last executing test programs: 6.729443251s ago: executing program 1 (id=4638): r0 = socket$kcm(0x11, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex_waitv(&(0x7f0000001800)=[{0x0, &(0x7f00000002c0)=0x7f, 0x2}, {0x1, &(0x7f0000000300)=0x3, 0x2}, {0x9, &(0x7f0000000340)=0x101, 0x2}, {0xffffffff80000001, &(0x7f0000000380)=0x6, 0x2}, {0x7, 0x0, 0x82}, {0x0, &(0x7f0000000440)=0x10, 0x82}, {0x7, &(0x7f0000000480), 0x3}, {0x5, 0x0, 0x1}, {0x8000000000000000, &(0x7f0000000500)=0x8, 0x2}, {0x3, &(0x7f0000000540)=0x7fff, 0x82}, {0x5, &(0x7f0000000580)=0x1, 0x2}, {0x6, &(0x7f00000005c0)=0x3, 0x2}, {0x7, &(0x7f0000000640)=0x4, 0x2}, {0x5, &(0x7f0000000680)=0x9, 0x82}, {0xffff, &(0x7f0000000700)=0x8, 0x2}, {0xffffffffffffff7f, &(0x7f00000007c0)=0x4}, {0x2, &(0x7f0000000800)=0x2, 0x2}, {0x4, &(0x7f0000000840)=0x9, 0x2}, {0xfffffffffffffff8, &(0x7f0000000880)=0x7, 0x82}, {0x166643e2, &(0x7f00000008c0)=0x7, 0x82}, {0x7, &(0x7f0000000900)=0x9, 0x82}, {0x8, &(0x7f0000000940)=0x1, 0x82}, {0x80, &(0x7f0000000980)=0x1000, 0x82}, {0x6, &(0x7f00000009c0)=0x6, 0x2}, {0x6, &(0x7f0000000a00), 0x82}, {0x4, &(0x7f0000000a40)=0x9, 0x2}, {0x93, &(0x7f0000000a80)=0x2, 0x2}, {0x5, &(0x7f0000000ac0)=0x40, 0x82}, {0x4, &(0x7f0000000b00)=0x4, 0x2}, {0x0, &(0x7f0000000b40)=0x1, 0x2}, {0x8, &(0x7f0000000b80)=0x6, 0x82}, {0x133, &(0x7f0000000bc0)=0x5, 0x82}, {0xff000000000000, &(0x7f0000000c00)=0x80000000, 0x82}, {0x7b, &(0x7f0000000c40)=0x7, 0x2}, {0x100000001, 0x0, 0x2}, {0x0, &(0x7f0000000cc0)=0x900000, 0x2}, {0x0, &(0x7f0000000d00)=0x4, 0x2}, {0x0, &(0x7f0000000d40)=0x7, 0x82}, {0x7, &(0x7f0000000dc0)=0x3, 0x82}, {0x6, &(0x7f0000000e00), 0x82}, {0x3, &(0x7f0000000e40)=0x1, 0x2}, {0xa3, &(0x7f0000000e80)=0x3, 0x82}, {0x0, &(0x7f0000000ec0)=0x6, 0x82}, {0xbed, &(0x7f0000000f00), 0x82}, {0x9, &(0x7f0000000f40)=0x8, 0x2}, {0x7, &(0x7f0000000fc0)=0xb, 0x2}, {0x7fffffffffffffff, &(0x7f0000001000)=0x9, 0x82}, {0x73, &(0x7f0000001040)=0x2, 0x2}, {0x1000, &(0x7f0000001080), 0x82}, {0x3, &(0x7f00000010c0)=0xfffffffffffff0b6, 0x82}, {0x1, &(0x7f0000001100)=0xffffffffffffb573, 0x2}, {0x2, &(0x7f0000001140)=0x7fd, 0x2}, {0xf8, &(0x7f0000001180)=0xffffffffffffffff, 0x82}, {0x4, 0x0, 0x2}, {0x0, &(0x7f0000001200)=0x10000, 0x2}, {0x5, &(0x7f0000001240)=0x6, 0x2}, {0x32, &(0x7f0000001280)=0x8, 0x2}, {0x7, &(0x7f00000012c0)=0x4, 0x82}, {0xe0, &(0x7f0000001300)=0x4, 0x2}, {0x7, &(0x7f0000001340)=0x9, 0x2}, {0xc6da, 0x0, 0x82}, {0x8, &(0x7f00000013c0)=0x8, 0x82}, {0x3, &(0x7f0000001400)=0x4, 0x80}, {0x1, &(0x7f0000001440)=0x8000}, {0x1, &(0x7f0000001480)=0x40, 0x2}, {0x0, &(0x7f00000014c0)=0x385}, {0xfffffffffffffff8, &(0x7f0000001500)=0x3, 0x82}, {0x77, &(0x7f0000001540)=0xfffffffffffffffe, 0x2}, {0x42e2, &(0x7f0000001580)=0x8000, 0x2}, {0x12, &(0x7f00000015c0)=0x5, 0x2}, {0x4, &(0x7f0000001600)=0x9, 0x2}, {0x400, &(0x7f0000001680)=0xfffffffffffffffc, 0x2}, {0xfffffffffffeffff, &(0x7f00000016c0)=0x8, 0x82}, {0x1, &(0x7f0000001700)=0x1ff, 0x2}, {0x3, &(0x7f0000001740)=0x6, 0x82}, {0xb46, &(0x7f0000001780)=0xa4, 0x2}, {0x2, &(0x7f00000017c0)=0x6, 0x82}], 0x4d, 0x0, 0x0, 0x1) syz_open_dev$video(&(0x7f0000000180), 0xffff481a, 0x5a202) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x34, r3, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe00000000", 0x19) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000004b00)=@ethtool_cmd={0x0, 0x100008, 0x4000000, 0xfffd, 0x0, 0x3, 0x3, 0xfc, 0x32, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) write$FUSE_NOTIFY_STORE(r5, 0x0, 0x28) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_capability(r8, &(0x7f0000000340), &(0x7f00000003c0)=@v1={0x1000000, [{0x1ff, 0x401}]}, 0xc, 0x3) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000140)=ANY=[@ANYRES8=r8, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000780)={0x24, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SNDCTL_SYNTH_ID(r9, 0xc08c5114, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 6.185073637s ago: executing program 2 (id=4643): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x48}}, 0x0) 5.949507033s ago: executing program 2 (id=4645): socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x2000, 0x102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) creat(&(0x7f0000000440)='./file0\x00', 0x26) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000380), 0x280000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x2, 0x9, 0x9321}, 0xfffffffffffffd47) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 3.703130738s ago: executing program 0 (id=4654): r0 = socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000580)=0x7ff00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000007f47302406b73c0cff514ae7373e2d43029ab5a3880de8709fe664307193b9e8b6a03f9a0cd5b9", @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000410000"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e8, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000011}, 0x81) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x101, 0x80000001, 0xa6d8, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x8, 0x5, 0x9, 0x8, 0x9, 0x1, 0x8, 0x0, 0x1, 0x2, 0xfffffffe, 0x6, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0xf5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) 3.610415551s ago: executing program 2 (id=4656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1, 0x0, 0x0, 0x2d320000}}], 0x400000000000181, 0x9200000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.508823191s ago: executing program 1 (id=4657): syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (fail_nth: 2) 2.800734078s ago: executing program 3 (id=4659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x11, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x11000000}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x94) 2.68554642s ago: executing program 3 (id=4661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) r4 = userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) 2.513166774s ago: executing program 3 (id=4662): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f000068a000/0x2000)=nil, 0x2000, 0xf) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) 2.231009417s ago: executing program 2 (id=4663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00400000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x2000850) 2.18151817s ago: executing program 1 (id=4664): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000010003c0002030000ff3f0000000000070200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 2.077894662s ago: executing program 2 (id=4665): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_usb_connect(0x24512d4355ab4db8, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x27, &(0x7f0000000280)=@string={0x27, 0x3, "36959d3b68fadc4460b6c876af37ce007ffc7c66d33b103352e308613823dcc1fc69d20be5"}}]}) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) request_key(0x0, 0x0, 0x0, r2) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f0000002600)=ANY=[@ANYBLOB="0180c20000000180c200000286dd60000080ff103a01fe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.065308884s ago: executing program 1 (id=4666): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fchdir(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0, 0x50000}, {&(0x7f0000000300)="d3eac319", 0x4}], 0x3, 0x0, 0x0, 0x44080}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r6, &(0x7f0000001640)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x200040, 0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2d, 0x3, 0x7ffe}, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x5, 0x7fff, &(0x7f0000001780)="03000000d50fcfc1adc07dd30e890538e4793b0bbcf72b037f1fd94040bcbf9ef909899fd631758f5090325ee4d91be5730ba4828fd0f90d688988515c06c50d228665a71e66595d4a4a363b3ca9092258b4ab107bc1b861558d08b4ac91fc27adae666359be3464069544a9c2659f29000e9f8fdcf11c8a2a2a1fdb7644f718c204c242d87620246763f38c6748a0ccf7a4860ffb2d460fdaafe833c4938890930392a10f677b0b9c0ba929703c57431f63ed681d6f787b47e4f659922d47c2e6eb18fa389844827c85f52469f615343427552328a65020b02cf83978", 0xdd) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) readv(r7, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1/file2\x00', 0x2) 1.809144915s ago: executing program 4 (id=4667): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = epoll_create(0x3) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffff9, {0x0, 0x0, 0x0, r4, {0x7}, {0xc}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048054) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x10000001}) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1d, &(0x7f0000001840)=""/4085}, 0x94) 1.657604757s ago: executing program 4 (id=4668): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) fcntl$lock(r0, 0x25, &(0x7f0000000540)={0x2, 0x2, 0x8, 0xfff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019340)={0x28, r6, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}]}]}, 0x28}}, 0x4044844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001300010029bd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="86ee0100fb03000004dd2b80"], 0x24}}, 0x24008c44) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}]}]}], {0x14}}, 0x90}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9c, @private2, 0x4d0}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="f676fbd1", 0x4}], 0x1}}], 0x1, 0x51) 1.463301279s ago: executing program 0 (id=4669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000c20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b0007"], 0x330}}, 0x4008800) 1.396568201s ago: executing program 2 (id=4670): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030118a0020904000000010100000a240102000a000201020904010000e20200000904010101010200000905010910000206000725010c0040000904020000010200000904020101010200000905820900020303100725010c08ff03ee6437a948db582fed6dc89f2d39b92552f314b6c0461bcf"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20810100000921"], 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "61b2c13a64c7a3fdf4d8186dbecd6aa50d61f492573729589a196e8b82f9c7b17428dc5c3d91bc5d5aad038e9c2edb9399d0214d28bc8710b6d5b4b201efe3b6", 0x11}, 0x48, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d83, 0x101200) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000000340)=""/90) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, 0x0, 0x4, 0x24, 0x0, 0x0, 0x3f}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c1000004a0007072bbd7000feff02000a0008008772238c332dc6b59045a6f0", @ANYRES32=0x0, @ANYBLOB="ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20080080}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) 1.396309535s ago: executing program 4 (id=4671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}], 0x3}, 0x20008b88) 1.260908096s ago: executing program 0 (id=4672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) r4 = userfaultfd(0x80001) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x81c0, 0x3) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1.258538733s ago: executing program 4 (id=4673): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r1 = syz_open_dev$video(&(0x7f0000000400), 0x5, 0x40000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x4, 0x1, 0xf48, 0x32314742, [0x2a6, 0x8], [0x8, 0x1ff], 0x1}}) 1.132634056s ago: executing program 4 (id=4674): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x8e, {0x0, 0x0, 0x800003e}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x4a4}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x7, 0x0, 0x6, 0x4000000, 0x0, 0xfffffffe, 0x0, 0x100, 0x3}) 1.05142057s ago: executing program 0 (id=4675): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x164, 0x164, 0x94, 0x28c, 0x94, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x8800}}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0, 0x0, {0x1000000000000}}, @common=@SET={0x20, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x0, 0x1100, 0x88]}, {0x0, [0x5, 0x11, 0x700, 0x2, 0x4], 0x3, 0x6}}}}, {{@ip={@remote, @remote, 0xff, 0x0, 'wlan1\x00', 'veth1_macvtap\x00', {}, {}, 0x11, 0x0, 0x54}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffffff, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000540600fe8000000000000000000000180000bbfe8000000000000000000000000000aa00004e22e601e68346e81016bd"], 0x0) 844.666034ms ago: executing program 0 (id=4676): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000d0101040061025b0610"], 0x67d) unshare(0x2c040600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x11a, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000180), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000002c0)=[r7, r7], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x20, 0x81, 0x7f, {{0x18, 0x4, 0x2, 0x39, 0x60, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x46, 0x3, [{0x3, 0xd, "0f16f29e747e31dc00e2b2"}, {0x6, 0x5, "f93ffc"}, {0x5, 0xa, "809a2e571fe49d98"}, {0x6, 0xe, "426fe111731204f5b9cbb117"}, {0x0, 0x5, "64fd81"}, {0x0, 0x8, "100507054a4c"}, {0x6, 0x7, "310db17273"}, {0x1, 0x2}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000001240)={'gretap0\x00', r10, 0x20, 0x7800, 0x755b65a8, 0x0, {{0x5, 0x4, 0x3, 0x1d, 0x14, 0x66, 0x3, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 823.205466ms ago: executing program 4 (id=4677): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x44, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x76, 0x60642) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045505, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000240)={0x20, 0xf, 0x35, "47507381a0c147322f3ad5cd94f2ce0298f555100d7ba8edef351f46fb4338103e8e4caf8e36a083698ec68dfd5dac85a200ddd96e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x8a, 0x1000, 0x0, 0x0}, {0x0, 0x2411, 0x8b, &(0x7f0000000080)="6befec46ac0481cbf093bc0e8aea76c81ed725fa1b6613c970d4662c987d2485fca55b558c2d6c00cc0be4183dadb32166549c40aac58894e5746968d94c236a1b62803a913d839579b17bf6859e19d2e3a71c63205062b5e95f71d4ad39ebd22d11cad357d05ef79cb988da430655453924e0e6456cad56d51cd72c327217b882675caaf2da261e204a60"}], 0x2}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x100) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000180)='(', 0x1, 0x5}]) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e4, 0x430, 0x0, 0x0, 0x324, 0x430, 0x51c, 0x51c, 0x51c, 0x51c, 0x51c, 0x6, &(0x7f0000000300), {[{{@ipv6={@mcast2, @local, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xff], 'syzkaller0\x00', 'syz_tun\x00', {}, {0xff}, 0x87, 0x7, 0x2, 0x20}, 0x0, 0xec, 0x128, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @inet=@rpfilter={{0x24}, {0xd}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x7fff, 0x1, @ipv4=@loopback, 0x4e24}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0xff000000, 0xffff00], 'vlan1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x62, 0xfd, 0x6, 0x24}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, [0xffffff7f, 0xff000000, 0xffffff00], [0xff, 0xffff00, 0xffffffff, 0xffffffff], 'tunl0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x1d, 0x9, 0x5, 0x4}, 0x0, 0x110, 0x134, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@dst={{0x48}, {0x60, 0x2, 0x0, [0x7, 0xac00, 0x9, 0xd8c, 0x72, 0x9, 0xfffb, 0xa42, 0x0, 0x8, 0x9, 0x0, 0x1, 0x2, 0xe003, 0x7], 0x6}}]}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x2e, 0x40, 0x4, 0x12}, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x23, 0x19, 0x81}}}, {{@ipv6={@private2, @remote, [0x0, 0x0, 0x0, 0xff], [0xa84d3fce14a3ba47, 0xff, 0x0, 0xffffff00], 'bond0\x00', 'wlan0\x00', {}, {0xff}, 0xe, 0x9, 0x3, 0x39}, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x640) syz_usb_control_io(r1, 0x0, 0x0) 687.228074ms ago: executing program 3 (id=4678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad132bc192, 0x4002011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff16, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000000dc533473e79488600000000050000000500010002e7ffff0500064000030000"], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x2002888c) 597.3658ms ago: executing program 0 (id=4679): r0 = socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000580)=0x7ff00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000007f47302406b73c0cff514ae7373e2d43029ab5a3880de8709fe664307193b9e8b6a03f9a0cd5b9", @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000410000"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e8, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000011}, 0x81) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x101, 0x80000001, 0xa6d8, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x8, 0x5, 0x9, 0x8, 0x9, 0x1, 0x8, 0x0, 0x1, 0x2, 0xfffffffe, 0x6, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0xf5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) 595.005662ms ago: executing program 3 (id=4680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x48}}, 0x0) 548.252313ms ago: executing program 3 (id=4681): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfff) (async) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x6, &(0x7f0000000040)={0x9, "810556c721f03f4084c89ea7f77d040b00"}}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x519342, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2) (async) r4 = openat$audio(0xffffff9c, &(0x7f0000000140), 0xc001, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) (async) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0105867, &(0x7f0000000f80)={&(0x7f0000000240), 0x7f, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000f40)}) (async) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f00000000c0)) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1003}) (async) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000002840)) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r6) (async) writev(r7, &(0x7f0000003480)=[{&(0x7f00000021c0)="81", 0x1}], 0x1) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) 465.308563ms ago: executing program 1 (id=4682): syz_emit_ethernet(0x4e, &(0x7f0000001b00)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "f87a1d", 0x18, 0x11, 0xff, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x100000001}}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x114, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x8e, 0xd, 0x1, 0x0, "25f3ded6dee7d8d5d731d3731c71eea8940b1d9a9f87a49c416f30755e80a61274254b0af2ceeadb63717718b1ba2a2e14d3b0890b48de2f511c088f6247f5d879d09a654f1aee82aaac9b9ff078d5e0ec4a0728730816ac73cfb366dc99503e1a68846ae2a753f29d162ea82cf8da4b478dc98a3961e6ff821680e230e8fab8b6ea3210583270dd7a4f"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x58, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb106dfba}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}], {0x14}}, 0x194}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0xdc}]}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000180)=0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) 0s ago: executing program 1 (id=4683): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x4f, 0x6, 0x0, 0xffffffffffffffff, 0x9, 0x7, 0x6}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESDEC=r0], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @loopback}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000080)={0x63e, 0x3, 