last executing test programs: 9.143139473s ago: executing program 1 (id=304): unshare(0x20000400) syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280), &(0x7f0000000140), &(0x7f0000000180)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr\x00') fchdir(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) (async) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) eventfd(0x8) (async) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r6 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x110a}, 0x1}) (async) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/14, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="05000000030000000200"/28], 0x50) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r10 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 8.691396333s ago: executing program 1 (id=305): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x2a1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) 7.391549445s ago: executing program 1 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x88000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x1010, r0, 0x8000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) splice(0xffffffffffffffff, &(0x7f00000002c0)=0x1, r1, &(0x7f0000000300)=0x7, 0x847, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x40010142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1d, 0x180, 0x2000000000000000, 0x4, 0xed, 0x4c, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x197a88923f9fada2, 0x4182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="e80d0200000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b15, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x10b8, 0x0, 0x2, 0x20, 0x10, 0x6c}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x300}, 0x0) 6.279613364s ago: executing program 2 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) poll(&(0x7f0000000000)=[{r2, 0xa}], 0x1, 0xa1) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 5.720529231s ago: executing program 2 (id=326): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x4, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x2, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x6) r5 = landlock_create_ruleset(&(0x7f0000000040)={0xc7e, 0x3, 0x3, 0x8, 0xc}, 0x30, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f00000000c0)={0x200, 0x7, 0x0, 0x1, 0x1}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r8, &(0x7f0000000400)=""/255, 0xff, 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) bind$unix(r7, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) landlock_restrict_self(r5, 0x1) connect$unix(r6, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 4.755820662s ago: executing program 2 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x76, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x2000000, 0x4801}, 0x4040000) 4.600433102s ago: executing program 2 (id=335): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1f, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x2, 0x1001f}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000001009608d1e083c8a60ae5d3668b5a06c3e0779e838d84d088e0e7"], 0x10, 0x20000000}}], 0x1, 0x4018080) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x10001e, 0x1000f9}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1eed2c00000000000109022400010000000009040000010300080009210000040122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000240)={0xc, &(0x7f0000000080)={0x0, 0xc, 0x3d, {0x3d, 0xb1b06b31e90358f1, "898cf568b6138d7540e8323d34d1666fc0bb7ba4ef3d227c45dc0293432bf9ee301c8fae727a6354eafa3675ceeff03cb6cc7d80174247bf6b658a"}}, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}, 0x1, 0x0, 0x0, 0x20004051}, 0x4008000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x2) ptrace$getregset(0x4205, r6, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) 4.219646526s ago: executing program 1 (id=336): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000801) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)={0x10, 0x69, 0x1, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20004880}, 0x0) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000e40)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xd3\xfd:\xb4\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7Z$e&1\xe0\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r6 = userfaultfd(0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a000000050004e9ffffff4e1c1e2e30c47c4b4a15691aec1c0900020066888c556a3d67dc73797a31000000000c000300"], 0x44}}, 0x8000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000050900020073797a31000000000500010007000015ea5abd801800018014000240fe8000000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/40, 0x28}, {0x0}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) dup2(r9, r9) 3.876846652s ago: executing program 3 (id=337): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x3, 0x3, 0x2, 0xa, 0xfff8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.789872713s ago: executing program 3 (id=338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 3.700137046s ago: executing program 0 (id=339): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x4, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0xf7dd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x7fffffff, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x4000002, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x5, 0x800, 0x1, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x2000003, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0x80000001]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) writev(r2, 0x0, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002c08000300", @ANYRES32=r11, @ANYBLOB="18001d801400008006000500480000000500090000000000"], 0x34}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4, 0x9}, {0xffff, 0x9}, {0x2, 0x8}}}, 0x24}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 3.586144881s ago: executing program 3 (id=340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x6f8b31f9c54f95f9}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x8013, r5, 0x180000000) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 3.416917461s ago: executing program 3 (id=342): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) syz_io_uring_setup(0x5b0f, 0x0, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 3.321953087s ago: executing program 0 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x17d4}}, 0x0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x40}}, 0x8080) 3.209887695s ago: executing program 3 (id=344): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x40}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @private1}}}}}}, 0x0) 3.199515765s ago: executing program 1 (id=345): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRES32=r1, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) select(0x40, &(0x7f00000001c0)={0x7, 0x8, 0x81, 0xd50, 0x3, 0x4, 0x2, 0x8000000000000000}, &(0x7f0000002240)={0xd, 0x8000000000000001, 0x7ff, 0xfffffffffffffff7, 0x7, 0x7, 0x10, 0x8}, &(0x7f0000002280)={0x400, 0x3, 0x9, 0x1, 0xc, 0xfffffffffffffffa, 0x8, 0x9}, &(0x7f00000022c0)) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xb55}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a00", 0x14, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000002480)={0xdf, 0x0, 0x18000}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r5, r4}, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x100000d, 0x4081012, r8, 0x0) futimesat(r8, 0x0, &(0x7f0000000480)={{0x0, 0x2710}, {0x0, 0x2710}}) pidfd_send_signal(r8, 0xe, &(0x7f0000002380)={0x1c, 0xfffffffd, 0x8}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pselect6(0x40, &(0x7f0000000240)={0x10, 0x0, 0x7, 0x20000000080, 0x3, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x8, 0x7, 0xffffffffffffffff, 0x9, 0x4, 0x6, 0x5, 0x1ffffffffffff}, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000150a05001b00000000200000010000000900020073797a31000000000800034000000002"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.010549265s ago: executing program 3 (id=346): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xfffffff, 0x20007, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9d0903, 0x1, '\x00', @p_u16=&(0x7f0000000140)=0xf}}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000005d008000000000000053b31d56da4c74116342564909c0d4bfb8472b8c3f1612cdf1ae80320c59b3744ed850bc22ea3a607f1631444e232d214157f5c8834b15bf478e26d38cffa4aa852f6020cebedfedcbe31c8062b2b13d586fa03003ca3bdca3fc5f2c4659b79c6c95256427f17aa33ab2595ed38295f82def7bcd1844f98b38fa36187195fd3a42e74ce76e8ee3b2aa643583b3783ae8df7e27ba062dafe2a5214fbc3dc79d3bebc73e8439acee781dbd40", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000018110000", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="58cec3a4bb335968cb2c579ccbc029412c7e74d66fa3dace08cec726e2731c1d4fd16d91ccc4e6d4981e0f04a68a1d1a7e0280ae0aeb608b279820b52946cbabe1e5fe20f8d450b05132da490067be92b48ccc2981c8b79449a0", @ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x6}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000440)={&(0x7f0000000540)={{@host=0x10, 0xfffefffd}, {@local, 0x1}, 0x400, "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"}, 0x418, 0x2001}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040)) r9 = fcntl$getown(r3, 0x9) syz_open_procfs(r9, &(0x7f0000000480)='net/sco\x00') 2.848831759s ago: executing program 4 (id=347): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) syz_open_dev$sndctrl(0x0, 0x84, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r1, &(0x7f0000000140)=""/52, 0x34) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20c082, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x81, 0x0, 0x0, 0x0, 0x200000, 0x9}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1b, 0x0, 0xfee00c00}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x808}]}) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x808}]}) 2.740966345s ago: executing program 4 (id=348): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0x28}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x22603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0xa5, 0x2, &(0x7f0000000000)={0x19, "8744d5aa372f7bdf593fbe878d1da57a08db61c8c7879d938d848f41e5aefe4ab6"}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f00000001c0)=[{0x1000, 0x5820, 0x0, 0x0}, {0x4, 0x8201, 0x0, 0x0}], 0x2}) 2.681774266s ago: executing program 4 (id=349): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001c40), 0x0, 0x0, 0x0) 1.732792245s ago: executing program 0 (id=350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 1.731151919s ago: executing program 4 (id=351): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x70000000, @mcast1, 0x1}], 0x1c) (fail_nth: 2) 1.300797397s ago: executing program 4 (id=352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x6f8b31f9c54f95f9}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x8013, r5, 0x180000000) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 1.247663473s ago: executing program 0 (id=353): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x400, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x6, 0x334, 0x6a9}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bfffb601288763"], 0xffdd) 1.203745414s ago: executing program 2 (id=354): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) syz_io_uring_setup(0x5b0f, 0x0, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 1.03672931s ago: executing program 4 (id=355): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) syz_clone(0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0x2, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x80\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000483a0000000000000000000000000000000000ff02000000000000000000000000000101049078000000006027738200000000fc010000000000000000000000000000200100000000000000000000000000012f0100000000000007080000000000000000000000000000331c1ea2eaf1f36669fc27c04fe192"], 0x0) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) close(r6) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) 1.034186484s ago: executing program 0 (id=356): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x40}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @private1}}}}}}, 0x0) 984.775286ms ago: executing program 2 (id=357): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203110902120001000000000904"], 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c000180060006000806"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x2, 0x1, 0xfff, 0x5, 0x5, 0xb}) (async, rerun: 32) mprotect(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x1000000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c004) (async) setpriority(0x1, r1, 0x3) (async) syz_usb_control_io(r0, &(0x7f00000005c0)={0x18, &(0x7f00000001c0)={0x0, 0x10, 0xc4, {0xc4, 0x7, "60e47522762ec9fcc02d946bb8e9f217a69e67b49099c1ba8bde9fdaf13d7d63f5fcc0e2ab8c75fb17ebda024994c47a150b5eae1112181087b415f5b09c4089c98abc2eafbc5ba040b7336bdd35c78b87e450aa45f017c80ddd117b083b4618f72fe1ed943dc0e8a9f0aab5684e303da6df54839d5317ded317de9a02c92b2e83e908f91dd84825dae165d89c7b244f06950edcd5a3ff9ae3ddd6a735a8ce3376845e15708429e129c9e844c2ccbf72c35e34b1a39e1f2c0fa226d59e8667a2649e"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f00000003c0)={0x0, 0xf, 0x141, {0x5, 0xf, 0x141, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8e, "16d1113801568cfca14b3edbf05c33c9"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x0, 0x7ff}, @generic={0x103, 0x10, 0x1, "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"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x70b6, 0xff00, 0x10, [0x410f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x5}, @ptm_cap={0x3}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x82, 0x0, 0x7, 0xca, "4304adfd", "48c29a14"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x4, 0x83, 0xf6, 0x4, 0x9}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000600)={0x0, 0xf, 0xa8, "6d6d927de8bdfc07cca248370418c48d8b0aab23c68b83d2002c0b7e8079ed2c873b0ccc294cc5f2ad62f7576c41c19eb58708f8b34f513f10e256b1d7ea90ed3ab687b6759172059b0ba7c150c16021b88c20aef95431026051b8a0266e011b296d075e04ff6c5f6610d2340cb99e2ec9930f69ac42693dcd3f9a4e51f3205b29f35403bb4fec8bd6067ea432d5afb0b2ce27ce159b7c285926dcd1523453686124b6826a721ed8"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x200, 0x2}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0xb, 0x2, '~^'}, &(0x7f0000000880)={0x40, 0xf, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random="759ceaa13f48"}, &(0x7f0000000940)={0x40, 0x19, 0x2, "4d87"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x10}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0xe9}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x5}}) 868.606778ms ago: executing program 0 (id=358): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000002680)=""/4078) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000001c0)=0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0xf9fd, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x6f45}, {0x0, 0x0, 0xe, 0x2}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@remote, 0x0, 0x3}}, 0xe8) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='epdate default trusted:'], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r9 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000ac0)={0xe, {0x10000, 0xf, 0x1c5a, 0x10}, {0x2, 0x4, 0x5}, {0x0, 0x2}}) syz_usb_control_io(r0, &(0x7f0000000700)={0x18, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000"], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20840400000000000094"], 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=359): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0x28}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x22603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0xa5, 0x2, &(0x7f0000000000)={0x19, "8744d5aa372f7bdf593fbe878d1da57a08db61c8c7879d938d848f41e5aefe4ab6"}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f00000001c0)=[{0x1000, 0x5820, 0x0, 0x0}, {0x4, 0x8201, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): ate [ 