last executing test programs: 12.949669957s ago: executing program 3 (id=644): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x1000000, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="75f19cba63258792f179dc57be9aa6d41ade8f9e2bbf3ee44d32173d3465d551827e7f160a5974cbc5de4839f6f828753d1f06da8bf0263768a61a5e9af0c9470bbdb880372ecec712f0a35467e6770f03ff69931bb8f57ad3856ebe82ec44f055b2e3f0ac04", 0x66}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r4], 0xb8, 0x4}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@getroute={0x14, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x22, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0xc, 0x2fa11, 0x401}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) close(r8) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 11.848484213s ago: executing program 3 (id=652): mq_open(0x0, 0x0, 0x0, 0x0) gettid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x4, 0xa4}) r0 = socket$inet(0x2, 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 9.553295187s ago: executing program 0 (id=662): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4880) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 8.512897646s ago: executing program 3 (id=665): syz_open_dev$cec(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc, r2, &(0x7f0000000080)='E', 0x1, 0x8000}]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) setuid(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24048000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r5, 0x34915000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.898813462s ago: executing program 2 (id=667): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "8baa0502", {0x3, 0x0, 0x0, 0x8, 0xa38, 0x6, 0xa}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000006c0)=ANY=[@ANYBLOB="caff9955baa33788b700229260f7e6c494b69b11855f9370441a73a054cc12be96e5c0072cb5a129202b0188951eb1f2b38f2c851d477ec9ac9424030b88f8918c1063afed7153996b41f532556f9e353e1e503208e73e4d60e4824991206012dede1f4b77408ab4b89591245d4d5e5b2d9f173c15bf372ec4012677aff2a53b2d058b2f8ca314926e4b5941b2de342f79c7399804e103073f54809aa47e49febc955ccf94515c305681fc1b18a13a33285f2b0079512af7820a9b763f668a2213fdeb843558e14931c369f958", @ANYRESHEX=r1, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r1]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 7.404444533s ago: executing program 3 (id=669): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_io_uring_setup(0x12ae, &(0x7f00000000c0)={0x0, 0x6cd6, 0x400, 0x1, 0x138}, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = io_uring_setup(0x703a, &(0x7f0000000200)={0x0, 0xee05, 0x20, 0x3, 0x82, 0x0, r2}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, 0xfffffffffffffffd, 0x1) syz_ublk_add_dev(r5, 0x0, r3, r4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x42060680) fsopen(0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000090557eb"], 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r10 = syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x10000, 0x4e}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendto(r6, &(0x7f00000001c0)="9a1eca5744f8a0ae032d0768f17fa909b915f58f0269665fbea936d07eb7fd8621d1ffe86dfa7b758ede205a0b6fdf238402d88771de2df2c6b59ad2f00cfd54eace4fbceb96ffee4be10ed6abe91c7439db53", 0x53, 0x4080, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x3, 0x1, 0x1}}, 0x80) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f0000002500)={&(0x7f0000001500)=[0x2, 0x4, 0xfffffffa, 0x9, 0x1, 0x40, 0x935f, 0x8b, 0x0, 0x7, 0x7, 0x52d, 0x1, 0x7, 0x2, 0xa, 0x800000, 0x2, 0x8, 0xf, 0x8001, 0x0, 0xff, 0x5, 0x2, 0x3, 0x8, 0xc1, 0x7fffffff, 0x3, 0x5, 0x0, 0x600, 0x551, 0x4, 0xd8f6, 0x5, 0xa, 0x1c33, 0x5, 0xe0c5, 0x0, 0x6, 0x38, 0x9, 0x46b, 0x1, 0x2, 0x6, 0x1, 0xff, 0x99e, 0xae8, 0x5, 0x8, 0x25, 0x2, 0x5, 0x8, 0xff, 0x2, 0x2, 0x81, 0x8, 0x9, 0xa, 0x3, 0xfffffff8, 0x0, 0x3, 0x1, 0x8, 0x1, 0x6, 0x1, 0x3f, 0x7, 0x10, 0x2ff, 0x8, 0x816a, 0x100, 0x6, 0x6, 0x8, 0x80, 0xfffff29a, 0x5, 0x1, 0x7, 0xf6d, 0x7, 0x3, 0x1, 0xe4b, 0x9, 0x81, 0x2, 0xf78, 0x7, 0x3, 0x1, 0x80000001, 0x2, 0xf, 0x4, 0x5, 0x5, 0x4, 0xf, 0x2, 0xf, 0xfffffff8, 0x3, 0x4, 0x9, 0x0, 0x7, 0xcf9, 0xfffffff7, 0xffff, 0x2, 0x3, 0x8, 0x6, 0xffffffff, 0x6, 0x9, 0x4, 0x0, 0x22, 0xfffffffc, 0x9, 0x0, 0x4, 0x0, 0x2, 0x3, 0x5, 0x4, 0x7, 0x9, 0x0, 0x3, 0x7fff, 0x4, 0x2, 0x0, 0x80000000, 0x1, 0x7, 0x8, 0x8, 0xe9b8, 0x3, 0x7, 0x6507, 0x3, 0x800, 0x2, 0x80, 0x8, 0x0, 0x3, 0x9, 0xe3db, 0x4, 0x2000007, 0xbaba, 0xc3, 0x8, 0x0, 0x0, 0xf, 0xfffffffa, 0x1, 0x0, 0x7f, 0x3, 0x3, 0xfffffffb, 0x0, 0x2c0, 0x3, 0x3, 0xfffffffc, 0x4, 0x9, 0x50d, 0x5, 0xccf, 0x2, 0xcd00, 0x4, 0x7fff, 0x7, 0xd, 0x221b, 0xffff289d, 0x2, 0x7ff, 0x4, 0x7, 0x7fff, 0x4, 0x12, 0x4521, 0x2, 0x0, 0x8, 0x546c, 0x4, 0x4, 0x2, 0x9, 0x4, 0xfff, 0x7ff, 0x3, 0x8d7, 0x4, 0x5, 0x2, 0xff, 0x8, 0x4, 0x5, 0x8, 0x5, 0x68e8d10f, 0x6, 0x4, 0x1, 0x7ff, 0xfff, 0x7, 0x5, 0x3, 0xffff, 0x7, 0x0, 0xfffffffe, 0x3, 0x1, 0x1, 0x7, 0x3ff, 0x1, 0xab3b, 0xf, 0x7fffffff, 0x7f, 0x6, 0x2, 0x6, 0x6, 0x1, 0xf, 0x6, 0x7fffffff, 0x230, 0x5, 0x800, 0xf, 0x6, 0xfffffffb, 0x3, 0x5, 0x3, 0xe1, 0x3ff, 0x8000, 0x5, 0xfffffffc, 0x7, 0x2, 0xfffff851, 0x3, 0x4, 0x401, 0x401, 0xa, 0x5, 0x7, 0x9, 0xfffffff7, 0x3, 0x10, 0x4, 0x400, 0x4, 0x6, 0x3, 0x401, 0x3, 0xcc5, 0x3, 0x9, 0x7, 0x3, 0x8bf3, 0xb, 0x4, 0x3, 0x306d, 0x6, 0x10001, 0x4, 0x4, 0x4, 0xfffffff9, 0xe, 0xffff8000, 0x5b8, 0x5, 0x3, 0x2, 0x7fffffff, 0x1, 0x4, 0x0, 0x9, 0x7, 0x9, 0x8, 0xfffffff8, 0x5, 0xbda7, 0x2, 0x8, 0x2, 0x2dd6, 0x4, 0x3012c672, 0x10001, 0xff, 0xd8, 0xd, 0x3, 0xfff, 0x7, 0x8, 0x400, 0x6, 0x6cf, 0x4b1ff6f, 0x3, 0x0, 0x0, 0x1, 0x2, 0x6, 0x9, 0x2, 0x8, 0xc1, 0x4, 0x6, 0x8, 0x3ff, 0x5, 0x6, 0x20a, 0x2, 0x9, 0x9, 0x5, 0xe, 0x40, 0x2, 0x7, 0x20000000, 0x6, 0x738, 0x200, 0x2, 0x6f1, 0x6, 0x9, 0x9, 0x4, 0xffffff80, 0x9, 0x6, 0x5, 0x9, 0x8001, 0x1, 0x8, 0x400400, 0xfffff15d, 0xbb, 0x8, 0x2a, 0xffffffff, 0x1000000, 0x6, 0x6, 0x8001, 0x1, 0x72, 0x4, 0x2002, 0x2, 0xfffffff8, 0x0, 0x3, 0x5, 0x4, 0x7, 0x2, 0x8, 0x6, 0x8, 0x8, 0x13f, 0x40, 0x5, 0xf2, 0x101, 0x0, 0x3ff, 0x200, 0x4, 0x5, 0x3, 0x1, 0xfffff77a, 0x1, 0x101, 0x0, 0x0, 0x6, 0x3, 0x9, 0x10, 0x4, 0xc, 0x40, 0x7f, 0x835, 0x7, 0x7, 0x9, 0x2, 0x9, 0xffffffff, 0x401, 0x5, 0x4, 0x7fff, 0xffff, 0x3, 0xfffffffc, 0x6, 0xc32, 0x8000, 0x5, 0x1, 0xdca0, 0x5, 0x1, 0x4, 0x7f, 0x7, 0xfffffff9, 0x0, 0x403, 0x8, 0x1, 0xfffff000, 0x5, 0x172, 0xc5, 0x3, 0x7, 0x9, 0x1000, 0x6, 0x0, 0xfffffffe, 0x3ff, 0x4, 0x2, 0x0, 0x7ff, 0x1000, 0x5, 0xb6, 0x7, 0x61e0, 0x1, 0x2, 0x4, 0x7fff, 0xfffffff7, 0x1, 0x40, 0x800, 0xff, 0x40, 0x1, 0x4, 0xfffffffb, 0x7, 0x3, 0x8001, 0x9, 0x7, 0x0, 0x961a, 0xc17, 0x8000, 0x0, 0x2, 0x9, 0x7fffffff, 0x7f, 0x5, 0x5, 0x0, 0x1, 0x10001, 0xb, 0x10000, 0x80000001, 0x4007ff, 0x2, 0x3, 0x6, 0x6, 0x7, 0x1ff, 0x8, 0x400, 0x9, 0x87, 0x2, 0x0, 0x5, 0x2a0d, 0x1ff, 0xf2, 0x1, 0x7, 0x4, 0x7, 0x3, 0x5, 0x4, 0x1, 0x7fff, 0x6, 0xfffffffc, 0x5, 0x8, 0xfffff145, 0x1, 0x0, 0xcaa, 0x9, 0x9, 0x8, 0x6, 0x8, 0x4, 0x0, 0x5, 0x3, 0x0, 0x8, 0x7, 0xed, 0x2, 0x1000, 0xa, 0xb4d, 0x5, 0x4, 0xfffffff8, 0x3, 0x28, 0x9, 0x3789, 0x4, 0x6, 0x9, 0x9, 0x9, 0xd4, 0x6, 0x3, 0x80000000, 0x10000, 0x5, 0x80000001, 0x6, 0x3, 0x90, 0x9, 0x73, 0x3, 0x4, 0x9, 0x4, 0x5, 0xb, 0x8be, 0x0, 0x5, 0x1e, 0x7fff, 0x9, 0x3, 0x66a4, 0x4, 0x668, 0x9df, 0x0, 0x6, 0x1ff, 0x10000, 0x5, 0x2, 0x401, 0x200, 0x1, 0x3, 0x4, 0xe5a, 0x7, 0x5, 0x9, 0xfffff73e, 0x4, 0x3, 0xe, 0x6, 0x2, 0xc, 0x3, 0x2, 0x100, 0x8, 0x80, 0x6, 0x4, 0x5, 0x5fffffc, 0xfffffffa, 0x1d8, 0x6, 0x0, 0x3, 0x9, 0x4, 0xcad, 0x200, 0x1, 0x0, 0x6, 0x200, 0x2, 0xfff, 0x8, 0x3, 0x7, 0x0, 0x8, 0x80000000, 0x6e9, 0x4, 0x6, 0x800, 0x5, 0x8, 0x6, 0x24b, 0xc0, 0x4, 0xfff, 0x8, 0x7fffffff, 0x6, 0xa78, 0x3, 0x8, 0x80000000, 0x5c3, 0x3, 0x9, 0x6, 0x4, 0x4, 0x2, 0x1, 0x401, 0x7, 0x6, 0x5, 0x7f, 0x0, 0xef, 0x8, 0x401, 0xf, 0x4, 0x4, 0x7, 0x6, 0x0, 0x10, 0x7, 0x69c, 0x5c0, 0xffffff11, 0xd, 0x7, 0x10, 0x0, 0x8, 0x0, 0xffffffff, 0xfffffff9, 0x4, 0x5, 0x6, 0x7, 0x79d5, 0x200, 0xf, 0x100, 0x41e, 0xffffff9d, 0x7f, 0x5, 0x2, 0xfffffff8, 0xd, 0x9, 0xff, 0x0, 0x2, 0x6, 0x0, 0xfffff83d, 0x0, 0x7, 0x200, 0x5d92, 0x6, 0x4, 0x1000, 0x8, 0xfffffff9, 0x3, 0x62, 0x1, 0x46f, 0x7, 0x2, 0xfffffffb, 0x800, 0xd, 0x3, 0x8, 0x4, 0x2, 0x200, 0xebf1, 0x97ca, 0x8, 0xa, 0x2, 0xa, 0x8, 0xc2, 0xff, 0x8, 0x5b, 0x40000, 0x0, 0x2, 0x1, 0x4fe9, 0x3, 0x1, 0x80000001, 0x7d, 0xff, 0x5, 0xfffffff8, 0x7, 0x80f, 0x40, 0x91f, 0x8, 0x8, 0x8, 0xfffff5c3, 0x6, 0x3268, 0x9, 0x7, 0x5, 0x10, 0x4, 0x2f2f2cfb, 0x3, 0x8000, 0xdb21, 0xfffffffd, 0xf509, 0x1000, 0x2, 0xff, 0x2, 0x10001, 0x2, 0x8b, 0x9, 0x2786, 0xffffffff, 0x5, 0x3, 0x10, 0x5, 0x10001, 0xba000000, 0x1, 0x7, 0x7fffffff, 0x9f, 0x2, 0xed, 0x1, 0x80000000, 0x74e, 0x6, 0xffffffff, 0x2, 0xb, 0x2, 0x4, 0x9, 0x2, 0x6, 0x0, 0x200, 0x9, 0xbece, 0x8, 0x3, 0x1, 0xd, 0x5, 0x3, 0x4, 0xac30, 0x6, 0x91, 0x0, 0x600000, 0x7, 0x10a, 0x5, 0x3ff, 0x10000, 0x4, 0x9, 0x2, 0x0, 0x209, 0x8bf5, 0x0, 0x4, 0x8, 0xfffffffb, 0x400, 0xfffffe00, 0x9, 0x5, 0x0, 0x3, 0x6, 0x7, 0x4, 0xf, 0x2, 0x4, 0xfffff48c, 0x1ff, 0xe, 0x34, 0x4, 0x4, 0x1, 0x8000, 0x7, 0x160f, 0x0, 0x1, 0x2, 0x7, 0x81, 0x8, 0x4, 0x6, 0x0, 0xfffffff7, 0x2, 0x32, 0x3, 0x6, 0x4, 0x0, 0x400800, 0x0, 0x9, 0x0, 0x1, 0x4, 0x9, 0xa8d3, 0x1, 0x3, 0x7, 0x7, 0x2, 0x10, 0x7fff, 0x7, 0x9, 0x2, 0x25, 0xffff0000, 0x3fb, 0x4, 0x502e, 0x5, 0x8, 0x1, 0x2, 0xfffffffb, 0x80, 0x0, 0x1, 0x5, 0x7, 0x3ff, 0x6, 0x7, 0x1, 0x0, 0x3, 0xffffffff, 0x7, 0x3, 0x2, 0xfffffffa, 0x5, 0x4, 0xcf, 0xfffffff8, 0xffb, 0x7, 0x0, 0x10000, 0x80000000, 0x5, 0x5, 0x2f, 0x5, 0x1, 0x4245, 0x8, 0x7ff, 0x3, 0x8, 0x40, 0x5, 0x7, 0x8, 0x1, 0x0, 0x9, 0x2, 0x4, 0x3, 0x9, 0x1, 0x1000, 0x80000000, 0x2, 0x0, 0x7, 0x40000000, 0x9, 0xfff, 0xa, 0x4, 0x1, 0x1, 0x7, 0x1ff, 0x8, 0x3, 0x6, 0x5, 0x8001, 0x0, 0x92f2, 0x1, 0x5, 0x7, 0x0, 0x10001, 0x40000, 0x7, 0x40, 0xff, 0x5, 0xcacd, 0x9], 0x1, 0x400, 0x8}) 6.893037157s ago: executing program 1 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r4, 0x0, 0x0) 6.66966731s ago: executing program 0 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x1) 6.57826854s ago: executing program 0 (id=672): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000007c0)={0xfffffffd, 0x7, 0x4, 0x880, 0x200, {0x0, 0xea60}, {0x5, 0xb, 0x3, 0x4, 0xdb, 0xf2, '_1,\v'}, 0x10, 0x4, {}, 0x7}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r2, 0x0, 0x0) 6.431774816s ago: executing program 4 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff0f, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 6.330708288s ago: executing program 4 (id=674): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x25}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r4 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8e) mknodat$loop(r5, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r7, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/19]) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r8, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 6.220633187s ago: executing program 2 (id=675): mq_open(0x0, 0x0, 0x0, 0x0) gettid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x4, 0xa4}) r0 = socket$inet(0x2, 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 6.107736728s ago: executing program 2 (id=676): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=@base={0x1f, 0x0, 0x1, 0x26, 0x470, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x3, 0x70000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="0f013b9a004800004600c4e193d04436e966b846008ee80f21c40f2204c4c3697c6500d336f01964740a0fc71cbc0f011b", 0x31}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) 4.948432292s ago: executing program 4 (id=677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xef}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x10003f4, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 4.90513371s ago: executing program 4 (id=678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) creat(0x0, 0x4b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x3f00) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80800) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="d40200001200000824bd7000fddbdf252906fc0101004e2005000000010000000b000000000000000400000001040000d500000001000000b7d50779527453d1035d7a561d7099d193e37ed01c1bb746ce728095871c69fb8c1a23c59af4e96db6857b0b0f711ea2bac11c7d276a5f28254f26d5dc9b02c69349b067e52a93b9a263889366c06c117cc338021c0ad47312cfc2f59e2453677a2e", @ANYRES32=r4, @ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000044) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}}, 0x4) syz_clone(0x2211, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) accept$alg(r7, 0x0, 0x0) 4.673426634s ago: executing program 1 (id=679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.310851849s ago: executing program 3 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000010000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000000008000240000000091800018008000100667764000c00"], 0xf0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x132) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$addseals(r5, 0x409, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r6) 3.961662307s ago: executing program 1 (id=681): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201010294ceff40860500105eaa0102030109022400010062400009045604024543dab909050e02080009046609050c02"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) 3.136266271s ago: executing program 0 (id=682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x1) 2.902051255s ago: executing program 0 (id=683): syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x0, 0x0, 0x1, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80100, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) 2.900687683s ago: executing program 4 (id=684): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000094) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2}}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000380)={&(0x7f0000000080)=0xed, 0x96, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000340)}) 2.657157306s ago: executing program 2 (id=685): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "8baa0502", {0x3, 0x0, 0x0, 0x8, 0xa38, 0x6, 0xa}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000006c0)=ANY=[@ANYBLOB="caff9955baa33788b700229260f7e6c494b69b11855f9370441a73a054cc12be96e5c0072cb5a129202b0188951eb1f2b38f2c851d477ec9ac9424030b88f8918c1063afed7153996b41f532556f9e353e1e503208e73e4d60e4824991206012dede1f4b77408ab4b89591245d4d5e5b2d9f173c15bf372ec4012677aff2a53b2d058b2f8ca314926e4b5941b2de342f79c7399804e103073f54809aa47e49febc955ccf94515c305681fc1b18a13a33285f2b0079512af7820a9b763f668a2213fdeb843558e14931c369f958", @ANYRESHEX=r1, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r1]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 2.240002332s ago: executing program 1 (id=686): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002300011022bd7002fadbdf2501000000"], 0x14}}, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$VIDIOC_QBUF(r2, 0xff01, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(r4, &(0x7f0000000340)='./file0\x00', 0x88900) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400030008000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.929091695s ago: executing program 3 (id=687): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}}}, 0x0) readv(r0, &(0x7f0000001680)=[{0x0, 0xe}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000140)=0x7, 0x4) r3 = syz_usb_connect$uac3(0x1, 0xfffffffffffffce7, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x3, 0x1, 0x10, 0x20, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x47}, [@multiply_unit={0xb, 0x24, 0xd, 0xf8, 0x6, 0x401, 0x2}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x9, 0x80, 0x24}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x101, 0x3, 0x3, 0xfffffffd, 0xac67, 0x6, 0x8, 0xd}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x400, 0x1, 0x3, 0x4, 0x7fffffff, 0x2, 0x9e, 