0x0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendto$inet6(r10, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x9, 0x7fffffff}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x508, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x400, 0x0) unshare(0x62040200) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffffff8}}, ["", "", "", "", ""]}, 0x24}}, 0x20000844) syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r8], 0x0) kernel console output (not intermixed with test programs): ][ T5691] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 789.456656][ T9] usb 5-1: config 0 descriptor?? [ 789.461672][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.471058][ T5691] usb 1-1: Product: syz [ 789.475813][T19035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 789.483362][ T5691] usb 1-1: Manufacturer: syz [ 789.483564][T19058] tipc: Started in network mode [ 789.490716][ T9] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 789.493594][T19058] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 789.502337][ T5691] usb 1-1: SerialNumber: syz [ 789.511210][T19058] tipc: Enabling of bearer rejected, failed to enable media [ 789.513746][ T9] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 789.545223][ T5691] usb 1-1: config 0 descriptor?? [ 789.601359][T19060] xt_cluster: node mask cannot exceed total number of nodes [ 789.674133][T19063] netlink: 'syz.3.4273': attribute type 1 has an invalid length. [ 789.701359][T19063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 789.832723][T19040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.870734][T19040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.878603][T19035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.897255][T19035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.922805][T19035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 789.923999][ T5691] usb 1-1: USB disconnect, device number 36 [ 790.069952][ T808] usb 5-1: USB disconnect, device number 23 [ 790.633037][T19077] fuse: Invalid rootmode [ 790.660262][T19080] netlink: 'syz.2.4277': attribute type 1 has an invalid length. [ 790.726110][T19080] bond4: entered promiscuous mode [ 790.732646][T19080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 790.794289][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4277'. [ 790.852731][T19080] bond4: entered allmulticast mode [ 790.902983][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4280'. [ 790.920265][T19080] bond4: (slave bridge6): making interface the new active one [ 790.931718][T19081] xt_connbytes: Forcing CT accounting to be enabled [ 790.942285][T19080] bridge6: entered promiscuous mode [ 790.947245][T19081] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 790.964220][T19080] bridge6: entered allmulticast mode [ 790.985122][T19080] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 791.062310][T19093] SET target dimension over the limit! [ 791.405608][T13476] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 791.577411][T13476] usb 3-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 791.599515][T13476] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 791.620590][T13476] usb 3-1: string descriptor 0 read error: -22 [ 791.627195][T13476] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 791.645565][T13476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.736695][ T808] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 791.928201][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 791.947392][ T808] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 791.971391][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.989896][ T808] usb 5-1: Product: syz [ 792.000854][ T808] usb 5-1: Manufacturer: syz [ 792.008349][ T808] usb 5-1: SerialNumber: syz [ 792.077053][T13476] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 792.280544][T13476] usb 1-1: config 0 has no interfaces? [ 792.292355][T13476] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 792.313978][T13476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.330133][T13476] usb 1-1: Product: syz [ 792.334425][T13476] usb 1-1: Manufacturer: syz [ 792.339228][T13476] usb 1-1: SerialNumber: syz [ 792.347214][T13476] usb 1-1: config 0 descriptor?? [ 792.473126][ T808] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 792.482025][ T808] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 792.495769][ T808] usb 5-1: USB disconnect, device number 24 [ 792.588574][T19119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4282'. [ 792.600202][T19106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.610914][T19119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4282'. [ 792.621279][T19106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.634663][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.645343][T13476] usb 1-1: USB disconnect, device number 37 [ 792.646495][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.073737][ T808] usb 3-1: USB disconnect, device number 51 [ 793.188182][T19123] fuse: Bad value for 'fd' [ 793.338950][T19129] C: renamed from veth1_to_team (while UP) [ 793.347768][T13476] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 793.359134][T19129] netlink: 'syz.2.4294': attribute type 1 has an invalid length. [ 793.371767][T19129] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4294'. [ 793.393489][T19129] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 793.445334][T19134] fuse: Invalid rootmode [ 793.484598][ T5683] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 793.518607][T13476] usb 5-1: unable to get BOS descriptor or descriptor too short [ 793.534474][T13476] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 793.550700][T13476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.559421][T13476] usb 5-1: Product: syz [ 793.567192][T13476] usb 5-1: Manufacturer: syz [ 793.571896][T13476] usb 5-1: SerialNumber: syz [ 793.686713][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 793.698103][ T5683] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 793.706571][ T5683] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 793.716402][ T5683] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 793.726428][ T5683] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 793.736529][ T5683] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.749831][ T5683] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 793.759475][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.785883][ T808] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 793.935599][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 793.942759][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.953262][ T808] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 793.962746][ T808] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 793.975162][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.995869][ T808] usb 1-1: config 0 descriptor?? [ 794.390009][T19121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 794.397342][T19121] IPv6: NLM_F_CREATE should be set when creating new route [ 794.404672][T19121] IPv6: NLM_F_CREATE should be set when creating new route [ 794.412030][T19121] IPv6: NLM_F_CREATE should be set when creating new route [ 794.452602][T19149] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4290'. [ 794.474324][T19151] FAULT_INJECTION: forcing a failure. [ 794.474324][T19151] name failslab, interval 1, probability 0, space 0, times 0 [ 794.494377][T19151] CPU: 1 UID: 0 PID: 19151 Comm: syz.2.4300 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.494396][T19151] Tainted: [L]=SOFTLOCKUP [ 794.494400][T19151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.494407][T19151] Call Trace: [ 794.494412][T19151] [ 794.494417][T19151] dump_stack_lvl+0xe8/0x150 [ 794.494433][T19151] should_fail_ex+0x412/0x560 [ 794.494448][T19151] should_failslab+0xa8/0x100 [ 794.494467][T19151] __kmalloc_cache_noprof+0x88/0x660 [ 794.494481][T19151] ? sctp_add_bind_addr+0x8c/0x370 [ 794.494497][T19151] sctp_add_bind_addr+0x8c/0x370 [ 794.494511][T19151] sctp_copy_local_addr_list+0x314/0x4f0 [ 794.494526][T19151] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 794.494538][T19151] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 794.494554][T19151] ? sctp_v4_is_any+0x35/0x60 [ 794.494573][T19151] ? sctp_copy_one_addr+0x93/0x360 [ 794.494594][T19151] sctp_bind_addr_copy+0xb3/0x3c0 [ 794.494607][T19151] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 794.494620][T19151] sctp_connect_new_asoc+0x2ff/0x6b0 [ 794.494631][T19151] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 794.494643][T19151] ? __local_bh_enable_ip+0xd0/0x130 [ 794.494654][T19151] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 794.494667][T19151] ? security_sctp_bind_connect+0x7e/0x2c0 [ 794.494679][T19151] sctp_sendmsg+0x1528/0x2c10 [ 794.494701][T19151] ? __pfx_sctp_sendmsg+0x10/0x10 [ 794.494716][T19151] ? aa_sk_perm+0x6d5/0x900 [ 794.494727][T19151] ? __might_fault+0xaf/0x130 [ 794.494742][T19151] ? __pfx_aa_sk_perm+0x10/0x10 [ 794.494754][T19151] ? sock_rps_record_flow+0x19/0x350 [ 794.494768][T19151] ? __pfx_inet_sendmsg+0x10/0x10 [ 794.494781][T19151] ? inet_sendmsg+0x2f4/0x370 [ 794.494794][T19151] ? __pfx_inet_sendmsg+0x10/0x10 [ 794.494808][T19151] __sys_sendto+0x5de/0x710 [ 794.494822][T19151] ? __pfx___sys_sendto+0x10/0x10 [ 794.494847][T19151] ? fput+0xa0/0xd0 [ 794.494859][T19151] ? ksys_write+0x242/0x270 [ 794.494875][T19151] __ia32_sys_sendto+0xdd/0x100 [ 794.494889][T19151] __do_fast_syscall_32+0x229/0x6e0 [ 794.494902][T19151] ? do_fast_syscall_32+0x33/0x70 [ 794.494913][T19151] ? lockdep_hardirqs_on+0x7a/0x110 [ 