last executing test programs: 10.507930291s ago: executing program 2 (id=372): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x259b, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 10.359040929s ago: executing program 2 (id=373): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f00000002c0)="c3", 0x51}], 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001180)={0x4}) poll(&(0x7f0000001380)=[{r4, 0x4009}], 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f00000001c0)={0x3}) sendmsg$netlink(r5, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="10000000220000082500000000000000"], 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x24004884) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r7 = socket$kcm(0x21, 0x2, 0xa) r8 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01ffffffff000000000006241a00000008241c030008070009057f0300020000000904010000020d00000904010102020d00000905820200020000000905030200020d"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x7f9, 0x10, 0x10, 0x4009, 0x8000, 0x12, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x40) recvfrom(r7, 0x0, 0x0, 0x40000000, &(0x7f00000003c0)=@phonet={0x23, 0x54, 0x5, 0x7}, 0x80) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getroute={0x58, 0x1a, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x20, 0x14, 0xff, 0xfe, 0x0, 0x0, 0x5, 0x1100}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x7, 0x2, '+$\x00'}}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x3}}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x25}}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4854}, 0x20004040) 8.696369568s ago: executing program 4 (id=376): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x3c, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 8.373645367s ago: executing program 1 (id=378): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 7.035742185s ago: executing program 2 (id=380): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x3c, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 6.855558033s ago: executing program 4 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_getattr(0x0, &(0x7f00000004c0)={0x38}, 0x38, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], 0x0, 0x9}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001240), 0x20040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086643, &(0x7f0000000040)) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe", 0x15) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) 6.412719624s ago: executing program 3 (id=382): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xecf86c37d5304bce) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYBLOB="1ca4a3db7ec882b573fb5e914a8dd6eaedd14e60ed3819d561fcf04ca418535d4d8011d2706065b389d94b8e3be818c92850fa0af774339d7c548a5ddc8c6ec2dae2dba159843b2eb1876161195b1092e5cb62158de36d7662f4bc3b08f56a7baca7c5933babfe34417f389e80d09ff0e16ec4415bb5656a11ca02e802f84f4d1ad8b45802191c9626857e3afbb18bc28cf2adcfb62a9cdf7028c733466a7ce94a0340b8915e566a0484a3bfe7d31bda646563ba58de9369ecca5a746d1fc295844cc38caf085e09", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r3], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.045167144s ago: executing program 0 (id=383): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.803315258s ago: executing program 0 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_getattr(0x0, &(0x7f00000004c0)={0x38}, 0x38, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], 0x0, 0x9}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001240), 0x20040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086643, &(0x7f0000000040)) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe", 0x15) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) 5.782988414s ago: executing program 1 (id=385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00'}) write$tun(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="08004305060006"], 0xfce) 5.676167149s ago: executing program 1 (id=386): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000001180)=[{0x3, 0x2fd, 0x0, 0x0}], 0x1}) 5.648179258s ago: executing program 4 (id=387): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x3c, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.38513365s ago: executing program 2 (id=388): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f0002", @ANYRES32=r1, @ANYBLOB='\x00\x00g'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 4.243201078s ago: executing program 2 (id=389): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000024c0)=ANY=[@ANYBLOB="4007f3000000f323617f27a947938e884961a9fc040ddce45696e4276e9944919d224ec4cda694a8d7e604e7b0e206637f78881d36152354fa07dc87bb8c455f7a5dfdbee86162b638060e34e3200cb03322d1903faccc0da4029db120c68e6f4b7aaf6fd851883b0719e80bb63593fe7564a54a23fb74c97d08a1df2639806900604511f943d0ab8a086890da0e31a4b7c249f85a81c1f2445d00004f0b3d510a17c1bdd8b591f61c544e1b4b2ffd421fb9bbfe98bb0e1250293d43beec2d872d28387c63c92e2ba7e8caa02eb907a600f05a780ecaef2e7f6c89ab4f739f60d34088f7d5f5521cd601f56c92377b9ba0be668204ece1cd4836cf947266216ff29056ee6c5b50847da8f39066ab3cd874be56459105eeb862a65c8cf02877b81a4c5ab5b93ac2e716be134eda1d7b33aace5de304dc6c6784d6a49d15dd74d187ca31882240b8759ca408a9d00b0e40e076c902e641d7e6aba85b037f7256dbbd451cf87c0e4d4b447a5a118347c29f2c0af7f32610dd8353f3fc3fe8ce514d5f8cade96ff9a96a6459dd54cef2df2522451b80072a8dbce291c2753f25ae6873130471fbed7011b4a9509a8bf823e7af029b84a62202f3d1ab53bb9705b73c78d523b7851cdf09a99052382c2e2d51640bae476cf5c0984421e4b258b77e55841f06063ef415404fe10435c1aed7944711effe5dcd05ff953f6530527f61125816bf5cb94c2ab1f6eb00"/535], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x1010, r0, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x7fff}}, 0x30) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r3, &(0x7f0000002180)={0x50, 0x0, r5, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r6, {0x402, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r3, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x7, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f000000a3c0)={0x2020}, 0x2020) getdents64(r4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 3.953640155s ago: executing program 0 (id=390): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3.744925966s ago: executing program 4 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_getattr(0x0, &(0x7f00000004c0)={0x38}, 0x38, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], 0x0, 0x9}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001240), 0x20040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086643, &(0x7f0000000040)) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe", 0x15) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) 3.333962695s ago: executing program 0 (id=392): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x3c, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.628010465s ago: executing program 1 (id=393): r0 = fsopen(&(0x7f0000000080)='bdev\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000111401060000000000000200080001000000000008004f000200000008004b"], 0x28}}, 0x0) getpid() r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f00000a9000/0x3000)=nil, 0x3000, 0x300000b, 0x13, r6, 0x53d27000) r7 = socket$igmp6(0xa, 0x3, 0x2) readv(r7, &(0x7f0000000480)=[{&(0x7f0000000340)=""/204, 0xcc}], 0x1) shutdown(r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x56, 0xa, 0x0, "3258ae1e10004000"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r10, 0xc0045516, &(0x7f00000001c0)=0x7) read(r0, &(0x7f0000003140)=""/4110, 0x100e) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.380881222s ago: executing program 3 (id=394): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.32733119s ago: executing program 4 (id=395): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_setup(0x1da3, &(0x7f00000000c0)={0x0, 0xd133, 0x40, 0x1ffffff, 0x800a0d}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000046617210460d11208f820102030109021b00010000000009040000012247240009050503"], 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, 0xffffffffffffffff, &(0x7f0000020340)={0xb0000010}) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f00000002c0)=@random="b53ccf4eb3baa70b89cc2d80fbba", 0xe, 0x1) 2.148635495s ago: executing program 3 (id=396): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5965, 0x10000, 0x0, 0x36a}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000100)={0x3, 0x0, '\x00', {0x0, @bt={0x6, 0xfff, 0x1, 0x2, 0xed8, 0x8, 0x3, 0x3, 0x9, 0x6, 0x984, 0x3, 0x100, 0x9, 0x1, 0x2, {0x7ff, 0x6}, 0xd, 0x61}}}) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r5, &(0x7f00000000c0), 0x40000000000014a, 0x40000100, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r7, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000300)={0x1, @capture={0x0, 0x1, {0x4, 0xfffffff8}, 0x7fff, 0x1}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x4005}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.026028548s ago: executing program 3 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x7f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_getattr(0x0, &(0x7f00000004c0)={0x38}, 0x38, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], 0x0, 0x9}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001240), 0x20040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086643, &(0x7f0000000040)) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe", 0x15) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) 1.735395283s ago: executing program 0 (id=398): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000), 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) lseek(0xffffffffffffffff, 0x1000001, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 1.131242045s ago: executing program 1 (id=399): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f00020000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 1.068661852s ago: executing program 1 (id=400): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x3c, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 924.548528ms ago: executing program 2 (id=401): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="0393cd7940b5ad708d", 0x9}], 0x1) 835.589747ms ago: executing program 0 (id=402): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 751.34657ms ago: executing program 4 (id=403): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000001180)=[{0x3, 0x2fd, 0x0, 0x0}], 0x1}) 543.818934ms ago: executing program 3 (id=404): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000), 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x58, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) lseek(0xffffffffffffffff, 0x1000001, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 0s ago: executing program 3 (id=405): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xecf86c37d5304bce) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYBLOB="1ca4a3db7ec882b573fb5e914a8dd6eaedd14e60ed3819d561fcf04ca418535d4d8011d2706065b389d94b8e3be818c92850fa0af774339d7c548a5ddc8c6ec2dae2dba159843b2eb1876161195b1092e5cb62158de36d7662f4bc3b08f56a7baca7c5933babfe34417f389e80d09ff0e16ec4415bb5656a11ca02e802f84f4d1ad8b45802191c9626857e3afbb18bc28cf2adcfb62a9cdf7028c733466a7ce94a0340b8915e566a0484a3bfe7d31bda646563ba58de9369ecca5a746d1fc295844cc38caf085e09", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r3], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): : 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.665397][ T6296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.665406][ T6296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.665417][ T6296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.665433][ T6296] [ 104.704336][ T5671] usb 4-1: Using ep0 maxpacket: 8 [ 105.084196][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.144160][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.233498][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.251996][ T5671] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 105.263714][ T5671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.274110][ T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.323274][ T5671] usb 4-1: Product: syz [ 105.343418][ T29] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 105.379013][ T29] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.404057][ T5671] usb 4-1: Manufacturer: syz [ 105.424722][ T5671] usb 4-1: SerialNumber: syz [ 105.431859][ T29] usb 3-1: USB disconnect, device number 12 [ 105.432348][ T6307] fuse: Unknown parameter 'group_id00000000000000000000' [ 105.458693][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 105.472101][ T5671] usb 4-1: config 0 descriptor?? [ 105.478138][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 105.502845][ T5671] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 105.963500][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.066682][ T6321] netlink: 64 bytes leftover after parsing attributes in process `syz.0.161'. [ 106.114831][ T10] usb 5-1: device descriptor read/64, error -71 [ 106.193073][ T6321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.161'. [ 106.239870][ T6321] unsupported nlmsg_type 40 [ 106.386486][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.556516][ T10] usb 5-1: device descriptor read/64, error -71 [ 106.690599][ T10] usb usb5-port1: attempt power cycle [ 107.063488][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.106281][ T10] usb 5-1: device descriptor read/8, error -71 [ 107.326008][ T5671] gspca_sonixj: reg_r err -32 [ 107.364044][ T5671] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 107.393529][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.476096][ T10] usb 5-1: device descriptor read/8, error -71 [ 107.603952][ T10] usb usb5-port1: unable to enumerate USB device [ 107.954252][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.125638][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 108.186507][ T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 108.231410][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.286407][ T24] usb 1-1: Product: syz [ 108.307387][ T24] usb 1-1: Manufacturer: syz [ 108.322473][ T24] usb 1-1: SerialNumber: syz [ 108.352191][ T24] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 108.760662][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.794648][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 108.828455][ T24] usb 1-1: media controller created [ 108.843479][ T5707] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 108.870606][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.023464][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 109.045969][ T5707] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 109.075141][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.111423][ T24] usb 1-1: USB disconnect, device number 10 [ 109.131702][ T5707] usb 5-1: Product: syz [ 109.145549][ T5707] usb 5-1: Manufacturer: syz [ 109.179174][ T5707] usb 5-1: SerialNumber: syz [ 109.194529][ T5707] usb 5-1: config 0 descriptor?? [ 109.220354][ T5707] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 109.258579][ T29] usb 4-1: USB disconnect, device number 11 [ 