0xec7c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xc, 0xe9, 0x7, 0x4, 0xc0, 0xb, 0x3, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x9, 0xfe, {0xa, 0x25, 0x25, 0x4, 0x6, 0xb3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xcf, 0x2, 0x1, 0x1002, 0xff, 0x2, 0x2, 0x5b}, @as_header={0x17, 0x24, 0x1, 0x0, 0x1, 0x6, 0x1, 0x4, 0x9, 0x6094, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x81, 0x3c, "e3b3", "c4"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x9, 0x12, 0x33}, @as_header={0x17, 0x24, 0x1, 0x1, 0x7, 0x8, 0x0, 0xf, 0xa3, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x85, 0x0, 0xb, 0x6, 0xf}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xff, 0x4, 0x2, {0xa, 0x25, 0x25, 0x1, 0xd, 0x8}}}}}}}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000000580)={0xffffffffffffffac, 0x6, 0x201, 0x2, 0x0, 0x47, 0x40}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1}) syz_usb_control_io$uac3(r3, &(0x7f00000019c0)={0x14, &(0x7f00000018c0)={0x40, 0x5, 0xb6, {0xb6, 0xa, "83aae99497ecc1d6f2dd322fede52c0094994d842e9d852b820e04d869de3f8dbf13a7834881fe00e8a9a09ad217793dd6d534ef1ce24761ca6362449cbea0a445d619936a15fa8fa509363d43caac3ae5ff33771922e324ec5445e6b2f7351539df6fbbab2dd4c4607e3952e15e250feebbf793413b7d1473842864a7ceff56c085e6180049c75b172984a593bee776957267947d1e7a861a1f86bd9bf19d489da58605f81337f8b1e1daeb55deee67cf84b11f"}}, &(0x7f0000001980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000002c80)={0x44, &(0x7f0000001a00)=ANY=[@ANYBLOB="40174f000000a99eb284d80ff10661415a14e4e87125c0423a201d9b2d206418856d4e8fc4ef68d0af9f655d82dad6b031868b51c9083bce64fbf75c64000931f0479abfa2d98c0bb38ff359004053946fc040f594"], &(0x7f0000001a80)={0x0, 0xa, 0x1, 0xd0}, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0xdb}, &(0x7f0000001b00)={0x20, 0x81, 0x2, "2af8"}, &(0x7f0000001b40)={0x20, 0x82, 0x1, "aa"}, &(0x7f0000001b80)={0x20, 0x83, 0x2, "4ec7"}, &(0x7f0000001bc0)={0x20, 0x84, 0x4, "609d1d33"}, &(0x7f0000002c40)={0x20, 0x85, 0x3, "8f7cee"}}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x200088c2) 1.268912074s ago: executing program 1 (id=688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xef}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x10003f4, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 945.328218ms ago: executing program 1 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r3, 0x0, 0x0) 869.841759ms ago: executing program 2 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 762.292738ms ago: executing program 0 (id=691): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 707.336681ms ago: executing program 2 (id=692): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x1d, 0x80003, 0x3) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48005}, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000040)=0x401, 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af25bd7000000000000e0000000800030004d2c3"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) syz_emit_ethernet(0x46, &(0x7f0000000440)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @local}, @time_exceeded={0x2b, 0x1, 0x0, 0xe0, 0x40, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x68, 0x1, 0x2, 0x0, 0x0, @multicast2, @rand_addr=0x64010102}, "f09ef4ff94e1b868"}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x64008004) r7 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xe) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x5, 0x2, "8ca5"}, 0x0, 0x0}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e3400000000000000000000000002000100000000000000091600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000040)=[{0x6, 0xf, 0x5, 0x7fff8000}]}) 0s ago: executing program 4 (id=693): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000007c0)={0xfffffffd, 0x7, 0x4, 0x880, 0x200, {0x0, 0xea60}, {0x5, 0xb, 0x3, 0x4, 0xdb, 0xf2, '_1,\v'}, 0x10, 0x4, {}, 0x7}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): ng dummy_hcd [ 176.772652][ T7268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.780397][ T7268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.786687][ T7268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.795140][ T7268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.795534][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 176.811092][ T7268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.821500][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.844525][ T10] usb 1-1: config 0 has no interfaces? [ 176.850520][ T10] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 176.870618][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.896329][ T10] usb 1-1: config 0 descriptor?? [ 176.925605][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 176.943842][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.944169][ T5687] usb 4-1: USB disconnect, device number 23 [ 176.983765][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.018134][ T5694] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 177.040917][ T5694] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 177.050237][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'. [ 177.064390][ T5694] usb 2-1: Manufacturer: syz [ 177.069202][ T7284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.078991][ T5687] Unregistered device nBox DVB-T Dongle [ 177.079339][ T5694] usb 2-1: config 0 descriptor?? [ 177.099922][ T5687] as10x_usb: device has been disconnected [ 177.191005][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 177.191020][ T30] audit: type=1326 audit(1785751594.960:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.225564][ T30] audit: type=1326 audit(1785751594.990:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.250439][ T30] audit: type=1326 audit(1785751594.990:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.274786][ T7272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.282316][ T7272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.293664][ T7272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.302380][ T7272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.311679][ T7272] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.320773][ T30] audit: type=1326 audit(1785751595.090:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.346054][ T30] audit: type=1326 audit(1785751595.090:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.376613][ T30] audit: type=1326 audit(1785751595.090:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.433256][ T30] audit: type=1326 audit(1785751595.180:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.443607][ T5695] usb 1-1: USB disconnect, device number 21 [ 177.459146][ T30] audit: type=1326 audit(1785751595.180:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.552945][ T30] audit: type=1326 audit(1785751595.190:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.610630][ T30] audit: type=1326 audit(1785751595.200:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.2.476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 177.680058][ T7291] can: request_module (can-proto-3) failed. [ 177.695213][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.718926][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.765637][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 177.925563][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 177.932881][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.956908][ T24] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 177.969294][ T24] usb 3-1: config 9 has no interface number 0 [ 177.985558][ T24] usb 3-1: config 9 interface 57 has no altsetting 0 [ 177.995566][ T5726] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 178.011170][ T24] usb 3-1: string descriptor 0 read error: -22 [ 178.017503][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 178.035518][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.135748][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.156157][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 178.163230][ T5726] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 178.174054][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 178.196426][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 178.209239][ T7295] can: request_module (can-proto-3) failed. [ 178.222397][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 178.242828][ T5726] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 178.267894][ T24] (null): keene_cmd_main failed (-71) [ 178.281383][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.300993][ T5726] usb 4-1: Product: syz [ 178.311038][ T5726] usb 4-1: Manufacturer: syz [ 178.320852][ T24] video4linux radio48: keene_cmd_main failed (-71) [ 178.327567][ T5726] usb 4-1: SerialNumber: syz [ 178.332740][ T24] radio-keene 3-1:9.57: V4L2 device registered as radio48 [ 178.344130][ T5726] usb 4-1: config 0 descriptor?? [ 178.350864][ T24] usb 3-1: USB disconnect, device number 27 [ 178.505675][ T809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 178.570572][ T5726] appledisplay: Apple Cinema Display connected [ 178.665594][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 178.672719][ T809] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 178.683640][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 178.695317][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 178.706636][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 178.720890][ T809] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 178.730974][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.739364][ T809] usb 1-1: Product: syz [ 178.743648][ T809] usb 1-1: Manufacturer: syz [ 178.748404][ T809] usb 1-1: SerialNumber: syz [ 178.760801][ T809] usb 1-1: config 0 descriptor?? [ 178.778120][ T5709] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 178.796482][ T5726] usb 4-1: USB disconnect, device number 24 [ 178.802528][ C1] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 178.832747][ T5726] appledisplay: Apple Cinema Display disconnected [ 178.945645][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 178.953502][ T5709] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.963046][ T5709] usb 5-1: config 9 has an invalid interface number: 88 but max is 0 [ 178.975572][ T5709] usb 5-1: config 9 has no interface number 0 [ 178.981769][ T5709] usb 5-1: config 9 interface 88 has no altsetting 0 [ 178.992080][ T5709] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 179.003820][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.011974][ T5709] usb 5-1: Product: syz [ 179.034055][ T809] appledisplay: Apple Cinema Display connected [ 179.034212][ T5709] usb 5-1: Manufacturer: syz [ 179.073862][ T5709] usb 5-1: SerialNumber: syz [ 179.256618][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.289967][ T10] usb 1-1: USB disconnect, device number 22 [ 179.289974][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 179.308663][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.332645][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.335599][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.342445][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.347601][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.359118][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 179.401501][ T5709] ums-datafab 5-1:9.88: USB Mass Storage device detected [ 179.410041][ T10] appledisplay: Apple Cinema Display disconnected [ 179.513734][ T5709] ums-sddr55 5-1:9.88: USB Mass Storage device detected [ 179.561066][ T5709] usb 5-1: USB disconnect, device number 15 [ 179.601347][ T5694] usbhid 2-1:0.0: can't add hid device: -71 [ 179.607450][ T5694] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.674484][ T5694] usb 2-1: USB disconnect, device number 25 [ 180.053521][ T7323] netlink: 240 bytes leftover after parsing attributes in process `syz.3.486'. [ 180.180805][ T7325] netlink: 208 bytes leftover after parsing attributes in process `syz.0.487'. [ 180.199930][ T7325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.487'. [ 180.217642][ T7325] syzkaller0: entered promiscuous mode [ 180.233158][ T7325] syzkaller0: entered allmulticast mode [ 180.301602][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 180.350684][ T5726] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 180.416587][ T5694] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 180.535725][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 180.549948][ T5726] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.579517][ T5726] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.594236][ T5726] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 180.621986][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.647465][ T5694] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.659956][ T5694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.683035][ T5726] usb 2-1: config 0 descriptor?? [ 180.707890][ T5694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.743287][ T5694] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 180.768057][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.809319][ T5694] usb 4-1: Product: å©é§å‰ä¼¸ì°‹á­î¼‡ë—︻쳋੻å±é‚€ï¸ê—韀焳褱෼޲㠣῿ꘜꈙ凴ï‚å«š [ 180.849420][ T5694] usb 4-1: Manufacturer: 詺섲엵싽嚮䧕ä‰ä¾¦æ¤ˆä“â¼ä³šáª¿éŒœí€©à¦œï²˜í»î‰±â†´ãº«è“”갶犖ã½äº¼åº†ë‰£æ««ãšˆã¼å‡²í„‹ê—šç†é·±äˆ®è„«ïª½î”‚붒寂瑜ꊠä²ã•¬é¬¹í¼ê¯Ÿãªœâª¹ëšç–®é©¼â‡ƒèš€ç‹¤ë¦±ê¾®éŒ«è¾»æƒ¹ë•–澬ਸ쯈ꗤ⻆냴銎餦뎪ᚧවﵴ牱á•Qå³å¡­ç¨Žå©¢ï¯¬ç¼›ê€§ê¶¤î‚˜æ€¢á¥œî½•ëŽ™î™‚⿮㬗 [ 180.930960][ T5694] usb 4-1: SerialNumber: Ñ [ 180.980214][ T5694] usb 4-1: selecting invalid altsetting 1 [ 180.991710][ T5694] usb 4-1: unit 6 not found! [ 181.139971][ T7327] syzkaller0: entered promiscuous mode [ 181.156679][ T7327] syzkaller0: entered allmulticast mode [ 181.180473][ T5694] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 181.258318][ T5726] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 181.261317][ T7352] netlink: 240 bytes leftover after parsing attributes in process `syz.4.490'. [ 181.463796][ T5694] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 181.490947][ T5694] usb 4-1: USB disconnect, device number 25 [ 181.561295][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.577118][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.738596][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.757012][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.785885][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.810261][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 181.824009][ T5726] usb 2-1: USB disconnect, device number 26 [ 181.839548][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.859370][ T24] usb 5-1: Product: å©é§å‰ä¼¸ì°‹á­î¼‡ë—︻쳋੻å±é‚€ï¸ê—韀焳褱෼޲㠣῿ꘜꈙ凴ï‚å«š [ 181.896313][ T24] usb 5-1: Manufacturer: 詺섲엵싽嚮䧕ä‰ä¾¦æ¤ˆä“â¼ä³šáª¿éŒœí€©à¦œï²˜í»î‰±â†´ãº«è“”갶犖ã½äº¼åº†ë‰£æ««ãšˆã¼å‡²í„‹ê—šç†é·±äˆ®è„«ïª½î”‚붒寂瑜ꊠä²ã•¬é¬¹í¼ê¯Ÿãªœâª¹ëšç–®é©¼â‡ƒèš€ç‹¤ë¦±ê¾®éŒ«è¾»æƒ¹ë•–澬ਸ쯈ꗤ⻆냴銎餦뎪ᚧවﵴ牱á•Qå³å¡­ç¨Žå©¢ï¯¬ç¼›ê€§ê¶¤î‚˜æ€¢á¥œî½•ëŽ™î™‚⿮㬗 [ 181.915668][ T7362] can: request_module (can-proto-3) failed. [ 181.940180][ T24] usb 5-1: SerialNumber: Ñ [ 181.969300][ T24] usb 5-1: selecting invalid altsetting 1 [ 181.989371][ T24] usb 5-1: unit 6 not found! [ 182.180750][ T24] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 182.207789][ T5694] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 182.248003][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 182.263368][ T24] usb 5-1: USB disconnect, device number 16 [ 182.283377][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.386498][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 182.402729][ T5694] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 182.418690][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 182.431160][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 182.443266][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 182.461082][ T5694] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 