T31] usb_probe_device+0x1c4/0x3b0 [ 759.812164][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 759.818237][ T31] really_probe+0x267/0xaf0 [ 759.822808][ T31] __driver_probe_device+0x1ef/0x380 [ 759.828297][ T31] driver_probe_device+0x4f/0x240 [ 759.833386][ T31] __device_attach_driver+0x279/0x430 [ 759.838834][ T31] bus_for_each_drv+0x258/0x2f0 [ 759.843706][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 759.849852][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 759.855647][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 759.860902][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 759.866867][ T31] __device_attach+0x2c5/0x450 [ 759.871773][ T31] ? __pfx___device_attach+0x10/0x10 [ 759.877257][ T31] ? _raw_spin_unlock+0x28/0x50 [ 759.882135][ T31] device_initial_probe+0xa1/0xd0 [ 759.888310][ T31] bus_probe_device+0x12a/0x220 [ 759.893232][ T31] device_add+0x7e9/0xbb0 [ 759.902211][ T31] usb_new_device+0xa08/0x16f0 [ 759.907188][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 759.912508][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.917801][ T31] hub_event+0x2a1c/0x4f30 [ 759.922244][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 759.927669][ T31] ? __pfx_hub_event+0x10/0x10 [ 759.932490][ T31] ? process_scheduled_works+0xa70/0x1860 [ 759.938337][ T31] ? process_scheduled_works+0xa70/0x1860 [ 759.944105][ T31] ? process_scheduled_works+0xa70/0x1860 [ 759.950064][ T31] process_scheduled_works+0xb5d/0x1860 [ 759.955909][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 759.961907][ T31] ? assign_work+0x3d5/0x5e0 [ 759.966733][ T31] worker_thread+0xa53/0xfc0 [ 759.971390][ T31] kthread+0x389/0x470 [ 759.975647][ T31] ? __pfx_worker_thread+0x10/0x10 [ 759.980897][ T31] ? __pfx_kthread+0x10/0x10 [ 759.985984][ T31] ret_from_fork+0x514/0xb70 [ 759.990636][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 759.995809][ T31] ? __switch_to+0xc79/0x1410 [ 760.000530][ T31] ? __pfx_kthread+0x10/0x10 [ 760.005352][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.010198][ T31] [ 760.013572][ T31] [ 760.013572][ T31] Showing all locks held in the system: [ 760.021783][ T31] 5 locks held by kworker/1:1/29: [ 760.027577][ T31] #0: ffff8880202b9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 760.051600][ T31] #1: ffffc90000a47c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 760.076841][ T31] #2: ffff88802a1d61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 760.094457][ T31] #3: ffff88803f9201d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 760.106020][ T31] #4: ffff888078d751a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 760.118597][ T31] 1 lock held by khungtaskd/31: [ 760.123490][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 760.133987][ T31] 2 locks held by kworker/u8:3/48: [ 760.139629][ T31] 1 lock held by syslogd/4975: [ 760.145472][ T31] 2 locks held by getty/5382: [ 760.150201][ T31] #0: ffff88803681a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 760.160622][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 760.171270][ T31] 4 locks held by kworker/0:8/7142: [ 760.176679][ T31] #0: ffff8880202b9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 760.191070][ T31] #1: ffffc900034efc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 760.203107][ T31] #2: ffff888020fce1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 760.212092][ T31] #3: ffff888029ce2568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x631/0x4f30 [ 760.222212][ T31] 4 locks held by udevd/11147: [ 760.226098][ T7144] usb 4-1: USB disconnect, device number 9 [ 760.227045][ T31] #0: ffff888081be3098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 760.241776][ T31] #1: ffff888058737c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 760.254716][ T31] #2: ffff888053170e18 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 760.274443][ T31] #3: ffff88803f9201d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 760.287245][ T31] 2 locks held by syz.4.3789/18598: [ 760.292469][ T31] #0: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 760.301742][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 