794.494925][T19151] ? asm_int80_emulation+0x1a/0x20 [ 794.494934][T19151] ? do_int80_emulation+0x286/0x530 [ 794.494945][T19151] ? trace_irq_disable+0x3b/0x140 [ 794.494960][T19151] do_fast_syscall_32+0x33/0x70 [ 794.494973][T19151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 794.494984][T19151] RIP: 0023:0xf708f01c [ 794.494994][T19151] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 794.495002][T19151] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 794.495013][T19151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 794.495020][T19151] RDX: 000000000002a000 RSI: 000000002000c8d4 RDI: 00000000800000c0 [ 794.495026][T19151] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 794.495032][T19151] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 794.495037][T19151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 794.495051][T19151] [ 794.832748][T13476] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 794.883285][T19152] input: syz0 as /devices/virtual/input/input106 [ 794.960333][T19148] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4299'. [ 794.992446][T13476] usb 5-1: USB disconnect, device number 25 [ 795.079308][ T8351] udevd[8351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.119866][T19156] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 795.409667][ T808] usb 2-1: USB disconnect, device number 63 [ 795.786022][ T5691] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 795.955795][ T5691] usb 5-1: config 0 has no interfaces? [ 795.973512][ T5691] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 796.003859][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.027981][ T5691] usb 5-1: Product: syz [ 796.037111][ T5691] usb 5-1: Manufacturer: syz [ 796.053458][ T5691] usb 5-1: SerialNumber: syz [ 796.083024][ T5691] usb 5-1: config 0 descriptor?? [ 796.304919][T19163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.318072][T19163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.329632][ T24] usb 5-1: USB disconnect, device number 26 [ 796.414142][T19178] hub 9-0:1.0: USB hub found [ 796.422257][T19178] hub 9-0:1.0: 1 port detected [ 796.506048][T13476] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 796.566740][ T5691] usb 1-1: USB disconnect, device number 38 [ 796.667669][T13476] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 796.683561][T13476] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 796.724504][T13476] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 796.754790][T13476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.786909][T19172] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 796.798867][T13476] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 796.959918][ T5722] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 796.960050][ T4944] Bluetooth: hci5: command 0x0c1a tx timeout [ 796.994454][ T5722] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 797.025622][ T5691] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 797.132780][T19186] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4309'. [ 797.227600][ T5691] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 797.271565][ T5691] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 797.347621][ T5691] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 797.376903][ T9] usb 2-1: USB disconnect, device number 64 [ 797.385390][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 797.429922][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 797.452160][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 797.467597][ T5691] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 797.490624][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.506509][ T5691] usb 4-1: config 0 descriptor?? [ 797.513407][T19184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 797.756557][ T5691] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 797.793515][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4312'. [ 797.953943][ C0] usblp0: nonzero read bulk status received: -71 [ 798.116906][ T5691] usb 4-1: USB disconnect, device number 39 [ 798.222214][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.229697][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.502804][T19184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.538582][T19184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.631124][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4316'. [ 798.742377][T19197] tipc: New replicast peer: 255.255.255.255 [ 798.753819][T19197] tipc: Enabled bearer , priority 10 [ 798.763618][ T35] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.783939][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.817685][T16006] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 798.877793][T19205] bond4: entered promiscuous mode [ 798.882856][T19205] bond4: entered allmulticast mode [ 798.903759][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4317'. [ 798.924081][T19205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 798.953384][ T35] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.968369][T16006] usb 3-1: device descriptor read/64, error -71 [ 798.994603][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.022930][ T35] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.049200][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4318'. [ 799.063920][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.085102][ T35] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.105553][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.156603][T19213] vlan0: entered allmulticast mode [ 799.163734][T19213] bridge3: entered allmulticast mode [ 799.170963][T19212] bridge3: port 1(erspan0) entered blocking state [ 799.177823][T19212] bridge3: port 1(erspan0) entered disabled state [ 799.184978][T19212] erspan0: entered allmulticast mode [ 799.194744][T19212] erspan0: entered promiscuous mode [ 799.205870][T19212] bridge3: port 1(erspan0) entered blocking state [ 799.212490][T19212] bridge3: port 1(erspan0) entered forwarding state [ 799.225704][T16006] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 799.355404][T19195] usblp0: removed [ 799.365775][T16006] usb 3-1: device descriptor read/64, error -71 [ 799.435841][ T5722] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 799.440373][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 799.459653][ T5722] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 799.497644][T16006] usb usb3-port1: attempt power cycle [ 799.660530][ T56] IPVS: starting estimator thread 0... [ 799.746929][ T5675] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 799.785615][T19234] IPVS: using max 55 ests per chain, 132000 per kthread [ 799.865933][ T5691] tipc: Node number set to 14849 [ 799.875759][T16006] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 799.906612][T16006] usb 3-1: device descriptor read/8, error -71 [ 799.927513][ T5675] usb 1-1: config 0 has no interfaces? [ 799.959426][ T5675] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 799.970182][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.978502][ T5675] usb 1-1: Product: syz [ 799.982870][ T5675] usb 1-1: Manufacturer: syz [ 799.987764][ T5675] usb 1-1: SerialNumber: syz [ 800.007742][ T5675] usb 1-1: config 0 descriptor?? [ 800.141122][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 800.141138][ T29] audit: type=1800 audit(1777816321.116:7145): pid=19244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4327" name="bus" dev="tmpfs" ino=1231 res=0 errno=0 [ 800.155611][T16006] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 800.226574][T16006] usb 3-1: device descriptor read/8, error -71 [ 800.253455][T19223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.266413][ T56] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 800.279972][T19223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.307328][T13476] usb 1-1: USB disconnect, device number 39 [ 800.348203][T16006] usb usb3-port1: unable to enumerate USB device [ 800.427452][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 800.440907][ T56] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 800.456615][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.490527][ T56] usb 5-1: Product: syz [ 800.503809][ T56] usb 5-1: Manufacturer: syz [ 800.529143][ T56] usb 5-1: SerialNumber: syz [ 800.687276][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 801.100354][ T29] audit: type=1326 audit(1777816322.076:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm="syz.0.4333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.173061][ T29] audit: type=1326 audit(1777816322.076:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm="syz.0.4333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.272560][ T29] audit: type=1326 audit(1777816322.106:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm="syz.0.4333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.328331][T19264] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4334'. [ 801.338710][ T29] audit: type=1326 audit(1777816322.106:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm=FF exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.367481][ T29] audit: type=1326 audit(1777816322.106:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm=FF exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.372437][T19242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.398294][T19242] IPv6: NLM_F_CREATE should be set when creating new route [ 801.405564][T19242] IPv6: NLM_F_CREATE should be set when creating new route [ 801.412782][T19242] IPv6: NLM_F_CREATE should be set when creating new route [ 