182.472024][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.481277][ T5694] usb 3-1: Product: syz [ 182.486097][ T5694] usb 3-1: Manufacturer: syz [ 182.491242][ T5694] usb 3-1: SerialNumber: syz [ 182.501378][ T5694] usb 3-1: config 0 descriptor?? [ 182.757539][ T5694] appledisplay: Apple Cinema Display connected [ 182.894218][ T7381] FAULT_INJECTION: forcing a failure. [ 182.894218][ T7381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.938724][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.1.497 Not tainted syzkaller #0 PREEMPT(full) [ 182.938750][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.938759][ T7381] Call Trace: [ 182.938766][ T7381] [ 182.938774][ T7381] dump_stack_lvl+0xe8/0x150 [ 182.938801][ T7381] should_fail_ex+0x40c/0x560 [ 182.938833][ T7381] _copy_from_user+0x2d/0xb0 [ 182.938850][ T7381] ___sys_sendmsg+0x1c6/0x360 [ 182.938870][ T7381] ? __lock_acquire+0x683/0x2cf0 [ 182.938894][ T7381] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.938943][ T7381] ? __fget_files+0x2a/0x420 [ 182.938965][ T7381] ? __fget_files+0x3a2/0x420 [ 182.938994][ T7381] __x64_sys_sendmsg+0x1b1/0x290 [ 182.939016][ T7381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.939050][ T7381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.939068][ T7381] do_syscall_64+0x174/0x580 [ 182.939086][ T7381] ? trace_irq_disable+0x3b/0x140 [ 182.939106][ T7381] ? clear_bhb_loop+0x40/0x90 [ 182.939126][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.939143][ T7381] RIP: 0033:0x7fa73979e019 [ 182.939159][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.939175][ T7381] RSP: 002b:00007fa73a658028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.939194][ T7381] RAX: ffffffffffffffda RBX: 00007fa739a25fa0 RCX: 00007fa73979e019 [ 182.939205][ T7381] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 182.939214][ T7381] RBP: 00007fa73a658090 R08: 0000000000000000 R09: 0000000000000000 [ 182.939224][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.939234][ T7381] R13: 00007fa739a26038 R14: 00007fa739a25fa0 R15: 00007fa739b4fa48 [ 182.939258][ T7381] [ 183.179719][ T24] usb 3-1: USB disconnect, device number 28 [ 183.179772][ C0] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 183.242919][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.501'. [ 183.263179][ T24] appledisplay: Apple Cinema Display disconnected [ 183.301900][ T7388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.309215][ T7388] IPv6: NLM_F_CREATE should be set when creating new route [ 183.395536][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 183.549500][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.565660][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 183.585496][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 183.610706][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 183.621113][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 183.636413][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 183.647200][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 183.655319][ T10] usb 1-1: Product: syz [ 183.655879][ T5726] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.660464][ T5694] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 183.674763][ T10] usb 1-1: Manufacturer: syz [ 183.679885][ T10] usb 1-1: SerialNumber: syz [ 183.696242][ T10] usb 1-1: config 0 descriptor?? [ 183.817672][ T5726] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.834484][ T5726] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 183.835896][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 183.846342][ T24] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 183.856838][ T5694] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 183.862444][ T5726] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.869113][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.880180][ T7397] xt_hashlimit: size too large, truncated to 1048576 [ 183.886405][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.893649][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.912569][ T5726] usb 5-1: Product: syz [ 183.918043][ T5726] usb 5-1: Manufacturer: syz [ 183.922422][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 183.922783][ T5726] usb 5-1: SerialNumber: syz [ 183.939518][ T5694] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 183.951555][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 183.954723][ T5726] cdc_mbim 5-1:1.0: skipping garbage [ 183.967004][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.988087][ T5694] usb 4-1: config 0 descriptor?? [ 184.028127][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.045722][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 184.066025][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 184.077810][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 184.096659][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 184.143771][ T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 184.156610][ T7395] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 184.163602][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 184.175534][ T24] usb 2-1: Product: syz [ 184.183038][ T24] usb 2-1: Manufacturer: syz [ 184.193278][ T24] usb 2-1: SerialNumber: syz [ 184.218614][ T10] usb 1-1: USB disconnect, device number 23 [ 184.224189][ T24] usb 2-1: config 0 descriptor?? [ 184.301992][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 184.302008][ T30] audit: type=1326 audit(1785751602.070:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.333826][ T30] audit: type=1326 audit(1785751602.100:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.359414][ T30] audit: type=1326 audit(1785751602.100:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.394837][ T30] audit: type=1326 audit(1785751602.100:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.425904][ T30] audit: type=1326 audit(1785751602.100:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.437714][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.468778][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.472686][ T30] audit: type=1326 audit(1785751602.100:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.503451][ T7405] binder_alloc: 7404: binder_alloc_buf, no vma [ 184.530269][ T24] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 184.537385][ T30] audit: type=1326 audit(1785751602.100:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.556201][ T5694] hid_parser_main: 455 callbacks suppressed [ 184.556221][ T5694] logitech 0003:046D:C29C.0003: unknown main item tag 0x1 [ 184.563287][ T24] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 184.586038][ T5694] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 184.593125][ T30] audit: type=1326 audit(1785751602.100:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd296b9e019 code=0x7ffc0000 [ 184.731231][ T24] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 184.738949][ T24] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 184.753442][ T24] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 184.808573][ T7395] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 184.816606][ T5726] cdc_mbim 5-1:1.0: setting tx_max = 60 [ 184.828523][ T5726] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 184.858002][ T5726] wwan wwan0: port wwan0mbim0 attached [ 184.954682][ T24] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 185.051132][ T5694] logitech 0003:046D:C29C.0003: no inputs found [ 185.091402][ T5694] usb 4-1: USB disconnect, device number 26 [ 185.145921][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 185.295585][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 185.303746][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.312445][ T10] usb 1-1: config 179 has no interface number 0 [ 185.319487][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.330871][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 185.347083][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.359366][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 185.371006][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.388362][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 185.397609][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.417232][ T7411] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 185.718581][ T7417] netlink: 596 bytes leftover after parsing attributes in process `syz.3.510'. [ 185.760077][ T30] audit: type=1800 audit(1785751603.530:463): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.510" name=14 dev="tmpfs" ino=576 res=0 errno=0 [ 185.774566][ T5694] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input18 [ 185.815659][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.000485][ T24] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 186.029522][ T24] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 186.090573][ T24] usb 2-1: USB disconnect, device number 27 [ 186.394092][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'. [ 186.571967][ T30] audit: type=1326 audit(1785751604.340:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.4.509" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1483d9e019 code=0x7ffc0000 [ 187.099428][ T7431] xt_hashlimit: size too large, truncated to 1048576 [ 187.444397][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 187.643250][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 187.690703][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.723072][ T24] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 187.764261][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.812758][ T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 187.850206][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.895856][ T24] usb 4-1: Product: syz [ 187.916473][ T24] usb 4-1: Manufacturer: syz [ 187.927829][ T24] usb 4-1: SerialNumber: syz [ 187.961146][ T24] usb 4-1: config 0 descriptor?? [ 189.257528][ T7437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.264340][ T24] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 189.276682][ T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 189.634713][ T5726] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 7a:1d:8d:8f:01:2b [ 189.654477][ T7411] bond0: entered promiscuous mode [ 189.670580][ T5726] usb 5-1: USB disconnect, device number 17 [ 189.679389][ T7411] bond_slave_0: entered promiscuous mode [ 189.698079][ T7411] bond_slave_1: entered promiscuous mode [ 189.704604][ T5726] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 189.738861][ T7411] gretap0: entered promiscuous mode [ 189.751407][ T7411] hsr1: entered promiscuous mode [ 189.783777][ T7438] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 189.809322][ T7438] netlink: 'syz.1.513': attribute type 2 has an invalid length. [ 189.829021][ T10] usb 1-1: USB disconnect, device number 24 [ 189.834968][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 189.834998][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.939643][ T7443] can: request_module (can-proto-3) failed. [ 190.001215][ T7441] bridge0: port 4(syz_tun) entered blocking state [ 190.007811][ T5726] wwan wwan0: port wwan0mbim0 disconnected [ 190.023465][ T7441] bridge0: port 4(syz_tun) entered disabled state [ 190.042163][ T7441] syz_tun: entered allmulticast mode [ 190.076169][ T7446] fuse: Invalid rootmode [ 190.085401][ T7441] syz_tun: entered promiscuous mode [ 190.102510][ T7441] bridge0: port 4(syz_tun) entered blocking state [ 190.109138][ T7441] bridge0: port 4(syz_tun) entered forwarding state [ 190.335598][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 190.453710][ T29] usb 4-1: USB disconnect, device number 27 [ 190.486082][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 190.489076][ T5687] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 190.518647][ T10] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 190.548433][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 190.561141][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 190.572625][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 190.586083][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 190.595322][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.595748][ T5726] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 190.604678][ T10] usb 1-1: Product: syz [ 190.616172][ T10] usb 1-1: Manufacturer: syz [ 190.620881][ T10] usb 1-1: SerialNumber: syz [ 190.631683][ T10] usb 1-1: config 0 descriptor?? [ 190.658004][ T5687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.668325][ T5687] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.677506][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.690777][ T5687] usb 3-1: config 0 descriptor?? [ 190.777429][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.787715][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 190.801609][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 190.813989][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 190.824567][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 190.839754][ T5726] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 190.850327][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 190.859826][ T5726] usb 5-1: Product: syz [ 190.864033][ T5726] usb 5-1: Manufacturer: syz [ 190.869519][ T5726] usb 5-1: SerialNumber: syz [ 190.875080][ T10] appledisplay: Apple Cinema Display connected [ 190.887249][ T5726] usb 5-1: config 0 descriptor?? [ 190.933951][ T29] usb 3-1: USB disconnect, device number 29 [ 191.086332][ T24] usb 1-1: USB disconnect, device number 25 [ 191.086493][ C0] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 191.105373][ T5726] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 191.120041][ T24] appledisplay: Apple Cinema Display disconnected [ 191.133866][ T5726] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 191.256433][ T5687] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 191.345067][ T5726] usb 5-1: USB disconnect, device number 18 [ 191.387367][ T29] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 191.415548][ T5687] usb 2-1: Using ep0 maxpacket: 32 [ 191.428441][ T5687] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 191.440158][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.463733][ T5687] usb 2-1: config 0 descriptor?? [ 191.480789][ T5687] as10x_usb: device has been detected [ 191.488605][ T5687] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 191.508421][ T5687] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 191.529970][ T5687] as10x_usb: error during firmware upload part1 [ 191.536788][ T5687] Registered device nBox DVB-T Dongle [ 191.546856][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.563967][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.576623][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 191.590620][ T29] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 191.599937][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.608308][ T29] usb 3-1: Product: syz [ 191.612474][ T29] usb 3-1: Manufacturer: syz [ 191.617404][ T29] usb 3-1: SerialNumber: syz [ 191.627114][ T29] usb 3-1: config 0 descriptor?? [ 191.632634][ T7451] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.697796][ T29] rc_core: IR keymap rc-streamzap not found [ 191.725302][ T29] Registered IR keymap rc-empty [ 191.747626][ T29] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 191.762489][ T29] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 191.801000][ T7457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.820964][ T7457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.829420][ T7457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.841376][ T7457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.847689][ T7457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.853050][ T7468] fuse: Bad value for 'fd' [ 191.893300][ T7451] input: syz1 as /devices/virtual/input/input20 [ 191.964012][ T10] usb 2-1: USB disconnect, device number 28 [ 192.058808][ T5635] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 192.065979][ T5635] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 192.099000][ T10] Unregistered device nBox DVB-T Dongle [ 192.126615][ T10] as10x_usb: device has been disconnected [ 192.181030][ T5687] usb 3-1: USB disconnect, device number 30 [ 192.225647][ T5709] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.386373][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 192.393134][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.417545][ T5709] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.435904][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.465219][ T5709] usb 5-1: config 0 descriptor?? [ 192.645558][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 192.771760][ T5709] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.817868][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.829884][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 192.841711][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 192.852949][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 192.864752][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.880114][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 192.895678][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 192.915594][ T10] usb 1-1: Product: syz [ 192.924332][ T10] usb 1-1: Manufacturer: syz [ 192.931885][ T10] usb 1-1: SerialNumber: syz [ 192.951596][ T10] usb 1-1: config 0 descriptor?? [ 193.178694][ T5723] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 193.201720][ T7483] netlink: 240 bytes leftover after parsing attributes in process `syz.3.527'. [ 193.229325][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.250011][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.259209][ T10] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 193.270328][ T10] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 193.369260][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.380996][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 193.393269][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 193.404965][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 193.425355][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 193.446470][ T5723] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 193.456687][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 193.465100][ T5723] usb 3-1: Product: syz [ 193.468017][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.473419][ T5723] usb 3-1: Manufacturer: syz [ 193.486145][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 193.504302][ T10] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 193.505694][ T5687] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 193.514101][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.517654][ T5723] usb 3-1: SerialNumber: syz [ 193.537272][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 193.550640][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 193.569760][ T10] usb 1-1: USB disconnect, device number 26 [ 193.587262][ T5723] usb 3-1: config 0 descriptor?? [ 193.687844][ T5687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.702126][ T5687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.715821][ T5687] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.731782][ T5687] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 193.741790][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.750409][ T5687] usb 4-1: Product: å©é§å‰ä¼¸ì°‹á­î¼‡ë—︻쳋੻å±é‚€ï¸ê—韀焳褱෼޲㠣῿ꘜꈙ凴ï‚å«š [ 193.761942][ T5687] usb 4-1: Manufacturer: 詺섲엵싽嚮䧕ä‰ä¾¦æ¤ˆä“â¼ä³šáª¿éŒœí€©à¦œï²˜í»î‰±â†´ãº«è“”갶犖ã½äº¼åº†ë‰£æ««ãšˆã¼å‡²í„‹ê—šç†é·±äˆ®è„«ïª½î”‚붒寂瑜ꊠä²ã•¬é¬¹í¼ê¯Ÿãªœâª¹ëšç–®é©¼â‡ƒèš€ç‹¤ë¦±ê¾®éŒ«è¾»æƒ¹ë•–澬ਸ쯈ꗤ⻆냴銎餦뎪ᚧවﵴ牱á•Qå³å¡­ç¨Žå©¢ï¯¬ç¼›ê€§ê¶¤î‚˜æ€¢á¥œî½•ëŽ™î™‚⿮㬗 [ 193.793091][ T5687] usb 4-1: SerialNumber: Ñ [ 193.811188][ T5723] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 193.811406][ T5687] usb 4-1: selecting invalid altsetting 1 [ 193.819858][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.828824][ T5687] usb 4-1: unit 6 not found! [ 193.833078][ T5723] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 193.895614][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.895660][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.901735][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.985565][ T5694] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 194.004765][ T5687] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 194.087837][ T5687] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 194.112380][ T5723] usb 3-1: USB disconnect, device number 31 [ 194.112484][ T5687] usb 4-1: USB disconnect, device number 28 [ 194.139505][ T5694] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 194.150296][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.152580][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.158410][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.201993][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.218940][ T5694] usb 2-1: Product: syz [ 194.230668][ T5694] usb 2-1: Manufacturer: syz [ 194.242136][ T5694] usb 2-1: SerialNumber: syz [ 194.301757][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.453828][ T7495] can: request_module (can-proto-3) failed. [ 194.718866][ T5687] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 194.724410][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.775355][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.804058][ T7489] fuse: Unknown parameter 'Êÿ™Uº£7ˆ·' [ 194.840942][ T7500] xt_hashlimit: size too large, truncated to 1048576 [ 194.845848][ T5694] usb 2-1: USB disconnect, device number 29 [ 194.915588][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 194.927221][ T5687] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 194.945555][ T5687] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 194.967642][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.986340][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 195.003939][ T24] usb 5-1: USB disconnect, device number 19 [ 195.014298][ T5687] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 195.031596][ T29] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 195.049267][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.058570][ T5687] usb 1-1: Product: syz [ 195.062785][ T5687] usb 1-1: Manufacturer: syz [ 195.067475][ T5687] usb 1-1: SerialNumber: syz [ 195.089379][ T5687] usb 1-1: config 0 descriptor?? [ 195.209046][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.234372][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 195.246920][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 195.259646][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 195.277670][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.308154][ T29] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 195.318748][ T5687] appledisplay: Apple Cinema Display connected [ 195.331160][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 195.341903][ T29] usb 4-1: Product: syz [ 195.346475][ T29] usb 4-1: Manufacturer: syz [ 195.351273][ T29] usb 4-1: SerialNumber: syz [ 195.362193][ T29] usb 4-1: config 0 descriptor?? [ 195.416319][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 195.435842][ T10] ath9k_htc: Failed to initialize the device [ 195.450559][ T5694] usb 2-1: ath9k_htc: USB layer deinitialized [ 195.525541][ T5723] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 195.554513][ T5709] usb 1-1: USB disconnect, device number 27 [ 195.554598][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 195.581589][ T5709] appledisplay: Apple Cinema Display disconnected [ 195.588556][ T29] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 195.607206][ T29] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 195.628512][ T7519] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 195.697883][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 195.705248][ T5723] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.713894][ T5723] usb 5-1: config 0 has no interface number 0 [ 195.724106][ T5723] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.743759][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.755308][ T5723] usb 5-1: Product: syz [ 195.759891][ T5723] usb 5-1: Manufacturer: syz [ 195.764697][ T5723] usb 5-1: SerialNumber: syz [ 195.774402][ T5723] usb 5-1: config 0 descriptor?? [ 195.784616][ T5723] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 195.804945][ T7524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.823518][ T7524] bond1: (slave bond2): making interface the new active one [ 195.855068][ T29] usb 4-1: USB disconnect, device number 29 [ 195.870126][ T7524] bond1: (slave bond2): Enslaving as an active interface with an up link [ 195.902940][ T7519] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 195.990783][ T5723] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 196.007731][ T5723] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 196.045547][ T5726] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 196.210973][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 196.238094][ T5726] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 196.255847][ T5726] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.266068][ T5726] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.285163][ T5726] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.306666][ T5726] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.338406][ T5726] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.360133][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.515476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.742967][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 196.743438][ T5687] usb 5-1: USB disconnect, device number 20 [ 196.774755][ T29] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 196.812418][ T5687] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.894669][ T5687] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 196.911938][ T7529] netlink: 64 bytes leftover after parsing attributes in process `syz.1.543'. [ 196.933950][ T5687] quatech2 5-1:0.51: device disconnected [ 198.961017][ T5726] usb 2-1: usb_control_msg returned -71 [ 198.978980][ T5726] usbtmc 2-1:16.0: can't read capabilities [ 199.046803][ T5726] usb 2-1: USB disconnect, device number 30 [ 199.275604][ T5723] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 199.297747][ T5694] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 199.459671][ T5723] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 199.474375][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.492923][ T5694] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 199.504308][ T5723] usb 1-1: Product: ≠[ 199.508813][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.517700][ T5723] usb 1-1: Manufacturer: è˜î³˜é¯•ê³¬ï‹—ï¹…í•ëŸ•ç¾™é®­è®²á©šç¥¯à²¸à·¡å—§â§œäŽ á¨±â±–è”촛졳뛙﫯ꖈᥨ撬仉鶛ྈ촅ïžà°¥ë­·è£—åšî”¹à±µë§‰ê«¹éƒ˜ë„†ë¡·â¶²é§©å™‰ï¥“彈⧳잿쪕声î¢ä¿¨í—©å«°á¨»ç•«ÇæŸçˆ–簦蒲Ḯ얧ç´å—î»é…¤â½¦î§¤é˜ªì…œåž¥é»ä¹¶ç®«ê”“æ—­ï±î…•ãŠ†â¤…⺽ç¹é±œì‘­ã·¿é”“á Œè㯻౷騶ï…⃒۵鯒èºÃ§ëž¥ [ 199.551022][ T5694] usb 3-1: Product: syz [ 199.555499][ T5694] usb 3-1: Manufacturer: syz [ 199.560119][ T5694] usb 3-1: SerialNumber: syz [ 199.567318][ T5723] usb 1-1: SerialNumber: 〉 [ 199.591765][ T5709] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.605548][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 199.757803][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.766867][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.784720][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.821840][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.862628][ T5723] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 199.873710][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.889474][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.906635][ T5723] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 199.918637][ T10] usb 5-1: Product: syz [ 199.938106][ T10] usb 5-1: Manufacturer: syz [ 199.959873][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 199.968845][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 199.991140][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 200.015560][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 200.018408][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.083614][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.092005][ T7572] FAULT_INJECTION: forcing a failure. [ 200.092005][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 200.119131][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.1.555 Not tainted syzkaller #0 PREEMPT(full) [ 200.119157][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.119166][ T7572] Call Trace: [ 200.119173][ T7572] [ 200.119180][ T7572] dump_stack_lvl+0xe8/0x150 [ 200.119210][ T7572] should_fail_ex+0x40c/0x560 [ 200.119236][ T7572] should_failslab+0xa8/0x100 [ 200.119262][ T7572] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 200.119284][ T7572] ? skb_clone+0x212/0x3a0 [ 200.119302][ T7572] ? skb_clone+0x212/0x3a0 [ 200.119326][ T7572] skb_clone+0x212/0x3a0 [ 200.119348][ T7572] __netlink_deliver_tap+0x413/0x860 [ 200.119378][ T7572] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.119398][ T7572] netlink_deliver_tap+0x19c/0x1b0 [ 200.119418][ T7572] netlink_unicast+0x77f/0x940 [ 200.119443][ T7572] netlink_sendmsg+0x813/0xb40 [ 200.119471][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.119495][ T7572] ? aa_sock_msg_perm+0xf1/0x1b0 [ 200.119517][ T7572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.119534][ T7572] sock_sendmsg_nosec+0x13a/0x180 [ 200.119557][ T7572] ____sys_sendmsg+0x54e/0x850 [ 200.119589][ T7572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.119616][ T7572] ? import_iovec+0x73/0xa0 [ 200.119636][ T7572] ___sys_sendmsg+0x2a5/0x360 [ 200.119653][ T7572] ? __lock_acquire+0x683/0x2cf0 [ 200.119679][ T7572] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.119724][ T7572] ? __fget_files+0x2a/0x420 [ 200.119745][ T7572] ? __fget_files+0x3a2/0x420 [ 200.119773][ T7572] __x64_sys_sendmsg+0x1b1/0x290 [ 200.119794][ T7572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.119829][ T7572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.119847][ T7572] do_syscall_64+0x174/0x580 [ 200.119865][ T7572] ? trace_irq_disable+0x3b/0x140 [ 200.119885][ T7572] ? clear_bhb_loop+0x40/0x90 [ 200.119905][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.119921][ T7572] RIP: 0033:0x7fa73979e019 [ 200.119936][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.119949][ T7572] RSP: 002b:00007fa73a658028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.119967][ T7572] RAX: ffffffffffffffda RBX: 00007fa739a25fa0 RCX: 00007fa73979e019 [ 200.119978][ T7572] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 200.119989][ T7572] RBP: 00007fa73a658090 R08: 0000000000000000 R09: 0000000000000000 [ 200.119999][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.120008][ T7572] R13: 00007fa739a26038 R14: 00007fa739a25fa0 R15: 00007fa739b4fa48 [ 200.120032][ T7572] [ 200.122719][ T5723] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 200.156124][ T7557] fuse: Unknown parameter '0x0000000000000005' [ 200.195897][ T5723] usb 1-1: USB disconnect, device number 28 [ 201.175829][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.256997][ T10] usb 3-1: USB disconnect, device number 32 [ 201.295193][ T5709] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 201.312482][ T5709] ath9k_htc: Failed to initialize the device [ 201.315010][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.327460][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 201.368742][ T7570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.482009][ T7570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.558137][ T29] usb 5-1: USB disconnect, device number 21 [ 201.587021][ T7580] fuse: Bad value for 'fd' [ 202.179368][ T7604] FAULT_INJECTION: forcing a failure. [ 202.179368][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 202.219585][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.4.564 Not tainted syzkaller #0 PREEMPT(full) [ 202.219611][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.219620][ T7604] Call Trace: [ 202.219628][ T7604] [ 202.219635][ T7604] dump_stack_lvl+0xe8/0x150 [ 202.219658][ T7604] should_fail_ex+0x40c/0x560 [ 202.219674][ T7604] should_failslab+0xa8/0x100 [ 202.219691][ T7604] __kmalloc_noprof+0xfe/0x720 [ 202.219705][ T7604] ? attach_auth+0xb3/0x3f0 [ 202.219717][ T7604] ? attach_auth+0xb3/0x3f0 [ 202.219732][ T7604] attach_auth+0xb3/0x3f0 [ 202.219746][ T7604] xfrm_add_sa+0x2679/0x40d0 [ 202.219762][ T7604] ? __pfx_xfrm_add_sa+0x10/0x10 [ 202.219772][ T7604] ? apparmor_capable+0x126/0x170 [ 202.219788][ T7604] ? __nla_parse+0x40/0x60 [ 202.219803][ T7604] xfrm_user_rcv_msg+0x7a8/0xf30 [ 202.219817][ T7604] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 202.219843][ T7604] ? __mutex_trylock_common+0x15f/0x270 [ 202.219856][ T7604] ? __pfx___mutex_trylock_common+0x10/0x10 [ 202.219867][ T7604] ? rcu_is_watching+0x15/0xb0 [ 202.219878][ T7604] ? trace_contention_end+0x3d/0x140 [ 202.219892][ T7604] netlink_rcv_skb+0x226/0x4a0 [ 202.219905][ T7604] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 202.219917][ T7604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.219939][ T7604] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.219950][ T7604] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.219963][ T7604] xfrm_netlink_rcv+0x79/0x90 [ 202.219974][ T7604] netlink_unicast+0x7bb/0x940 [ 202.219990][ T7604] netlink_sendmsg+0x813/0xb40 [ 202.220007][ T7604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.220020][ T7604] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.220035][ T7604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.220046][ T7604] sock_sendmsg_nosec+0x13a/0x180 [ 202.220062][ T7604] ____sys_sendmsg+0x54e/0x850 [ 202.220076][ T7604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.220092][ T7604] ? import_iovec+0x73/0xa0 [ 202.220103][ T7604] ___sys_sendmsg+0x2a5/0x360 [ 202.220114][ T7604] ? __lock_acquire+0x683/0x2cf0 [ 202.220130][ T7604] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.220158][ T7604] ? __fget_files+0x2a/0x420 [ 202.220172][ T7604] ? __fget_files+0x3a2/0x420 [ 202.220189][ T7604] __x64_sys_sendmsg+0x1b1/0x290 [ 202.220202][ T7604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.220221][ T7604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.220232][ T7604] do_syscall_64+0x174/0x580 [ 202.220244][ T7604] ? trace_irq_disable+0x3b/0x140 [ 202.220257][ T7604] ? clear_bhb_loop+0x40/0x90 [ 202.220269][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.220279][ T7604] RIP: 0033:0x7f1483d9e019 [ 202.220289][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.220301][ T7604] RSP: 002b:00007f1484c33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.220318][ T7604] RAX: ffffffffffffffda RBX: 00007f1484025fa0 RCX: 00007f1483d9e019 [ 202.220330][ T7604] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 202.220341][ T7604] RBP: 00007f1484c33090 R08: 0000000000000000 R09: 0000000000000000 [ 202.220350][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.220360][ T7604] R13: 00007f1484026038 R14: 00007f1484025fa0 R15: 00007f148414fa48 [ 202.220388][ T7604] [ 203.701894][ T7621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.571'. [ 203.935529][ T5709] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 204.035855][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 204.085709][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 204.092726][ T5709] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 204.102037][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.112648][ T5709] usb 1-1: config 0 descriptor?? [ 204.125297][ T5709] as10x_usb: device has been detected [ 204.142195][ T5709] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 204.176186][ T5709] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 204.202418][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.219229][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.231648][ T5709] as10x_usb: error during firmware upload part1 [ 204.256605][ T5709] Registered device nBox DVB-T Dongle [ 204.259573][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.286364][ T10] usb 3-1: config 0 descriptor?? [ 204.359679][ T5635] Bluetooth: hci3: unexpected event for opcode 0x200f [ 204.401983][ T7626] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.410206][ T7626] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.416612][ T7626] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.422896][ T7626] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.431535][ T7626] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.457742][ T10] usb 1-1: USB disconnect, device number 29 [ 204.482561][ T7638] fuse: Unknown parameter '0x0000000000000007' [ 204.491741][ T10] Unregistered device nBox DVB-T Dongle [ 204.493557][ T10] as10x_usb: device has been disconnected [ 204.513464][ T5723] usb 3-1: USB disconnect, device number 33 [ 204.965552][ T5709] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 205.122057][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.160077][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.176067][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 205.219233][ T5709] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 205.251766][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.264284][ T5709] usb 3-1: Product: syz [ 205.269335][ T5709] usb 3-1: Manufacturer: syz [ 205.286071][ T5709] usb 3-1: SerialNumber: syz [ 205.293656][ T5709] usb 3-1: config 0 descriptor?? [ 205.303515][ T7628] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.335600][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 205.407872][ T5709] rc_core: IR keymap rc-streamzap not found [ 205.415362][ T5709] Registered IR keymap rc-empty [ 205.434631][ T5709] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 205.448935][ T5709] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 205.465716][ T5723] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 205.498075][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.515733][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.545592][ T5687] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.546986][ T7628] input: syz1 as /devices/virtual/input/input22 [ 205.565667][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.606031][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.625662][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 205.638268][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.652787][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.675757][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.682295][ T5635] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 205.692671][ T5635] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 205.715558][ T5687] usb 5-1: Using ep0 maxpacket: 8 [ 205.725105][ T5687] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.726642][ T10] usb 1-1: config 0 descriptor?? [ 205.738728][ T5687] usb 5-1: config 0 has no interface number 0 [ 205.740402][ T5723] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.745241][ T5687] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.768909][ T5687] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.779788][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.783450][ T5709] usb 3-1: USB disconnect, device number 34 [ 205.793359][ T5687] usb 5-1: config 0 descriptor?? [ 205.821231][ T5687] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 205.824753][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.888833][ T5723] usb 2-1: config 0 descriptor?? [ 205.915819][ T5723] hub 2-1:0.0: USB hub found [ 206.007082][ T5726] usb 5-1: USB disconnect, device number 22 [ 206.013587][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 206.013604][ T30] audit: type=1326 audit(1785751623.780:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x0 [ 206.117464][ T5723] hub 2-1:0.0: 1 port detected [ 206.197756][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 206.455998][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.456037][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.462089][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.462123][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.463898][ T5726] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 206.615580][ T5687] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 206.647194][ T5726] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.655400][ T5726] usb 5-1: config 0 has no interface number 0 [ 206.661739][ T5726] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.672767][ T5726] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.682850][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.693977][ T5726] usb 5-1: config 0 descriptor?? [ 206.707929][ T5726] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 206.732990][ T5723] hub 2-1:0.0: activate --> -90 [ 206.776048][ T5687] usb 3-1: Using ep0 maxpacket: 8 [ 206.784078][ T5687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.795094][ T5687] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.804368][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.815024][ T5687] usb 3-1: config 0 descriptor?? [ 206.934953][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.953388][ T30] audit: type=1326 audit(1785751624.720:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 206.957722][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.013997][ T30] audit: type=1326 audit(1785751624.720:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.043337][ T30] audit: type=1326 audit(1785751624.730:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.064576][ T5687] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 207.068865][ T30] audit: type=1326 audit(1785751624.730:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.104782][ T30] audit: type=1326 audit(1785751624.730:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.105079][ T7666] syzkaller1: entered promiscuous mode [ 207.129706][ T30] audit: type=1326 audit(1785751624.730:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.158750][ T7666] syzkaller1: entered allmulticast mode [ 207.167768][ T30] audit: type=1326 audit(1785751624.770:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.195261][ T30] audit: type=1326 audit(1785751624.770:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.220193][ T30] audit: type=1326 audit(1785751624.770:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 207.268226][ T10] usb 1-1: USB disconnect, device number 30 [ 207.297609][ T5723] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 207.328302][ T6247] usb 2-1: Failed to suspend device, error -71 [ 207.335137][ T5687] usb 2-1: USB disconnect, device number 31 [ 207.821834][ T7674] netlink: 64 bytes leftover after parsing attributes in process `syz.3.587'. [ 207.874714][ T5687] usb 3-1: USB disconnect, device number 35 [ 208.000658][ T7683] fuse: Unknown parameter '0x0000000000000007' [ 208.348260][ T10] usb 5-1: USB disconnect, device number 23 [ 208.640378][ T7693] xt_hashlimit: size too large, truncated to 1048576 [ 209.267530][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 209.366657][ T5709] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 209.468475][ T5723] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 209.530120][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.548576][ T5709] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 209.561778][ T5709] usb 2-1: config 0 has no interface number 0 [ 209.575658][ T5709] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 209.595481][ T5709] usb 2-1: config 0 interface 86 altsetting 4 endpoint 0xC has invalid wMaxPacketSize 0 [ 209.616405][ T5709] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 0 [ 209.626312][ T5723] usb 1-1: Using ep0 maxpacket: 8 [ 209.639369][ T5709] usb 2-1: config 0 interface 86 has no altsetting 0 [ 209.657608][ T5723] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 209.667700][ T5709] usb 2-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 209.677026][ T5723] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.686848][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.695333][ T5709] usb 2-1: Product: syz [ 209.699693][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 209.707463][ T5723] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.718819][ T5709] usb 2-1: Manufacturer: syz [ 209.724620][ T5709] usb 2-1: SerialNumber: syz [ 209.730580][ T5723] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.742733][ T5723] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.758009][ T5709] usb 2-1: config 0 descriptor?? [ 209.781722][ T7702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.790622][ T5723] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.800686][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.869158][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 209.884634][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 209.896568][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.915609][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.938059][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.950278][ T10] usb 4-1: Product: syz [ 209.954824][ T10] usb 4-1: Manufacturer: syz [ 209.961811][ T10] usb 4-1: SerialNumber: syz [ 209.976105][ T10] usb 4-1: config 0 descriptor?? [ 209.988763][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 209.995381][ T7712] fuse: Bad value for 'fd' [ 210.001324][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 210.013655][ T5709] omninet 2-1:0.86: ZyXEL - omni.net usb converter detected [ 210.035899][ T5709] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 210.059441][ T10] usb 4-1: selecting invalid altsetting 0 [ 210.107651][ T5709] usb 2-1: USB disconnect, device number 32 [ 210.178199][ T5709] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 210.211572][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.222244][ T5709] omninet 2-1:0.86: device disconnected [ 210.272130][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.473362][ T10] usb 4-1: USB disconnect, device number 31 [ 210.529761][ T7714] netlink: 64 bytes leftover after parsing attributes in process `syz.0.597'. [ 210.786450][ T7723] fuse: Bad value for 'fd' [ 210.791618][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.005917][ T5687] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 211.169231][ T5687] usb 3-1: Using ep0 maxpacket: 8 [ 211.191029][ T5687] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.209622][ T5687] usb 3-1: config 0 has no interface number 0 [ 211.216281][ T5687] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.237250][ T5687] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.246961][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.282897][ T5687] usb 3-1: config 0 descriptor?? [ 211.342125][ T5687] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 211.506826][ T10] usb 3-1: USB disconnect, device number 36 [ 211.993454][ T7732] kvm: pic: non byte write [ 212.006046][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 212.171591][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.187310][ T10] usb 3-1: config 0 has no interface number 0 [ 212.200195][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 212.212280][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.221545][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.251448][ T10] usb 3-1: config 0 descriptor?? [ 