92.253789][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.275051][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.296810][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.304049][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.315758][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.322966][ T3309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.335464][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.365163][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.372435][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.447171][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.511261][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.518474][ T3309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.552710][ T188] cfg80211: failed to load regulatory.db [ 92.562250][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.585086][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.592275][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.647876][ T5640] veth0_vlan: entered promiscuous mode [ 92.658766][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.687128][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.694322][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.704254][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.711466][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.743285][ T5640] veth1_vlan: entered promiscuous mode [ 92.783123][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.847295][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.882398][ T5640] veth0_macvtap: entered promiscuous mode [ 92.913477][ T5640] veth1_macvtap: entered promiscuous mode [ 92.988783][ T5630] veth0_vlan: entered promiscuous mode [ 93.005208][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.026518][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.057739][ T5630] veth1_vlan: entered promiscuous mode [ 93.072551][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.085044][ T5631] veth0_vlan: entered promiscuous mode [ 93.102563][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.146691][ T5631] veth1_vlan: entered promiscuous mode [ 93.159231][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.249998][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.275450][ T5639] veth0_vlan: entered promiscuous mode [ 93.289565][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.319296][ T5630] veth0_macvtap: entered promiscuous mode [ 93.348029][ T5637] Bluetooth: hci0: command tx timeout [ 93.373309][ T5639] veth1_vlan: entered promiscuous mode [ 93.381916][ T5630] veth1_macvtap: entered promiscuous mode [ 93.401827][ T5631] veth0_macvtap: entered promiscuous mode [ 93.410100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.418978][ T5631] veth1_macvtap: entered promiscuous mode [ 93.428972][ T5637] Bluetooth: hci1: command tx timeout [ 93.440490][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.502566][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.513207][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.515840][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.538639][ T5638] veth0_vlan: entered promiscuous mode [ 93.555063][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.576092][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.620149][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.647267][ T5638] veth1_vlan: entered promiscuous mode [ 93.668555][ T5637] Bluetooth: hci4: command tx timeout [ 93.668662][ T5624] Bluetooth: hci2: command tx timeout [ 93.680101][ T5633] Bluetooth: hci3: command tx timeout [ 93.691976][ T5640] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.711231][ T5639] veth0_macvtap: entered promiscuous mode [ 93.725017][ T5640] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.737176][ T5640] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.750279][ T5640] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.763752][ T5640] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.792561][ T5639] veth1_macvtap: entered promiscuous mode [ 93.874592][ T5725] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 93.928696][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938474][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.989370][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.047266][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.055308][ T5638] veth0_macvtap: entered promiscuous mode [ 94.076172][ T3309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.091247][ T3309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.100222][ T5727] syzkaller0: entered promiscuous mode [ 94.107026][ T5727] syzkaller0: entered allmulticast mode [ 94.138292][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.149861][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.176544][ T5638] veth1_macvtap: entered promiscuous mode [ 94.208102][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.235550][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.247315][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.356032][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.394111][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.409586][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.432554][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.599607][ T32] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.625742][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.667429][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.738772][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.769889][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.786491][ T5740] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.824255][ T5735] syzkaller0: entered promiscuous mode [ 94.844713][ T5735] syzkaller0: entered allmulticast mode [ 94.906228][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.927817][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.941534][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.031218][ T32] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.053696][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.073923][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.168559][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.369863][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.379593][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.404308][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.416436][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.428536][ T5637] Bluetooth: hci0: command tx timeout [ 95.455249][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.465383][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.508388][ T5637] Bluetooth: hci1: command tx timeout [ 95.539209][ T5758] binder: BINDER_SET_CONTEXT_MGR already set [ 95.561241][ T5758] binder: 5757:5758 ioctl 4018620d 80000040 returned -16 [ 95.581741][ T5755] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 95.713991][ T5755] bond1 (unregistering): Released all slaves [ 95.748091][ T5633] Bluetooth: hci4: command tx timeout [ 95.750588][ T5624] Bluetooth: hci3: command tx timeout [ 95.754554][ T5637] Bluetooth: hci2: command tx timeout [ 95.897862][ T5358] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 95.909657][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.038166][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.084143][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.106492][ T5358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.163744][ T5358] usb 5-1: config 0 has no interfaces? [ 96.205011][ T5358] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 96.237109][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.245677][ T32] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.283234][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.392758][ T5358] usb 5-1: config 0 descriptor?? [ 96.582098][ T5771] sg_write: data in/out 435166/674 bytes for SCSI command 0x0-- guessing data in; [ 96.582098][ T5771] program syz.3.14 not setting count and/or reply_len properly [ 97.143638][ T5758] syz.1.13 (5758): drop_caches: 2 [ 97.865793][ T5784] fuse: Bad value for 'fd' [ 98.237966][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 98.278645][ T5794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'. [ 98.561209][ T5794] kvm: MWAIT instruction emulated as NOP! [ 98.578903][ T188] IPVS: starting estimator thread 0... [ 98.607721][ T5790] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 98.707577][ T5800] IPVS: using max 26 ests per chain, 62400 per kthread [ 99.214978][ T5358] usb 5-1: string descriptor 0 read error: -71 [ 99.315250][ T5358] usb 5-1: USB disconnect, device number 2 [ 99.698785][ T5720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.951988][ T5720] usb 1-1: config 32 has an invalid interface number: 255 but max is 0 [ 99.967459][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.990282][ T5720] usb 1-1: config 32 has no interface number 0 [ 100.012138][ T5720] usb 1-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 100.062530][ T5720] usb 1-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 100.106397][ T5720] usb 1-1: config 32 interface 255 has no altsetting 0 [ 100.123227][ T10] usb 5-1: device descriptor read/64, error -71 [ 100.133101][ T5720] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 100.171958][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.244129][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.294731][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.346926][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.390055][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.403208][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.458638][ T5806] program syz.0.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.473090][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.484136][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.519872][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.560721][ T10] usb 5-1: device descriptor read/64, error -71 [ 100.629570][ T5720] usb 1-1: string descriptor 0 read error: -71 [ 100.676775][ T5720] usb-storage 1-1:32.255: USB Mass Storage device detected [ 100.692545][ T10] usb usb5-port1: attempt power cycle [ 100.757589][ T5720] usb-storage 1-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 100.892676][ T5720] usb 1-1: USB disconnect, device number 2 [ 101.077542][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.118560][ T10] usb 5-1: device descriptor read/8, error -71 [ 101.377502][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.442139][ T10] usb 5-1: device descriptor read/8, error -71 [ 101.568432][ T10] usb usb5-port1: unable to enumerate USB device [ 101.719094][ T5828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 102.152076][ T5834] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 102.168064][ T5839] binder: BINDER_SET_CONTEXT_MGR already set [ 102.183164][ T5839] binder: 5837:5839 ioctl 4018620d 80000040 returned -16 [ 102.512518][ T5844] trusted_key: syz.1.34 sent an empty control message without MSG_MORE. [ 102.794149][ T5720] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.957839][ T5720] usb 2-1: device descriptor read/64, error -71 [ 103.060311][ T10] IPVS: starting estimator thread 0... [ 103.168121][ T5851] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.228842][ T5720] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.303012][ T5854] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 103.377957][ T5720] usb 2-1: device descriptor read/64, error -71 [ 103.432957][ T29] audit: type=1326 audit(1785613623.055:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 103.494178][ T29] audit: type=1326 audit(1785613623.055:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 103.526267][ T5720] usb usb2-port1: attempt power cycle [ 103.533261][ T5858] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 103.572940][ T29] audit: type=1326 audit(1785613623.055:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 103.647538][ T29] audit: type=1326 audit(1785613623.055:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 103.719861][ T29] audit: type=1326 audit(1785613623.055:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 103.840108][ T29] audit: type=1326 audit(1785613623.055:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 103.931770][ T5720] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.984555][ T5839] syz.3.32 (5839): drop_caches: 2 [ 103.994213][ T29] audit: type=1326 audit(1785613623.055:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 104.032045][ T29] audit: type=1326 audit(1785613623.055:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 104.032199][ T5720] usb 2-1: device descriptor read/8, error -71 [ 104.065856][ T29] audit: type=1326 audit(1785613623.055:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 104.107061][ T29] audit: type=1326 audit(1785613623.055:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.2.36" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 104.328363][ T5720] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.359389][ T5720] usb 2-1: device descriptor read/8, error -71 [ 104.469126][ T5720] usb usb2-port1: unable to enumerate USB device [ 104.657442][ T188] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.711734][ T5866] netlink: 196 bytes leftover after parsing attributes in process `syz.0.39'. [ 104.812196][ T188] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.840724][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.884766][ T188] usb 4-1: config 0 descriptor?? [ 104.906543][ T188] cp210x 4-1:0.0: cp210x converter detected [ 104.974756][ T5869] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.075688][ T5870] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.352217][ T809] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 105.424395][ T5872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.545755][ T809] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 105.593805][ T809] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 105.640299][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.672223][ T809] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.698555][ T809] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.731894][ T809] usb 1-1: Product: syz [ 105.750636][ T809] usb 1-1: Manufacturer: syz [ 105.773878][ T809] usb 1-1: SerialNumber: syz [ 105.819262][ T809] usb 1-1: config 0 descriptor?? [ 105.931034][ T809] usb 1-1: selecting invalid altsetting 0 [ 106.319242][ T809] usb 1-1: USB disconnect, device number 3 [ 106.495453][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.586892][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 106.597868][ T5720] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.789652][ T5720] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 106.807760][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.808369][ T10] IPVS: starting estimator thread 0... [ 106.822367][ T5902] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 106.853848][ T5720] usb 2-1: config 0 descriptor?? [ 106.884625][ T5720] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 106.917878][ T5905] IPVS: using max 29 ests per chain, 69600 per kthread [ 107.036093][ T5908] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 107.047222][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.51'. [ 107.082534][ T5908] veth3: entered allmulticast mode [ 107.125056][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'. [ 107.207539][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.340400][ T188] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 107.350083][ T188] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 107.378465][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 107.380761][ T188] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 107.402097][ T24] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 107.411878][ T5885] netlink: 216 bytes leftover after parsing attributes in process `syz.1.44'. [ 107.458530][ T5885] netlink: 216 bytes leftover after parsing attributes in process `syz.1.44'. [ 