801.431220][T19264] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4334'. [ 801.442043][ T29] audit: type=1326 audit(1777816322.146:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm=FF exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.489854][ T29] audit: type=1326 audit(1777816322.146:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm=FF exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.598438][ T29] audit: type=1326 audit(1777816322.146:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19259 comm=FF exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 801.673529][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4336'. [ 801.719921][T19242] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4328'. [ 801.800686][ T56] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 801.836319][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 801.844981][ T5722] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 801.880736][ T5722] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 801.980571][ T56] usb 5-1: USB disconnect, device number 27 [ 802.399556][T19284] netlink: 'syz.3.4340': attribute type 1 has an invalid length. [ 802.735649][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 802.897261][ T9] usb 3-1: config 0 has no interfaces? [ 802.914289][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 802.943055][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.970924][ T9] usb 3-1: Product: syz [ 802.982099][ T9] usb 3-1: Manufacturer: syz [ 802.999949][ T9] usb 3-1: SerialNumber: syz [ 803.019850][ T9] usb 3-1: config 0 descriptor?? [ 803.185679][T13476] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 803.254940][T19287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.265613][ T56] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 803.289694][T19287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.358028][T13476] usb 5-1: Using ep0 maxpacket: 32 [ 803.370954][T13476] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.385044][T13476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 803.397837][T13476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 803.425158][T19287] veth0_vlan: left promiscuous mode [ 803.436248][ T56] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 803.445385][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.456375][T19287] veth0_vlan: entered promiscuous mode [ 803.461919][T13476] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 803.471573][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.489240][T13476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.500727][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4351'. [ 803.511481][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.521729][T13476] usb 5-1: config 0 descriptor?? [ 803.529377][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.539172][T19303] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 803.549714][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.563902][T16006] usb 3-1: USB disconnect, device number 56 [ 803.575334][T13476] hub 5-1:0.0: USB hub found [ 803.589226][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.598573][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.618485][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.632006][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.643342][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.656470][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.668096][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.694137][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.723961][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.736103][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.751173][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.766257][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.778255][T13476] hub 5-1:0.0: 2 ports detected [ 803.795894][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.804047][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.817266][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.829204][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.838144][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.847695][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 803.858872][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 803.887742][ T56] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 803.905988][ T56] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 803.925597][ T56] usb 2-1: Product: syz [ 803.929918][ T56] usb 2-1: Manufacturer: syz [ 803.935391][ T56] usb 2-1: SerialNumber: syz [ 803.967159][ T56] usb 2-1: config 0 descriptor?? [ 803.979409][ T56] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 804.029563][T13476] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 804.036785][T13476] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 804.068675][T13476] usbhid 5-1:0.0: can't add hid device: -71 [ 804.081428][T13476] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 804.157719][ T5691] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 804.231399][T13476] usb 5-1: USB disconnect, device number 28 [ 804.316148][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 804.332374][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 804.342188][ T5722] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 804.348784][ T56] usb 2-1: USB disconnect, device number 65 [ 804.365450][ T5691] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 804.398420][ T5722] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 804.412545][ T56] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 804.423662][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.508741][ T5691] usb 4-1: Product: syz [ 804.562512][ T5691] usb 4-1: Manufacturer: syz [ 804.567284][ T5698] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 804.582846][ T5691] usb 4-1: SerialNumber: syz [ 804.626968][ T5691] usb 4-1: config 0 descriptor?? [ 804.654010][ T5691] hub 4-1:0.0: bad descriptor, ignoring hub [ 804.680622][ T5691] hub 4-1:0.0: probe with driver hub failed with error -5 [ 804.735622][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 804.756309][ T5698] usb 3-1: config 0 has too many interfaces: 39, using maximum allowed: 32 [ 804.815057][ T5698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 39 [ 804.847826][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.869605][ T5691] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 804.887089][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.919506][ T5691] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 804.930550][ T5698] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 804.961353][ T5691] dib0700: firmware download failed at 7 with -22 [ 804.971872][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.034425][ T5698] usb 3-1: config 0 descriptor?? [ 805.060372][ T5698] hub 3-1:0.0: USB hub found [ 805.109448][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4355'. [ 805.199437][T19329] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4356'. [ 805.224987][T19329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.257973][ T5698] hub 3-1:0.0: 1 port detected [ 805.458761][ T5698] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 805.477151][ T5698] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 805.492741][T19339] fuse: Unknown parameter 'use00000000000000000000' [ 805.506041][ T5698] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 805.523671][ T5698] usbhid 3-1:0.0: can't add hid device: -22 [ 805.541701][ T5698] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 805.560094][T19340] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 805.586400][ T5698] usb 3-1: USB disconnect, device number 57 [ 805.598596][T19340] PKCS7: Only support pkcs7_signedData type [ 805.865657][ T808] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 806.019411][ T808] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 806.039041][ T808] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 806.069895][ T808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 806.090875][ T808] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 806.112062][ T808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 806.123567][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4361'. [ 806.140332][T19347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4361'. [ 806.151264][ T808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 806.171009][T19347] 8021q: VLANs not supported on gre0 [ 806.180299][ T808] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 806.191825][ T808] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 806.213648][ T808] usb 5-1: Product: syz [ 806.225619][ T808] usb 5-1: Manufacturer: syz [ 806.253490][T19343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 806.267349][ T808] cdc_wdm 5-1:1.0: skipping garbage [ 806.295652][ T808] cdc_wdm 5-1:1.0: skipping garbage [ 806.333114][ T808] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 806.353906][ T808] cdc_wdm 5-1:1.0: Unknown control protocol [ 806.381269][T19349] FAULT_INJECTION: forcing a failure. [ 806.381269][T19349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.464107][T19349] CPU: 1 UID: 0 PID: 19349 Comm: syz.2.4362 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.464135][T19349] Tainted: [L]=SOFTLOCKUP [ 806.464141][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 806.464150][T19349] Call Trace: [ 806.464158][T19349] [ 806.464167][T19349] dump_stack_lvl+0xe8/0x150 [ 806.464190][T19349] should_fail_ex+0x412/0x560 [ 806.464213][T19349] _copy_from_user+0x2d/0xb0 [ 