212.280272][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 212.406814][ T5723] usb 1-1: usb_control_msg returned -71 [ 212.412593][ T5723] usbtmc 1-1:16.0: can't read capabilities [ 212.451254][ T5723] usb 1-1: USB disconnect, device number 31 [ 212.668770][ T7737] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 213.215559][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 213.269775][ T7737] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 213.277334][ T7738] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 213.367933][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.386845][ T29] usb 5-1: config 0 has no interface number 0 [ 213.406964][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 213.406981][ T30] audit: type=1326 audit(1785751631.170:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.451219][ T30] audit: type=1326 audit(1785751631.180:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.475658][ T29] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 213.490686][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.499093][ T29] usb 5-1: Product: syz [ 213.504075][ T29] usb 5-1: Manufacturer: syz [ 213.514987][ T29] usb 5-1: SerialNumber: syz [ 213.519796][ T30] audit: type=1326 audit(1785751631.220:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.550338][ T29] usb 5-1: config 0 descriptor?? [ 213.563417][ T30] audit: type=1326 audit(1785751631.220:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.590388][ T30] audit: type=1326 audit(1785751631.220:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.616635][ T30] audit: type=1326 audit(1785751631.220:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.643187][ T30] audit: type=1326 audit(1785751631.260:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.668967][ T30] audit: type=1326 audit(1785751631.260:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.696674][ T5687] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 213.713311][ T30] audit: type=1326 audit(1785751631.270:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.738663][ T30] audit: type=1326 audit(1785751631.270:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23ab9e019 code=0x7ffc0000 [ 213.775852][ T29] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 213.802573][ T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 213.814155][ T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 213.822442][ T29] usb 5-1: media controller created [ 213.842258][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.886555][ T5687] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.896075][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.904618][ T5687] usb 2-1: Product: syz [ 213.909437][ T5687] usb 2-1: Manufacturer: syz [ 213.914113][ T5687] usb 2-1: SerialNumber: syz [ 213.988692][ T5726] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.009133][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 214.175596][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 214.207472][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.217214][ T24] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 214.226355][ T24] usb 4-1: config 9 has no interface number 0 [ 214.232800][ T24] usb 4-1: config 9 interface 57 has no altsetting 0 [ 214.243975][ T24] usb 4-1: string descriptor 0 read error: -22 [ 214.253716][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 214.266133][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.315188][ T10] usb 3-1: USB disconnect, device number 37 [ 214.419211][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.437115][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.456436][ T7752] fuse: Unknown parameter 'Êÿ™Uº£7ˆ·' [ 214.825899][ T24] (null): keene_cmd_main failed (-110) [ 214.839129][ T24] video4linux radio48: keene_cmd_main failed (-32) [ 214.859698][ T24] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 214.942255][ T29] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 215.028120][ T5726] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 215.035748][ T29] usb 5-1: USB disconnect, device number 24 [ 215.041936][ T5726] ath9k_htc: Failed to initialize the device [ 215.149130][ T5726] usb 2-1: ath9k_htc: USB layer deinitialized [ 215.809778][ T7761] kvm: pic: non byte write [ 216.073393][ T7753] syzkaller1: entered promiscuous mode [ 216.079679][ T7753] syzkaller1: entered allmulticast mode [ 216.098798][ T5726] usb 2-1: USB disconnect, device number 33 [ 216.131305][ T24] usb 4-1: USB disconnect, device number 32 [ 216.277210][ T7766] netlink: 56 bytes leftover after parsing attributes in process `syz.2.614'. [ 216.297513][ T7766] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.625790][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 216.696386][ T7786] FAULT_INJECTION: forcing a failure. [ 216.696386][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.711895][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.4.620 Not tainted syzkaller #0 PREEMPT(full) [ 216.711920][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.711930][ T7786] Call Trace: [ 216.711937][ T7786] [ 216.711944][ T7786] dump_stack_lvl+0xe8/0x150 [ 216.711973][ T7786] should_fail_ex+0x40c/0x560 [ 216.711998][ T7786] _copy_from_user+0x2d/0xb0 [ 216.712016][ T7786] snd_rawmidi_kernel_write1+0x3ad/0x640 [ 216.712052][ T7786] snd_rawmidi_write+0x5b6/0xbc0 [ 216.712082][ T7786] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 216.712100][ T7786] ? __pfx_default_wake_function+0x10/0x10 [ 216.712123][ T7786] ? apparmor_file_permission+0x1f4/0x300 [ 216.712157][ T7786] ? bpf_lsm_file_permission+0x9/0x20 [ 216.712175][ T7786] ? security_file_permission+0x75/0x260 [ 216.712199][ T7786] ? rw_verify_area+0x203/0x4c0 [ 216.712218][ T7786] vfs_writev+0x4bb/0x990 [ 216.712239][ T7786] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 216.712261][ T7786] ? __pfx_vfs_writev+0x10/0x10 [ 216.712278][ T7786] ? vfs_write+0x9ce/0xba0 [ 216.712303][ T7786] ? do_sys_openat2+0x14e/0x200 [ 216.712321][ T7786] ? kmem_cache_free+0x182/0x650 [ 216.712356][ T7786] do_writev+0x154/0x2e0 [ 216.712377][ T7786] ? __pfx_do_writev+0x10/0x10 [ 216.712404][ T7786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.712421][ T7786] do_syscall_64+0x174/0x580 [ 216.712441][ T7786] ? trace_irq_disable+0x3b/0x140 [ 216.712461][ T7786] ? clear_bhb_loop+0x40/0x90 [ 216.712481][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.712497][ T7786] RIP: 0033:0x7f1483d9e019 [ 216.712513][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.712536][ T7786] RSP: 002b:00007f1484c33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 216.712554][ T7786] RAX: ffffffffffffffda RBX: 00007f1484025fa0 RCX: 00007f1483d9e019 [ 216.712566][ T7786] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 216.712577][ T7786] RBP: 00007f1484c33090 R08: 0000000000000000 R09: 0000000000000000 [ 216.712587][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.712597][ T7786] R13: 00007f1484026038 R14: 00007f1484025fa0 R15: 00007f148414fa48 [ 216.712623][ T7786] [ 216.942054][ T7789] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.015512][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 217.023157][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 217.032839][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.042628][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.052777][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.062870][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.076135][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.085178][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.156568][ T7789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 217.656305][ T7803] netlink: 64 bytes leftover after parsing attributes in process `syz.0.616'. [ 217.765554][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 217.873120][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 217.888000][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 217.915554][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 217.922599][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.931365][ T24] usb 3-1: config 0 has no interface number 0 [ 217.937738][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.950045][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.959444][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.965588][ T5709] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 217.987098][ T24] usb 3-1: config 0 descriptor?? [ 218.026573][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 218.063374][ T7815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'. [ 218.139536][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.153015][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 218.164693][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 218.176198][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 218.186006][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 218.201134][ T5709] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 218.210303][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 218.218416][ T24] usb 3-1: USB disconnect, device number 38 [ 218.224975][ T5709] usb 4-1: Product: syz [ 218.229296][ T5709] usb 4-1: Manufacturer: syz [ 218.233927][ T5709] usb 4-1: SerialNumber: syz [ 218.248643][ T5709] usb 4-1: config 0 descriptor?? [ 218.462107][ T5709] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 218.469536][ T5709] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 218.671157][ T5709] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 218.685679][ T24] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 218.688284][ T5709] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 218.705759][ T5709] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 218.857191][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.867040][ T24] usb 3-1: config 0 has no interface number 0 [ 218.873299][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 218.873788][ T5709] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 218.884776][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.903223][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.914457][ T24] usb 3-1: config 0 descriptor?? [ 218.915587][ T5723] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 218.932313][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 219.090035][ T5723] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.100127][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.114284][ T5723] usb 5-1: Product: syz [ 219.128280][ T5723] usb 5-1: Manufacturer: syz [ 219.138404][ T5723] usb 5-1: SerialNumber: syz [ 219.190986][ T5695] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.512772][ T10] usb 1-1: usb_control_msg returned -71 [ 219.532004][ T10] usbtmc 1-1:16.0: can't read capabilities [ 219.577937][ T10] usb 1-1: USB disconnect, device number 32 [ 219.611688][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.621037][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 219.621053][ T30] audit: type=1326 audit(1785751637.370:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.653441][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.665376][ T7820] fuse: Unknown parameter 'Êÿ™Uº£7ˆ·' [ 219.680634][ T30] audit: type=1326 audit(1785751637.390:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.715671][ T24] usb 5-1: USB disconnect, device number 25 [ 219.729588][ T30] audit: type=1326 audit(1785751637.390:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.767186][ T30] audit: type=1326 audit(1785751637.390:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.798533][ T30] audit: type=1326 audit(1785751637.390:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.816511][ T7825] syzkaller1: entered promiscuous mode [ 219.841190][ T30] audit: type=1326 audit(1785751637.390:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.865973][ T30] audit: type=1326 audit(1785751637.480:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.866680][ T7825] syzkaller1: entered allmulticast mode [ 219.894037][ T30] audit: type=1326 audit(1785751637.480:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.928809][ T5709] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 219.956747][ T5709] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 219.961722][ T30] audit: type=1326 audit(1785751637.510:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 219.984627][ T5709] usb 4-1: USB disconnect, device number 33 [ 219.993663][ T30] audit: type=1326 audit(1785751637.520:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.0.633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5687d9e019 code=0x7ffc0000 [ 220.200599][ T7830] syzkaller1: entered promiscuous mode [ 220.213912][ T7830] syzkaller1: entered allmulticast mode [ 220.251320][ T7833] syz.0.635 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 220.295621][ T5695] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 220.306851][ T5695] ath9k_htc: Failed to initialize the device [ 220.320509][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 220.445036][ T5723] usb 3-1: USB disconnect, device number 39 [ 220.465760][ T5709] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 220.544579][ T7843] fuse: Unknown parameter '0xffffffffffffffff' [ 220.625599][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 220.636249][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.653037][ T5709] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 220.664156][ T5709] usb 2-1: config 9 has no interface number 0 [ 220.675680][ T5709] usb 2-1: config 9 interface 57 has no altsetting 0 [ 220.701168][ T5709] usb 2-1: string descriptor 0 read error: -22 [ 220.719232][ T5709] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 220.734944][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.974598][ T7852] can: request_module (can-proto-3) failed. [ 221.015998][ T5709] (null): keene_cmd_main failed (-71) [ 221.066005][ T5709] video4linux radio48: keene_cmd_main failed (-71) [ 221.078109][ T5709] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 221.108608][ T5709] usb 2-1: USB disconnect, device number 34 [ 221.255962][ T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 221.377803][ T7862] syzkaller1: entered promiscuous mode [ 221.403813][ T7862] syzkaller1: entered allmulticast mode [ 221.446086][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 221.461897][ T29] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 221.482416][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 221.505619][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 221.517179][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 221.550312][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 221.565714][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.573742][ T29] usb 3-1: Product: syz [ 221.577994][ T29] usb 3-1: Manufacturer: syz [ 221.582628][ T29] usb 3-1: SerialNumber: syz [ 221.601919][ T29] usb 3-1: config 0 descriptor?? [ 221.706812][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 221.715991][ T5695] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 221.845391][ T29] appledisplay: Apple Cinema Display connected [ 221.880238][ T5695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 221.911136][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.940276][ T5695] usb 1-1: Product: syz [ 221.960033][ T5695] usb 1-1: Manufacturer: syz [ 221.979304][ T5695] usb 1-1: SerialNumber: syz [ 221.996391][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 222.026425][ T5709] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 222.062580][ T5723] usb 3-1: USB disconnect, device number 40 [ 222.062719][ C1] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 222.093303][ T5723] appledisplay: Apple Cinema Display disconnected [ 222.267873][ T7883] netlink: zone id is out of range [ 222.284640][ T7883] netlink: zone id is out of range [ 222.298219][ T7877] xt_hashlimit: size too large, truncated to 1048576 [ 222.305347][ T7883] netlink: zone id is out of range [ 222.316101][ T7883] netlink: zone id is out of range [ 222.334418][ T7883] netlink: zone id is out of range [ 222.355010][ T7883] netlink: zone id is out of range [ 222.374694][ T7883] netlink: zone id is out of range [ 222.386374][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 222.394304][ T7883] netlink: zone id is out of range [ 222.423189][ T7883] netlink: zone id is out of range [ 222.458988][ T7883] netlink: zone id is out of range [ 222.462004][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.482201][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.497837][ T7865] fuse: Unknown parameter 'Êÿ™Uº£7ˆ·' [ 222.622297][ T5695] usb 1-1: USB disconnect, device number 33 [ 223.015513][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 223.095502][ T5709] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 223.106941][ T5709] ath9k_htc: Failed to initialize the device [ 223.118655][ T5695] usb 1-1: ath9k_htc: USB layer deinitialized [ 223.195705][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 223.196742][ T7895] FAULT_INJECTION: forcing a failure. [ 223.196742][ T7895] name failslab, interval 1, probability 0, space 0, times 0 [ 223.204279][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.224654][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.234461][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.0.