107.533845][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 107.555809][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 107.568189][ T24] usb 3-1: Product: syz [ 107.581735][ T24] usb 3-1: Manufacturer: syz [ 107.601200][ T24] usb 3-1: SerialNumber: syz [ 107.640574][ T188] usb 4-1: cp210x converter now attached to ttyUSB0 [ 107.651356][ T24] usb 3-1: config 0 descriptor?? [ 107.705230][ T188] usb 4-1: USB disconnect, device number 2 [ 107.821625][ T188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.854701][ T188] cp210x 4-1:0.0: device disconnected [ 107.929269][ T24] usb 3-1: USB disconnect, device number 3 [ 108.217678][ T188] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.390918][ T188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.419705][ T188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.440227][ T188] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.458504][ T188] usb 4-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 108.473530][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.482120][ T188] usb 4-1: Product: syz [ 108.487424][ T188] usb 4-1: Manufacturer: syz [ 108.493958][ T188] usb 4-1: SerialNumber: syz [ 108.753174][ T5930] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 108.806265][ T5930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.850373][ T188] usb 4-1: unit 115 not found! [ 108.871930][ T188] usb 4-1: unit 255 not found! [ 109.115613][ T188] usb 4-1: USB disconnect, device number 3 [ 109.337241][ T5720] gspca_stv06xx: I2C: Read error writing address: -71 [ 109.382119][ T5689] udevd[5689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.451956][ T5720] usb 2-1: USB disconnect, device number 6 [ 109.631045][ T5944] fuse: Bad value for 'fd' [ 109.651876][ T5948] netlink: 'syz.3.62': attribute type 6 has an invalid length. [ 109.707199][ T5948] netlink: 176 bytes leftover after parsing attributes in process `syz.3.62'. [ 109.786518][ T5948] syzkaller0: entered promiscuous mode [ 109.811424][ T5948] syzkaller0: entered allmulticast mode [ 109.818113][ T188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.942983][ T5954] netlink: zone id is out of range [ 109.964818][ T5954] netlink: zone id is out of range [ 109.977230][ T5954] netlink: zone id is out of range [ 109.990699][ T5954] netlink: zone id is out of range [ 109.997066][ T188] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.013785][ T5954] netlink: zone id is out of range [ 110.023208][ T5954] netlink: zone id is out of range [ 110.029264][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.029650][ T5720] IPVS: starting estimator thread 0... [ 110.047192][ T5954] netlink: zone id is out of range [ 110.052716][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.065430][ T5962] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 110.073134][ T188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.092957][ T188] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.103492][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.117765][ T188] usb 1-1: config 0 descriptor?? [ 110.147531][ T5966] IPVS: using max 26 ests per chain, 62400 per kthread [ 110.167843][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.228801][ T42] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 110.318198][ T9] usb 5-1: device descriptor read/64, error -71 [ 110.332052][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.342136][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.392424][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.401127][ T42] usb 2-1: not running at top speed; connect to a high speed hub [ 110.415809][ T42] usb 2-1: config 6 has an invalid interface number: 196 but max is 0 [ 110.428919][ T42] usb 2-1: config 6 has no interface number 0 [ 110.436065][ T42] usb 2-1: config 6 interface 196 has no altsetting 0 [ 110.459467][ T42] usb 2-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice=ed.2e [ 110.491221][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.501442][ T42] usb 2-1: Product: syz [ 110.505706][ T42] usb 2-1: Manufacturer: syz [ 110.512126][ T42] usb 2-1: SerialNumber: syz [ 110.541120][ T42] r8152-cfgselector 2-1: Unknown version 0x0000 [ 110.571471][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.637122][ T188] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.727458][ T9] usb 5-1: device descriptor read/64, error -71 [ 110.785254][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.801297][ T42] hub 2-1:6.196: bad descriptor, ignoring hub [ 110.825270][ T42] hub 2-1:6.196: probe with driver hub failed with error -5 [ 110.836275][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.853156][ T9] usb usb5-port1: attempt power cycle [ 110.880345][ T42] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 111.229097][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.258141][ T9] usb 5-1: device descriptor read/8, error -71 [ 111.457515][ T188] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.497563][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.522612][ T24] usb 1-1: USB disconnect, device number 4 [ 111.539492][ T9] usb 5-1: device descriptor read/8, error -71 [ 111.621973][ T188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.633965][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.648913][ T9] usb usb5-port1: unable to enumerate USB device [ 111.655411][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.668913][ T188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.685232][ T188] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.697461][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.713330][ T188] usb 3-1: config 0 descriptor?? [ 111.858350][ T5718] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.019654][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 112.032395][ T5718] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.060335][ T5718] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 112.081723][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.096270][ T5718] usb 4-1: config 0 descriptor?? [ 112.165515][ T188] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 112.181593][ T5992] FAULT_INJECTION: forcing a failure. [ 112.181593][ T5992] name failslab, interval 1, probability 0, space 0, times 1 [ 112.196664][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(full) [ 112.196691][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.196723][ T5992] Call Trace: [ 112.196731][ T5992] [ 112.196738][ T5992] dump_stack_lvl+0xe8/0x150 [ 112.196779][ T5992] should_fail_ex+0x40c/0x560 [ 112.196808][ T5992] should_failslab+0xa8/0x100 [ 112.196836][ T5992] __kmalloc_noprof+0xfe/0x720 [ 112.196858][ T5992] ? __kmalloc_noprof+0x1ad/0x720 [ 112.196878][ T5992] ? __vb2_queue_alloc+0x2a0/0x1660 [ 112.196898][ T5992] ? __vb2_queue_alloc+0x2a0/0x1660 [ 112.196922][ T5992] __vb2_queue_alloc+0x2a0/0x1660 [ 112.196961][ T5992] vb2_core_create_bufs+0x7ec/0xe20 [ 112.196991][ T5992] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 112.197009][ T5992] ? __mutex_trylock_common+0x15f/0x270 [ 112.197032][ T5992] ? vb2_set_flags_and_caps+0x2ee/0x5c0 [ 112.197055][ T5992] vb2_create_bufs+0x59c/0xa90 [ 112.197082][ T5992] ? __pfx_vb2_create_bufs+0x10/0x10 [ 112.197103][ T5992] ? vb2_set_flags_and_caps+0x2ee/0x5c0 [ 112.197127][ T5992] vb2_ioctl_create_bufs+0x286/0x3f0 [ 112.197151][ T5992] v4l_create_bufs+0x175/0x290 [ 112.197173][ T5992] __video_do_ioctl+0x8af/0xc70 [ 112.197204][ T5992] ? __pfx___video_do_ioctl+0x10/0x10 [ 112.197228][ T5992] ? __kmalloc_noprof+0x1ad/0x720 [ 112.197248][ T5992] ? video_usercopy+0x1b1/0x1430 [ 112.197271][ T5992] ? video_usercopy+0x1b1/0x1430 [ 112.197300][ T5992] video_usercopy+0x860/0x1430 [ 112.197331][ T5992] ? __pfx___video_do_ioctl+0x10/0x10 [ 112.197357][ T5992] ? __pfx_video_usercopy+0x10/0x10 [ 112.197399][ T5992] ? __fget_files+0x2a/0x420 [ 112.197430][ T5992] v4l2_ioctl+0x18d/0x1e0 [ 112.197454][ T5992] v4l2_compat_ioctl32+0x1c4/0x270 [ 112.197474][ T5992] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 112.197497][ T5992] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 112.197518][ T5992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.197543][ T5992] ? __fget_files+0x3a2/0x420 [ 112.197577][ T5992] ? fput+0xa0/0xd0 [ 112.197604][ T5992] ? ksys_write+0x242/0x270 [ 112.197637][ T5992] __do_fast_syscall_32+0x23e/0x6f0 [ 112.197665][ T5992] ? do_fast_syscall_32+0x33/0x70 [ 112.197691][ T5992] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.197715][ T5992] ? asm_int80_emulation+0x1a/0x20 [ 112.197735][ T5992] ? do_int80_emulation+0x29f/0x550 [ 112.197778][ T5992] do_fast_syscall_32+0x33/0x70 [ 112.197807][ T5992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.197838][ T5992] RIP: 0023:0xf70af0ec [ 112.197866][ T5992] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 112.197883][ T5992] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 112.197909][ T5992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 112.197923][ T5992] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.197936][ T5992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.197947][ T5992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.197959][ T5992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.197990][ T5992] [ 112.585309][ T188] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 112.901931][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 112.912072][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 112.916324][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 112.921236][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 112.937154][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 112.945381][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 112.973009][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 112.996703][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 113.005064][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 113.020188][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 113.031729][ T5998] netlink: 36 bytes leftover after parsing attributes in process `syz.4.75'. [ 113.042451][ T5718] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 113.074928][ T5718] kovaplus 0003:1E7D:2D50.0003: hidraw1: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 113.091714][ T6004] net_ratelimit: 499 callbacks suppressed [ 113.091734][ T6004] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 113.212389][ T5720] usb 3-1: USB disconnect, device number 4 [ 113.297532][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.414866][ T6012] syzkaller0: entered promiscuous mode [ 113.421241][ T6012] syzkaller0: entered allmulticast mode [ 113.457681][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 113.469950][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 113.482906][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.494976][ T9] usb 2-1: config 0 has no interface number 0 [ 113.501341][ T9] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 113.513935][ T9] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.539725][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 113.567388][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.578847][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.599639][ T9] usb 2-1: Product: syz [ 113.604349][ T9] usb 2-1: Manufacturer: syz [ 113.609955][ T9] usb 2-1: SerialNumber: syz [ 113.629268][ T9] usb 2-1: config 0 descriptor?? [ 113.657249][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 113.672971][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 113.768581][ T5720] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 113.791848][ T5718] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 113.807244][ T5718] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 113.836495][ T5718] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71 [ 113.858097][ T6018] process 'syz.0.82' launched '/dev/fd/3' with NULL argv: empty string added [ 113.872354][ T5718] usb 4-1: USB disconnect, device number 4 [ 113.958770][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.119926][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 114.133303][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 114.143293][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 114.158902][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.168180][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.176529][ T9] usb 3-1: Product: ࠐ [ 114.181402][ T9] usb 3-1: Manufacturer: ᰁ [ 114.186043][ T9] usb 3-1: SerialNumber: з [ 114.189865][ T5720] usb 5-1: device descriptor read/64, error -71 [ 114.196928][ T42] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.251024][ T6003] input: syz0 as /devices/virtual/input/input7 [ 114.369290][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 114.405790][ T42] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 114.427247][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.439369][ T5720] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 114.482918][ T42] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.513187][ T42] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 114.535165][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.559064][ T42] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.589104][ T42] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 114.607624][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.639857][ T5720] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 114.642261][ T9] cdc_ncm 3-1:1.0: bind() failure [ 114.654990][ T42] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.681009][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.706975][ T5720] usb 5-1: Product: syz [ 114.719324][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 114.731817][ T42] usb 1-1: string descriptor 0 read error: -22 [ 114.739799][ T5720] usb 5-1: Manufacturer: syz [ 114.750233][ T42] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.756692][ T9] cdc_ncm 3-1:1.1: bind() failure [ 114.767934][ T5720] usb 5-1: SerialNumber: syz [ 114.779898][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.791028][ T5720] usb 5-1: config 0 descriptor?? [ 114.823443][ T9] usb 3-1: USB disconnect, device number 5 [ 114.863580][ T42] adutux 1-1:168.0: interrupt endpoints not found [ 115.067027][ T5690] usb 1-1: USB disconnect, device number 5 [ 115.130921][ T5720] usb 5-1: USB disconnect, device number 12 [ 115.425958][ T6042] Zero length message leads to an empty skb [ 115.986559][ T5690] usb 2-1: USB disconnect, device number 8 [ 115.994997][ T6058] fuse: Unknown parameter 'fdNa)ԇn' [ 116.488298][ T6077] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 116.548535][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.552406][ T5718] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.597694][ T5720] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.606003][ T5718] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 116.778797][ T5722] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.807445][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 116.829735][ T5720] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 116.838888][ T6084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.847801][ T5720] usb 5-1: config 0 has no interface number 0 [ 116.884525][ T5720] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.916700][ T5720] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 116.938256][ T5720] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.958299][ T5720] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.004569][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.015652][ T5720] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.042028][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.052440][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.067178][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.083741][ T5720] usb 5-1: config 0 descriptor?? [ 117.101795][ T5722] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 117.140004][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.157034][ T5720] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 