806.464235][T19349] get_compat_msghdr+0xb3/0x4c0 [ 806.464259][T19349] ? _parse_integer_limit+0x1ae/0x1f0 [ 806.464278][T19349] ? __pfx_get_compat_msghdr+0x10/0x10 [ 806.464301][T19349] ? kstrtoull+0x12f/0x1d0 [ 806.464324][T19349] ___sys_sendmsg+0x201/0x360 [ 806.464346][T19349] ? __lock_acquire+0x6b5/0x2cf0 [ 806.464367][T19349] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.464391][T19349] ? get_pid_task+0x20/0x1f0 [ 806.464410][T19349] ? get_pid_task+0x20/0x1f0 [ 806.464427][T19349] ? get_pid_task+0x20/0x1f0 [ 806.464471][T19349] ? __fget_files+0x2a/0x420 [ 806.464489][T19349] ? __fget_files+0x3a0/0x420 [ 806.464516][T19349] __sys_sendmsg+0x183/0x260 [ 806.464540][T19349] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.464581][T19349] __do_fast_syscall_32+0x229/0x6e0 [ 806.464602][T19349] ? do_fast_syscall_32+0x33/0x70 [ 806.464622][T19349] ? lockdep_hardirqs_on+0x7a/0x110 [ 806.464640][T19349] ? asm_int80_emulation+0x1a/0x20 [ 806.464656][T19349] ? do_int80_emulation+0x286/0x530 [ 806.464679][T19349] do_fast_syscall_32+0x33/0x70 [ 806.464700][T19349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.464719][T19349] RIP: 0023:0xf708f01c [ 806.464735][T19349] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 806.464748][T19349] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 806.464766][T19349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 806.464778][T19349] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.464788][T19349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.464797][T19349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 806.464807][T19349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.464833][T19349] [ 806.875068][T19343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.898527][T19343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.929934][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 806.936825][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 806.943228][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 806.949841][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 806.956123][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 806.962730][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 806.968982][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 806.975579][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 806.975839][ T5722] usb 4-1: USB disconnect, device number 40 [ 806.981976][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 806.994193][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 807.000929][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 807.007539][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 807.013879][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 807.020495][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 807.026831][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 807.033439][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 807.040156][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 807.046781][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 807.053073][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 807.059661][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 807.085536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 807.115533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 807.254217][ T5722] usb 5-1: USB disconnect, device number 29 [ 807.255702][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 807.260419][T19357] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 807.415693][ T808] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 807.568208][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 807.587826][ T808] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 807.606679][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.654859][ T808] usb 4-1: Product: syz [ 807.679251][ T808] usb 4-1: Manufacturer: syz [ 807.714263][ T808] usb 4-1: SerialNumber: syz [ 808.200254][T19363] SET target dimension over the limit! [ 808.557803][ T5698] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 808.593496][T19355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 808.600808][T19355] IPv6: NLM_F_CREATE should be set when creating new route [ 808.608079][T19355] IPv6: NLM_F_CREATE should be set when creating new route [ 808.615328][T19355] IPv6: NLM_F_CREATE should be set when creating new route [ 808.639193][T19371] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4369'. [ 808.656129][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.666227][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.705531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 808.735018][T19355] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4365'. [ 808.843891][ T808] usb 4-1: 1:1: cannot get freq at ep 0x1 [ 808.867702][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 808.893476][ T5698] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 808.940449][ T5698] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 808.999461][ T5698] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 809.042206][ T808] usb 4-1: USB disconnect, device number 41 [ 809.052334][ T5698] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 809.107603][ T5698] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 809.146549][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.184690][ T5698] usb 1-1: Product: syz [ 809.202678][ T5698] usb 1-1: Manufacturer: syz [ 809.231334][ T5698] usb 1-1: SerialNumber: syz [ 809.237419][T19378] fuse: Unknown parameter 'use00000000000000000000' [ 809.238056][ T8351] udevd[8351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.270429][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 809.288509][ T5698] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input107 [ 809.495633][ T5698] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 809.534118][ T5698] (id 0x00) [ 809.749167][ T5698] rc_core: IR keymap rc-imon-pad not found [ 809.770951][ T5698] Registered IR keymap rc-empty [ 809.788094][ T5698] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 809.826187][ T5698] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 809.886665][ T5698] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 809.922020][ T5698] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input108 [ 809.979847][ T5698] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:40> initialized [ 810.148659][T19392] netlink: 'syz.4.4377': attribute type 8 has an invalid length. [ 810.176230][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4377'. [ 810.208537][T19395] vlan1: entered allmulticast mode [ 810.230226][T19392] veth1_to_team: entered promiscuous mode [ 810.237438][T19392] gretap0: entered promiscuous mode [ 810.244245][T19392] hsr1: entered promiscuous mode [ 810.338668][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4379'. [ 810.440150][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'. [ 810.449626][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'. [ 810.595163][T19405] bond3: option arp_interval: invalid value (18446744072904038628) [ 810.603428][T19405] bond3: option arp_interval: allowed values 0 - 2147483647 [ 810.620802][T19405] bond3 (unregistering): Released all slaves [ 810.779877][ T5683] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 810.998240][T19413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 811.112524][T19416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4386'. [ 811.155766][ T56] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 811.317085][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 811.325094][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.339211][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.350482][ T56] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 811.363360][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.374955][ T56] usb 3-1: config 0 descriptor?? [ 811.389575][ T56] hub 3-1:0.0: USB hub found [ 811.505652][ T9] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 811.588513][ T56] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 811.635598][ T9] usb 5-1: device descriptor read/64, error -71 [ 811.810404][ T808] usb 1-1: USB disconnect, device number 40 [ 811.875727][ T9] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 811.992667][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.009763][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.016201][ T9] usb 5-1: device descriptor read/64, error -71 [ 812.127269][ T9] usb usb5-port1: attempt power cycle [ 812.476833][ T9] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 812.493470][ T56] usbhid 3-1:0.0: can't add hid device: -71 [ 812.507234][ T56] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 812.516645][ T9] usb 5-1: device descriptor read/8, error -71 [ 812.539833][ T56] usb 3-1: USB disconnect, device number 58 [ 812.765680][ T9] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 812.796309][ T9] usb 5-1: device descriptor read/8, error -71 [ 812.916431][ T9] usb usb5-port1: unable to enumerate USB device [ 812.969806][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 813.222930][T19437] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4391'. [ 813.236658][T19437] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4391'. [ 813.456397][ T56] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 813.605678][ T56] usb 3-1: device descriptor read/64, error -71 [ 813.658108][T19443] bond7: option arp_interval: invalid value (18446744072904038628) [ 813.675403][T19443] bond7: option arp_interval: allowed values 0 - 2147483647 [ 813.689853][T19443] bond7 (unregistering): Released all slaves [ 813.856216][T19449] loop8: detected capacity change from 0 to 8 [ 813.873282][T19449] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 813.880413][T19449] loop8: partition table partially beyond EOD, truncated [ 813.891641][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4397'. [ 813.903496][ T56] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 813.936255][T19449] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 813.964043][T19454] program syz.0.4398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.035764][ T56] usb 3-1: device descriptor read/64, error -71 [ 814.065014][T10118] udevd[10118]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 814.159830][ T56] usb usb3-port1: attempt power cycle [ 814.182137][T19460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4401'. [ 814.215166][T19460] bond3: entered promiscuous mode [ 814.220522][T19460] bond3: entered allmulticast mode [ 814.227637][T19460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.235683][ T5722] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 814.408212][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.429524][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.440340][ T5722] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 814.449599][T19469] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 814.454687][ T5722] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.479504][T19469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4404'. [ 814.488765][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.508808][ T5722] usb 1-1: config 0 descriptor?? [ 814.525586][ T56] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 814.566636][ T56] usb 3-1: device descriptor read/8, error -71 [ 814.734546][T19471] netlink: 'syz.4.4403': attribute type 21 has an invalid length. [ 814.744333][T19454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4398'. [ 814.756337][T19471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4403'. [ 814.815896][ T56] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 814.827150][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 814.856379][ T56] usb 3-1: device descriptor read/8, error -71 [ 814.977293][ T56] usb usb3-port1: unable to enumerate USB device [ 814.997713][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 815.008268][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.028078][ T9] usb 2-1: config 0 descriptor?? [ 815.048172][ T9] cp210x 2-1:0.0: cp210x converter detected [ 815.060247][ T5722] plantronics 0003:047F:FFFF.001A: unbalanced collection at end of report description [ 815.084873][ T5722] plantronics 0003:047F:FFFF.001A: parse failed [ 815.101705][ T5722] plantronics 0003:047F:FFFF.001A: probe with driver plantronics failed with error -22 [ 815.326844][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 815.356292][ T9] cp210x 2-1:0.0: querying part number failed [ 815.385042][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 815.411520][ T9] usb 2-1: USB disconnect, device number 67 [ 815.429555][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 815.448161][ T9] cp210x 2-1:0.0: device disconnected [ 815.472239][ T5698] usb 1-1: USB disconnect, device number 41 [ 815.527716][T10118] udevd[10118]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 815.552542][T10118] udevd[10118]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 815.668634][T19478] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4405'. [ 816.020636][T19487] Cannot find del_set index 0 as target [ 816.207715][T19493] pimreg: entered allmulticast mode [ 816.242079][T19491] pimreg: left allmulticast mode [ 816.445779][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 816.618934][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 816.629037][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.718608][ T9] usb 1-1: config 0 descriptor?? [ 816.731983][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 816.946192][ T9] gp8psk: usb in 128 operation failed. [ 817.227104][ T9] gp8psk: usb in 146 operation failed. [ 817.227322][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4413'. [ 817.261963][ T9] gp8psk: failed to get FW version [ 817.301795][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4413'. [ 817.487040][ T9] gp8psk: usb in 149 operation failed. [ 817.502230][ T9] gp8psk: failed to get FPGA version [ 817.525062][ T9] gp8psk: usb in 138 operation failed. [ 817.549646][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 817.580999][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 817.622598][ T9] usb 1-1: USB disconnect, device number 42 [ 817.754242][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 817.910731][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4426'. [ 817.959150][T19533] loop9: detected capacity change from 0 to 7 [ 817.975204][T19533] Dev loop9: unable to read RDB block 7 [ 817.982331][T19533] loop9: unable to read partition table [ 817.988520][T19533] loop9: partition table beyond EOD, truncated [ 817.994997][T19533] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 818.004453][ T5698] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 818.115636][ T56] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 818.140684][ T5698] usb 2-1: device descriptor read/64, error -71 [ 818.267852][ T56] usb 5-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 818.284808][ T56] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 818.300543][ T56] usb 5-1: string descriptor 0 read error: -22 [ 818.308127][ T56] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 818.321124][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.336190][ T808] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 818.395665][ T5698] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 818.495660][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 818.507705][ T808] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 818.517390][ T808] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.531727][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.542267][ T5698] usb 2-1: device descriptor read/64, error -71 [ 818.549109][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.559729][ T808] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.573158][ T808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 818.587643][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.655831][ T5698] usb usb2-port1: attempt power cycle [ 818.995614][ T5698] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 819.026409][ T5698] usb 2-1: device descriptor read/8, error -71 [ 819.267697][T19560] __nla_validate_parse: 3 callbacks suppressed [ 819.267713][T19560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4425'. [ 819.291269][ T5698] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 819.307940][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4425'. [ 819.323300][ T5698] usb 2-1: device descriptor read/8, error -71 [ 819.337220][T19560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.347455][T19560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.419722][T19568] input: syz0 as /devices/virtual/input/input109 [ 819.442671][ T5698] usb usb2-port1: unable to enumerate USB device [ 819.495977][T19568] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 819.625686][ T808] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 819.747547][ T5698] usb 1-1: USB disconnect, device number 43 [ 819.785398][ T5691] usb 5-1: USB disconnect, device number 34 [ 819.795197][ T808] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 819.814801][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.849999][ T808] usb 4-1: config 0 descriptor?? [ 819.873505][ T808] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 820.078046][ T808] gp8psk: usb in 128 operation failed. [ 820.328293][ T808] gp8psk: usb in 146 operation failed. [ 820.334427][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4438'. [ 820.347209][ T808] gp8psk: failed to get FW version [ 820.349146][T19576] input: syz1 as /devices/virtual/input/input110 [ 820.432362][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4438'. [ 820.500110][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4442'. [ 820.590521][T19580] bond5: entered promiscuous mode [ 820.598610][T19580] bond5: entered allmulticast mode [ 820.605244][T19580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 820.617189][ T808] gp8psk: usb in 149 operation failed. [ 820.629010][ T808] gp8psk: failed to get FPGA version [ 820.640944][ T808] gp8psk: usb in 138 operation failed. [ 820.648386][T19585] erspan1: entered allmulticast mode [ 820.655430][ T808] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 820.673131][T19585] erspan1: entered promiscuous mode [ 820.680270][ T808] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 820.691063][T19585] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 820.702425][ T808] usb 4-1: USB disconnect, device number 42 [ 820.816601][ T5698] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 820.988805][ T5698] usb 1-1: Using ep0 maxpacket: 8 [ 821.000496][ T5698] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 821.012450][ T5698] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 821.022811][ T5698] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 821.047367][ T5698] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 821.061675][ T5698] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.078141][ T5698] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 821.087614][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.185249][T19594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4446'. [ 