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.234488][ T7895] Tainted: [L]=SOFTLOCKUP [ 223.234494][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.234503][ T7895] Call Trace: [ 223.234510][ T7895] [ 223.234518][ T7895] dump_stack_lvl+0xe8/0x150 [ 223.234547][ T7895] should_fail_ex+0x40c/0x560 [ 223.234571][ T7895] should_failslab+0xa8/0x100 [ 223.234597][ T7895] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 223.234618][ T7895] ? skb_clone+0x212/0x3a0 [ 223.234636][ T7895] ? skb_clone+0x212/0x3a0 [ 223.234659][ T7895] skb_clone+0x212/0x3a0 [ 223.234677][ T7895] ? nfnetlink_rcv+0x4b0/0x28c0 [ 223.234698][ T7895] nfnetlink_rcv+0x4de/0x28c0 [ 223.234719][ T7895] ? __dev_queue_xmit+0x29b/0x3820 [ 223.234741][ T7895] ? __local_bh_enable_ip+0xd0/0x130 [ 223.234760][ T7895] ? lockdep_hardirqs_on+0x7a/0x110 [ 223.234779][ T7895] ? __dev_queue_xmit+0x29b/0x3820 [ 223.234797][ T7895] ? __local_bh_enable_ip+0xd0/0x130 [ 223.234813][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.234813][ T7895] ? __dev_queue_xmit+0x29b/0x3820 [ 223.234832][ T7895] ? __dev_queue_xmit+0x1edc/0x3820 [ 223.234850][ T7895] ? do_syscall_64+0x174/0x580 [ 223.234865][ T7895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.234890][ T7895] ? __dev_queue_xmit+0x29b/0x3820 [ 223.234910][ T7895] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 223.234942][ T7895] ? ref_tracker_free+0x689/0x830 [ 223.234965][ T7895] ? __pfx_ref_tracker_free+0x10/0x10 [ 223.234984][ T7895] ? __asan_memcpy+0x40/0x70 [ 223.235001][ T7895] ? __skb_clone+0x5c/0x6c0 [ 223.235021][ T7895] ? __skb_clone+0x449/0x6c0 [ 223.235044][ T7895] ? skb_clone+0x246/0x3a0 [ 223.235065][ T7895] ? __netlink_deliver_tap+0x811/0x860 [ 223.235084][ T7895] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.235108][ T7895] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.235127][ T7895] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.235150][ T7895] netlink_unicast+0x7bb/0x940 [ 223.235180][ T7895] netlink_sendmsg+0x813/0xb40 [ 223.235208][ T7895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.235231][ T7895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 223.235255][ T7895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.235274][ T7895] sock_sendmsg_nosec+0x13a/0x180 [ 223.235299][ T7895] ____sys_sendmsg+0x54e/0x850 [ 223.235324][ T7895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.235351][ T7895] ? import_iovec+0x73/0xa0 [ 223.235370][ T7895] ___sys_sendmsg+0x2a5/0x360 [ 223.235397][ T7895] ? __lock_acquire+0x683/0x2cf0 [ 223.235421][ T7895] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.235469][ T7895] ? __fget_files+0x2a/0x420 [ 223.235489][ T7895] ? __fget_files+0x3a2/0x420 [ 223.235516][ T7895] __x64_sys_sendmsg+0x1b1/0x290 [ 223.235538][ T7895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.235572][ T7895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.235590][ T7895] do_syscall_64+0x174/0x580 [ 223.235608][ T7895] ? trace_irq_disable+0x3b/0x140 [ 223.235628][ T7895] ? clear_bhb_loop+0x40/0x90 [ 223.235648][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.235663][ T7895] RIP: 0033:0x7f5687d9e019 [ 223.235679][ T7895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.235693][ T7895] RSP: 002b:00007f5688d44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.235711][ T7895] RAX: ffffffffffffffda RBX: 00007f5688025fa0 RCX: 00007f5687d9e019 [ 223.235723][ T7895] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 223.235733][ T7895] RBP: 00007f5688d44090 R08: 0000000000000000 R09: 0000000000000000 [ 223.235744][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.235753][ T7895] R13: 00007f5688026038 R14: 00007f5688025fa0 R15: 00007f568814fa48 [ 223.235783][ T7895] [ 223.469035][ T7898] syzkaller1: entered promiscuous mode [ 223.621455][ T7898] syzkaller1: entered allmulticast mode [ 223.624350][ T10] usb 3-1: config 0 descriptor?? [ 223.861179][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.969683][ T7904] FAULT_INJECTION: forcing a failure. [ 223.969683][ T7904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.003201][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.4.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.003229][ T7904] Tainted: [L]=SOFTLOCKUP [ 224.003235][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.003244][ T7904] Call Trace: [ 224.003250][ T7904] [ 224.003257][ T7904] dump_stack_lvl+0xe8/0x150 [ 224.003284][ T7904] should_fail_ex+0x40c/0x560 [ 224.003307][ T7904] _copy_from_iter+0x1d3/0x1660 [ 224.003326][ T7904] ? kmem_cache_alloc_node_noprof+0x181/0x610 [ 224.003347][ T7904] ? rcu_is_watching+0x15/0xb0 [ 224.003363][ T7904] ? trace_kmem_cache_alloc+0x29/0xe0 [ 224.003384][ T7904] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 224.003402][ T7904] ? __pfx__copy_from_iter+0x10/0x10 [ 224.003423][ T7904] ? __alloc_skb+0x276/0x7a0 [ 224.003439][ T7904] ? __alloc_skb+0x276/0x7a0 [ 224.003458][ T7904] ? netlink_sendmsg+0x650/0xb40 [ 224.003476][ T7904] ? skb_put+0x112/0x210 [ 224.003495][ T7904] netlink_sendmsg+0x6c0/0xb40 [ 224.003521][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.003543][ T7904] ? aa_sock_msg_perm+0xf1/0x1b0 [ 224.003566][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.003583][ T7904] sock_sendmsg_nosec+0x13a/0x180 [ 224.003609][ T7904] ____sys_sendmsg+0x54e/0x850 [ 224.003634][ T7904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.003661][ T7904] ? import_iovec+0x73/0xa0 [ 224.003682][ T7904] ___sys_sendmsg+0x2a5/0x360 [ 224.003700][ T7904] ? __lock_acquire+0x683/0x2cf0 [ 224.003722][ T7904] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.003767][ T7904] ? __fget_files+0x2a/0x420 [ 224.003788][ T7904] ? __fget_files+0x3a2/0x420 [ 224.003813][ T7904] __x64_sys_sendmsg+0x1b1/0x290 [ 224.003826][ T7904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.003846][ T7904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.003857][ T7904] do_syscall_64+0x174/0x580 [ 224.003870][ T7904] ? trace_irq_disable+0x3b/0x140 [ 224.003882][ T7904] ? clear_bhb_loop+0x40/0x90 [ 224.003895][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.003904][ T7904] RIP: 0033:0x7f1483d9e019 [ 224.003915][ T7904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.003924][ T7904] RSP: 002b:00007f1484c33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.003936][ T7904] RAX: ffffffffffffffda RBX: 00007f1484025fa0 RCX: 00007f1483d9e019 [ 224.003944][ T7904] RDX: 0000000004000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 224.003950][ T7904] RBP: 00007f1484c33090 R08: 0000000000000000 R09: 0000000000000000 [ 224.003957][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.003963][ T7904] R13: 00007f1484026038 R14: 00007f1484025fa0 R15: 00007f148414fa48 [ 224.003978][ T7904] [ 224.318032][ T7903] fuse: Unknown parameter '0xffffffffffffffff' [ 224.525523][ T5709] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 224.675550][ T5709] usb 1-1: device descriptor read/64, error -71 [ 224.925767][ T5709] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 224.989570][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 224.989604][ T30] audit: type=1326 audit(1785751642.760:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.032174][ T30] audit: type=1326 audit(1785751642.790:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.076774][ T5709] usb 1-1: device descriptor read/64, error -71 [ 225.097315][ T30] audit: type=1326 audit(1785751642.800:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.182332][ T7915] syzkaller1: entered promiscuous mode [ 225.186742][ T5709] usb usb1-port1: attempt power cycle [ 225.188329][ T7915] syzkaller1: entered allmulticast mode [ 225.215127][ T30] audit: type=1326 audit(1785751642.800:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.289382][ T30] audit: type=1326 audit(1785751642.830:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.349185][ T5695] usb 3-1: USB disconnect, device number 41 [ 225.368403][ T30] audit: type=1326 audit(1785751642.830:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.396941][ T30] audit: type=1326 audit(1785751642.840:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.428906][ T30] audit: type=1326 audit(1785751642.850:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.453801][ T30] audit: type=1326 audit(1785751642.860:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.479545][ T30] audit: type=1326 audit(1785751642.860:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.1.664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73979e019 code=0x7ffc0000 [ 225.545686][ T29] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 225.565514][ T5709] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 225.588221][ T5709] usb 1-1: device descriptor read/8, error -71 [ 225.726085][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 225.749946][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.766685][ T29] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 225.783368][ T29] usb 2-1: config 9 has no interface number 0 [ 225.805549][ T29] usb 2-1: config 9 interface 57 has no altsetting 0 [ 225.829463][ T29] usb 2-1: string descriptor 0 read error: -22 [ 225.839776][ T5709] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 225.850452][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 225.880923][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.901306][ T5709] usb 1-1: device descriptor read/8, error -71 [ 226.026120][ T5709] usb usb1-port1: unable to enumerate USB device [ 226.128849][ T29] (null): keene_cmd_main failed (-71) [ 226.160036][ T29] video4linux radio48: keene_cmd_main failed (-71) [ 226.180906][ T29] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 226.195658][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 226.206576][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 226.206847][ T29] usb 2-1: USB disconnect, device number 35 [ 226.390402][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.400155][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.403228][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.410732][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.425494][ T24] usb 3-1: Product: syz [ 226.426761][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.430265][ T24] usb 3-1: Manufacturer: syz [ 226.443549][ T10] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 226.447891][ T24] usb 3-1: SerialNumber: syz [ 226.454120][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.485984][ T10] usb 5-1: Product: syz [ 226.490580][ T10] usb 5-1: Manufacturer: syz [ 226.493202][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 226.495180][ T10] usb 5-1: SerialNumber: syz [ 226.550144][ T10] usb 5-1: config 0 descriptor?? [ 226.779247][ T5695] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 226.789361][ T10] usb 5-1: USB disconnect, device number 26 [ 226.903688][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'. [ 226.926581][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.942867][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.956243][ T7926] fuse: Unknown parameter 'Êÿ™Uº£7ˆ·' [ 226.962085][ T5695] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 226.972432][ T5695] usb 4-1: config 0 has no interface number 0 [ 226.979209][ T5695] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 226.990829][ T5695] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 226.999616][ T5627] usb 3-1: USB disconnect, device number 42 [ 227.004958][ T5695] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 227.048207][ T5695] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 227.074715][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 227.089073][ T5695] usb 4-1: Product: syz [ 227.093349][ T5695] usb 4-1: SerialNumber: syz [ 227.110648][ T5695] usb 4-1: config 0 descriptor?? [ 227.127686][ T5695] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 227.145777][ T5726] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 227.295575][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 227.305537][ T5726] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 227.315056][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.327926][ T5726] usb 2-1: Product: syz [ 227.341664][ T5726] usb 2-1: Manufacturer: syz [ 227.347423][ T5726] usb 2-1: SerialNumber: syz [ 227.375111][ T5726] usb 2-1: config 0 descriptor?? [ 227.465527][ T5695] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 227.578821][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 227.586145][ T29] ath9k_htc: Failed to initialize the device [ 227.593497][ T5627] usb 3-1: ath9k_htc: USB layer deinitialized [ 227.625555][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 227.639780][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.662156][ T5695] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.681023][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.698894][ T5695] usb 1-1: Product: syz [ 227.706659][ T5695] usb 1-1: Manufacturer: syz [ 227.711343][ T5695] usb 1-1: SerialNumber: syz [ 227.720994][ T5695] usb 1-1: config 0 descriptor?? [ 227.736634][ T5695] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.746128][ T5695] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 227.800491][ T5726] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 227.820063][ T5726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.835200][ T5726] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 227.851314][ T5726] usb 2-1: media controller created [ 227.890306][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.920080][ T7949] netlink: 64 bytes leftover after parsing attributes in process `syz.2.676'. [ 228.340759][ T5695] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 228.445850][ T5726] zl10353_read_register: readreg error (reg=127, ret==0) [ 228.445873][ T7936] dtv5100: wlen = 0, aborting. [ 228.453128][ T5726] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 228.467908][ T5726] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 228.481111][ T5726] usb 2-1: USB disconnect, device number 36 [ 228.514929][ T5726] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 229.419371][ T5726] usb 4-1: USB disconnect, device number 34 [ 229.559736][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 229.827530][ T5695] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 