117.166597][ T5722] usb 4-1: Product: syz [ 117.173391][ T5722] usb 4-1: Manufacturer: syz [ 117.195787][ T5722] usb 4-1: SerialNumber: syz [ 117.234224][ T5722] usb 4-1: selecting invalid altsetting 1 [ 117.259719][ T5722] usb 4-1: unit 6 not found! [ 117.384066][ T9] usb 5-1: USB disconnect, device number 13 [ 117.385707][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 117.401772][ T6069] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 117.472695][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 118.378483][ T6114] binder_alloc: 6113: binder_alloc_buf size 4294966672 failed, no address space [ 118.414722][ T6114] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 118.689760][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.748094][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.792647][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.799947][ T5718] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 118.831507][ T5718] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 118.849982][ T5722] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 118.869250][ T6121] syzkaller0: entered promiscuous mode [ 118.901581][ T6121] syzkaller0: entered allmulticast mode [ 118.954213][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 118.977418][ T5720] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.000986][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 119.086692][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 119.129132][ T5722] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.151945][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 119.177906][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.191244][ T5722] usb 4-1: USB disconnect, device number 5 [ 119.208574][ T5720] usb 5-1: config index 0 descriptor too short (expected 40744, got 96) [ 119.244570][ T5720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.275468][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 119.293634][ T5720] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.312935][ T5689] udevd[5689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.330926][ T5720] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 119.358021][ T5720] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 119.407065][ T5720] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 119.418347][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 119.474633][ T5720] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.507033][ T5720] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 119.532042][ T6130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.564669][ T5720] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 119.621562][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.665444][ T5720] usb 5-1: Product: syz [ 119.684891][ T5720] usb 5-1: Manufacturer: syz [ 119.724326][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 119.724848][ T5720] usb 5-1: SerialNumber: syz [ 119.787559][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 120.020708][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.065343][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.146547][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 120.197739][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 120.229589][ T5720] usb 5-1: 1:1 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 04 [ 120.289570][ T6147] fuse: Bad value for 'fd' [ 120.302685][ T6149] FAULT_INJECTION: forcing a failure. [ 120.302685][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.354318][ T5720] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 120.365076][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 120.365105][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.365119][ T6149] Call Trace: [ 120.365128][ T6149] [ 120.365136][ T6149] dump_stack_lvl+0xe8/0x150 [ 120.365174][ T6149] should_fail_ex+0x40c/0x560 [ 120.365208][ T6149] _copy_from_iter+0x1d3/0x1660 [ 120.365237][ T6149] ? sctp_chunkify+0x5a/0x260 [ 120.365259][ T6149] ? sctp_chunkify+0x5a/0x260 [ 120.365286][ T6149] ? sctp_addto_chunk+0xf8/0x220 [ 120.365309][ T6149] ? __asan_memcpy+0x40/0x70 [ 120.365336][ T6149] ? __pfx__copy_from_iter+0x10/0x10 [ 120.365366][ T6149] ? __asan_memcpy+0x40/0x70 [ 120.365392][ T6149] ? sctp_make_datafrag_empty+0x184/0x240 [ 120.365413][ T6149] ? __kasan_kmalloc+0x93/0xb0 [ 120.365444][ T6149] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 120.365466][ T6149] ? skb_put+0x112/0x210 [ 120.365493][ T6149] sctp_user_addto_chunk+0x7c/0x230 [ 120.365523][ T6149] sctp_datamsg_from_user+0x754/0xef0 [ 120.365571][ T6149] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 120.365608][ T6149] ? sctp_assoc_add_peer+0xd57/0x1430 [ 120.365653][ T6149] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 120.365681][ T6149] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 120.365711][ T6149] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 120.365739][ T6149] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 120.365766][ T6149] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 120.365795][ T6149] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 120.365819][ T6149] ? security_sctp_bind_connect+0x7e/0x2c0 [ 120.365855][ T6149] sctp_sendmsg+0x1bb5/0x2d00 [ 120.365898][ T6149] ? __pfx_sctp_sendmsg+0x10/0x10 [ 120.365932][ T6149] ? aa_sk_perm+0x6d5/0x900 [ 120.365967][ T6149] ? sock_rps_record_flow+0x19/0x350 [ 120.365992][ T6149] ? inet_sendmsg+0x298/0x320 [ 120.366016][ T6149] ? __pfx_inet_sendmsg+0x10/0x10 [ 120.366034][ T6149] sock_sendmsg_nosec+0x10e/0x180 [ 120.366065][ T6149] ____sys_sendmsg+0x54e/0x850 [ 120.366093][ T6149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.366130][ T6149] ___sys_sendmsg+0x2a5/0x360 [ 120.366151][ T6149] ? __lock_acquire+0x683/0x2cf0 [ 120.366182][ T6149] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.366204][ T6149] ? get_pid_task+0x20/0x1f0 [ 120.366231][ T6149] ? get_pid_task+0x20/0x1f0 [ 120.366254][ T6149] ? get_pid_task+0x20/0x1f0 [ 120.366307][ T6149] ? __fget_files+0x2a/0x420 [ 120.366332][ T6149] ? __fget_files+0x3a2/0x420 [ 120.366366][ T6149] __sys_sendmsg+0x177/0x240 [ 120.366390][ T6149] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.366430][ T6149] __do_fast_syscall_32+0x23e/0x6f0 [ 120.366457][ T6149] ? do_fast_syscall_32+0x33/0x70 [ 120.366479][ T6149] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.366504][ T6149] ? asm_int80_emulation+0x1a/0x20 [ 120.366521][ T6149] ? do_int80_emulation+0x29f/0x550 [ 120.366544][ T6149] ? trace_irq_disable+0x3b/0x140 [ 120.366578][ T6149] do_fast_syscall_32+0x33/0x70 [ 120.366602][ T6149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.366625][ T6149] RIP: 0023:0xf7f870ec [ 120.366642][ T6149] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 120.366657][ T6149] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 120.366677][ T6149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 120.366690][ T6149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.366701][ T6149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.366711][ T6149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.366722][ T6149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.366748][ T6149] [ 120.949345][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.951243][ T5718] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 121.054861][ T5718] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 121.224007][ T5720] usb 5-1: USB disconnect, device number 14 [ 121.605035][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.686012][ T6174] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.369949][ T6188] macvtap1: entered promiscuous mode [ 122.385687][ T6188] macvtap1: entered allmulticast mode [ 122.403124][ T6188] veth1_vlan: entered allmulticast mode [ 122.510642][ T5720] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.689485][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 122.716414][ T5720] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 122.765542][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.807598][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 122.846827][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.905175][ T5720] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 122.946003][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.975367][ T5720] usb 4-1: Product: syz [ 122.994718][ T5720] usb 4-1: Manufacturer: syz [ 123.016061][ T5720] usb 4-1: SerialNumber: syz [ 123.058909][ T5720] usb 4-1: config 0 descriptor?? [ 123.081807][ T6191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.268629][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.276850][ T5718] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 123.300110][ T5718] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 123.418167][ T5720] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 123.485045][ T5720] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 125.507574][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.507578][ T5718] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 125.507603][ T5718] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 125.859682][ T42] usb 4-1: USB disconnect, device number 6 [ 126.218456][ T188] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.341936][ T6264] __nla_validate_parse: 4 callbacks suppressed [ 126.341956][ T6264] netlink: 17 bytes leftover after parsing attributes in process `syz.4.125'. [ 126.388842][ T188] usb 2-1: Using ep0 maxpacket: 32 [ 126.423835][ T188] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 126.440182][ T188] usb 2-1: config 0 has no interface number 0 [ 126.447180][ T188] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 126.475206][ T188] usb 2-1: config 0 interface 184 has no altsetting 0 [ 126.487880][ T188] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 126.509959][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.529506][ T188] usb 2-1: Product: syz [ 126.537922][ T188] usb 2-1: Manufacturer: syz [ 126.555757][ T188] usb 2-1: SerialNumber: syz [ 126.572067][ T188] usb 2-1: config 0 descriptor?? [ 126.594821][ T6252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.821531][ T6252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.929025][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.938229][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.038009][ T6276] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 127.327525][ T188] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 127.365488][ T188] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 127.404518][ T188] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 127.455105][ T188] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 127.932090][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.993018][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.430444][ T6283] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 128.437244][ T6283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.486818][ T6283] vhci_hcd vhci_hcd.0: Device attached [ 128.604780][ T47] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.604849][ T47] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.604886][ T47] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.607619][ T47] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.897541][ T42] usb 34-1: SetAddress Request (2) to port 0 [ 128.913184][ T42] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 128.979221][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 129.012440][ T6284] vhci_hcd: connection reset by peer [ 129.024918][ T5718] usb 2-1: USB disconnect, device number 9 [ 129.043289][ T3309] vhci_hcd vhci_hcd.0: stop threads [ 129.054713][ T3309] vhci_hcd vhci_hcd.0: release socket [ 129.097706][ T3309] vhci_hcd vhci_hcd.0: disconnect device [ 129.415889][ T6302] FAULT_INJECTION: forcing a failure. [ 129.415889][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 129.466682][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.1.138 Not tainted syzkaller #0 PREEMPT(full) [ 129.466710][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.466723][ T6302] Call Trace: [ 129.466731][ T6302] [ 129.466739][ T6302] dump_stack_lvl+0xe8/0x150 [ 129.466788][ T6302] should_fail_ex+0x40c/0x560 [ 129.466813][ T6302] should_failslab+0xa8/0x100 [ 129.466845][ T6302] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 129.466864][ T6302] ? skb_clone+0x212/0x3a0 [ 129.466882][ T6302] ? skb_clone+0x212/0x3a0 [ 129.466905][ T6302] skb_clone+0x212/0x3a0 [ 129.466927][ T6302] __netlink_deliver_tap+0x413/0x860 [ 129.466960][ T6302] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.466980][ T6302] netlink_deliver_tap+0x19c/0x1b0 [ 129.466999][ T6302] netlink_dump+0x95b/0xee0 [ 129.467025][ T6302] ? __pfx_netlink_dump+0x10/0x10 [ 129.467063][ T6302] netlink_recvmsg+0x683/0xa50 [ 129.467089][ T6302] ? __pfx_netlink_recvmsg+0x10/0x10 [ 129.467120][ T6302] ? __might_fault+0xaf/0x130 [ 129.467139][ T6302] ? __pfx_netlink_recvmsg+0x10/0x10 [ 129.467158][ T6302] sock_recvmsg_nosec+0x130/0x170 [ 129.467184][ T6302] ____sys_recvmsg+0x3e3/0x4a0 [ 129.467209][ T6302] ? __pfx_____sys_recvmsg+0x10/0x10 [ 129.467236][ T6302] ? kfree+0x4d/0x640 [ 129.467257][ T6302] ___sys_recvmsg+0x213/0x5a0 [ 129.467279][ T6302] ? __pfx____sys_recvmsg+0x10/0x10 [ 129.467325][ T6302] ? __fget_files+0x2a/0x420 [ 129.467384][ T6302] do_recvmmsg+0x38b/0x7f0 [ 129.467419][ T6302] ? __pfx_do_recvmmsg+0x10/0x10 [ 129.467457][ T6302] ? __mutex_unlock_slowpath+0x731/0x900 [ 129.467493][ T6302] __sys_recvmmsg+0x1a5/0x290 [ 129.467518][ T6302] ? __pfx___sys_recvmmsg+0x10/0x10 [ 129.467539][ T6302] ? ksys_write+0x242/0x270 [ 129.467561][ T6302] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 129.467588][ T6302] __do_fast_syscall_32+0x23e/0x6f0 [ 129.467611][ T6302] ? do_fast_syscall_32+0x33/0x70 [ 129.467631][ T6302] ? lockdep_hardirqs_on+0x7a/0x110 [ 129.467650][ T6302] ? asm_int80_emulation+0x1a/0x20 [ 129.467666][ T6302] ? do_int80_emulation+0x29f/0x550 [ 129.467686][ T6302] ? trace_irq_disable+0x3b/0x140 [ 129.467710][ T6302] do_fast_syscall_32+0x33/0x70 [ 129.467732][ T6302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.467752][ T6302] RIP: 0023:0xf7f870ec [ 129.467767][ T6302] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 129.467780][ T6302] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 129.467797][ T6302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 129.467808][ T6302] RDX: 000000000000002e RSI: 0000000000000002 RDI: 0000000000000000 [ 129.467817][ T6302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.467826][ T6302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 129.467843][ T6302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.467866][ T6302] [ 129.900071][ T188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.098816][ T188] usb 3-1: Using ep0 maxpacket: 32 [ 130.109228][ T188] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.145416][ T188] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.185825][ T188] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.214137][ T6318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.145'. [ 130.218545][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.272838][ T188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.285657][ T6322] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 130.302177][ T6320] FAULT_INJECTION: forcing a failure. [ 130.302177][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 130.315850][ T188] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.345689][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.4.147 Not tainted syzkaller #0 PREEMPT(full) [ 130.345718][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.345737][ T6320] Call Trace: [ 130.345743][ T6320] [ 130.345749][ T6320] dump_stack_lvl+0xe8/0x150 [ 130.345784][ T6320] should_fail_ex+0x40c/0x560 [ 130.345808][ T6320] should_failslab+0xa8/0x100 [ 130.345833][ T6320] __kmalloc_cache_noprof+0xa8/0x660 [ 130.345852][ T6320] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 130.345869][ T6320] ? __kmalloc_cache_noprof+0x150/0x660 [ 