109.686671][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 109.713394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 109.892522][ T6358] fuse: Unknown parameter 'group_id00000000000000000000' [ 109.959973][ T29] usb 4-1: config 0 has no interfaces? [ 109.975997][ T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 109.993845][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.021143][ T29] usb 4-1: config 0 descriptor?? [ 110.260582][ T10] usb 4-1: USB disconnect, device number 12 [ 110.411780][ T6366] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 110.432653][ T5707] gspca_ov534_9: reg_w failed -71 [ 110.495391][ T6366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.763602][ T5707] gspca_ov534_9: Unknown sensor 0000 [ 110.763656][ T5707] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 110.839224][ T5707] usb 5-1: USB disconnect, device number 11 [ 110.913670][ T5719] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 110.971516][ T6373] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 111.086830][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.115982][ T6373] bond1: entered promiscuous mode [ 111.116033][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 111.137906][ T5719] usb 3-1: config 0 has no interfaces? [ 111.149215][ T5719] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.179758][ T6381] FAULT_INJECTION: forcing a failure. [ 111.179758][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.214745][ T6373] bond1: entered allmulticast mode [ 111.224378][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT(full) [ 111.224410][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.224420][ T6381] Call Trace: [ 111.224427][ T6381] [ 111.224434][ T6381] dump_stack_lvl+0xe8/0x150 [ 111.224572][ T6381] should_fail_ex+0x40c/0x560 [ 111.224600][ T6381] _copy_from_iter+0x1d3/0x1660 [ 111.224620][ T6381] ? rcu_is_watching+0x15/0xb0 [ 111.224642][ T6381] ? __pfx__copy_from_iter+0x10/0x10 [ 111.224657][ T6381] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 111.224682][ T6381] ? netlink_sendmsg+0x650/0xb40 [ 111.224705][ T6381] ? skb_put+0x112/0x210 [ 111.224809][ T6381] netlink_sendmsg+0x6c0/0xb40 [ 111.224838][ T6381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.224862][ T6381] ? __import_iovec+0x5d7/0x7e0 [ 111.224899][ T6381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 111.224923][ T6381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.224944][ T6381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.224966][ T6381] ____sys_sendmsg+0x9b9/0xa20 [ 111.224990][ T6381] ? import_iovec+0x73/0xa0 [ 111.225010][ T6381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.225039][ T6381] ___sys_sendmsg+0x2a5/0x360 [ 111.225061][ T6381] ? get_pid_task+0x20/0x1f0 [ 111.225079][ T6381] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.225103][ T6381] ? __mutex_trylock_common+0x15f/0x270 [ 111.225124][ T6381] ? get_pid_task+0x20/0x1f0 [ 111.225140][ T6381] ? get_pid_task+0x20/0x1f0 [ 111.225168][ T6381] ? __fget_files+0x2a/0x420 [ 111.225187][ T6381] ? __fget_files+0x3a2/0x420 [ 111.225208][ T6381] __sys_sendmsg+0x177/0x240 [ 111.225229][ T6381] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.225333][ T6381] ? rcu_is_watching+0x15/0xb0 [ 111.225354][ T6381] __do_fast_syscall_32+0x23e/0x6f0 [ 111.225377][ T6381] ? do_fast_syscall_32+0x33/0x70 [ 111.225398][ T6381] ? asm_int80_emulation+0x1a/0x20 [ 111.225415][ T6381] ? do_int80_emulation+0x29f/0x550 [ 111.225435][ T6381] ? trace_irq_disable+0x3b/0x140 [ 111.225460][ T6381] do_fast_syscall_32+0x33/0x70 [ 111.225481][ T6381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.225508][ T6381] RIP: 0023:0xf701f0ec [ 111.225524][ T6381] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 111.225540][ T6381] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 111.225560][ T6381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 111.225573][ T6381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.225584][ T6381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.225607][ T6381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.225618][ T6381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.225637][ T6381] [ 111.226026][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.631793][ T6373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.737511][ T6377] erspan1: entered allmulticast mode [ 111.776612][ T5719] usb 3-1: config 0 descriptor?? [ 111.839046][ T6377] bond1: (slave erspan1): making interface the new active one [ 111.898861][ T6377] erspan1: entered promiscuous mode [ 111.939160][ T6377] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 112.013658][ T807] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 112.173440][ T807] usb 1-1: Using ep0 maxpacket: 8 [ 112.213030][ T807] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 112.246206][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.286866][ T807] usb 1-1: Product: syz [ 112.292880][ T807] usb 1-1: Manufacturer: syz [ 112.305493][ T807] usb 1-1: SerialNumber: syz [ 112.324438][ T807] usb 1-1: config 0 descriptor?? [ 112.350443][ T807] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 112.373552][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 112.556766][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 112.592604][ T10] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 112.632598][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.672821][ T10] usb 4-1: Product: syz [ 112.690149][ T10] usb 4-1: Manufacturer: syz [ 112.697698][ T10] usb 4-1: SerialNumber: syz [ 112.737588][ T10] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 112.773663][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 112.805510][ T5707] usb 3-1: USB disconnect, device number 13 [ 112.923466][ T5686] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 113.083500][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 113.100145][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.113408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.132876][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.158207][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.181852][ T5686] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.205763][ T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 113.221240][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.241182][ T10] usb 4-1: media controller created [ 113.254155][ T5686] usb 2-1: config 0 descriptor?? [ 113.275336][ T5686] hub 2-1:0.0: USB hub found [ 113.287891][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.478781][ T5686] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 113.506990][ T10] usb 4-1: USB disconnect, device number 13 [ 113.712071][ T5686] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 113.751178][ T5686] hid-generic 0003:046D:C31C.0003: probe with driver hid-generic failed with error -22 [ 113.789245][ T6396] fuse: Unknown parameter 'group_id00000000000000000000' [ 113.809049][ T6398] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 113.887267][ T6398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.918235][ T6398] FAULT_INJECTION: forcing a failure. [ 113.918235][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.943306][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.3.182 Not tainted syzkaller #0 PREEMPT(full) [ 113.943335][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.943345][ T6398] Call Trace: [ 113.943351][ T6398] [ 113.943356][ T6398] dump_stack_lvl+0xe8/0x150 [ 113.943379][ T6398] should_fail_ex+0x40c/0x560 [ 113.943404][ T6398] _copy_from_iter+0x1d3/0x1660 [ 113.943428][ T6398] ? rcu_is_watching+0x15/0xb0 [ 113.943517][ T6398] ? __pfx__copy_from_iter+0x10/0x10 [ 113.943531][ T6398] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 113.943552][ T6398] ? netlink_sendmsg+0x650/0xb40 [ 113.943576][ T6398] ? skb_put+0x112/0x210 [ 113.943596][ T6398] netlink_sendmsg+0x6c0/0xb40 [ 113.943620][ T6398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.943641][ T6398] ? __import_iovec+0x5d7/0x7e0 [ 113.943657][ T6398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 113.943679][ T6398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.943697][ T6398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.943716][ T6398] ____sys_sendmsg+0x9b9/0xa20 [ 113.943740][ T6398] ? import_iovec+0x73/0xa0 [ 113.943757][ T6398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.944259][ T6398] ___sys_sendmsg+0x2a5/0x360 [ 113.944291][ T6398] ? get_pid_task+0x20/0x1f0 [ 113.944311][ T6398] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.944333][ T6398] ? __mutex_trylock_common+0x15f/0x270 [ 113.944355][ T6398] ? get_pid_task+0x20/0x1f0 [ 113.944367][ T6398] ? get_pid_task+0x20/0x1f0 [ 113.944394][ T6398] ? __fget_files+0x2a/0x420 [ 113.944412][ T6398] ? __fget_files+0x3a2/0x420 [ 113.944433][ T6398] __sys_sendmsg+0x177/0x240 [ 113.944449][ T6398] ? irqentry_exit+0x218/0x8f0 [ 113.944464][ T6398] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.944486][ T6398] __do_fast_syscall_32+0x23e/0x6f0 [ 113.944504][ T6398] ? do_fast_syscall_32+0x33/0x70 [ 113.944522][ T6398] ? asm_int80_emulation+0x1a/0x20 [ 113.944538][ T6398] ? do_int80_emulation+0x29f/0x550 [ 113.944556][ T6398] ? trace_irq_disable+0x3b/0x140 [ 113.945119][ T6398] do_fast_syscall_32+0x33/0x70 [ 113.945144][ T6398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.945163][ T6398] RIP: 0023:0xf70af0ec [ 113.945177][ T6398] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 113.945190][ T6398] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 113.945209][ T6398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 113.945219][ T6398] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.945227][ T6398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.945236][ T6398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.945245][ T6398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.945260][ T6398] [ 114.383437][ T807] gspca_sonixj: i2c_w8 err -110 [ 114.443599][ T807] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 114.488361][ T6406] FAULT_INJECTION: forcing a failure. [ 114.488361][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 114.526211][ T6408] FAULT_INJECTION: forcing a failure. [ 114.526211][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 114.559364][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT(full) [ 114.559601][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.559610][ T6406] Call Trace: [ 114.559615][ T6406] [ 114.559622][ T6406] dump_stack_lvl+0xe8/0x150 [ 114.559685][ T6406] should_fail_ex+0x40c/0x560 [ 114.559762][ T6406] should_failslab+0xa8/0x100 [ 114.559781][ T6406] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 114.559799][ T6406] ? __alloc_skb+0x1d7/0x7a0 [ 114.559813][ T6406] __alloc_skb+0x1d7/0x7a0 [ 114.559826][ T6406] tipc_msg_build+0x15f/0xf50 [ 114.559839][ T6406] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.559854][ T6406] ? rcu_is_watching+0x15/0xb0 [ 114.559865][ T6406] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 114.559886][ T6406] ? __pfx_tipc_msg_build+0x10/0x10 [ 114.559897][ T6406] ? trace_irq_enable+0x3b/0x140 [ 114.559913][ T6406] ? tipc_nametbl_lookup_mcast_nodes+0x4a6/0x9e0 [ 114.559931][ T6406] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 114.559947][ T6406] __tipc_sendmsg+0x1b7d/0x2b60 [ 114.559962][ T6406] ? lock_release+0x4b/0x3c0 [ 114.559971][ T6406] ? __pfx___tipc_sendmsg+0x10/0x10 [ 114.559984][ T6406] ? process_measurement+0x443/0x1c10 [ 114.560272][ T6406] ? rcu_is_watching+0x15/0xb0 [ 114.560306][ T6406] ? __pfx_woken_wake_function+0x10/0x10 [ 114.560329][ T6406] ? ima_match_policy+0x106/0x21c0 [ 114.560345][ T6406] ? __pfx_ima_match_policy+0x10/0x10 [ 114.560361][ T6406] ? rcu_is_watching+0x15/0xb0 [ 114.560377][ T6406] ? lock_release+0x4b/0x3c0 [ 114.560404][ T6406] ? down_write+0x16d/0x200 [ 114.560425][ T6406] ? up_write+0x19f/0x4a0 [ 114.560445][ T6406] ? process_measurement+0x14fb/0x1c10 [ 114.560517][ T6406] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 114.560546][ T6406] ? tomoyo_check_open_permission+0x38e/0x470 [ 114.560566][ T6406] __tipc_sendstream+0x105f/0x12a0 [ 114.560581][ T6406] ? unwind_next_frame+0x8f/0x2550 [ 114.560669][ T6406] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.560702][ T6406] ? __pfx___tipc_sendstream+0x10/0x10 [ 114.560715][ T6406] ? rcu_is_watching+0x15/0xb0 [ 114.560727][ T6406] ? tipc_send_packet+0x6e/0xa0 [ 114.560737][ T6406] ? rcu_is_watching+0x15/0xb0 [ 114.560747][ T6406] ? tipc_send_packet+0x6e/0xa0 [ 114.560757][ T6406] ? trace_irq_enable+0x3b/0x140 [ 114.560774][ T6406] tipc_send_packet+0x7c/0xa0 [ 114.560786][ T6406] ? __pfx_tipc_send_packet+0x10/0x10 [ 114.560797][ T6406] ____sys_sendmsg+0x9b9/0xa20 [ 114.560812][ T6406] ? import_iovec+0x73/0xa0 [ 114.560826][ T6406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.560842][ T6406] ___sys_sendmsg+0x2a5/0x360 [ 114.560858][ T6406] ? get_pid_task+0x20/0x1f0 [ 114.560870][ T6406] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.560882][ T6406] ? __mutex_trylock_common+0x15f/0x270 [ 114.560895][ T6406] ? get_pid_task+0x20/0x1f0 [ 114.560903][ T6406] ? get_pid_task+0x20/0x1f0 [ 114.560918][ T6406] ? __fget_files+0x2a/0x420 [ 114.560929][ T6406] ? __fget_files+0x3a2/0x420 [ 114.560941][ T6406] __sys_sendmsg+0x177/0x240 [ 114.560954][ T6406] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.560969][ T6406] ? rcu_is_watching+0x15/0xb0 [ 114.560980][ T6406] __do_fast_syscall_32+0x23e/0x6f0 [ 114.560995][ T6406] ? do_fast_syscall_32+0x33/0x70 [ 114.561007][ T6406] ? asm_int80_emulation+0x1a/0x20 [ 114.561017][ T6406] ? do_int80_emulation+0x29f/0x550 [ 114.561029][ T6406] ? trace_irq_disable+0x3b/0x140 [ 114.561043][ T6406] do_fast_syscall_32+0x33/0x70 [ 114.561055][ T6406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.561069][ T6406] RIP: 0023:0xf702f0ec [ 114.561082][ T6406] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 114.561091][ T6406] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 114.561103][ T6406] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 114.561110][ T6406] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.561116][ T6406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.561122][ T6406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.561128][ T6406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.561136][ T6406] [ 114.869055][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(full) [ 114.869083][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.869099][ T6408] Call Trace: [ 114.869106][ T6408] [ 114.869118][ T6408] dump_stack_lvl+0xe8/0x150 [ 114.869149][ T6408] should_fail_ex+0x40c/0x560 [ 114.869175][ T6408] should_failslab+0xa8/0x100 [ 114.869201][ T6408] ? skb_clone+0x212/0x3a0 [ 114.869225][ T6408] kmem_cache_alloc_noprof+0x87/0x650 [ 114.869250][ T6408] skb_clone+0x212/0x3a0 [ 114.869274][ T6408] __netlink_deliver_tap+0x413/0x860 [ 114.869302][ T6408] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.869326][ T6408] netlink_deliver_tap+0x19c/0x1b0 [ 114.869349][ T6408] netlink_unicast+0x77f/0x940 [ 114.869373][ T6408] netlink_sendmsg+0x813/0xb40 [ 114.869400][ T6408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.869427][ T6408] ? __import_iovec+0x5d7/0x7e0 [ 114.869446][ T6408] ? aa_sock_msg_perm+0xf1/0x1b0 [ 114.869470][ T6408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.869491][ T6408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.869514][ T6408] ____sys_sendmsg+0x9b9/0xa20 [ 114.869620][ T6408] ? import_iovec+0x73/0xa0 [ 114.869641][ T6408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.869667][ T6408] ___sys_sendmsg+0x2a5/0x360 [ 114.869689][ T6408] ? get_pid_task+0x20/0x1f0 [ 114.869708][ T6408] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.869729][ T6408] ? __mutex_trylock_common+0x15f/0x270 [ 114.869752][ T6408] ? get_pid_task+0x20/0x1f0 [ 114.869768][ T6408] ? get_pid_task+0x20/0x1f0 [ 114.869795][ T6408] ? __fget_files+0x2a/0x420 [ 114.869817][ T6408] ? __fget_files+0x3a2/0x420 [ 114.869843][ T6408] __sys_sendmsg+0x177/0x240 [ 114.869866][ T6408] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.869892][ T6408] ? rcu_is_watching+0x15/0xb0 [ 114.869914][ T6408] __do_fast_syscall_32+0x23e/0x6f0 [ 114.869937][ T6408] ? do_fast_syscall_32+0x33/0x70 [ 114.869958][ T6408] ? asm_int80_emulation+0x1a/0x20 [ 114.869977][ T6408] ? do_int80_emulation+0x29f/0x550 [ 114.870002][ T6408] ? trace_irq_disable+0x3b/0x140 [ 114.870028][ T6408] do_fast_syscall_32+0x33/0x70 [ 114.870047][ T6408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.870070][ T6408] RIP: 0023:0xf70af0ec [ 114.870093][ T6408] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 114.870108][ T6408] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 114.870129][ T6408] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 114.870142][ T6408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.870152][ T6408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.870162][ T6408] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.870173][ T6408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.870190][ T6408] [ 115.754051][ T5686] usb 2-1: USB disconnect, device number 11 [ 115.788830][ T807] usb 1-1: USB disconnect, device number 11 [ 116.013535][ T5707] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 116.154007][ T807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 116.183784][ T5719] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 116.199685][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.226202][ T5707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.257202][ T5707] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.276191][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.299686][ T5707] usb 4-1: SerialNumber: syz [ 116.313513][ T5686] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 116.328363][ T807] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.363889][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.386443][ T5719] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 116.415775][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 116.446214][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 116.473583][ T807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.505869][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.520741][ T5686] usb 5-1: config 0 has no interfaces? [ 116.528161][ T5686] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.539058][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.555003][ T5686] usb 5-1: config 0 descriptor?? [ 116.587884][ T5707] usb 4-1: 0:2 : does not exist [ 116.600797][ T5719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.617525][ T807] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.649567][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.665780][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.691569][ T5707] usb 4-1: USB disconnect, device number 14 [ 116.705217][ T5719] usb 3-1: Product: syz [ 116.727641][ T807] usb 1-1: config 0 descriptor?? [ 116.740173][ T5719] usb 3-1: Manufacturer: syz [ 116.772810][ T5719] usb 3-1: SerialNumber: syz [ 116.844329][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.167803][ T807] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.258582][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 117.304557][ T5707] usb 5-1: USB disconnect, device number 12 [ 117.492439][ T6433] fuse: Bad value for 'user_id' [ 117.502468][ T6433] fuse: Bad value for 'user_id' [ 117.511729][ T807] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 117.682518][ T807] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 117.709101][ T807] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 117.741579][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.756043][ T807] usb 4-1: Product: syz [ 117.772688][ T807] usb 4-1: Manufacturer: syz [ 117.779829][ T807] usb 4-1: SerialNumber: syz [ 117.802019][ T807] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 118.213176][ T807] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.240757][ T807] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 118.295472][ T807] usb 4-1: media controller created [ 118.346963][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.533198][ T6449] kAFS: unable to lookup cell '' [ 118.664243][ T807] usb 4-1: USB disconnect, device number 15 [ 118.957113][ T5719] cdc_ncm 3-1:1.0: bind() failure [ 118.984148][ T6455] syzkaller1: entered promiscuous mode [ 119.007192][ T5719] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 119.029107][ T6455] syzkaller1: entered allmulticast mode [ 119.046912][ T5719] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 119.114345][ T5719] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 119.186312][ T5719] usb 3-1: USB disconnect, device number 14 [ 119.523662][ T5719] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 119.534270][ T24] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 119.557438][ T24] usb 1-1: device reset changed ep0 maxpacket size! [ 119.574428][ T10] usb 1-1: USB disconnect, device number 12 [ 119.632858][ T6467] syzkaller1: entered promiscuous mode [ 119.661867][ T6467] syzkaller1: entered allmulticast mode [ 119.703855][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 119.715297][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.735088][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.763440][ T5719] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.783962][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.797097][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 119.811631][ T5719] usb 3-1: config 0 descriptor?? [ 119.845172][ T5719] hub 3-1:0.0: USB hub found [ 120.012500][ T6470] fuse: Bad value for 'user_id' [ 120.021765][ T6470] fuse: Bad value for 'user_id' [ 120.033496][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 120.081706][ T5719] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 120.088754][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 120.156261][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.232259][ T10] usb 1-1: Product: syz [ 120.292247][ T10] usb 1-1: Manufacturer: syz [ 120.311341][ T5719] hid-generic 0003:046D:C31C.0005: item fetching failed at offset 0/1 [ 120.346418][ T5719] hid-generic 0003:046D:C31C.0005: probe with driver hid-generic failed with error -22 [ 120.372698][ T10] usb 1-1: SerialNumber: syz [ 120.387019][ T10] usb 1-1: config 0 descriptor?? [ 120.404059][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 121.260459][ T5716] usb 3-1: USB disconnect, device number 15 [ 121.713551][ T5716] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 121.826779][ T6483] FAULT_INJECTION: forcing a failure. [ 121.826779][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 121.863801][ T6483] CPU: 1 UID: 0 PID: 6483 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT(full) [ 121.863860][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.863877][ T6483] Call Trace: [ 121.863882][ T6483] [ 121.863888][ T6483] dump_stack_lvl+0xe8/0x150 [ 121.863910][ T6483] should_fail_ex+0x40c/0x560 [ 121.863927][ T6483] should_failslab+0xa8/0x100 [ 121.863947][ T6483] ? skb_clone+0x212/0x3a0 [ 121.863961][ T6483] kmem_cache_alloc_noprof+0x87/0x650 [ 121.863983][ T6483] skb_clone+0x212/0x3a0 [ 121.864023][ T6483] __netlink_deliver_tap+0x413/0x860 [ 121.864055][ T6483] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.864078][ T6483] netlink_deliver_tap+0x19c/0x1b0 [ 121.864102][ T6483] netlink_unicast+0x77f/0x940 [ 121.864218][ T6483] netlink_sendmsg+0x813/0xb40 [ 121.864249][ T6483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.864274][ T6483] ? __import_iovec+0x5d7/0x7e0 [ 121.864292][ T6483] ? aa_sock_msg_perm+0xf1/0x1b0 [ 121.864317][ T6483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.864339][ T6483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.864364][ T6483] ____sys_sendmsg+0x9b9/0xa20 [ 121.864384][ T6483] ? import_iovec+0x73/0xa0 [ 121.864403][ T6483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.864427][ T6483] ___sys_sendmsg+0x2a5/0x360 [ 121.864449][ T6483] ? get_pid_task+0x20/0x1f0 [ 121.864468][ T6483] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.864501][ T6483] ? __mutex_trylock_common+0x15f/0x270 [ 121.864523][ T6483] ? get_pid_task+0x20/0x1f0 [ 121.864538][ T6483] ? get_pid_task+0x20/0x1f0 [ 121.864566][ T6483] ? __fget_files+0x2a/0x420 [ 121.864584][ T6483] ? __fget_files+0x3a2/0x420 [ 121.864607][ T6483] __sys_sendmsg+0x177/0x240 [ 121.864630][ T6483] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.864652][ T6483] ? rcu_is_watching+0x15/0xb0 [ 121.864668][ T6483] __do_fast_syscall_32+0x23e/0x6f0 [ 121.864692][ T6483] ? do_fast_syscall_32+0x33/0x70 [ 121.865257][ T6483] ? asm_int80_emulation+0x1a/0x20 [ 121.865272][ T6483] ? do_int80_emulation+0x29f/0x550 [ 121.865307][ T6483] do_fast_syscall_32+0x33/0x70 [ 121.865326][ T6483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.865346][ T6483] RIP: 0023:0xf7f840ec [ 121.865361][ T6483] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 121.865376][ T6483] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 121.865395][ T6483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 121.865408][ T6483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.865419][ T6483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.865430][ T6483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.865441][ T6483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.865457][ T6483] [ 121.866684][ T6483] tipc: Started in network mode [ 122.097699][ T5716] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 122.353969][ T10] gspca_sonixj: reg_r err -32 [ 122.363468][ T6483] tipc: Node identity ac1414aa, cluster identity 4711 [ 122.382670][ T5716] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 122.395911][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 122.419839][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.443688][ T6483] tipc: Enabled bearer , priority 10 [ 122.466217][ T5716] usb 3-1: Product: syz [ 122.502909][ T5716] usb 3-1: Manufacturer: syz [ 122.509391][ T5716] usb 3-1: SerialNumber: syz [ 122.684526][ T5716] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 122.853599][ T807] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.013460][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 123.032366][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 123.065990][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.080238][ T5716] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.094341][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.117839][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.117872][ T5716] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 123.117905][ T5716] usb 3-1: media controller created [ 123.163197][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.172647][ T807] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 123.215613][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.302833][ T807] usb 2-1: Product: syz [ 123.336456][ T807] usb 2-1: Manufacturer: syz [ 123.379701][ T807] usb 2-1: SerialNumber: syz [ 123.415992][ T5716] usb 3-1: USB disconnect, device number 16 [ 123.484845][ T807] usb 2-1: config 0 descriptor?? [ 123.541641][ T807] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 123.573510][ T5672] tipc: Node number set to 2886997162 [ 123.588531][ T807] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 123.774206][ T807] usb 2-1: USB disconnect, device number 12 [ 123.907115][ T807] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 123.934275][ T807] kobil_sct 2-1:0.0: device disconnected [ 123.977529][ T6494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.020328][ T6494] bond0: (slave bond3): Enslaving as an active interface with an up link [ 124.188188][ T807] usb 1-1: USB disconnect, device number 13 [ 124.349273][ T6500] FAULT_INJECTION: forcing a failure. [ 124.349273][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.480491][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT(full) [ 124.480518][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.480529][ T6500] Call Trace: [ 124.480535][ T6500] [ 124.480542][ T6500] dump_stack_lvl+0xe8/0x150 [ 124.480568][ T6500] should_fail_ex+0x40c/0x560 [ 124.480594][ T6500] _copy_from_iter+0x1d3/0x1660 [ 124.480611][ T6500] ? rcu_is_watching+0x15/0xb0 [ 124.480631][ T6500] ? __pfx__copy_from_iter+0x10/0x10 [ 124.480647][ T6500] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 124.480670][ T6500] ? netlink_sendmsg+0x650/0xb40 [ 124.480689][ T6500] ? skb_put+0x112/0x210 [ 124.480708][ T6500] netlink_sendmsg+0x6c0/0xb40 [ 124.480731][ T6500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.480750][ T6500] ? __import_iovec+0x5d7/0x7e0 [ 124.480766][ T6500] ? aa_sock_msg_perm+0xf1/0x1b0 [ 124.480789][ T6500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 124.480809][ T6500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.480831][ T6500] ____sys_sendmsg+0x9b9/0xa20 [ 124.480853][ T6500] ? import_iovec+0x73/0xa0 [ 124.480873][ T6500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.480900][ T6500] ___sys_sendmsg+0x2a5/0x360 [ 124.480919][ T6500] ? get_pid_task+0x20/0x1f0 [ 124.480936][ T6500] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.480954][ T6500] ? __mutex_trylock_common+0x15f/0x270 [ 124.480973][ T6500] ? get_pid_task+0x20/0x1f0 [ 124.480986][ T6500] ? get_pid_task+0x20/0x1f0 [ 124.481011][ T6500] ? __fget_files+0x2a/0x420 [ 124.481028][ T6500] ? __fget_files+0x3a2/0x420 [ 124.481047][ T6500] __sys_sendmsg+0x177/0x240 [ 124.481066][ T6500] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.481091][ T6500] ? rcu_is_watching+0x15/0xb0 [ 124.481108][ T6500] __do_fast_syscall_32+0x23e/0x6f0 [ 124.481128][ T6500] ? do_fast_syscall_32+0x33/0x70 [ 124.481146][ T6500] ? asm_int80_emulation+0x1a/0x20 [ 124.481161][ T6500] ? do_int80_emulation+0x29f/0x550 [ 124.481182][ T6500] do_fast_syscall_32+0x33/0x70 [ 124.481201][ T6500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.481219][ T6500] RIP: 0023:0xf701f0ec [ 124.481233][ T6500] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 124.481246][ T6500] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 124.481264][ T6500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 