760.312859][ T31] [ 760.315371][ T31] ============================================= [ 760.315371][ T31] [ 760.323990][ T31] NMI backtrace for cpu 1 [ 760.324009][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 760.324032][ T31] Tainted: [L]=SOFTLOCKUP [ 760.324039][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.324051][ T31] Call Trace: [ 760.324058][ T31] [ 760.324066][ T31] dump_stack_lvl+0xe8/0x150 [ 760.324093][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 760.324117][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 760.324139][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 760.324163][ T31] sys_info+0x135/0x170 [ 760.324182][ T31] watchdog+0xfd3/0x1030 [ 760.324214][ T31] ? watchdog+0x1c9/0x1030 [ 760.324245][ T31] kthread+0x389/0x470 [ 760.324271][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.324293][ T31] ? __pfx_kthread+0x10/0x10 [ 760.324316][ T31] ret_from_fork+0x514/0xb70 [ 760.324339][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.324356][ T31] ? __switch_to+0xc79/0x1410 [ 760.324383][ T31] ? __pfx_kthread+0x10/0x10 [ 760.324405][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.324440][ T31] [ 760.435037][ T31] Sending NMI from CPU 1 to CPUs 0: [ 760.441103][ C0] NMI backtrace for cpu 0 [ 760.441124][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.441147][ C0] Tainted: [L]=SOFTLOCKUP [ 760.441153][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.441164][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 760.441193][ C0] Code: 7b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 21 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 760.441208][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 760.441223][ C0] RAX: 0000000000cacbcd RBX: ffffffff819a958a RCX: 0000000080000001 [ 760.441235][ C0] RDX: 0000000000000001 RSI: ffffffff8dfacd65 RDI: ffffffff8c28b660 [ 760.441247][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 760.441261][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 760.441272][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 760.441285][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 760.441298][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.441310][ C0] CR2: 00000000583bf21c CR3: 00000000749c0000 CR4: 00000000003526f0 [ 760.441325][ C0] Call Trace: [ 760.441332][ C0] [ 760.441338][ C0] default_idle+0x9/0x20 [ 760.441356][ C0] default_idle_call+0x72/0xb0 [ 760.441375][ C0] do_idle+0x36a/0x5f0 [ 760.441397][ C0] ? __pfx_do_idle+0x10/0x10 [ 760.441416][ C0] ? do_idle+0xa/0x5f0 [ 760.441435][ C0] cpu_startup_entry+0x43/0x60 [ 760.441454][ C0] rest_init+0x2de/0x300 [ 760.441473][ C0] start_kernel+0x38a/0x3e0 [ 760.441498][ C0] x86_64_start_reservations+0x24/0x30 [ 760.441518][ C0] x86_64_start_kernel+0x143/0x1c0 [ 760.441536][ C0] common_startup_64+0x13e/0x147 [ 760.441564][ C0] [ 760.461435][ T7142] usb 4-1-port1: config error [ 760.464474][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 760.464502][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 760.464529][ T31] Tainted: [L]=SOFTLOCKUP [ 760.464537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.464549][ T31] Call Trace: [ 760.464564][ T31] [ 760.464573][ T31] vpanic+0x56c/0xa60 [ 760.464601][ T31] ? __pfx___schedule+0x10/0x10 [ 760.464628][ T31] ? __pfx_vpanic+0x10/0x10 [ 760.464650][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 760.464679][ T31] panic+0xc5/0xd0 [ 760.464700][ T31] ? __pfx_panic+0x10/0x10 [ 760.464722][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 760.464753][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 760.464778][ T31] watchdog+0x102c/0x1030 [ 760.464811][ T31] ? watchdog+0x1c9/0x1030 [ 760.464842][ T31] kthread+0x389/0x470 [ 760.464866][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.464889][ T31] ? __pfx_kthread+0x10/0x10 [ 760.464914][ T31] ret_from_fork+0x514/0xb70 [ 760.464937][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.464957][ T31] ? __switch_to+0xc79/0x1410 [ 760.464985][ T31] ? __pfx_kthread+0x10/0x10 [ 760.465010][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.465046][ T31] [ 760.472817][ T31] Kernel Offset: disabled