130.345888][ T6320] ? sctp_add_bind_addr+0x8c/0x370 [ 130.345904][ T6320] ? sctp_add_bind_addr+0x8c/0x370 [ 130.345924][ T6320] sctp_add_bind_addr+0x8c/0x370 [ 130.345943][ T6320] sctp_copy_local_addr_list+0x31a/0x4e0 [ 130.345961][ T6320] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 130.345977][ T6320] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 130.345995][ T6320] ? sctp_v6_is_any+0x64/0x80 [ 130.346013][ T6320] ? sctp_copy_one_addr+0x93/0x360 [ 130.346031][ T6320] sctp_bind_addr_copy+0xb3/0x3c0 [ 130.346047][ T6320] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 130.346073][ T6320] sctp_connect_new_asoc+0x2ff/0x6b0 [ 130.346096][ T6320] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 130.346120][ T6320] ? __local_bh_enable_ip+0xd0/0x130 [ 130.346138][ T6320] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 130.346156][ T6320] ? security_sctp_bind_connect+0x7e/0x2c0 [ 130.346182][ T6320] sctp_sendmsg+0x159b/0x2d00 [ 130.346212][ T6320] ? __pfx_sctp_sendmsg+0x10/0x10 [ 130.346236][ T6320] ? aa_sk_perm+0x6d5/0x900 [ 130.346256][ T6320] ? __might_fault+0xaf/0x130 [ 130.346279][ T6320] ? sock_rps_record_flow+0x19/0x350 [ 130.346297][ T6320] ? inet_sendmsg+0x298/0x320 [ 130.346314][ T6320] ? __pfx_inet_sendmsg+0x10/0x10 [ 130.346328][ T6320] sock_sendmsg_nosec+0x10e/0x180 [ 130.346352][ T6320] __sys_sendto+0x408/0x5a0 [ 130.346372][ T6320] ? __pfx___sys_sendto+0x10/0x10 [ 130.346397][ T6320] ? __fget_files+0x3a2/0x420 [ 130.346426][ T6320] ? ksys_write+0x242/0x270 [ 130.346445][ T6320] __ia32_sys_sendto+0xdd/0x100 [ 130.346463][ T6320] __do_fast_syscall_32+0x23e/0x6f0 [ 130.346485][ T6320] ? do_fast_syscall_32+0x33/0x70 [ 130.346503][ T6320] ? lockdep_hardirqs_on+0x7a/0x110 [ 130.346521][ T6320] ? asm_int80_emulation+0x1a/0x20 [ 130.346535][ T6320] ? do_int80_emulation+0x29f/0x550 [ 130.346558][ T6320] do_fast_syscall_32+0x33/0x70 [ 130.346578][ T6320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.346596][ T6320] RIP: 0023:0xf703f0ec [ 130.346609][ T6320] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 130.346627][ T6320] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 130.346643][ T6320] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 130.346652][ T6320] RDX: 000000000001a000 RSI: 000000000400c0d4 RDI: 0000000080000140 [ 130.346662][ T6320] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 130.346670][ T6320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.346678][ T6320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.346700][ T6320] [ 130.347063][ T188] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.693765][ T6322] : entered promiscuous mode [ 130.700612][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.800913][ T188] usb 3-1: config 0 descriptor?? [ 130.854217][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 131.021580][ T188] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.072500][ T6336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.081604][ T6271] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.097732][ T5718] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.237411][ T6271] usb 4-1: Using ep0 maxpacket: 32 [ 131.247456][ T809] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.251284][ T6271] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 131.266007][ T6271] usb 4-1: config 0 has no interface number 0 [ 131.275544][ T6271] usb 4-1: config 0 interface 89 has no altsetting 0 [ 131.278439][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 131.304530][ T6271] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 131.306903][ T5718] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 131.315014][ T6271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.342807][ T6271] usb 4-1: Product: syz [ 131.347110][ T6271] usb 4-1: Manufacturer: syz [ 131.349532][ T5718] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 131.354389][ T6271] usb 4-1: SerialNumber: syz [ 131.377279][ T6271] usb 4-1: config 0 descriptor?? [ 131.378152][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.390603][ T5718] usb 5-1: Product: syz [ 131.401537][ T5718] usb 5-1: Manufacturer: syz [ 131.406745][ T5718] usb 5-1: SerialNumber: syz [ 131.413577][ T6271] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 131.423693][ T6271] em28xx 4-1:0.89: Video interface 89 found: [ 131.435715][ T5718] usb 5-1: config 0 descriptor?? [ 131.447449][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 131.459460][ C1] usblp0: nonzero read bulk status received: -71 [ 131.469371][ T809] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 131.478775][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.487743][ T5718] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 131.496184][ T6300] usblp0: error -71 reading from printer [ 131.503113][ T809] usb 1-1: Product: syz [ 131.507929][ T5718] usb 5-1: setting power ON [ 131.520860][ T809] usb 1-1: Manufacturer: syz [ 131.527162][ T5723] usb 3-1: USB disconnect, device number 6 [ 131.536180][ T5718] dvb-usb: bulk message failed: -22 (2/0) [ 131.543342][ T809] usb 1-1: SerialNumber: syz [ 131.549395][ T5720] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 131.586017][ T5723] usblp0: removed [ 131.593000][ T809] usb 1-1: config 0 descriptor?? [ 131.615814][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.629655][ T809] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 131.641901][ T5718] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 131.651596][ T5718] usb 5-1: media controller created [ 131.664299][ T6326] dvb-usb: bulk message failed: -22 (3/0) [ 131.676767][ T6326] dvb-usb: bulk message failed: -22 (5/0) [ 131.685858][ T6326] dvb-usb: bulk message failed: -22 (3/0) [ 131.691967][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.732263][ T5718] usb 5-1: selecting invalid altsetting 6 [ 131.739102][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 131.745476][ T5718] usb 5-1: digital interface selection failed (-22) [ 131.761081][ T5720] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 131.771467][ T5718] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 131.784836][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.797269][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.797950][ T5718] usb 5-1: setting power OFF [ 131.815643][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.836116][ T5718] dvb-usb: bulk message failed: -22 (2/0) [ 131.843815][ T5718] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 131.853722][ T5718] (NULL device *): no alternate interface [ 131.855743][ T5720] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 131.876650][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.898063][ T5720] usb 2-1: Product: syz [ 131.902406][ T5720] usb 2-1: Manufacturer: syz [ 131.917849][ T5720] usb 2-1: SerialNumber: syz [ 131.936777][ T5720] usb 2-1: config 0 descriptor?? [ 131.944466][ T5718] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 131.956718][ T6340] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 131.971921][ T5718] usb 5-1: USB disconnect, device number 15 [ 132.035596][ T6271] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 132.071051][ T809] gspca_ov534_9: reg_w failed -71 [ 132.176008][ T5720] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 132.194755][ T5720] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 132.357490][ T809] gspca_ov534_9: Unknown sensor 0000 [ 132.357593][ T809] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 132.432494][ T809] usb 1-1: USB disconnect, device number 6 [ 132.777127][ C1] powermate: config urb returned -71 [ 132.783780][ C1] powermate: config urb returned -71 [ 132.790449][ C1] powermate: config urb returned -71 [ 132.790854][ T188] usb 2-1: USB disconnect, device number 10 [ 132.795786][ C1] powermate: usb_submit_urb(config) failed [ 132.795882][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 132.947525][ T5710] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 133.120600][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.132418][ T5710] usb 3-1: not running at top speed; connect to a high speed hub [ 133.148419][ T5710] usb 3-1: config 6 has an invalid interface number: 91 but max is 0 [ 133.160050][ T5710] usb 3-1: config 6 has no interface number 0 [ 133.171324][ T5710] usb 3-1: config 6 interface 91 has no altsetting 0 [ 133.184074][ T5710] usb 3-1: New USB device found, idVendor=9022, idProduct=d483, bcdDevice=50.e4 [ 133.206393][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 133.224759][ T6359] input: syz0 as /devices/virtual/input/input9 [ 133.247013][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.262646][ T5710] usb 3-1: Product: syz [ 133.270466][ T5710] usb 3-1: Manufacturer: syz [ 133.277252][ T5710] usb 3-1: SerialNumber: syz [ 133.515698][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.526193][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.539551][ T6271] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 133.549959][ T6271] em28xx 4-1:0.89: board has no eeprom [ 133.618438][ T6271] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 133.627532][ T6271] em28xx 4-1:0.89: analog set to bulk mode. [ 133.633850][ T188] em28xx 4-1:0.89: Registering V4L2 extension [ 133.771467][ T188] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 133.793253][ T188] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 133.849697][ T188] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 133.876496][ T188] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 133.903082][ T188] em28xx 4-1:0.89: Config register raw data: 0xfffffffb [ 133.933074][ T188] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 133.954712][ T188] em28xx 4-1:0.89: No AC97 audio processor [ 134.035972][ T188] usb 4-1: Decoder not found [ 134.042223][ T188] em28xx 4-1:0.89: failed to create media graph [ 134.050754][ T188] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 134.067548][ T42] usb 34-1: device descriptor read/8, error -110 [ 134.079376][ T188] em28xx 4-1:0.89: Registering snapshot button... [ 134.132177][ T5721] usb 4-1: USB disconnect, device number 7 [ 134.165022][ T5721] em28xx 4-1:0.89: Disconnecting em28xx [ 134.179536][ T188] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input10 [ 134.196921][ T809] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 134.324523][ T188] em28xx 4-1:0.89: Remote control support is not available for this card. [ 134.352843][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 134.365023][ T5721] em28xx 4-1:0.89: Closing input extension [ 134.419792][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 134.439358][ T5721] em28xx 4-1:0.89: Deregistering snapshot button [ 134.444265][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.484482][ T42] usb usb34-port1: attempt power cycle [ 134.495029][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.560496][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.630327][ T6378] tipc: Started in network mode [ 134.642439][ T5721] em28xx 4-1:0.89: Freeing device [ 134.644711][ T809] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.683525][ T6378] tipc: Node identity 865231cf273a, cluster identity 4711 [ 134.704825][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.748982][ T809] usb 5-1: config 0 descriptor?? [ 134.762460][ T6378] tipc: Enabled bearer , priority 0 [ 134.818256][ T6380] syzkaller0: entered promiscuous mode [ 134.876121][ T6380] syzkaller0: entered allmulticast mode [ 134.901428][ T6381] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 134.935574][ T6378] syzkaller0: mtu less than device minimum [ 134.956357][ T6375] tipc: Resetting bearer [ 135.022284][ T6375] tipc: Disabling bearer [ 135.090704][ T42] usb usb34-port1: unable to enumerate USB device [ 135.098812][ T188] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.265612][ T809] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input11 [ 135.313788][ T188] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 135.335288][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.350687][ T188] usb 1-1: Product: syz [ 135.354970][ T188] usb 1-1: Manufacturer: syz [ 135.360369][ T188] usb 1-1: SerialNumber: syz [ 135.377020][ T188] usb 1-1: config 0 descriptor?? [ 135.400616][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.414934][ T188] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 135.442689][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.491307][ T809] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 135.632286][ T5710] dvb-usb: found a 'TeVii S482 (tuner 1)' in warm state. [ 135.668024][ T5710] dw2102: su3000_power_ctrl: 1, initialized 0 [ 135.687430][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 135.687449][ T29] audit: type=1326 audit(1785613655.305:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 135.725204][ T5710] dvb-usb: bulk message failed: -22 (2/0) [ 135.738979][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 135.766664][ T5710] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 135.802626][ T29] audit: type=1326 audit(1785613655.305:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 135.831495][ T5710] dvb-usb: TeVii S482 (tuner 1) error while loading driver (-19) [ 135.859524][ T5710] usb 3-1: USB disconnect, device number 7 [ 135.876342][ T29] audit: type=1326 audit(1785613655.305:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 135.936882][ T188] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 135.975610][ T188] sq905c 1-1:0.0: Get version command failed [ 136.001321][ T188] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 136.010223][ T29] audit: type=1326 audit(1785613655.345:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 136.091739][ T29] audit: type=1326 audit(1785613655.345:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 136.142875][ T809] usb 5-1: USB disconnect, device number 16 [ 136.172838][ T29] audit: type=1326 audit(1785613655.345:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 136.270165][ T29] audit: type=1326 audit(1785613655.345:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 136.345284][ T29] audit: type=1326 audit(1785613655.345:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 136.410873][ T29] audit: type=1326 audit(1785613655.365:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 136.499888][ T29] audit: type=1326 audit(1785613655.365:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 136.793477][ T5710] usb 1-1: USB disconnect, device number 7 [ 137.052264][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.174'. [ 137.187598][ T809] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.379656][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 137.391070][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.412018][ T809] usb 4-1: too many configurations: 232, using maximum allowed: 8 [ 137.442484][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.465582][ T809] usb 4-1: config 1 has no interface number 0 [ 137.483631][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 137.505966][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.545959][ T809] usb 4-1: config 1 has no interface number 0 [ 137.574009][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 137.610686][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.637450][ T809] usb 4-1: config 1 has no interface number 0 [ 137.662636][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 137.686463][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.711858][ T809] usb 4-1: config 1 has no interface number 0 [ 137.727053][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 137.770588][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.789019][ T809] usb 4-1: config 1 has no interface number 0 [ 137.806326][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 137.827505][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.843566][ T809] usb 4-1: config 1 has no interface number 0 [ 137.863692][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 137.892974][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.912776][ T809] usb 4-1: config 1 has no interface number 0 [ 