124.481275][ T6500] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.481285][ T6500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.481295][ T6500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.481305][ T6500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.481323][ T6500] [ 125.187208][ T6508] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 125.314789][ T6508] bond3: entered promiscuous mode [ 125.367327][ T6508] bond3: entered allmulticast mode [ 125.404988][ T6508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.443772][ T807] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 125.488065][ T6516] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 125.616249][ T807] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 125.672742][ T807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 125.737933][ T807] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.776658][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.841110][ T807] usb 1-1: Product: syz [ 125.857302][ T6525] syz.2.220 uses obsolete (PF_INET,SOCK_PACKET) [ 125.862254][ T807] usb 1-1: Manufacturer: syz [ 125.912864][ T807] usb 1-1: SerialNumber: syz [ 126.268091][ T6536] FAULT_INJECTION: forcing a failure. [ 126.268091][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 126.292574][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) [ 126.292601][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.292641][ T6536] Call Trace: [ 126.292648][ T6536] [ 126.292654][ T6536] dump_stack_lvl+0xe8/0x150 [ 126.292678][ T6536] should_fail_ex+0x40c/0x560 [ 126.292706][ T6536] should_failslab+0xa8/0x100 [ 126.292730][ T6536] ? __inet_hash_connect+0x1631/0x25a0 [ 126.292758][ T6536] kmem_cache_alloc_noprof+0x87/0x650 [ 126.292771][ T6536] ? __inet_hash_connect+0xe9b/0x25a0 [ 126.292787][ T6536] __inet_hash_connect+0x1631/0x25a0 [ 126.292805][ T6536] ? __inet_hash_connect+0x5ce/0x25a0 [ 126.292830][ T6536] ? __pfx___inet_hash_connect+0x10/0x10 [ 126.292854][ T6536] ? sk_setup_caps+0x94f/0xbc0 [ 126.292872][ T6536] ? inet6_ehashfn+0x2f/0x3b0 [ 126.292891][ T6536] ? inet6_hash_connect+0xeb/0x170 [ 126.292919][ T6536] tcp_v6_connect+0x1231/0x1cf0 [ 126.292934][ T6536] ? __kmalloc_cache_noprof+0x318/0x660 [ 126.292946][ T6536] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 126.292961][ T6536] ? __pfx_tcp_v6_connect+0x10/0x10 [ 126.292982][ T6536] __inet_stream_connect+0x258/0xe00 [ 126.293007][ T6536] ? __pfx___inet_stream_connect+0x10/0x10 [ 126.293027][ T6536] ? __kasan_kmalloc+0x93/0xb0 [ 126.293049][ T6536] ? __kmalloc_cache_noprof+0x318/0x660 [ 126.293066][ T6536] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 126.293078][ T6536] ? __kmalloc_cache_noprof+0x157/0x660 [ 126.293091][ T6536] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 126.293105][ T6536] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 126.293119][ T6536] ? arch_stack_walk+0xfb/0x150 [ 126.293138][ T6536] ? tcp_sendmsg_locked+0x601/0x55c0 [ 126.293160][ T6536] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 126.293183][ T6536] ? lock_acquire+0x5f/0x350 [ 126.293197][ T6536] ? aa_file_perm+0x18b/0x15f0 [ 126.294617][ T6536] ? _parse_integer_limit+0x1ae/0x1f0 [ 126.294642][ T6536] ? kstrtoull+0x12f/0x1d0 [ 126.294661][ T6536] ? kstrtouint+0x6e/0xe0 [ 126.294689][ T6536] ? get_pid_task+0x20/0x1f0 [ 126.294702][ T6536] ? rcu_is_watching+0x15/0xb0 [ 126.294720][ T6536] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 126.294740][ T6536] ? rcu_is_watching+0x15/0xb0 [ 126.294754][ T6536] ? tcp_sendmsg+0x21/0x50 [ 126.294818][ T6536] ? rcu_is_watching+0x15/0xb0 [ 126.294834][ T6536] ? trace_irq_enable+0x3b/0x140 [ 126.294853][ T6536] ? __pfx_inet6_sendmsg+0x10/0x10 [ 126.294873][ T6536] ? __pfx_inet6_sendmsg+0x10/0x10 [ 126.294892][ T6536] tcp_sendmsg+0x2f/0x50 [ 126.294911][ T6536] __sys_sendto+0x47f/0x6c0 [ 126.294932][ T6536] ? __pfx___sys_sendto+0x10/0x10 [ 126.294956][ T6536] ? __fget_files+0x3a2/0x420 [ 126.294979][ T6536] ? ksys_write+0x242/0x270 [ 126.295003][ T6536] __ia32_sys_sendto+0xdd/0x100 [ 126.295022][ T6536] __do_fast_syscall_32+0x23e/0x6f0 [ 126.295044][ T6536] ? do_fast_syscall_32+0x33/0x70 [ 126.295065][ T6536] ? asm_int80_emulation+0x1a/0x20 [ 126.295082][ T6536] ? do_int80_emulation+0x29f/0x550 [ 126.295103][ T6536] ? trace_irq_disable+0x3b/0x140 [ 126.295128][ T6536] do_fast_syscall_32+0x33/0x70 [ 126.295154][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.295172][ T6536] RIP: 0023:0xf702f0ec [ 126.295518][ T6536] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 126.295537][ T6536] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 126.295557][ T6536] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 126.295567][ T6536] RDX: 0000000000000000 RSI: 0000000020000845 RDI: 0000000080b63fe4 [ 126.295579][ T6536] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 126.295590][ T6536] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.295601][ T6536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.295619][ T6536] [ 126.947918][ T6524] netlink: 56 bytes leftover after parsing attributes in process `syz.4.219'. [ 127.258064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.276737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 127.333403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.453530][ T5672] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 127.599010][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.610394][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.635213][ T5672] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 127.658021][ T5672] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 127.675009][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.698940][ T5672] usb 4-1: Product: syz [ 127.715942][ T5672] usb 4-1: Manufacturer: syz [ 127.726361][ T5672] usb 4-1: SerialNumber: syz [ 127.756574][ T5672] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 127.764205][ T5719] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 127.934747][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.963573][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 127.977758][ T5719] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 127.992645][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.005342][ T5719] usb 3-1: Product: syz [ 128.011694][ T5719] usb 3-1: Manufacturer: syz [ 128.021400][ T5719] usb 3-1: SerialNumber: syz [ 128.034834][ T5719] usb 3-1: config 0 descriptor?? [ 128.070193][ T5719] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 128.105606][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.130537][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.166431][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.191303][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.207018][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.207100][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.207125][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.263877][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.270555][ T5672] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.325438][ T24] usb 2-1: config 0 descriptor?? [ 128.336721][ T5672] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 128.370780][ T5672] usb 4-1: media controller created [ 128.427979][ T5672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.720233][ T5672] usb 4-1: USB disconnect, device number 16 [ 128.832051][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 128.931656][ T807] cdc_ncm 1-1:1.0: bind() failure [ 128.970133][ T807] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 129.027267][ T807] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 129.076418][ T807] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 129.118369][ T807] usb 1-1: USB disconnect, device number 14 [ 129.138301][ T5716] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.332334][ T5716] usb 5-1: Using ep0 maxpacket: 16 [ 129.359804][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 129.390884][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.414532][ T5707] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 129.415522][ T5716] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 129.482386][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.517758][ T5716] usb 5-1: Product: syz [ 129.531911][ T5716] usb 5-1: Manufacturer: syz [ 129.556998][ T5716] usb 5-1: SerialNumber: syz [ 129.581674][ T5716] usb 5-1: config 0 descriptor?? [ 129.599091][ T5716] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 129.634660][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 129.661552][ T5716] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 129.677284][ T5707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.702945][ T5707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.728125][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.762658][ T5707] usb 4-1: Product: syz [ 129.792062][ T5707] usb 4-1: Manufacturer: syz [ 129.822159][ T24] usb 5-1: USB disconnect, device number 13 [ 129.850763][ T5707] usb 4-1: SerialNumber: syz [ 129.882752][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 129.918710][ T24] kobil_sct 5-1:0.0: device disconnected [ 129.929007][ T5719] gspca_sonixj: reg_r err -32 [ 129.973550][ T5719] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 130.682989][ T5672] usb 2-1: USB disconnect, device number 13 [ 130.743707][ T5686] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.942987][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 130.955536][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.000727][ T5686] usb 5-1: config 0 has no interfaces? [ 131.036303][ T5686] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.089786][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.186654][ T5686] usb 5-1: config 0 descriptor?? [ 131.814726][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.228'. [ 131.969524][ T10] usb 3-1: USB disconnect, device number 17 [ 132.219669][ T5707] cdc_ncm 4-1:1.0: bind() failure [ 132.390705][ T5707] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 132.454321][ T5707] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 132.520195][ T5707] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 132.574842][ T5707] usb 4-1: USB disconnect, device number 17 [ 133.286196][ T5707] usb 5-1: USB disconnect, device number 14 [ 133.755246][ T60] wlan0: Trigger new scan to find an IBSS to join [ 134.790732][ T6665] FAULT_INJECTION: forcing a failure. [ 134.790732][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.035685][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(full) [ 135.035713][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.035728][ T6665] Call Trace: [ 135.035735][ T6665] [ 135.035742][ T6665] dump_stack_lvl+0xe8/0x150 [ 135.035767][ T6665] should_fail_ex+0x40c/0x560 [ 135.035815][ T6665] _copy_from_user+0x2d/0xb0 [ 135.035841][ T6665] move_addr_to_kernel+0x7e/0x160 [ 135.035871][ T6665] get_compat_msghdr+0x3db/0x4c0 [ 135.035896][ T6665] ? __pfx_get_compat_msghdr+0x10/0x10 [ 135.035924][ T6665] ___sys_sendmsg+0x201/0x360 [ 135.035965][ T6665] ? get_pid_task+0x20/0x1f0 [ 135.035985][ T6665] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.036012][ T6665] ? __mutex_trylock_common+0x15f/0x270 [ 135.036044][ T6665] ? get_pid_task+0x20/0x1f0 [ 135.036065][ T6665] ? get_pid_task+0x20/0x1f0 [ 135.036093][ T6665] ? __fget_files+0x2a/0x420 [ 135.036111][ T6665] ? __fget_files+0x3a2/0x420 [ 135.036132][ T6665] __sys_sendmsg+0x177/0x240 [ 135.036155][ T6665] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.036182][ T6665] ? rcu_is_watching+0x15/0xb0 [ 135.036203][ T6665] __do_fast_syscall_32+0x23e/0x6f0 [ 135.036227][ T6665] ? do_fast_syscall_32+0x33/0x70 [ 135.036256][ T6665] ? asm_int80_emulation+0x1a/0x20 [ 135.036274][ T6665] ? do_int80_emulation+0x29f/0x550 [ 135.036292][ T6665] ? trace_irq_disable+0x3b/0x140 [ 135.036314][ T6665] do_fast_syscall_32+0x33/0x70 [ 135.036333][ T6665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.036360][ T6665] RIP: 0023:0xf701f0ec [ 135.036375][ T6665] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 135.036390][ T6665] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 135.036409][ T6665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001ec0 [ 135.036421][ T6665] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.036430][ T6665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.036441][ T6665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.036447][ T6665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.036457][ T6665] [ 136.186243][ T5719] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.488961][ T5719] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 136.609023][ T5719] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 136.625139][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.642807][ T5719] usb 1-1: Product: syz [ 136.656106][ T5719] usb 1-1: Manufacturer: syz [ 136.665228][ T5719] usb 1-1: SerialNumber: syz [ 136.700376][ T5719] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 136.979909][ T6683] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 137.082919][ T6683] bond4: entered promiscuous mode [ 137.115403][ T5719] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.116148][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.148444][ T6683] bond4: entered allmulticast mode [ 137.149074][ T5719] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 137.195287][ T5719] usb 1-1: media controller created [ 137.230922][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 137.255077][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.285626][ T6683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.292715][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.563637][ T5672] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 137.681715][ T5719] usb 1-1: USB disconnect, device number 15 [ 137.737158][ T5672] usb 5-1: Using ep0 maxpacket: 8 [ 137.803313][ T5672] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 137.911194][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.933463][ T5672] usb 5-1: Product: syz [ 137.945017][ T5672] usb 5-1: Manufacturer: syz [ 137.970316][ T5672] usb 5-1: SerialNumber: syz [ 138.012427][ T5672] usb 5-1: config 0 descriptor?? [ 138.045876][ T5672] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 138.798968][ T13] wlan0: Trigger new scan to find an IBSS to join [ 139.654268][ T5716] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 139.744475][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.800640][ T6715] FAULT_INJECTION: forcing a failure. [ 139.800640][ T6715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.849822][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 139.868095][ T5672] gspca_sonixj: reg_r err -32 [ 139.875431][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 139.902051][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.903214][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.2.247 Not tainted syzkaller #0 PREEMPT(full) [ 139.903240][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.903252][ T6715] Call Trace: [ 139.903267][ T6715] [ 139.903274][ T6715] dump_stack_lvl+0xe8/0x150 [ 139.903301][ T6715] should_fail_ex+0x40c/0x560 [ 139.903379][ T6715] _copy_from_iter+0x1d3/0x1660 [ 139.903415][ T6715] ? rcu_is_watching+0x15/0xb0 [ 139.903437][ T6715] ? __pfx__copy_from_iter+0x10/0x10 [ 139.903452][ T6715] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 139.903480][ T6715] ? netlink_sendmsg+0x650/0xb40 [ 139.903508][ T6715] ? skb_put+0x112/0x210 [ 139.903528][ T6715] netlink_sendmsg+0x6c0/0xb40 [ 139.903555][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.903579][ T6715] ? __import_iovec+0x5d7/0x7e0 [ 139.903601][ T6715] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.903626][ T6715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.903647][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.903671][ T6715] ____sys_sendmsg+0x9b9/0xa20 [ 139.903694][ T6715] ? import_iovec+0x73/0xa0 [ 139.903714][ T6715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.903743][ T6715] ___sys_sendmsg+0x2a5/0x360 [ 139.903764][ T6715] ? get_pid_task+0x20/0x1f0 [ 139.903783][ T6715] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.903884][ T6715] ? __mutex_trylock_common+0x15f/0x270 [ 139.903906][ T6715] ? get_pid_task+0x20/0x1f0 [ 139.903922][ T6715] ? get_pid_task+0x20/0x1f0 [ 139.903949][ T6715] ? __fget_files+0x2a/0x420 [ 139.903968][ T6715] ? __fget_files+0x3a2/0x420 [ 139.903991][ T6715] __sys_sendmsg+0x177/0x240 [ 139.904013][ T6715] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.904039][ T6715] ? rcu_is_watching+0x15/0xb0 [ 139.904060][ T6715] __do_fast_syscall_32+0x23e/0x6f0 [ 139.904084][ T6715] ? do_fast_syscall_32+0x33/0x70 [ 139.904104][ T6715] ? asm_int80_emulation+0x1a/0x20 [ 139.904122][ T6715] ? do_int80_emulation+0x29f/0x550 [ 139.904143][ T6715] ? trace_irq_disable+0x3b/0x140 [ 139.904170][ T6715] do_fast_syscall_32+0x33/0x70 [ 139.904191][ T6715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.904212][ T6715] RIP: 0023:0xf702f0ec [ 139.904229][ T6715] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 139.904245][ T6715] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 139.904266][ T6715] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 139.904279][ T6715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.904290][ T6715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.904300][ T6715] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.904603][ T6715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.904623][ T6715] [ 140.410899][ T5672] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 140.555261][ T5716] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 140.589672][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.623322][ T5716] usb 4-1: Product: syz [ 140.643105][ T5716] usb 4-1: Manufacturer: syz [ 140.659920][ T5716] usb 4-1: SerialNumber: syz [ 140.673747][ T5716] usb 4-1: config 0 descriptor?? [ 140.694895][ T5716] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 140.718898][ T5716] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 140.903731][ T5719] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 140.925656][ T5716] usb 4-1: USB disconnect, device number 18 [ 140.958399][ T5716] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 140.990191][ T5716] kobil_sct 4-1:0.0: device disconnected [ 141.177994][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 141.201429][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.236028][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.270254][ T5719] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.302356][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.351292][ T5719] usb 3-1: config 0 descriptor?? [ 141.377453][ T5719] hub 3-1:0.0: USB hub found [ 141.576188][ T5719] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 141.797536][ T5719] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 141.810512][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 141.832744][ T5719] hid-generic 0003:046D:C31C.0007: probe with driver hid-generic failed with error -22 [ 141.909832][ T5716] usb 5-1: USB disconnect, device number 15 [ 141.986076][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.057880][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.123684][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.156654][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.245384][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.259898][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.299685][ T24] usb 4-1: config 0 descriptor?? [ 142.594932][ T6731] fuse: Bad value for 'fd' [ 142.784205][ T24] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 142.937024][ T5739] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.966125][ T5719] usb 3-1: USB disconnect, device number 18 [ 143.149120][ T5739] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 143.211812][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.260059][ T5739] usb 5-1: config 0 descriptor?? [ 143.292635][ T6736] kAFS: unable to lookup cell '' [ 143.326254][ T5739] cp210x 5-1:0.0: cp210x converter detected [ 143.407240][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 143.407281][ T30] audit: type=1326 audit(1781861963.293:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 143.473710][ T30] audit: type=1326 audit(1781861963.343:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 143.524741][ T6736] input: syz1 as /devices/virtual/input/input21 [ 143.575310][ T30] audit: type=1326 audit(1781861963.343:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 143.716685][ T30] audit: type=1326 audit(1781861963.343:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 143.785930][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.826946][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.883136][ T5739] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 143.914482][ T30] audit: type=1326 audit(1781861963.343:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 144.079197][ T5739] usb 5-1: cp210x converter now attached to ttyUSB0 [ 144.143750][ T30] audit: type=1326 audit(1781861963.343:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 144.239838][ T30] audit: type=1326 audit(1781861963.343:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 144.427241][ T30] audit: type=1326 audit(1781861963.343:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 144.510428][ T30] audit: type=1326 audit(1781861963.343:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 144.612802][ T5686] usb 4-1: USB disconnect, device number 19 [ 144.628595][ T5716] usb 5-1: USB disconnect, device number 16 [ 144.675366][ T5716] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 144.727470][ T30] audit: type=1326 audit(1781861963.343:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.254" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 144.748128][ T3344] wlan0: Trigger new scan to find an IBSS to join [ 144.778084][ T5716] cp210x 5-1:0.0: device disconnected [ 144.941430][ T5686] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 145.049642][ T5686] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.610191][ T6752] syzkaller0: entered promiscuous mode [ 145.662928][ T6752] syzkaller0: entered allmulticast mode [ 145.697324][ T6752] tipc: Started in network mode [ 145.748715][ T6752] tipc: Node identity ea5ca9438395, cluster identity 4711 [ 145.769724][ T6752] tipc: Enabled bearer , priority 0 [ 145.856401][ T6750] tipc: Resetting bearer [ 145.929684][ T6750] tipc: Disabling bearer [ 146.255384][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 146.458996][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 146.486033][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 146.528153][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.610670][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 146.644474][ T5719] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 146.656517][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.697908][ T24] usb 5-1: Product: syz [ 146.725156][ T24] usb 5-1: Manufacturer: syz [ 146.747121][ T24] usb 5-1: SerialNumber: syz [ 146.787555][ T24] usb 5-1: config 0 descriptor?? [ 146.813575][ T24] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 146.836778][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 146.865816][ T5719] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 146.886280][ T24] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 146.911338][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.952091][ T5719] usb 4-1: Product: syz [ 146.957551][ T5719] usb 4-1: Manufacturer: syz [ 146.962997][ T5719] usb 4-1: SerialNumber: syz [ 146.987488][ T5719] usb 4-1: config 0 descriptor?? [ 147.068187][ T5686] usb 5-1: USB disconnect, device number 17 [ 147.077808][ T5719] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 147.107457][ T5686] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 147.163827][ T5686] kobil_sct 5-1:0.0: device disconnected [ 147.427539][ T6786] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 147.470845][ T6786] bond2: entered promiscuous mode [ 147.510161][ T6786] bond2: entered allmulticast mode [ 147.525547][ T6786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.758609][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 147.797697][ T6792] kAFS: unable to lookup cell '' [ 147.991664][ T6792] input: syz1 as /devices/virtual/input/input22 [ 148.356736][ T6797] netlink: 56 bytes leftover after parsing attributes in process `syz.4.268'. [ 148.871156][ T5719] gspca_sonixj: reg_r err -32 [ 148.913685][ T5719] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 150.843834][ T10] usb 4-1: USB disconnect, device number 20 [ 150.960848][ T6825] kAFS: unable to lookup cell '' [ 150.988219][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 150.988242][ T30] audit: type=1326 audit(1781861970.873:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.043712][ T30] audit: type=1326 audit(1781861970.913:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.092323][ T30] audit: type=1326 audit(1781861970.913:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.092481][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 151.168150][ T30] audit: type=1326 audit(1781861970.913:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.294766][ T30] audit: type=1326 audit(1781861970.913:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.382825][ T30] audit: type=1326 audit(1781861970.913:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.484093][ T30] audit: type=1326 audit(1781861970.913:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.503999][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 151.604437][ T6833] kAFS: unable to lookup cell '' [ 151.617953][ T30] audit: type=1326 audit(1781861970.913:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.704909][ T30] audit: type=1326 audit(1781861970.923:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.713907][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 151.818871][ T30] audit: type=1326 audit(1781861970.923:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 151.909326][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 151.931701][ T10] usb 4-1: config 0 has no interface number 0 [ 151.966605][ T6833] input: syz1 as /devices/virtual/input/input24 [ 151.980405][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 151.994529][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.060617][ T10] usb 4-1: Product: syz [ 152.071705][ T10] usb 4-1: Manufacturer: syz [ 152.086633][ T10] usb 4-1: SerialNumber: syz [ 152.140500][ T10] usb 4-1: config 0 descriptor?? [ 152.694719][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 152.744418][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.589076][ T6841] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 153.599379][ T6828] ip6erspan0: entered allmulticast mode [ 153.689085][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 153.704403][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 153.736484][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 153.877269][ T10] usb 4-1: USB disconnect, device number 21 [ 154.031176][ T6841] bond5: entered promiscuous mode [ 154.036706][ T6848] tmpfs: Unknown parameter '0xffffffffffffffff' [ 154.065295][ T5716] IPVS: starting estimator thread 0... [ 154.096581][ T6841] bond5: entered allmulticast mode [ 154.118354][ T6841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.194308][ T6850] IPVS: using max 53 ests per chain, 127200 per kthread [ 154.469199][ T6858] fuse: Bad value for 'rootmode' [ 154.601032][ T6863] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 154.752337][ T6863] bond3: entered promiscuous mode [ 154.844771][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 154.882692][ T6863] bond3: entered allmulticast mode [ 154.995323][ T6863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.754508][ T5716] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 155.897872][ T6884] kAFS: unable to lookup cell '' [ 156.005937][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 156.005962][ T30] audit: type=1326 audit(1781861975.883:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.009414][ T5716] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 156.015224][ T30] audit: type=1326 audit(1781861975.903:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.106403][ T30] audit: type=1326 audit(1781861975.903:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.150027][ T30] audit: type=1326 audit(1781861975.993:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.189924][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 156.190127][ T5719] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 156.258187][ T5716] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.282284][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.299747][ T5716] usb 5-1: Product: syz [ 156.308590][ T5716] usb 5-1: Manufacturer: syz [ 156.308595][ T30] audit: type=1326 audit(1781861975.993:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.308627][ T30] audit: type=1326 audit(1781861975.993:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.370867][ T5716] usb 5-1: SerialNumber: syz [ 156.484084][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 156.497676][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 156.522294][ T30] audit: type=1326 audit(1781861975.993:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.586513][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.651242][ T5719] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 156.678545][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.706009][ T30] audit: type=1326 audit(1781861975.993:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.749879][ T5719] usb 2-1: Product: syz [ 156.763311][ T5719] usb 2-1: Manufacturer: syz [ 156.780862][ T5719] usb 2-1: SerialNumber: syz [ 156.791081][ T5719] usb 2-1: config 0 descriptor?? [ 156.814490][ T5719] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 156.839131][ T30] audit: type=1326 audit(1781861975.993:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 156.883385][ T5719] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 156.902461][ T30] audit: type=1326 audit(1781861975.993:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6883 comm="syz.2.289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 157.041770][ T5719] usb 2-1: USB disconnect, device number 14 [ 157.112110][ T5719] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 157.146089][ T6896] syz.0.292 (6896): drop_caches: 0 [ 157.169294][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 157.205891][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 157.289340][ T5719] kobil_sct 2-1:0.0: device disconnected [ 157.413458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 157.615610][ T5716] cdc_ncm 5-1:1.0: bind() failure [ 157.660403][ T5716] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 157.730294][ T6903] kAFS: unable to lookup cell '' [ 157.740174][ T5716] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 157.822021][ T5716] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 157.882807][ T5716] usb 5-1: USB disconnect, device number 18 [ 158.297852][ T5739] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 158.577059][ T5739] usb 1-1: Using ep0 maxpacket: 16 [ 158.654444][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 158.680008][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 158.707316][ T5739] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 158.720784][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.738924][ T5739] usb 1-1: Product: syz [ 158.764406][ T5739] usb 1-1: Manufacturer: syz [ 158.771192][ T5739] usb 1-1: SerialNumber: syz [ 158.789398][ T5739] usb 1-1: config 0 descriptor?? [ 158.804206][ T5739] hub 1-1:0.0: bad descriptor, ignoring hub [ 158.812104][ T5739] hub 1-1:0.0: probe with driver hub failed with error -5 [ 158.831772][ T5739] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.332089][ T6906] input: syz1 as /devices/virtual/input/input26 [ 159.721353][ T6912] fuse: Unknown parameter 'use00000000000000000000' [ 159.753888][ T48] wlan0: Trigger new scan to find an IBSS to join [ 160.728736][ T5686] usb 1-1: USB disconnect, device number 16 [ 161.082375][ T6931] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 161.199498][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 161.199517][ T30] audit: type=1326 audit(1781861981.083:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.265981][ T30] audit: type=1326 audit(1781861981.083:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.313494][ T30] audit: type=1326 audit(1781861981.133:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.354338][ T30] audit: type=1326 audit(1781861981.133:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.393589][ T30] audit: type=1326 audit(1781861981.143:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.423323][ T6931] bond1: entered promiscuous mode [ 161.441125][ T30] audit: type=1326 audit(1781861981.153:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.638274][ T6931] bond1: entered allmulticast mode [ 161.656070][ T30] audit: type=1326 audit(1781861981.153:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.742404][ T6931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.769106][ T6936] erspan1: entered allmulticast mode [ 161.805628][ T30] audit: type=1326 audit(1781861981.153:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 161.885317][ T6936] bond1: (slave erspan1): making interface the new active one [ 161.984466][ T6936] erspan1: entered promiscuous mode [ 162.002240][ T30] audit: type=1326 audit(1781861981.153:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=246 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 162.035930][ T6936] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 162.172512][ T30] audit: type=1326 audit(1781861981.373:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.1.299" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 162.793940][ T12] wlan0: Trigger new scan to find an IBSS to join [ 163.005693][ T5739] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.233468][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 163.263979][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 163.366671][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.466241][ T5739] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 163.506850][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.569049][ T5739] usb 2-1: Product: syz [ 163.585718][ T5739] usb 2-1: Manufacturer: syz [ 163.631096][ T5739] usb 2-1: SerialNumber: syz [ 163.638168][ T5707] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 163.681055][ T5739] usb 2-1: config 0 descriptor?? [ 163.696387][ T6962] fuse: Unknown parameter 'use00000000000000000000' [ 163.725960][ T5739] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 163.792196][ T5739] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 163.813232][ T5707] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 163.873901][ T5707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.896936][ T5707] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.917760][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.936354][ T5707] usb 3-1: Product: syz [ 163.948087][ T5707] usb 3-1: Manufacturer: syz [ 163.950063][ T10] usb 2-1: USB disconnect, device number 15 [ 163.969659][ T5707] usb 3-1: SerialNumber: syz [ 164.005658][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 164.049924][ T10] kobil_sct 2-1:0.0: device disconnected [ 164.620617][ T6969] kAFS: unable to lookup cell '' [ 164.819054][ T6969] input: syz1 as /devices/virtual/input/input27 [ 165.013503][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 165.185161][ T10] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 165.204706][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 165.232280][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.247372][ T6980] kAFS: unable to lookup cell '' [ 165.252796][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.271081][ T10] usb 1-1: Product: syz [ 165.276883][ T10] usb 1-1: Manufacturer: syz [ 165.288566][ T10] usb 1-1: SerialNumber: syz [ 165.466667][ T6980] input: syz1 as /devices/virtual/input/input28 [ 165.753905][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.154253][ T5739] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.330257][ T5707] cdc_ncm 3-1:1.0: bind() failure [ 166.338374][ T5739] usb 2-1: Using ep0 maxpacket: 8 [ 166.360381][ T5707] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 166.392453][ T5739] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 166.416252][ T10] cdc_ncm 1-1:1.0: bind() failure [ 166.416691][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.435967][ T5707] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 166.456925][ T5707] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 166.474080][ T5739] usb 2-1: Product: syz [ 166.483117][ T5739] usb 2-1: Manufacturer: syz [ 166.484796][ T10] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 166.504284][ T5739] usb 2-1: SerialNumber: syz [ 166.514390][ T5719] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 166.533068][ T5707] usb 3-1: USB disconnect, device number 19 [ 166.556372][ T5739] usb 2-1: config 0 descriptor?? [ 166.607196][ T10] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 166.609067][ T5739] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 166.642729][ T10] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 166.665221][ T10] usb 1-1: USB disconnect, device number 17 [ 166.715558][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.737576][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.761486][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.786170][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.817045][ T5719] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.831542][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.854727][ T5719] usb 5-1: config 0 descriptor?? [ 167.326554][ T5719] usbhid 5-1:0.0: can't add hid device: -71 [ 167.355278][ T5719] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 167.395560][ T5719] usb 5-1: USB disconnect, device number 19 [ 167.424005][ T5707] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 167.597220][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 167.619353][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 167.640050][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.688064][ T5707] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 167.700371][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.714611][ T5707] usb 1-1: Product: syz [ 167.724892][ T5707] usb 1-1: Manufacturer: syz [ 167.735289][ T5707] usb 1-1: SerialNumber: syz [ 167.742648][ T5707] usb 1-1: config 0 descriptor?? [ 167.772494][ T5707] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 167.793740][ T5707] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 167.991234][ T5707] usb 1-1: USB disconnect, device number 18 [ 168.050228][ T5707] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 168.080010][ T5707] kobil_sct 1-1:0.0: device disconnected [ 168.458273][ T5739] gspca_sonixj: reg_r err -32 [ 168.524872][ T5739] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 169.019818][ T7014] kAFS: unable to lookup cell '' [ 169.131649][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 169.131670][ T30] audit: type=1326 audit(1781861989.013:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.218329][ T7014] input: syz1 as /devices/virtual/input/input29 [ 169.253425][ T30] audit: type=1326 audit(1781861989.063:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.308126][ T30] audit: type=1326 audit(1781861989.063:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.366429][ T30] audit: type=1326 audit(1781861989.063:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.491222][ T30] audit: type=1326 audit(1781861989.063:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.563095][ T30] audit: type=1326 audit(1781861989.063:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.642429][ T30] audit: type=1326 audit(1781861989.063:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.799683][ T30] audit: type=1326 audit(1781861989.063:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 169.931027][ T30] audit: type=1326 audit(1781861989.063:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 170.030641][ T30] audit: type=1326 audit(1781861989.063:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.2.322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 170.073803][ T5707] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 170.243442][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 170.255337][ T5707] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 170.269932][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.288796][ T5707] usb 1-1: Product: syz [ 170.303639][ T5707] usb 1-1: Manufacturer: syz [ 170.317456][ T5707] usb 1-1: SerialNumber: syz [ 170.365702][ T5707] usb 1-1: config 0 descriptor?? [ 170.405433][ T5707] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 170.715361][ T12] wlan0: Trigger new scan to find an IBSS to join [ 170.768781][ T5719] usb 2-1: USB disconnect, device number 16 [ 170.890417][ T7029] kAFS: unable to lookup cell '' [ 171.008310][ T7029] input: syz1 as /devices/virtual/input/input30 [ 171.349442][ T7032] kAFS: unable to lookup cell '' [ 171.558879][ T7032] input: syz1 as /devices/virtual/input/input31 [ 171.997391][ T5739] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 172.223643][ T5739] usb 5-1: Using ep0 maxpacket: 8 [ 172.236216][ T5707] gspca_sonixj: reg_r err -32 [ 172.273956][ T5739] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 172.289879][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.299409][ T5707] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 172.331032][ T5739] usb 5-1: Product: syz [ 172.339125][ T5739] usb 5-1: Manufacturer: syz [ 172.352318][ T5739] usb 5-1: SerialNumber: syz [ 172.380383][ T5739] usb 5-1: config 0 descriptor?? [ 172.402907][ T5739] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 172.643005][ T7045] fuse: Unknown parameter 'user_i00000000000000000000' [ 172.993378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.761578][ T3344] wlan0: Trigger new scan to find an IBSS to join [ 174.190350][ T24] usb 1-1: USB disconnect, device number 19 [ 174.326027][ T7059] kAFS: unable to lookup cell '' [ 174.356404][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 174.356420][ T30] audit: type=1326 audit(1781861994.243:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 174.424151][ T30] audit: type=1326 audit(1781861994.293:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 174.455718][ T30] audit: type=1326 audit(1781861994.293:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 174.518034][ T30] audit: type=1326 audit(1781861994.293:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 174.621318][ T7061] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 174.645251][ T30] audit: type=1326 audit(1781861994.293:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 174.699607][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 174.748068][ T30] audit: type=1326 audit(1781861994.293:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 174.874228][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 174.875031][ T7061] bond6: entered promiscuous mode [ 174.882017][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 174.905762][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.923865][ T30] audit: type=1326 audit(1781861994.293:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 174.935615][ T7061] bond6: entered allmulticast mode [ 175.026292][ T24] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 175.059674][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.074871][ T24] usb 1-1: Product: syz [ 175.078302][ T7061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.080787][ T24] usb 1-1: Manufacturer: syz [ 175.098652][ T24] usb 1-1: SerialNumber: syz [ 175.111171][ T30] audit: type=1326 audit(1781861994.293:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 175.164848][ T24] usb 1-1: config 0 descriptor?? [ 175.178123][ T24] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 175.209984][ T5739] gspca_sonixj: reg_w1 err -110 [ 175.220395][ T30] audit: type=1326 audit(1781861994.293:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 175.220418][ T24] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 175.304215][ T5739] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 175.395577][ T30] audit: type=1326 audit(1781861994.293:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 175.463125][ T24] usb 1-1: USB disconnect, device number 20 [ 175.529460][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 175.580021][ T24] kobil_sct 1-1:0.0: device disconnected [ 175.704292][ T5716] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 175.764388][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 175.766583][ T4938] Bluetooth: hci0: command 0x0406 tx timeout [ 175.773948][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 175.773985][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 175.774006][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 