229.867665][ T5695] em28xx 1-1:0.0: board has no eeprom [ 229.871161][ T7940] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 229.955769][ T5627] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 230.029811][ T5695] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 230.048354][ T5695] em28xx 1-1:0.0: dvb set to bulk mode. [ 230.064643][ T5709] em28xx 1-1:0.0: Binding DVB extension [ 230.088883][ T5695] usb 1-1: USB disconnect, device number 38 [ 230.097065][ T5695] em28xx 1-1:0.0: Disconnecting em28xx [ 230.159043][ T5627] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.196291][ T5627] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.199894][ T5709] em28xx 1-1:0.0: Registering input extension [ 230.216952][ T5627] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.236723][ T5695] em28xx 1-1:0.0: Closing input extension [ 230.240481][ T5726] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 230.265508][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.283377][ T5695] em28xx 1-1:0.0: Freeing device [ 230.295018][ T5631] udevd[5631]: setting mode of /dev/bus/usb/001/038 to 020664 failed: No such file or directory [ 230.329751][ T7965] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 230.340273][ T5631] udevd[5631]: setting owner of /dev/bus/usb/001/038 to uid=0, gid=0 failed: No such file or directory [ 230.360621][ T5627] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.428348][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.454771][ T5726] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 230.473355][ T5726] usb 2-1: config 0 has no interface number 0 [ 230.486589][ T5726] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 230.504243][ T5726] usb 2-1: config 0 interface 86 altsetting 4 endpoint 0xC has invalid wMaxPacketSize 0 [ 230.526348][ T5726] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 0 [ 230.543754][ T5726] usb 2-1: config 0 interface 86 has no altsetting 0 [ 230.576971][ T5726] usb 2-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 230.605523][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.632493][ T5726] usb 2-1: Product: syz [ 230.662727][ T5726] usb 2-1: Manufacturer: syz [ 230.705870][ T5726] usb 2-1: SerialNumber: syz [ 230.740894][ T5726] usb 2-1: config 0 descriptor?? [ 230.750535][ T7967] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 230.966683][ T5726] omninet 2-1:0.86: ZyXEL - omni.net usb converter detected [ 231.006490][ T5726] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 231.113724][ T5726] usb 2-1: USB disconnect, device number 37 [ 231.197503][ T5726] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 231.228913][ T5726] omninet 2-1:0.86: device disconnected [ 231.237349][ T5695] usb 4-1: USB disconnect, device number 35 [ 231.255929][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.445530][ T5709] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 231.601843][ T7987] fuse: Unknown parameter '0x0000000000000007' [ 231.622504][ T5709] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.641102][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.656655][ T5709] usb 3-1: Product: syz [ 231.671156][ T5709] usb 3-1: Manufacturer: syz [ 231.687861][ T5709] usb 3-1: SerialNumber: syz [ 231.736735][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.186704][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.210564][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.259357][ T5726] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 232.276878][ T7980] fuse: Unknown parameter 'Êÿ™Uº£7ˆ·' [ 232.354732][ T5695] usb 3-1: USB disconnect, device number 43 [ 232.475551][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 232.511785][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.535351][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.559968][ T5726] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 232.580638][ T5726] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 232.600166][ T5726] usb 4-1: Manufacturer: syz [ 232.630902][ T5726] usb 4-1: config 0 descriptor?? [ 232.856116][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 232.888892][ T10] ath9k_htc: Failed to initialize the device [ 232.939961][ T5695] usb 3-1: ath9k_htc: USB layer deinitialized [ 233.086088][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 233.103055][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.118446][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.196301][ T8002] can: request_module (can-proto-3) failed. [ 233.275797][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 233.288500][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 233.301369][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.315938][ T24] usb 2-1: Product: syz [ 233.325579][ T24] usb 2-1: Manufacturer: syz [ 233.325623][ T5723] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 233.340180][ T24] usb 2-1: SerialNumber: syz [ 233.353624][ T24] usb 2-1: config 0 descriptor?? [ 233.488812][ T5723] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.497033][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 233.505759][ T5723] usb 1-1: config 0 has no interface number 0 [ 233.517438][ T5723] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 233.529576][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.541730][ T5723] usb 1-1: Product: syz [ 233.548403][ T5723] usb 1-1: Manufacturer: syz [ 233.555627][ T5723] usb 1-1: SerialNumber: syz [ 233.564288][ T5723] usb 1-1: config 0 descriptor?? [ 233.665628][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 233.672733][ T10] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 233.692663][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 233.716724][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 233.739360][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 233.757513][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 233.767229][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 233.782212][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.783467][ T5723] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 233.800311][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 233.805123][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.824895][ T24] usb 2-1: media controller created [ 233.830399][ T10] usb 3-1: Product: syz [ 233.830420][ T10] usb 3-1: Manufacturer: syz [ 233.830443][ T10] usb 3-1: SerialNumber: syz [ 233.855548][ T10] usb 3-1: config 0 descriptor?? [ 233.863228][ T5723] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 233.874740][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.906040][ T5723] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 233.914380][ T5723] usb 1-1: media controller created [ 233.940188][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.085555][ T5627] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 234.105834][ T10] appledisplay: Apple Cinema Display connected [ 234.245570][ T5627] usb 5-1: Using ep0 maxpacket: 16 [ 234.253370][ T5627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.270024][ T5627] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.279489][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.288559][ T5627] usb 5-1: Product: syz [ 234.292877][ T5627] usb 5-1: Manufacturer: syz [ 234.297595][ T5627] usb 5-1: SerialNumber: syz [ 234.305895][ T5627] usb 5-1: config 0 descriptor?? [ 234.317461][ T5627] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 234.329892][ T5627] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 234.356725][ T10] usb 3-1: USB disconnect, device number 44 [ 234.362713][ C0] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 234.377990][ T10] appledisplay: Apple Cinema Display disconnected [ 234.436101][ T7995] dtv5100: wlen = 0, aborting. [ 234.440988][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 234.448602][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 234.460778][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 234.476732][ T7999] ------------[ cut here ]------------ [ 234.482281][ T7999] usb 2-1: BOGUS control dir, pipe 80002680 doesn't match bRequestType c0 [ 234.489278][ T24] usb 2-1: USB disconnect, device number 38 [ 234.491277][ T7999] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.0.691/7999 [ 234.507518][ T7999] Modules linked in: [ 234.511801][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.0.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.522674][ T7999] Tainted: [L]=SOFTLOCKUP [ 234.527075][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.538104][ T7999] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 234.544367][ T7999] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 234.564083][ T7999] RSP: 0018:ffffc90004d97718 EFLAGS: 00010246 [ 234.570241][ T7999] RAX: 0000000000000000 RBX: ffff888035ec7b00 RCX: 0000000080002680 [ 234.578296][ T7999] RDX: ffff8880345c25e0 RSI: ffffffff8ca32060 RDI: ffffffff90658e10 [ 234.586369][ T7999] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 234.594381][ T7999] R10: ffffc90004d97800 R11: fffff520009b2f0c R12: 1ffff11004cbadbc [ 234.602412][ T7999] R13: ffff8880265d6de0 R14: ffff8880345c25e0 R15: 0000000080002680 [ 234.610441][ T7999] FS: 00007f5688d446c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 234.619442][ T7999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.626076][ T7999] CR2: 0000001b34802ff8 CR3: 0000000077958000 CR4: 00000000003526f0 [ 234.634935][ T7999] Call Trace: [ 234.638799][ T7999] [ 234.641802][ T7999] usb_start_wait_urb+0x13f/0x5b0 [ 234.646920][ T7999] ? trace_kmalloc+0x2a/0xf0 [ 234.651557][ T7999] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 234.657183][ T7999] usb_control_msg+0x234/0x3e0 [ 234.661994][ T7999] dtv5100_i2c_msg+0x231/0x2f0 [ 234.666842][ T7999] dtv5100_i2c_xfer+0x1a5/0x610 [ 234.671741][ T7999] __i2c_transfer+0x7be/0x1fe0 [ 234.676586][ T7999] ? rt_mutex_lock_nested+0x167/0x1c0 [ 234.681999][ T7999] ? i2c_transfer+0xc8/0x2d0 [ 234.686652][ T7999] i2c_transfer+0x1cc/0x2d0 [ 234.691190][ T7999] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 234.696897][ T7999] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 234.703101][ T7999] ? _copy_from_user+0x94/0xb0 [ 234.707932][ T7999] i2cdev_write+0x113/0x1e0 [ 234.712482][ T7999] vfs_writev+0x4bb/0x990 [ 234.716870][ T7999] ? __pfx_i2cdev_write+0x10/0x10 [ 234.721941][ T7999] ? __pfx_vfs_writev+0x10/0x10 [ 234.726865][ T7999] ? __fget_files+0x2a/0x420 [ 234.731489][ T7999] ? __fget_files+0x3a2/0x420 [ 234.737090][ T7999] ? __fget_files+0x2a/0x420 [ 234.741708][ T7999] do_writev+0x154/0x2e0 [ 234.746521][ T7999] ? __pfx_do_writev+0x10/0x10 [ 234.751326][ T7999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.757477][ T7999] do_syscall_64+0x174/0x580 [ 234.762108][ T7999] ? trace_irq_disable+0x3b/0x140 [ 234.767212][ T7999] ? clear_bhb_loop+0x40/0x90 [ 234.771926][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.777953][ T7999] RIP: 0033:0x7f5687d9e019 [ 234.782414][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.802078][ T7999] RSP: 002b:00007f5688d44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 234.810553][ T7999] RAX: ffffffffffffffda RBX: 00007f5688025fa0 RCX: 00007f5687d9e019 [ 234.818596][ T7999] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000005 [ 234.826639][ T7999] RBP: 00007f5687e3500c R08: 0000000000000000 R09: 0000000000000000 [ 234.834648][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.843473][ T7999] R13: 00007f5688026038 R14: 00007f5688025fa0 R15: 00007f568814fa48 [ 234.852073][ T7999] [ 234.855135][ T7999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.862429][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.0.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.873192][ T7999] Tainted: [L]=SOFTLOCKUP [ 234.877519][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.887584][ T7999] Call Trace: [ 234.890857][ T7999] [ 234.893781][ T7999] vpanic+0x56c/0xa60 [ 234.897767][ T7999] ? __pfx__printk+0x10/0x10 [ 234.902347][ T7999] ? __pfx_vpanic+0x10/0x10 [ 234.906841][ T7999] ? is_bpf_text_address+0x292/0x2b0 [ 234.912119][ T7999] ? is_bpf_text_address+0x26/0x2b0 [ 234.917315][ T7999] panic+0xc5/0xd0 [ 234.921030][ T7999] ? __pfx_panic+0x10/0x10 [ 234.925452][ T7999] __warn+0x315/0x4c0 [ 234.929421][ T7999] ? usb_submit_urb+0x1057/0x18b0 [ 234.934440][ T7999] ? usb_submit_urb+0x1057/0x18b0 [ 234.939451][ T7999] __report_bug+0x276/0x570 [ 234.943949][ T7999] ? usb_submit_urb+0x1057/0x18b0 [ 234.948970][ T7999] ? __pfx___report_bug+0x10/0x10 [ 234.953987][ T7999] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 234.959799][ T7999] ? __kmalloc_noprof+0x1ad/0x720 [ 234.964817][ T7999] ? kasan_save_track+0x4f/0x80 [ 234.969658][ T7999] report_bug_entry+0x19a/0x290 [ 234.974496][ T7999] ? usb_submit_urb+0x1100/0x18b0 [ 234.979511][ T7999] ? usb_submit_urb+0x1105/0x18b0 [ 234.984529][ T7999] handle_bug+0xce/0x200 [ 234.988763][ T7999] exc_invalid_op+0x1a/0x50 [ 234.993257][ T7999] asm_exc_invalid_op+0x1a/0x20 [ 234.998097][ T7999] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 235.003716][ T7999] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 235.023313][ T7999] RSP: 0018:ffffc90004d97718 EFLAGS: 00010246 [ 235.029374][ T7999] RAX: 0000000000000000 RBX: ffff888035ec7b00 RCX: 0000000080002680 [ 235.037328][ T7999] RDX: ffff8880345c25e0 RSI: ffffffff8ca32060 RDI: ffffffff90658e10 [ 235.045283][ T7999] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 235.053244][ T7999] R10: ffffc90004d97800 R11: fffff520009b2f0c R12: 1ffff11004cbadbc [ 235.061212][ T7999] R13: ffff8880265d6de0 R14: ffff8880345c25e0 R15: 0000000080002680 [ 235.069189][ T7999] ? usb_submit_urb+0x1091/0x18b0 [ 235.074213][ T7999] usb_start_wait_urb+0x13f/0x5b0 [ 235.079242][ T7999] ? trace_kmalloc+0x2a/0xf0 [ 235.083822][ T7999] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 235.089372][ T7999] usb_control_msg+0x234/0x3e0 [ 235.094133][ T7999] dtv5100_i2c_msg+0x231/0x2f0 [ 235.098899][ T7999] dtv5100_i2c_xfer+0x1a5/0x610 [ 235.103755][ T7999] __i2c_transfer+0x7be/0x1fe0 [ 235.108525][ T7999] ? rt_mutex_lock_nested+0x167/0x1c0 [ 235.113888][ T7999] ? i2c_transfer+0xc8/0x2d0 [ 235.118467][ T7999] i2c_transfer+0x1cc/0x2d0 [ 235.122964][ T7999] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 235.128590][ T7999] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 235.134742][ T7999] ? _copy_from_user+0x94/0xb0 [ 235.139493][ T7999] i2cdev_write+0x113/0x1e0 [ 235.143988][ T7999] vfs_writev+0x4bb/0x990 [ 235.148314][ T7999] ? __pfx_i2cdev_write+0x10/0x10 [ 235.153329][ T7999] ? __pfx_vfs_writev+0x10/0x10 [ 235.158176][ T7999] ? __fget_files+0x2a/0x420 [ 235.162758][ T7999] ? __fget_files+0x3a2/0x420 [ 235.167424][ T7999] ? __fget_files+0x2a/0x420 [ 235.172013][ T7999] do_writev+0x154/0x2e0 [ 235.176253][ T7999] ? __pfx_do_writev+0x10/0x10 [ 235.181044][ T7999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.187099][ T7999] do_syscall_64+0x174/0x580 [ 235.191679][ T7999] ? trace_irq_disable+0x3b/0x140 [ 235.196693][ T7999] ? clear_bhb_loop+0x40/0x90 [ 235.201360][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.207240][ T7999] RIP: 0033:0x7f5687d9e019 [ 235.211824][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.231414][ T7999] RSP: 002b:00007f5688d44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 235.239819][ T7999] RAX: ffffffffffffffda RBX: 00007f5688025fa0 RCX: 00007f5687d9e019 [ 235.247779][ T7999] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000005 [ 235.255739][ T7999] RBP: 00007f5687e3500c R08: 0000000000000000 R09: 0000000000000000 [ 235.263712][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.271675][ T7999] R13: 00007f5688026038 R14: 00007f5688025fa0 R15: 00007f568814fa48 [ 235.279644][ T7999] [ 235.282928][ T7999] Kernel Offset: disabled [ 235.287251][ T7999] Rebooting in 86400 seconds..