137.933520][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 137.964867][ T809] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 137.981504][ T809] usb 4-1: config 1 has no interface number 0 [ 137.987833][ T188] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 138.008286][ T809] usb 4-1: config 1 interface 232 has no altsetting 0 [ 138.030043][ T809] usb 4-1: New USB device found, idVendor=1410, idProduct=66a8, bcdDevice=96.b2 [ 138.053647][ T809] usb 4-1: New USB device strings: Mfr=99, Product=132, SerialNumber=27 [ 138.073683][ T809] usb 4-1: Product: syz [ 138.087076][ T809] usb 4-1: Manufacturer: syz [ 138.101073][ T809] usb 4-1: SerialNumber: syz [ 138.183571][ T188] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 138.233513][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.269943][ T188] usb 2-1: Product: syz [ 138.280265][ T188] usb 2-1: Manufacturer: syz [ 138.289296][ T188] usb 2-1: SerialNumber: syz [ 138.326228][ T188] usb 2-1: config 0 descriptor?? [ 138.386410][ T188] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 138.429432][ T188] usb 2-1: Detected FT2233HP [ 138.631596][ T6444] netlink: 144 bytes leftover after parsing attributes in process `syz.0.185'. [ 138.669920][ T809] hub 4-1:1.232: Invalid hub with more than one config or interface [ 138.701838][ T809] hub 4-1:1.232: probe with driver hub failed with error -22 [ 138.773960][ T809] usb 4-1: USB disconnect, device number 8 [ 138.837257][ T6441] kAFS: unable to lookup cell '/,' [ 139.281051][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.187'. [ 139.389968][ T188] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 139.413845][ T188] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 139.447862][ T188] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 139.493771][ T188] usb 2-1: USB disconnect, device number 11 [ 139.624006][ T188] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.646090][ T188] ftdi_sio 2-1:0.0: device disconnected [ 139.725597][ T6468] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 139.847437][ T5710] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 139.875862][ T6468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.987467][ T5721] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.997583][ T5710] usb 1-1: device descriptor read/64, error -71 [ 140.051581][ T6474] bond1: (slave geneve2): making interface the new active one [ 140.067441][ T6271] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 140.106025][ T6474] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.149196][ T6474] syz.2.190 (6474) used greatest stack depth: 19136 bytes left [ 140.172059][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 140.189715][ T5721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.208058][ T5721] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.233125][ T5721] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 140.251342][ T5710] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 140.261139][ T6271] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.285981][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 140.300436][ T6271] usb 5-1: config 1 interface 0 has no altsetting 0 [ 140.307394][ T5721] usb 4-1: Product: syz [ 140.311743][ T5721] usb 4-1: Manufacturer: syz [ 140.316977][ T5721] usb 4-1: SerialNumber: syz [ 140.327924][ T6271] usb 5-1: string descriptor 0 read error: -22 [ 140.334814][ T5721] usb 4-1: config 0 descriptor?? [ 140.340548][ T6271] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 140.350208][ T6271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.418061][ T5710] usb 1-1: device descriptor read/64, error -71 [ 140.527869][ T5710] usb usb1-port1: attempt power cycle [ 140.645872][ T5721] usb 4-1: USB disconnect, device number 9 [ 140.793294][ T6271] hid_parser_main: 218 callbacks suppressed [ 140.793318][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.812424][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.819928][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.827105][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.835433][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.843716][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.852922][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.860548][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.867758][ T5710] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 140.876062][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.883855][ T6271] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 140.898335][ T5710] usb 1-1: device descriptor read/8, error -71 [ 140.953831][ T6271] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 140.987406][ T6472] i2c i2c-0: dtv_property_process_set: SET cmd 0x5afc9800 undefined [ 141.008384][ T6271] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71 [ 141.028332][ T6271] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71 [ 141.048348][ T6271] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 141.056183][ T6271] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 141.074123][ T6271] usb 5-1: USB disconnect, device number 17 [ 141.093061][ T6485] fido_id[6485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 141.137461][ T5710] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 141.158976][ T5710] usb 1-1: device descriptor read/8, error -71 [ 141.268406][ T5710] usb usb1-port1: unable to enumerate USB device [ 141.302487][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 141.447445][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.598954][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 141.626188][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.657018][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 141.680147][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.696200][ T9] usb 3-1: Product: syz [ 141.709977][ T9] usb 3-1: Manufacturer: syz [ 141.732933][ T9] usb 3-1: SerialNumber: syz [ 141.759285][ T9] usb 3-1: config 0 descriptor?? [ 141.823939][ T6504] syzkaller0: entered promiscuous mode [ 141.830902][ T6504] syzkaller0: entered allmulticast mode [ 142.298348][ T5718] IPVS: starting estimator thread 0... [ 142.304503][ T6515] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 142.397706][ T6516] IPVS: using max 39 ests per chain, 93600 per kthread [ 142.692548][ T6527] FAULT_INJECTION: forcing a failure. [ 142.692548][ T6527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.718919][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.4.208 Not tainted syzkaller #0 PREEMPT(full) [ 142.718947][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.718959][ T6527] Call Trace: [ 142.718967][ T6527] [ 142.718976][ T6527] dump_stack_lvl+0xe8/0x150 [ 142.719036][ T6527] should_fail_ex+0x40c/0x560 [ 142.719069][ T6527] _copy_from_iter+0x1d3/0x1660 [ 142.719098][ T6527] ? kmem_cache_alloc_node_noprof+0x141/0x610 [ 142.719134][ T6527] ? rcu_is_watching+0x15/0xb0 [ 142.719155][ T6527] ? trace_kmem_cache_alloc+0x29/0xe0 [ 142.719184][ T6527] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 142.719210][ T6527] ? __pfx__copy_from_iter+0x10/0x10 [ 142.719238][ T6527] ? __alloc_skb+0x276/0x7a0 [ 142.719259][ T6527] ? __alloc_skb+0x276/0x7a0 [ 142.719286][ T6527] ? netlink_sendmsg+0x650/0xb40 [ 142.719312][ T6527] ? skb_put+0x112/0x210 [ 142.719342][ T6527] netlink_sendmsg+0x6c0/0xb40 [ 142.719377][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.719409][ T6527] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.719437][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.719462][ T6527] sock_sendmsg_nosec+0x13a/0x180 [ 142.719495][ T6527] ____sys_sendmsg+0x54e/0x850 [ 142.719527][ T6527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.719569][ T6527] ___sys_sendmsg+0x2a5/0x360 [ 142.719593][ T6527] ? __lock_acquire+0x683/0x2cf0 [ 142.719628][ T6527] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.719653][ T6527] ? get_pid_task+0x20/0x1f0 [ 142.719682][ T6527] ? get_pid_task+0x20/0x1f0 [ 142.719708][ T6527] ? get_pid_task+0x20/0x1f0 [ 142.719769][ T6527] ? __fget_files+0x2a/0x420 [ 142.719796][ T6527] ? __fget_files+0x3a2/0x420 [ 142.719834][ T6527] __sys_sendmsg+0x177/0x240 [ 142.719862][ T6527] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.719906][ T6527] __do_fast_syscall_32+0x23e/0x6f0 [ 142.719935][ T6527] ? do_fast_syscall_32+0x33/0x70 [ 142.719962][ T6527] ? lockdep_hardirqs_on+0x7a/0x110 [ 142.719986][ T6527] ? asm_int80_emulation+0x1a/0x20 [ 142.720006][ T6527] ? do_int80_emulation+0x29f/0x550 [ 142.720032][ T6527] ? trace_irq_disable+0x3b/0x140 [ 142.720063][ T6527] do_fast_syscall_32+0x33/0x70 [ 142.720091][ T6527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.720123][ T6527] RIP: 0023:0xf703f0ec [ 142.720141][ T6527] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 142.720158][ T6527] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 142.720181][ T6527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 142.720195][ T6527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.720206][ T6527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.720217][ T6527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.720229][ T6527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.720259][ T6527] [ 143.367579][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.530810][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.538326][ T42] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 143.550281][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.563772][ T42] usb 5-1: config 0 descriptor?? [ 143.678768][ T5718] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 143.816151][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 143.829236][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 143.844399][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 143.865398][ T5718] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 143.875281][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.885164][ T42] usb 5-1: USB disconnect, device number 18 [ 143.896022][ T5718] usb 2-1: Product: syz [ 143.902735][ T5718] usb 2-1: Manufacturer: syz [ 143.910028][ T5718] usb 2-1: SerialNumber: syz [ 143.927823][ T5718] usb 2-1: config 0 descriptor?? [ 143.938163][ T5718] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 144.238952][ T42] usb 3-1: USB disconnect, device number 8 [ 144.464062][ T6557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'. [ 144.907781][ T5710] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.998982][ T42] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.081280][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.093503][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 145.105694][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 145.120898][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.134793][ T5710] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.144455][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.155710][ T5710] usb 3-1: config 0 descriptor?? [ 145.157527][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 145.163456][ T6569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.175891][ T42] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 145.185836][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.195865][ T42] usb 1-1: Product: syz [ 145.197943][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.202218][ T42] usb 1-1: Manufacturer: syz [ 145.212908][ T42] usb 1-1: SerialNumber: syz [ 145.317425][ T5718] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 145.382590][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 145.392413][ T9] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 145.400784][ T9] usb 4-1: Product: syz [ 145.405027][ T9] usb 4-1: Manufacturer: syz [ 145.409724][ T9] usb 4-1: SerialNumber: syz [ 145.419376][ T9] usb 4-1: config 0 descriptor?? [ 145.432667][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 145.439439][ T42] mxuport 1-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 145.460924][ T5718] usb 5-1: device descriptor read/64, error -71 [ 145.467970][ T42] mxuport 1-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 145.477071][ T42] mxuport 1-1:254.0: probe with driver mxuport failed with error -71 [ 145.490205][ T42] usb 1-1: USB disconnect, device number 12 [ 145.583462][ T5710] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 145.602258][ T5710] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 145.636893][ T9] usb 4-1: failed to receive control message: -71 [ 145.647088][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 145.660845][ T9] usb 4-1: USB disconnect, device number 10 [ 145.670449][ T9] ch341 4-1:0.0: device disconnected [ 145.707821][ T5718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 145.845753][ T6569] syzkaller0: entered promiscuous mode [ 145.847703][ T5718] usb 5-1: device descriptor read/64, error -71 [ 145.853062][ T6569] syzkaller0: entered allmulticast mode [ 145.870241][ T5720] usb 3-1: USB disconnect, device number 9 [ 145.969090][ T5718] usb usb5-port1: attempt power cycle [ 146.074662][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 146.074681][ T29] audit: type=1326 audit(1785613665.695:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.0.227" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x0 [ 146.307537][ T5718] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 146.328300][ T5718] usb 5-1: device descriptor read/8, error -71 [ 146.473554][ T9] usb 2-1: USB disconnect, device number 12 [ 146.569160][ T5718] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 146.592632][ T6600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.231'. [ 146.617840][ T6600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.231'. [ 146.628228][ T5718] usb 5-1: device descriptor read/8, error -71 [ 146.739315][ T5718] usb usb5-port1: unable to enumerate USB device [ 147.857433][ T6617] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 148.438435][ T5718] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.617491][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 148.650934][ T5718] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 148.673106][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.702431][ T5718] usb 3-1: Product: syz [ 148.725848][ T5718] usb 3-1: Manufacturer: syz [ 148.743857][ T5718] usb 3-1: SerialNumber: syz [ 148.784460][ T5718] usb 3-1: config 0 descriptor?? [ 148.938097][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.008407][ T5718] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.122273][ T42] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 149.149303][ T42] usb 1-1: config 0 has no interface number 0 [ 149.170752][ T42] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.200039][ T42] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.229225][ T42] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 149.240546][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.267756][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 149.290631][ T42] usb 1-1: config 0 descriptor?? [ 149.334505][ T42] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input13 [ 149.347664][ T5722] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 149.519891][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.543842][ T6622] program syz.2.