175.883407][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 175.937413][ T5716] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 175.948007][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.960510][ T5716] usb 3-1: Product: syz [ 175.974822][ T5716] usb 3-1: Manufacturer: syz [ 175.980279][ T5716] usb 3-1: SerialNumber: syz [ 175.989590][ T5716] usb 3-1: config 0 descriptor?? [ 176.003179][ T5716] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 176.716924][ T5686] usb 5-1: USB disconnect, device number 20 [ 176.803830][ T3344] wlan0: Trigger new scan to find an IBSS to join [ 177.615859][ T7092] fuse: Unknown parameter 'user_i00000000000000000000' [ 177.833746][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.865328][ T5716] gspca_sonixj: reg_r err -32 [ 177.913758][ T5716] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 178.146076][ T7099] kAFS: unable to lookup cell '' [ 178.252213][ T7099] input: syz1 as /devices/virtual/input/input33 [ 178.502578][ T7105] kAFS: unable to lookup cell '' [ 179.348554][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.357543][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.495766][ T5686] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.521405][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.557325][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.653588][ T5686] usb 2-1: Using ep0 maxpacket: 16 [ 179.663061][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 179.703226][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.744870][ T5686] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 179.772166][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.800843][ T5686] usb 2-1: Product: syz [ 179.816031][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.851409][ T5686] usb 2-1: Manufacturer: syz [ 179.889231][ T5686] usb 2-1: SerialNumber: syz [ 179.905269][ T5686] usb 2-1: config 0 descriptor?? [ 179.915534][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.951231][ T5686] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 179.975985][ T5686] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 179.988924][ T10] usb 3-1: USB disconnect, device number 20 [ 180.021636][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.135211][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.214731][ T5686] usb 2-1: USB disconnect, device number 17 [ 180.262096][ T5686] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 180.286746][ T7122] bridge0: port 3(syz_tun) entered blocking state [ 180.317164][ T5686] kobil_sct 2-1:0.0: device disconnected [ 180.362532][ T7122] bridge0: port 3(syz_tun) entered disabled state [ 180.438189][ T7122] syz_tun: entered allmulticast mode [ 180.464140][ T7122] syz_tun: entered promiscuous mode [ 180.523472][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 180.564802][ T7127] fuse: Unknown parameter 'user_i00000000000000000000' [ 180.699104][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 180.730526][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 180.768762][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.792557][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.839708][ T10] usb 3-1: Product: syz [ 180.854975][ T10] usb 3-1: Manufacturer: syz [ 180.874965][ T5686] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 180.893795][ T10] usb 3-1: SerialNumber: syz [ 181.063968][ T5686] usb 5-1: Using ep0 maxpacket: 16 [ 181.082560][ T5686] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 181.116007][ T5686] usb 5-1: config 0 has no interface number 0 [ 181.133470][ T5686] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 181.177875][ T5686] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 181.210389][ T5686] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 181.237058][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 181.262051][ T5686] usb 5-1: Product: syz [ 181.279619][ T5686] usb 5-1: SerialNumber: syz [ 181.301974][ T5686] usb 5-1: config 0 descriptor?? [ 181.354774][ T5686] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 181.391072][ T5686] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input35 [ 181.404853][ T7135] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 181.475496][ T7135] bond4: entered promiscuous mode [ 181.510305][ T7135] bond4: entered allmulticast mode [ 181.532247][ T7135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.550088][ T7124] FAULT_INJECTION: forcing a failure. [ 181.550088][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.583624][ T5716] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 181.594450][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 181.611021][ T7124] CPU: 0 UID: 0 PID: 7124 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT(full) [ 181.611045][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.611052][ T7124] Call Trace: [ 181.611056][ T7124] [ 181.611061][ T7124] dump_stack_lvl+0xe8/0x150 [ 181.611081][ T7124] should_fail_ex+0x40c/0x560 [ 181.611098][ T7124] _copy_to_user+0x31/0xb0 [ 181.611111][ T7124] simple_read_from_buffer+0xe1/0x170 [ 181.611125][ T7124] proc_fail_nth_read+0x1bb/0x230 [ 181.611139][ T7124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.611152][ T7124] ? rw_verify_area+0x24a/0x4c0 [ 181.611165][ T7124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.611177][ T7124] vfs_read+0x213/0xa80 [ 181.611193][ T7124] ? __fget_files+0x2a/0x420 [ 181.611205][ T7124] ? __pfx___mutex_lock+0x10/0x10 [ 181.611218][ T7124] ? __pfx_vfs_read+0x10/0x10 [ 181.611235][ T7124] ? __fget_files+0x3a2/0x420 [ 181.611244][ T7124] ? __fget_files+0x2a/0x420 [ 181.611256][ T7124] ksys_read+0x150/0x270 [ 181.611268][ T7124] ? __pfx_ksys_read+0x10/0x10 [ 181.611280][ T7124] ? rcu_is_watching+0x15/0xb0 [ 181.611292][ T7124] ? rcu_is_watching+0x15/0xb0 [ 181.611301][ T7124] ? asm_int80_emulation+0x1a/0x20 [ 181.611313][ T7124] do_int80_emulation+0x19a/0x550 [ 181.611325][ T7124] ? asm_int80_emulation+0x1a/0x20 [ 181.611335][ T7124] ? clear_bhb_loop+0x40/0x90 [ 181.611345][ T7124] ? clear_bhb_loop+0x40/0x90 [ 181.611355][ T7124] asm_int80_emulation+0x1a/0x20 [ 181.611365][ T7124] RIP: 0023:0xf71571eb [ 181.611374][ T7124] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 181.611383][ T7124] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 181.611396][ T7124] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54165d0 [ 181.611403][ T7124] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 181.611409][ T7124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.611415][ T7124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.611421][ T7124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.611430][ T7124] [ 181.983522][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.994834][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.012732][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.029017][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.042309][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.054140][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.066050][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.075766][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.089227][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.104751][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.172575][ T5686] usb 5-1: USB disconnect, device number 21 [ 182.182004][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 182.235976][ T5686] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 182.246535][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 182.252888][ T10] cdc_ncm 3-1:1.0: bind() failure [ 182.265136][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 182.294324][ T5716] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 182.311814][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 182.328348][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.340920][ T5716] usb 2-1: Product: syz [ 182.371266][ T5716] usb 2-1: Manufacturer: syz [ 182.381674][ T10] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 182.398910][ T5716] usb 2-1: SerialNumber: syz [ 182.438333][ T5716] usb 2-1: config 0 descriptor?? [ 182.459933][ T10] usb 3-1: USB disconnect, device number 21 [ 182.499861][ T5716] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 182.826532][ T5686] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 183.033453][ T5686] usb 5-1: Using ep0 maxpacket: 8 [ 183.078463][ T5686] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 183.110091][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.191297][ T5686] pvrusb2: Hardware description: Terratec Grabster AV400 [ 183.237579][ T5686] pvrusb2: ********** [ 183.264151][ T5686] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 183.306938][ T5686] pvrusb2: Important functionality might not be entirely working. [ 183.352729][ T5686] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 183.397936][ T5686] pvrusb2: ********** [ 183.427560][ T2363] pvrusb2: Invalid write control endpoint [ 183.523413][ T5739] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 183.549855][ T2363] pvrusb2: Invalid write control endpoint [ 183.577154][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.591641][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.608956][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.644019][ T2363] pvrusb2: Device being rendered inoperable [ 183.652548][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 183.660708][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 183.680744][ T995] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 183.710617][ T2363] pvrusb2: Attached sub-driver cx25840 [ 183.728354][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 183.729021][ T5739] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.749106][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 183.775277][ T7142] pvrusb2: Attempted to execute control transfer when device not ok [ 183.804878][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.836941][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 183.863617][ T995] usb 4-1: Using ep0 maxpacket: 8 [ 183.877172][ T5739] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.878115][ T995] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 183.983994][ T5739] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.987335][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.043483][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.071722][ T995] usb 4-1: Product: syz [ 184.081902][ T995] usb 4-1: Manufacturer: syz [ 184.103012][ T995] usb 4-1: SerialNumber: syz [ 184.110926][ T5739] usb 3-1: config 0 descriptor?? [ 184.125348][ T995] usb 4-1: config 0 descriptor?? [ 184.146203][ T995] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 184.337807][ T5716] gspca_sonixj: reg_r err -32 [ 184.393796][ T5716] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 184.539519][ T5739] usbhid 3-1:0.0: can't add hid device: -71 [ 184.561294][ T5739] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.611570][ T5739] usb 3-1: USB disconnect, device number 22 [ 185.390011][ T5719] usb 5-1: USB disconnect, device number 22 [ 185.433537][ T5739] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 185.616790][ T5739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.650811][ T5739] usb 3-1: config 0 has no interfaces? [ 185.662331][ T5739] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.689354][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.727677][ T5739] usb 3-1: config 0 descriptor?? [ 185.893509][ T5719] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 185.975099][ T995] gspca_sonixj: reg_r err -32 [ 186.033513][ T995] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 186.063621][ T5719] usb 5-1: Invalid ep0 maxpacket: 64 [ 186.223450][ T5719] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 186.280120][ T5739] usb 2-1: USB disconnect, device number 18 [ 186.403764][ T5719] usb 5-1: Invalid ep0 maxpacket: 64 [ 186.422930][ T5719] usb usb5-port1: attempt power cycle [ 186.724419][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.366'. [ 186.773663][ T5719] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 186.814401][ T5739] usb 3-1: USB disconnect, device number 23 [ 186.826639][ T5719] usb 5-1: Invalid ep0 maxpacket: 64 [ 186.973466][ T5719] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 187.044647][ T5719] usb 5-1: Invalid ep0 maxpacket: 64 [ 187.059747][ T5719] usb usb5-port1: unable to enumerate USB device [ 187.464706][ T5739] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 187.663916][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 187.672223][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.693931][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.711786][ T5739] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 187.737709][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.762182][ T5739] usb 1-1: config 0 descriptor?? [ 187.782614][ T5739] hub 1-1:0.0: USB hub found [ 187.883436][ T5719] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 187.989488][ T5739] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 188.047184][ T5719] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 188.069425][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 188.089143][ T5719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.103238][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.116798][ T5719] usb 3-1: Product: syz [ 188.135884][ T5719] usb 3-1: Manufacturer: syz [ 188.141230][ T5719] usb 3-1: SerialNumber: syz [ 188.225105][ T5739] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 188.238139][ T5739] hid-generic 0003:046D:C31C.000A: probe with driver hid-generic failed with error -22 [ 188.413890][ T5716] usb 4-1: USB disconnect, device number 22 [ 188.703316][ T7192] FAULT_INJECTION: forcing a failure. [ 188.703316][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 188.725913][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT(full) [ 188.725939][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.725950][ T7192] Call Trace: [ 188.725956][ T7192] [ 188.725964][ T7192] dump_stack_lvl+0xe8/0x150 [ 188.725986][ T7192] should_fail_ex+0x40c/0x560 [ 188.726008][ T7192] should_failslab+0xa8/0x100 [ 188.726030][ T7192] ? skb_clone+0x212/0x3a0 [ 188.726053][ T7192] kmem_cache_alloc_noprof+0x87/0x650 [ 188.726076][ T7192] skb_clone+0x212/0x3a0 [ 188.726101][ T7192] __netlink_deliver_tap+0x413/0x860 [ 188.726128][ T7192] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.726152][ T7192] netlink_deliver_tap+0x19c/0x1b0 [ 188.726175][ T7192] netlink_unicast+0x77f/0x940 [ 188.726205][ T7192] netlink_sendmsg+0x813/0xb40 [ 188.726232][ T7192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.726255][ T7192] ? __import_iovec+0x5d7/0x7e0 [ 188.726273][ T7192] ? aa_sock_msg_perm+0xf1/0x1b0 [ 188.726297][ T7192] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.726319][ T7192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.726343][ T7192] ____sys_sendmsg+0x9b9/0xa20 [ 188.726366][ T7192] ? import_iovec+0x73/0xa0 [ 188.726386][ T7192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.726415][ T7192] ___sys_sendmsg+0x2a5/0x360 [ 188.726437][ T7192] ? get_pid_task+0x20/0x1f0 [ 188.726455][ T7192] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.727158][ T7192] ? __mutex_trylock_common+0x15f/0x270 [ 188.727188][ T7192] ? get_pid_task+0x20/0x1f0 [ 188.727202][ T7192] ? get_pid_task+0x20/0x1f0 [ 188.727231][ T7192] ? __fget_files+0x2a/0x420 [ 188.727249][ T7192] ? __fget_files+0x3a2/0x420 [ 188.727270][ T7192] __sys_sendmsg+0x177/0x240 [ 188.727294][ T7192] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.727321][ T7192] ? rcu_is_watching+0x15/0xb0 [ 188.727342][ T7192] __do_fast_syscall_32+0x23e/0x6f0 [ 188.727366][ T7192] ? do_fast_syscall_32+0x33/0x70 [ 188.727387][ T7192] ? asm_int80_emulation+0x1a/0x20 [ 188.727404][ T7192] ? do_int80_emulation+0x29f/0x550 [ 188.727427][ T7192] do_fast_syscall_32+0x33/0x70 [ 188.727448][ T7192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.727470][ T7192] RIP: 0023:0xf7f590ec [ 188.727487][ T7192] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 188.727501][ T7192] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 188.727520][ T7192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 188.727560][ T7192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.727572][ T7192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.727582][ T7192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 188.727592][ T7192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.727607][ T7192] [ 189.230137][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.239393][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.739411][ T5719] cdc_ncm 3-1:1.0: bind() failure [ 190.752896][ T5719] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 190.768095][ T807] usb 1-1: USB disconnect, device number 21 [ 190.802978][ T5719] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 190.827066][ T5719] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 190.860250][ T5719] usb 3-1: USB disconnect, device number 24 [ 191.026961][ T7213] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 191.111611][ T7213] bond2: entered promiscuous mode [ 191.148580][ T7213] bond2: entered allmulticast mode [ 191.181939][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 191.245219][ T7213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.613470][ T807] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 192.794644][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 192.843870][ T807] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 192.898082][ T807] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 192.943619][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.043418][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 194.213544][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 194.223862][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.258292][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.272689][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.284467][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.315199][ T24] usb 3-1: config 0 descriptor?? [ 194.333839][ T24] hub 3-1:0.0: USB hub found [ 194.533163][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 194.754582][ T24] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 194.765367][ T24] hid-generic 0003:046D:C31C.000B: probe with driver hid-generic failed with error -22 [ 195.297081][ T24] usb 2-1: USB disconnect, device number 19 [ 195.973648][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 196.133915][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 196.167536][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 196.211149][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.243764][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 196.267099][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.285358][ T24] usb 5-1: Product: syz [ 196.296866][ T24] usb 5-1: Manufacturer: syz [ 196.317676][ T7287] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 196.319859][ T24] usb 5-1: SerialNumber: syz [ 196.356702][ T24] usb 5-1: config 0 descriptor?? [ 196.379156][ T7287] bond3: entered promiscuous mode [ 196.391460][ T24] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 196.424155][ T24] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 196.456790][ T7287] bond3: entered allmulticast mode [ 196.472258][ T7287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.659502][ T24] usb 5-1: USB disconnect, device number 27 [ 196.681208][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 196.698355][ T24] kobil_sct 5-1:0.0: device disconnected [ 197.230542][ T24] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 197.296123][ T24] usb 3-1: device reset changed ep0 maxpacket size! [ 197.310664][ T24] usb 3-1: USB disconnect, device number 25 [ 197.433582][ T5719] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 197.495965][ T7307] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 197.539476][ T7307] bond5: entered promiscuous mode [ 197.550010][ T7307] bond5: entered allmulticast mode [ 197.561487][ T7307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.573510][ T5739] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 197.596483][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.609175][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.622088][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.632887][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 197.648485][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.662571][ T5719] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.674930][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.695544][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 197.712541][ T5719] usb 1-1: config 0 descriptor?? [ 197.723452][ T5739] usb 5-1: Using ep0 maxpacket: 8 [ 197.734681][ T5739] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 197.747341][ T5739] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 197.758634][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.785611][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 197.799593][ T24] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 197.810249][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.819933][ T24] usb 3-1: Product: syz [ 197.831408][ T24] usb 3-1: Manufacturer: syz [ 197.848629][ T24] usb 3-1: SerialNumber: syz [ 197.867060][ T24] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 197.993582][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 198.132968][ T5719] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 198.272681][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.293170][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.306347][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.307216][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 198.337507][ T24] usb 3-1: media controller created [ 198.377694][ T7305] ------------[ cut here ]------------ [ 198.384692][ T7305] usb 3-1: BOGUS control dir, pipe 80001a80 doesn't match bRequestType c0 [ 198.395713][ T7305] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.4.403/7305 [ 198.406835][ T7305] Modules linked in: [ 198.410876][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT(full) [ 198.423376][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.435464][ T7305] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 198.442063][ T7305] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 198.465369][ T7305] RSP: 0018:ffffc90005cc76f8 EFLAGS: 00010246 [ 198.474193][ T7305] RAX: 0000000000000000 RBX: ffff8880323dad00 RCX: 0000000080001a80 [ 198.485727][ T7305] RDX: ffff8880692990e0 RSI: ffffffff8c819780 RDI: ffffffff903f39b0 [ 198.496336][ T7305] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 198.506333][ T7305] R10: ffffc90005cc77e0 R11: fffff52000b98f08 R12: 1ffff1100565cf5c [ 198.515457][ T7305] R13: ffff88802b2e7ae0 R14: ffff8880692990e0 R15: 0000000080001a80 [ 198.527880][ T7305] FS: 0000000000000000(0000) GS:ffff88812535d000(0063) knlGS:00000000f53f5b40 [ 198.541971][ T7305] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 198.551403][ T7305] CR2: 0000000080001180 CR3: 0000000077654000 CR4: 00000000003526f0 [ 198.562462][ T7305] Call Trace: [ 198.568306][ T7305] [ 198.572814][ T7305] usb_start_wait_urb+0x13f/0x5b0 [ 198.578524][ T7305] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 198.585424][ T7305] usb_control_msg+0x234/0x3e0 [ 198.592407][ T7305] ? __ia32_compat_sys_ioctl+0x5ea/0x950 [ 198.599420][ T7305] gl861_ctrl_msg+0x207/0x420 [ 198.605476][ T7305] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 198.613841][ T7305] gl861_i2c_master_xfer+0x439/0x6a0 [ 198.620032][ T7305] __i2c_transfer+0x7be/0x1fe0 [ 198.626610][ T7305] ? trace_irq_enable+0x3b/0x140 [ 198.632689][ T7305] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 198.638690][ T7305] ? rt_mutex_lock_nested+0x156/0x1c0 [ 198.648053][ T7305] ? i2c_transfer+0xc8/0x2d0 [ 198.653408][ T7305] i2c_transfer+0x1cc/0x2d0 [ 198.658308][ T7305] i2cdev_ioctl_rdwr+0x460/0x740 [ 198.667308][ T7305] compat_i2cdev_ioctl+0x59f/0x5c0 [ 198.673708][ T7305] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 198.685658][ T7305] ? __fget_files+0x3a2/0x420 [ 198.692992][ T7305] ? __fget_files+0x2a/0x420 [ 198.698267][ T7305] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 198.706265][ T7305] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 198.714237][ T7305] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 198.722426][ T7305] ? kmem_cache_free+0x182/0x650 [ 198.728676][ T7305] ? __se_sys_futex_time32+0x3ab/0x440 [ 198.734510][ T7305] ? rcu_is_watching+0x15/0xb0 [ 198.740683][ T7305] ? rcu_is_watching+0x15/0xb0 [ 198.747164][ T7305] __do_fast_syscall_32+0x23e/0x6f0 [ 198.757071][ T7305] ? do_fast_syscall_32+0x33/0x70 [ 198.762817][ T7305] ? asm_int80_emulation+0x1a/0x20 [ 198.769047][ T7305] ? do_int80_emulation+0x29f/0x550 [ 198.777312][ T7305] ? trace_irq_disable+0x3b/0x140 [ 198.783199][ T7305] do_fast_syscall_32+0x33/0x70 [ 198.789478][ T7305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.796158][ T7305] RIP: 0023:0xf7f590ec [ 198.801504][ T7305] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 198.826419][ T7305] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 198.835480][ T7305] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 198.845056][ T7305] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.856665][ T7305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.866432][ T7305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 198.876648][ T7305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.885912][ T7305] [ 198.889598][ T7305] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.898024][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT(full) [ 198.909387][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.922311][ T7305] Call Trace: [ 198.926060][ T7305] [ 198.930209][ T7305] vpanic+0x56c/0xa60 [ 198.936272][ T7305] ? __pfx__printk+0x10/0x10 [ 198.941199][ T7305] ? __pfx_vpanic+0x10/0x10 [ 198.947289][ T7305] ? is_bpf_text_address+0x292/0x2b0 [ 198.953917][ T7305] ? is_bpf_text_address+0x26/0x2b0 [ 198.962227][ T7305] panic+0xc5/0xd0 [ 198.966753][ T7305] ? __pfx_panic+0x10/0x10 [ 198.971326][ T7305] __warn+0x315/0x4c0 [ 198.975679][ T7305] ? usb_submit_urb+0x1057/0x18b0 [ 198.981025][ T7305] ? usb_submit_urb+0x1057/0x18b0 [ 198.986680][ T7305] __report_bug+0x331/0x530 [ 198.992692][ T7305] ? stack_depot_save_flags+0x250/0x800 [ 198.998536][ T7305] ? usb_submit_urb+0x1057/0x18b0 [ 199.003579][ T7305] ? __pfx___report_bug+0x10/0x10 [ 199.008967][ T7305] ? rcu_is_watching+0x15/0xb0 [ 199.013945][ T7305] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.019797][ T7305] ? stack_depot_save_flags+0x3ec/0x800 [ 199.025474][ T7305] report_bug_entry+0x19a/0x290 [ 199.036715][ T7305] ? usb_submit_urb+0x1100/0x18b0 [ 199.044410][ T7305] ? usb_submit_urb+0x1105/0x18b0 [ 199.050715][ T7305] handle_bug+0xce/0x200 [ 199.056207][ T7305] exc_invalid_op+0x1a/0x50 [ 199.065124][ T7305] asm_exc_invalid_op+0x1a/0x20 [ 199.071258][ T7305] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 199.082159][ T7305] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 199.111278][ T7305] RSP: 0018:ffffc90005cc76f8 EFLAGS: 00010246 [ 199.117672][ T7305] RAX: 0000000000000000 RBX: ffff8880323dad00 RCX: 0000000080001a80 [ 199.130013][ T7305] RDX: ffff8880692990e0 RSI: ffffffff8c819780 RDI: ffffffff903f39b0 [ 199.139045][ T7305] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 199.148087][ T7305] R10: ffffc90005cc77e0 R11: fffff52000b98f08 R12: 1ffff1100565cf5c [ 199.159225][ T7305] R13: ffff88802b2e7ae0 R14: ffff8880692990e0 R15: 0000000080001a80 [ 199.168132][ T7305] ? usb_submit_urb+0x1091/0x18b0 [ 199.173542][ T7305] usb_start_wait_urb+0x13f/0x5b0 [ 199.179615][ T7305] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 199.186433][ T7305] usb_control_msg+0x234/0x3e0 [ 199.191356][ T7305] ? __ia32_compat_sys_ioctl+0x5ea/0x950 [ 199.197917][ T7305] gl861_ctrl_msg+0x207/0x420 [ 199.203311][ T7305] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 199.209052][ T7305] gl861_i2c_master_xfer+0x439/0x6a0 [ 199.214451][ T7305] __i2c_transfer+0x7be/0x1fe0 [ 199.219338][ T7305] ? trace_irq_enable+0x3b/0x140 [ 199.224304][ T7305] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.231607][ T7305] ? rt_mutex_lock_nested+0x156/0x1c0 [ 199.237282][ T7305] ? i2c_transfer+0xc8/0x2d0 [ 199.242775][ T7305] i2c_transfer+0x1cc/0x2d0 [ 199.247467][ T7305] i2cdev_ioctl_rdwr+0x460/0x740 [ 199.253194][ T7305] compat_i2cdev_ioctl+0x59f/0x5c0 [ 199.258460][ T7305] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 199.264596][ T7305] ? __fget_files+0x3a2/0x420 [ 199.269542][ T7305] ? __fget_files+0x2a/0x420 [ 199.274220][ T7305] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 199.280919][ T7305] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 199.286405][ T7305] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 199.292596][ T7305] ? kmem_cache_free+0x182/0x650 [ 199.298003][ T7305] ? __se_sys_futex_time32+0x3ab/0x440 [ 199.304439][ T7305] ? rcu_is_watching+0x15/0xb0 [ 199.309318][ T7305] ? rcu_is_watching+0x15/0xb0 [ 199.315857][ T7305] __do_fast_syscall_32+0x23e/0x6f0 [ 199.321929][ T7305] ? do_fast_syscall_32+0x33/0x70 [ 199.327082][ T7305] ? asm_int80_emulation+0x1a/0x20 [ 199.332213][ T7305] ? do_int80_emulation+0x29f/0x550 [ 199.337476][ T7305] ? trace_irq_disable+0x3b/0x140 [ 199.342616][ T7305] do_fast_syscall_32+0x33/0x70 [ 199.347842][ T7305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.354628][ T7305] RIP: 0023:0xf7f590ec [ 199.358722][ T7305] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 199.380897][ T7305] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 199.390947][ T7305] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 199.400072][ T7305] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.408056][ T7305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.416211][ T7305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.424971][ T7305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.433828][ T7305] [ 199.437522][ T7305] Kernel Offset: disabled [ 199.442504][ T7305] Rebooting in 86400 seconds..