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.577487][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.625928][ T5722] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 149.666640][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.721330][ T5722] usb 4-1: Product: syz [ 149.762091][ T5722] usb 4-1: Manufacturer: syz [ 149.787239][ T5722] usb 4-1: SerialNumber: syz [ 149.838588][ T6622] openvswitch: netlink: IP tunnel dst address not specified [ 149.851739][ T5722] usb 4-1: config 0 descriptor?? [ 149.883112][ T5722] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 149.913537][ T5722] uvcvideo 4-1:0.0: No valid video chain found. [ 149.934959][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 149.968315][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.251'. [ 149.977654][ T5718] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 150.003187][ T5718] usb 3-1: USB disconnect, device number 10 [ 150.230449][ T5718] usb 4-1: USB disconnect, device number 11 [ 150.267002][ T6662] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 150.301765][ T6662] bond1 (unregistering): Released all slaves [ 150.635055][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 150.827595][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 151.008562][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 151.034485][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 151.069489][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.217041][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 151.598912][ T6698] FAULT_INJECTION: forcing a failure. [ 151.598912][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 151.643946][ T6698] CPU: 0 UID: 0 PID: 6698 Comm: syz.2.260 Not tainted syzkaller #0 PREEMPT(full) [ 151.643967][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.643977][ T6698] Call Trace: [ 151.643983][ T6698] [ 151.643989][ T6698] dump_stack_lvl+0xe8/0x150 [ 151.644017][ T6698] should_fail_ex+0x40c/0x560 [ 151.644040][ T6698] should_failslab+0xa8/0x100 [ 151.644065][ T6698] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 151.644085][ T6698] ? __anon_vma_prepare+0xc3/0x4e0 [ 151.644102][ T6698] ? __anon_vma_prepare+0xc3/0x4e0 [ 151.644125][ T6698] __anon_vma_prepare+0xc3/0x4e0 [ 151.644143][ T6698] ? __thp_vma_allowable_orders+0xabd/0xb60 [ 151.644166][ T6698] do_pte_missing+0x3029/0x34b0 [ 151.644191][ T6698] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 151.644212][ T6698] ? mtree_range_walk+0x707/0x8b0 [ 151.644239][ T6698] handle_mm_fault+0x1b36/0x3080 [ 151.644256][ T6698] ? mt_find+0x186/0x630 [ 151.644284][ T6698] ? handle_mm_fault+0xec/0x3080 [ 151.644307][ T6698] ? __pfx_handle_mm_fault+0x10/0x10 [ 151.644345][ T6698] __get_user_pages+0x1678/0x2720 [ 151.644384][ T6698] populate_vma_page_range+0x2be/0x3c0 [ 151.644402][ T6698] ? __pfx_populate_vma_page_range+0x10/0x10 [ 151.644420][ T6698] ? down_read+0x2be/0x330 [ 151.644444][ T6698] __mm_populate+0x25f/0x390 [ 151.644461][ T6698] ? __pfx___mm_populate+0x10/0x10 [ 151.644483][ T6698] vm_mmap_pgoff+0x353/0x4e0 [ 151.644511][ T6698] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 151.644535][ T6698] ? __fget_files+0x2a/0x420 [ 151.644558][ T6698] ? __fget_files+0x2a/0x420 [ 151.644578][ T6698] ? __fget_files+0x2a/0x420 [ 151.644601][ T6698] ksys_mmap_pgoff+0x4dc/0x760 [ 151.644623][ T6698] __do_fast_syscall_32+0x23e/0x6f0 [ 151.644645][ T6698] ? do_fast_syscall_32+0x33/0x70 [ 151.644664][ T6698] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.644681][ T6698] ? asm_int80_emulation+0x1a/0x20 [ 151.644695][ T6698] ? do_int80_emulation+0x29f/0x550 [ 151.644714][ T6698] ? trace_irq_disable+0x3b/0x140 [ 151.644736][ T6698] do_fast_syscall_32+0x33/0x70 [ 151.644756][ T6698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.644774][ T6698] RIP: 0023:0xf700f0ec [ 151.644787][ T6698] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 151.644799][ T6698] RSP: 002b:00000000f53dc50c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 151.644815][ T6698] RAX: ffffffffffffffda RBX: 0000000080200000 RCX: 0000000000400000 [ 151.644832][ T6698] RDX: 000000000000000b RSI: 0000000000002012 RDI: 0000000000000004 [ 151.644841][ T6698] RBP: 000000000000fff5 R08: 0000000000000000 R09: 0000000000000000 [ 151.644849][ T6698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.644857][ T6698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.644878][ T6698] [ 152.083083][ T5710] usb 1-1: USB disconnect, device number 13 [ 152.314228][ T9] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 152.361360][ T6705] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 152.585557][ T6675] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.690393][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 152.726272][ T9] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 152.754563][ T9] usb 5-1: USB disconnect, device number 23 [ 152.949777][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 153.068688][ T5718] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.241731][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 153.252092][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 153.271923][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 153.295383][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 153.316839][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 153.340010][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 153.363784][ T6730] netlink: 200 bytes leftover after parsing attributes in process `syz.2.268'. [ 153.369808][ T5718] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 153.386303][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 153.394889][ T5718] usb 2-1: Product: syz [ 153.400392][ T5718] usb 2-1: Manufacturer: syz [ 153.412277][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.421155][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.435189][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.444757][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.452727][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.461563][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.469072][ T5720] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.484549][ T5718] usb 2-1: USB2VGA dongle found at address 13 [ 153.498967][ T5718] usb 2-1: Allocated 8 output buffers [ 153.514321][ T5718] usb 2-1: Failed to early initialize device [ 153.628475][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 153.640041][ T5720] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 153.657453][ T5720] usb 4-1: config 0 has no interface number 0 [ 153.663772][ T5720] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.698963][ T5720] usb 4-1: config 0 interface 89 has no altsetting 0 [ 153.718358][ T5720] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 153.725055][ T6713] usb 2-1: Failed to initialize device [ 153.730241][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.756185][ T5720] usb 4-1: Product: syz [ 153.763647][ T5718] usb 2-1: USB disconnect, device number 13 [ 153.772808][ T5720] usb 4-1: Manufacturer: syz [ 153.791045][ T5720] usb 4-1: SerialNumber: syz [ 153.811654][ T5720] usb 4-1: config 0 descriptor?? [ 153.840508][ T5720] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 153.865480][ T5720] em28xx 4-1:0.89: Video interface 89 found: [ 154.452366][ T5720] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 154.475142][ T6747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.275'. [ 154.751829][ T6754] fuse: Invalid rootmode [ 155.657501][ T6271] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.707256][ T6773] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 155.733719][ T5720] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 155.760937][ T5720] em28xx 4-1:0.89: board has no eeprom [ 155.827442][ T5720] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 155.827473][ T6271] usb 2-1: Using ep0 maxpacket: 8 [ 155.850183][ T5720] em28xx 4-1:0.89: analog set to bulk mode. [ 155.860088][ T5718] em28xx 4-1:0.89: Registering V4L2 extension [ 155.876382][ T5720] usb 4-1: USB disconnect, device number 12 [ 155.895254][ T5720] em28xx 4-1:0.89: Disconnecting em28xx [ 155.910121][ T6271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.963477][ T6271] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.015701][ T6271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.065796][ T6271] usb 2-1: config 0 descriptor?? [ 156.106343][ T5718] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 156.122858][ T5718] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 156.139064][ T5718] em28xx 4-1:0.89: No AC97 audio processor [ 156.166840][ T5718] usb 4-1: Decoder not found [ 156.176741][ T5718] em28xx 4-1:0.89: failed to create media graph [ 156.192178][ T5718] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 156.254110][ T5718] em28xx 4-1:0.89: Registering snapshot button... [ 156.301072][ T5718] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input15 [ 156.346047][ T6271] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.364097][ T5718] em28xx 4-1:0.89: Remote control support is not available for this card. [ 156.394377][ T5720] em28xx 4-1:0.89: Closing input extension [ 156.417244][ T5720] em28xx 4-1:0.89: Deregistering snapshot button [ 156.615521][ T5720] em28xx 4-1:0.89: Freeing device [ 157.012128][ T6789] netlink: 260 bytes leftover after parsing attributes in process `syz.3.287'. [ 157.295163][ T6793] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 157.400060][ T6798] fuseblk: fd is not a fuse device [ 157.663099][ T5710] usb 2-1: USB disconnect, device number 14 [ 157.975007][ T6817] syzkaller1: entered promiscuous mode [ 157.989421][ T6817] syzkaller1: entered allmulticast mode [ 158.167461][ T5720] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 158.202406][ T6825] syzkaller1: entered promiscuous mode [ 158.213779][ T6825] syzkaller1: entered allmulticast mode [ 158.318941][ T5718] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.349829][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.361920][ T6829] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 158.369884][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 158.386358][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 158.414942][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 158.436825][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 158.458393][ T6829] bond2: entered promiscuous mode [ 158.470901][ T5720] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 158.487585][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 158.498812][ T6829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.506197][ T5720] usb 4-1: Product: syz [ 158.511299][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 158.518420][ T5720] usb 4-1: Manufacturer: syz [ 158.524770][ T5720] usb 4-1: SerialNumber: syz [ 158.530457][ T5718] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 158.541496][ T5720] usb 4-1: config 0 descriptor?? [ 158.553915][ T5718] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 158.563555][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.572281][ T5718] usb 2-1: Product: syz [ 158.581894][ T5718] usb 2-1: Manufacturer: syz [ 158.586672][ T5718] usb 2-1: SerialNumber: syz [ 158.598657][ T5718] usb 2-1: config 0 descriptor?? [ 158.615650][ T5718] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 158.636400][ T5718] usb 2-1: setting power ON [ 158.642672][ T5718] dvb-usb: bulk message failed: -22 (2/0) [ 158.662990][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.674549][ T5718] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 158.686581][ T5718] usb 2-1: media controller created [ 158.749506][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.795468][ T5720] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 158.812235][ T5720] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 158.848476][ T5718] usb 2-1: selecting invalid altsetting 6 [ 158.878675][ T5718] usb 2-1: digital interface selection failed (-22) [ 158.902477][ T5718] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 158.934735][ T5718] usb 2-1: setting power OFF [ 158.943952][ T5718] dvb-usb: bulk message failed: -22 (2/0) [ 158.960751][ T5718] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 158.981183][ T5718] (NULL device *): no alternate interface [ 159.000331][ T5720] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 159.037505][ T5720] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 159.066494][ T5720] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 159.086930][ T5718] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 159.111355][ T5718] usb 2-1: USB disconnect, device number 15 [ 159.202703][ T5720] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 159.707895][ T6846] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.736235][ T6846] block device autoloading is deprecated and will be removed. [ 160.080978][ T6853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.306'. [ 160.132160][ T5720] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 160.167837][ T5720] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 160.357566][ T6271] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 160.532468][ T6271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.567574][ T6271] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 160.591113][ T5710] usb 4-1: USB disconnect, device number 13 [ 160.607879][ T6271] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 160.656294][ T6271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.766213][ T6271] usb 5-1: config 0 descriptor?? [ 161.449536][ T6889] binder: BINDER_SET_CONTEXT_MGR already set [ 161.456229][ T6889] binder: 6887:6889 ioctl 4018620d 80000040 returned -16 [ 161.717407][ T6271] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 161.718243][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.758004][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.782789][ T6895] sctp: [Deprecated]: syz.4.306 (pid 6895) Use of int in max_burst socket option. [ 161.782789][ T6895] Use struct sctp_assoc_value instead [ 161.918136][ T6271] usb 2-1: Using ep0 maxpacket: 8 [ 161.925931][ T6271] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 161.934866][ T6271] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.944895][ T5710] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.953106][ T6271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.963383][ T6271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.974352][ T6271] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.990121][ T6271] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.999519][ T6271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.137403][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 162.145890][ T5710] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.171365][ T5710] usb 4-1: config 0 has no interface number 0 [ 162.191037][ T5710] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.208519][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.225132][ T5710] usb 4-1: Product: syz [ 162.231634][ T5710] usb 4-1: Manufacturer: syz [ 162.236423][ T5710] usb 4-1: SerialNumber: syz [ 162.257940][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 162.272692][ T5710] usb 4-1: config 0 descriptor?? [ 162.416934][ T6904] input: syz1 as /devices/virtual/input/input16 [ 162.634192][ T6909] pimreg: tun_chr_ioctl cmd 1074812117 [ 162.710517][ T5710] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 162.722480][ T5710] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 162.991946][ T6912] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.056268][ T6271] usb 5-1: USB disconnect, device number 24 [ 163.315950][ T6924] binder: BINDER_SET_CONTEXT_MGR already set [ 163.322343][ T6924] binder: 6923:6924 ioctl 4018620d 80000040 returned -16 [ 163.344078][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 163.499861][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 163.708465][ T5722] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 163.881760][ T5722] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.898921][ T5722] usb 5-1: not running at top speed; connect to a high speed hub [ 163.912919][ T5722] usb 5-1: config 249 has an invalid interface number: 203 but max is 0 [ 163.923867][ T5722] usb 5-1: config 249 has an invalid descriptor of length 13, skipping remainder of the config [ 163.946399][ T5722] usb 5-1: config 249 has no interface number 0 [ 163.959199][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.973684][ T5722] usb 5-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 163.989639][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.004174][ T5722] usb 5-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.043241][ T5710] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 164.063805][ T5722] usb 5-1: config 249 interface 203 has no altsetting 0 [ 164.067220][ T5710] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 164.099468][ T5722] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 164.115412][ T5710] usb 4-1: USB disconnect, device number 14 [ 164.117024][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.140801][ T5722] usb 5-1: Product: 䀊 [ 164.157030][ T5722] usb 5-1: Manufacturer: 䵼퐱㴲㙲옢ꢔ褵﯀샤㢟泥哸賶ᆍි硱אַᔜ琶ͻ嵦엚✩⴦큇䡍獏‭욓ඩ起驙㎛涎嚋풯߻䔃൲叟蝲ᑚ㘞ϣꑂ麌薒ƛ쎔蚉䲄拦퉭羖➵⯓谵௬㧛ⷪƄ雷쭄ﳂ픚韓皨ಿꎩ끶룻颁픍ゐ⥸移筧Ģ킁﷼ࠛ඲不㘱詮嘚獑귦Ջ켟♻荢燲 [ 164.199183][ T5722] usb 5-1: SerialNumber: ж [ 164.309232][ T5718] usb 2-1: USB disconnect, device number 16 [ 164.466113][ T5722] rtl8150 5-1:249.203: couldn't find required endpoints [ 164.480508][ T5722] rtl8150 5-1:249.203: probe with driver rtl8150 failed with error -5 [ 164.497479][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.505327][ T5722] usb 5-1: USB disconnect, device number 25 [ 164.557151][ T6954] kAFS: unable to lookup cell '' [ 164.591846][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 164.610241][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.336'. [ 164.657498][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 164.670785][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.699698][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.714357][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 164.732561][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.764891][ T9] usb 3-1: config 0 descriptor?? [ 165.067088][ T6965] binder: BINDER_SET_CONTEXT_MGR already set [ 165.075878][ T6965] binder: 6964:6965 ioctl 4018620d 80000040 returned -16 [ 165.126945][ T6967] binder: BINDER_SET_CONTEXT_MGR already set [ 165.135299][ T6967] binder: 6966:6967 ioctl 4018620d 80001000 returned -16 [ 165.166534][ T6967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.225310][ T9] kone 0003:1E7D:2CED.0007: item fetching failed at offset 4/5 [ 165.241198][ T9] kone 0003:1E7D:2CED.0007: parse failed [ 165.247031][ T9] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -22 [ 165.598767][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 165.758173][ T6271] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 165.769666][ T9] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 165.779546][ T9] usb 1-1: config 0 has no interface number 1 [ 165.785807][ T9] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 165.796276][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.810088][ T9] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 165.822534][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.832384][ T9] usb 1-1: SerialNumber: syz [ 165.842515][ T9] usb 1-1: config 0 descriptor?? [ 165.877402][ T5710] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 165.937815][ T6271] usb 2-1: Using ep0 maxpacket: 8 [ 165.950190][ T6271] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 165.961477][ T6271] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 165.973552][ T6271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.985904][ T6271] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 165.998266][ T6271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 166.009057][ T6271] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.023428][ T6271] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.032708][ T6271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.040950][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 166.057746][ T5710] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.079564][ T9] uvcvideo 1-1:0.199: Found UVC 0.00 device (0002:0000) [ 166.087641][ T5710] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 166.098511][ T9] uvcvideo 1-1:0.199: No valid video chain found. [ 166.105081][ T5710] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.132617][ T5710] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.160908][ T5710] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.170766][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.285488][ T6971] syz.0.343 (6971): /proc/6970/oom_adj is deprecated, please use /proc/6970/oom_score_adj instead. [ 166.305137][ T5722] usb 1-1: USB disconnect, device number 14 [ 166.977121][ T6996] FAULT_INJECTION: forcing a failure. [ 166.977121][ T6996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.996206][ T6996] CPU: 0 UID: 0 PID: 6996 Comm: syz.4.351 Not tainted syzkaller #0 PREEMPT(full) [ 166.996237][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.996255][ T6996] Call Trace: [ 166.996264][ T6996] [ 166.996273][ T6996] dump_stack_lvl+0xe8/0x150 [ 166.996312][ T6996] should_fail_ex+0x40c/0x560 [ 166.996346][ T6996] _copy_from_user+0x2d/0xb0 [ 166.996369][ T6996] sctp_setsockopt+0x1c4/0x12c0 [ 166.996397][ T6996] ? sock_common_setsockopt+0x36/0xc0 [ 166.996439][ T6996] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 166.996476][ T6996] do_sock_setsockopt+0x17c/0x1b0 [ 166.996506][ T6996] __ia32_sys_setsockopt+0x13d/0x1b0 [ 166.996538][ T6996] __do_fast_syscall_32+0x23e/0x6f0 [ 166.996568][ T6996] ? do_fast_syscall_32+0x33/0x70 [ 166.996596][ T6996] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.996622][ T6996] ? asm_int80_emulation+0x1a/0x20 [ 166.996642][ T6996] ? do_int80_emulation+0x29f/0x550 [ 166.996669][ T6996] ? trace_irq_disable+0x3b/0x140 [ 166.996713][ T6996] do_fast_syscall_32+0x33/0x70 [ 166.996743][ T6996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.996769][ T6996] RIP: 0023:0xf703f0ec [ 166.996789][ T6996] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 166.996808][ T6996] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 166.996850][ T6996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 166.996865][ T6996] RDX: 000000000000006b RSI: 0000000080000040 RDI: 000000000000001c [ 166.996880][ T6996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.996893][ T6996] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 166.996906][ T6996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.996936][ T6996] [ 167.324362][ T5722] usb 3-1: USB disconnect, device number 11 [ 167.375517][ T6998] binder: BINDER_SET_CONTEXT_MGR already set [ 167.411973][ T6998] binder: 6997:6998 ioctl 4018620d 80000040 returned -16 [ 167.881640][ T7008] mmap: syz.4.355 (7008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.947430][ T5720] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.070087][ T5722] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 168.108234][ T5720] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 168.139709][ T5720] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 168.160330][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.178896][ T5720] usb 3-1: Product: syz [ 168.187656][ T5720] usb 3-1: Manufacturer: syz [ 168.195633][ T5720] usb 3-1: SerialNumber: syz [ 168.217176][ T5720] usb 3-1: config 0 descriptor?? [ 168.234908][ T5720] hub 3-1:0.0: Invalid hub with more than one config or interface [ 168.251660][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.262533][ T5720] hub 3-1:0.0: probe with driver hub failed with error -22 [ 168.274533][ T5722] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 168.304721][ T5722] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 168.321783][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.344980][ T5722] usb 1-1: Product: syz [ 168.359748][ T5722] usb 1-1: Manufacturer: syz [ 168.373463][ T5722] usb 1-1: SerialNumber: syz [ 168.443807][ T5720] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 168.474497][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.513812][ T5720] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 168.539531][ T5720] usb 3-1: media controller created [ 168.556298][ T6271] usb 2-1: usb_control_msg returned -71 [ 168.585579][ T6271] usbtmc 2-1:16.0: can't read capabilities [ 168.674170][ T6271] usb 2-1: USB disconnect, device number 17 [ 168.697839][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.796947][ T7021] ------------[ cut here ]------------ [ 168.802978][ T7021] usb 3-1: BOGUS control dir, pipe 80000c80 doesn't match bRequestType c0 [ 168.811675][ T7021] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.1.359/7021 [ 168.822064][ T7021] Modules linked in: [ 168.826331][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) [ 168.835922][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.851463][ T7021] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 168.857244][ T7021] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 168.877427][ T7021] RSP: 0018:ffffc90004aef778 EFLAGS: 00010246 [ 168.883578][ T7021] RAX: 0000000000000000 RBX: ffff888074b5b500 RCX: 0000000080000c80 [ 168.891794][ T7021] RDX: ffff8880216dcfe0 RSI: ffffffff8ca32060 RDI: ffffffff90658da0 [ 168.900815][ T7021] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 168.908914][ T7021] R10: ffffc90004aef860 R11: fffff5200095df18 R12: 1ffff1100a4c8728 [ 168.916956][ T7021] R13: ffff888052643940 R14: ffff8880216dcfe0 R15: 0000000080000c80 [ 168.925132][ T7021] FS: 0000000000000000(0000) GS:ffff88812504c000(0063) knlGS:00000000f5446b40 [ 168.934721][ T7021] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 168.943051][ T7021] CR2: 000000000c381b60 CR3: 000000007753e000 CR4: 00000000003526f0 [ 168.951302][ T7021] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00010000ffffffff [ 168.959414][ T7021] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 168.967581][ T7021] Call Trace: [ 168.970960][ T7021] [ 168.973969][ T7021] usb_start_wait_urb+0x13f/0x5b0 [ 168.979166][ T7021] ? trace_kmalloc+0x2a/0xf0 [ 168.983841][ T7021] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 168.989572][ T7021] usb_control_msg+0x234/0x3e0 [ 168.994443][ T7021] dib0700_i2c_xfer+0xbb9/0xf80 [ 168.999442][ T7021] __i2c_transfer+0x7be/0x1fe0 [ 169.004326][ T7021] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 169.010253][ T7021] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.015538][ T7021] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 169.021504][ T7021] ? rt_mutex_lock_nested+0x156/0x1c0 [ 169.027008][ T7021] ? i2c_transfer+0xc8/0x2d0 [ 169.031762][ T7021] i2c_transfer+0x1cc/0x2d0 [ 169.036380][ T7021] i2cdev_ioctl_rdwr+0x460/0x740 [ 169.041540][ T7021] compat_i2cdev_ioctl+0x59f/0x5c0 [ 169.046775][ T7021] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 169.052584][ T7021] ? __fget_files+0x3a2/0x420 [ 169.057381][ T7021] ? __fget_files+0x2a/0x420 [ 169.062071][ T7021] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 169.067778][ T7021] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 169.073354][ T7021] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 169.079475][ T7021] ? kmem_cache_free+0x182/0x650 [ 169.084511][ T7021] ? __se_sys_futex_time32+0x3ab/0x440 [ 169.091647][ T7021] ? rcu_is_watching+0x15/0xb0 [ 169.096514][ T7021] __do_fast_syscall_32+0x23e/0x6f0 [ 169.102012][ T7021] ? do_fast_syscall_32+0x33/0x70 [ 169.107130][ T7021] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.112513][ T7021] ? asm_int80_emulation+0x1a/0x20 [ 169.117766][ T7021] ? do_int80_emulation+0x29f/0x550 [ 169.123107][ T7021] do_fast_syscall_32+0x33/0x70 [ 169.128111][ T7021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.134569][ T7021] RIP: 0023:0xf7f870ec [ 169.138781][ T7021] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 169.158548][ T7021] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 169.167059][ T7021] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 169.175208][ T7021] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.183294][ T7021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.191449][ T7021] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.199562][ T7021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.207673][ T7021] [ 169.210774][ T7021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.218102][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) [ 169.227594][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.237712][ T7021] Call Trace: [ 169.241052][ T7021] [ 169.244013][ T7021] vpanic+0x56c/0xa60 [ 169.248042][ T7021] ? __pfx__printk+0x10/0x10 [ 169.252699][ T7021] ? __pfx_vpanic+0x10/0x10 [ 169.257245][ T7021] ? is_bpf_text_address+0x292/0x2b0 [ 169.262600][ T7021] ? is_bpf_text_address+0x26/0x2b0 [ 169.267985][ T7021] panic+0xc5/0xd0 [ 169.271768][ T7021] ? __pfx_panic+0x10/0x10 [ 169.276259][ T7021] __warn+0x315/0x4c0 [ 169.280316][ T7021] ? usb_submit_urb+0x1057/0x18b0 [ 169.285401][ T7021] ? usb_submit_urb+0x1057/0x18b0 [ 169.290481][ T7021] __report_bug+0x276/0x570 [ 169.295040][ T7021] ? usb_submit_urb+0x1057/0x18b0 [ 169.300126][ T7021] ? __pfx___report_bug+0x10/0x10 [ 169.305213][ T7021] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 169.311101][ T7021] ? __kmalloc_noprof+0x1ad/0x720 [ 169.316178][ T7021] ? kasan_save_track+0x4f/0x80 [ 169.321103][ T7021] report_bug_entry+0x19a/0x290 [ 169.326014][ T7021] ? usb_submit_urb+0x1100/0x18b0 [ 169.331105][ T7021] ? usb_submit_urb+0x1105/0x18b0 [ 169.336181][ T7021] handle_bug+0xce/0x200 [ 169.340514][ T7021] exc_invalid_op+0x1a/0x50 [ 169.345084][ T7021] asm_exc_invalid_op+0x1a/0x20 [ 169.350032][ T7021] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 169.355757][ T7021] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 169.375408][ T7021] RSP: 0018:ffffc90004aef778 EFLAGS: 00010246 [ 169.381734][ T7021] RAX: 0000000000000000 RBX: ffff888074b5b500 RCX: 0000000080000c80 [ 169.389781][ T7021] RDX: ffff8880216dcfe0 RSI: ffffffff8ca32060 RDI: ffffffff90658da0 [ 169.397805][ T7021] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 169.405825][ T7021] R10: ffffc90004aef860 R11: fffff5200095df18 R12: 1ffff1100a4c8728 [ 169.413835][ T7021] R13: ffff888052643940 R14: ffff8880216dcfe0 R15: 0000000080000c80 [ 169.421965][ T7021] ? usb_submit_urb+0x1091/0x18b0 [ 169.427063][ T7021] usb_start_wait_urb+0x13f/0x5b0 [ 169.432161][ T7021] ? trace_kmalloc+0x2a/0xf0 [ 169.436809][ T7021] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 169.442430][ T7021] usb_control_msg+0x234/0x3e0 [ 169.447259][ T7021] dib0700_i2c_xfer+0xbb9/0xf80 [ 169.452180][ T7021] __i2c_transfer+0x7be/0x1fe0 [ 169.457017][ T7021] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 169.462873][ T7021] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.468155][ T7021] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 169.474013][ T7021] ? rt_mutex_lock_nested+0x156/0x1c0 [ 169.479449][ T7021] ? i2c_transfer+0xc8/0x2d0 [ 169.484109][ T7021] i2c_transfer+0x1cc/0x2d0 [ 169.488666][ T7021] i2cdev_ioctl_rdwr+0x460/0x740 [ 169.493702][ T7021] compat_i2cdev_ioctl+0x59f/0x5c0 [ 169.498865][ T7021] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 169.504549][ T7021] ? __fget_files+0x3a2/0x420 [ 169.509275][ T7021] ? __fget_files+0x2a/0x420 [ 169.513930][ T7021] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 169.519511][ T7021] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 169.525043][ T7021] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 169.531088][ T7021] ? kmem_cache_free+0x182/0x650 [ 169.536074][ T7021] ? __se_sys_futex_time32+0x3ab/0x440 [ 169.541623][ T7021] ? rcu_is_watching+0x15/0xb0 [ 169.546488][ T7021] __do_fast_syscall_32+0x23e/0x6f0 [ 169.551734][ T7021] ? do_fast_syscall_32+0x33/0x70 [ 169.556813][ T7021] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.562057][ T7021] ? asm_int80_emulation+0x1a/0x20 [ 169.567246][ T7021] ? do_int80_emulation+0x29f/0x550 [ 169.572525][ T7021] do_fast_syscall_32+0x33/0x70 [ 169.577505][ T7021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.583992][ T7021] RIP: 0023:0xf7f870ec [ 169.588109][ T7021] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 169.608024][ T7021] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 169.616508][ T7021] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 169.624533][ T7021] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.632546][ T7021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.640652][ T7021] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.648853][ T7021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.656881][ T7021] [ 169.660110][ T7021] Kernel Offset: disabled [ 169.664457][ T7021] Rebooting in 86400 seconds..