821.277592][T19594] netlink: 'syz.2.4446': attribute type 10 has an invalid length. [ 821.317101][ T29] audit: type=1326 audit(1777816342.296:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.321553][T19601] fuse: Bad value for 'group_id' [ 821.351942][T19601] fuse: Bad value for 'group_id' [ 821.360174][ T5698] usb 1-1: usb_control_msg returned -71 [ 821.374989][ T5698] usbtmc 1-1:16.0: can't read capabilities [ 821.392126][ T29] audit: type=1326 audit(1777816342.296:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.409479][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4450'. [ 821.418806][ T29] audit: type=1326 audit(1777816342.296:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.464913][ T5698] usb 1-1: USB disconnect, device number 44 [ 821.491759][ T29] audit: type=1326 audit(1777816342.296:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.532973][T19604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4450'. [ 821.542848][ T29] audit: type=1326 audit(1777816342.296:7158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.624329][ T29] audit: type=1326 audit(1777816342.346:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.684096][ T29] audit: type=1326 audit(1777816342.346:7160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.722084][T19609] tipc: Enabling of bearer rejected, failed to enable media [ 821.736676][ T29] audit: type=1326 audit(1777816342.346:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 821.771983][ T29] audit: type=1326 audit(1777816342.346:7162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 821.798968][ T29] audit: type=1326 audit(1777816342.346:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.3.4448" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71f616b code=0x7ffc0000 [ 821.855608][ T5691] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 822.005758][ T5691] usb 2-1: Using ep0 maxpacket: 8 [ 822.012414][ T5691] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 822.025578][ T5691] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.039140][ T5691] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.049115][ T5691] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.060082][ T5691] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.073144][ T5691] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.083192][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.115654][ T56] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 822.165151][T19626] netlink: 'syz.0.4459': attribute type 10 has an invalid length. [ 822.179365][T19626] team0: Port device dummy0 added [ 822.184946][T19626] netlink: 'syz.0.4459': attribute type 10 has an invalid length. [ 822.199566][T19626] team0: Port device dummy0 removed [ 822.205687][ T5698] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 822.207784][T19626] dummy0: entered allmulticast mode [ 822.219637][T19626] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 822.228300][ T808] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 822.288783][ T56] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 822.311790][ T56] usb 4-1: config 1 interface 0 has no altsetting 0 [ 822.339820][ T56] usb 4-1: string descriptor 0 read error: -22 [ 822.349155][ T56] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 822.368189][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.377007][ T5698] usb 5-1: config 0 has no interfaces? [ 822.385470][ T5698] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 822.400440][ T808] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 822.415292][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.424186][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.436324][ T5698] usb 5-1: Product: syz [ 822.441117][ T5698] usb 5-1: Manufacturer: syz [ 822.447665][ T5698] usb 5-1: SerialNumber: syz [ 822.453261][ T808] usb 3-1: config 0 descriptor?? [ 822.472275][ T5698] usb 5-1: config 0 descriptor?? [ 822.478288][ T808] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 822.674290][ T808] gp8psk: usb in 128 operation failed. [ 822.756325][T19620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.765571][T19620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.778453][T16006] usb 5-1: USB disconnect, device number 35 [ 822.835037][ T56] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 822.852093][ T56] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.001B/input/input111 [ 822.893788][T19635] input: syz0 as /devices/virtual/input/input112 [ 822.968032][ T56] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 823.084926][T19635] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 823.112852][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4458'. [ 823.149911][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4458'. [ 823.259777][ T808] gp8psk: usb in 146 operation failed. [ 823.268427][ T808] gp8psk: failed to get FW version [ 823.276757][ T808] gp8psk: usb in 149 operation failed. [ 823.283134][ T808] gp8psk: failed to get FPGA version [ 823.289817][ T808] gp8psk: usb in 138 operation failed. [ 823.299476][ T808] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 823.334563][ T808] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 823.371252][ T5698] usb 2-1: USB disconnect, device number 72 [ 823.393768][ T808] usb 3-1: USB disconnect, device number 63 [ 823.553251][T19641] vlan1: entered allmulticast mode [ 823.795634][ T5691] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 823.825775][T19649] vlan1: entered allmulticast mode [ 823.832463][T19649] bridge4: entered allmulticast mode [ 823.852277][T19649] erspan0: left allmulticast mode [ 823.857942][T19649] erspan0: left promiscuous mode [ 823.863489][T19649] bridge2: port 1(erspan0) entered disabled state [ 823.879068][T19649] bridge4: port 1(erspan0) entered blocking state [ 823.886333][T19649] bridge4: port 1(erspan0) entered disabled state [ 823.893116][T19649] erspan0: entered allmulticast mode [ 823.901589][T19649] erspan0: entered promiscuous mode [ 823.921081][T19649] bridge4: port 1(erspan0) entered blocking state [ 823.927732][T19649] bridge4: port 1(erspan0) entered forwarding state [ 823.951275][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 823.981311][ T5691] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 823.994795][ T5691] usb 5-1: config 179 has no interface number 0 [ 824.015064][ T5691] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 824.053877][ T5691] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 824.096112][ T5691] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 824.124448][ T5691] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 824.167220][ T5691] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 824.204807][ T5691] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 824.225178][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.261333][T19643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.302690][T19659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 824.505343][T19643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.545397][T19643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.806051][ T56] usb 5-1: USB disconnect, device number 36 [ 824.807689][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 824.820522][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 824.874780][ T5722] usb 4-1: USB disconnect, device number 43 [ 825.530152][T19685] __nla_validate_parse: 4 callbacks suppressed [ 825.530164][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 825.563554][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4478'. [ 825.935651][ T5722] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 826.115846][ T5722] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 826.125212][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.161199][ T5722] usb 5-1: config 0 descriptor?? [ 826.170935][ T5722] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 826.372329][ T5722] gp8psk: usb in 128 operation failed. [ 826.495604][ T5691] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 826.645950][ T5691] usb 2-1: Using ep0 maxpacket: 8 [ 826.652972][ T5691] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 826.662059][ T5691] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 826.675100][ T5691] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 826.685736][ T5691] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 826.696157][ T5691] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.709684][ T5691] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 826.741133][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.812526][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 826.836547][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 826.968597][ T5722] gp8psk: usb in 146 operation failed. [ 826.977573][ T5722] gp8psk: failed to get FW version [ 826.984097][ T5722] gp8psk: usb in 149 operation failed. [ 826.990716][T16006] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 827.000132][ T5722] gp8psk: failed to get FPGA version [ 827.011742][ T5722] gp8psk: usb in 138 operation failed. [ 827.023030][ T5722] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 827.048984][ T5722] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 827.073759][ T5722] usb 5-1: USB disconnect, device number 37 [ 827.147526][T16006] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.162005][T16006] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 827.183434][T16006] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 827.197215][T16006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 827.218806][T16006] usb 4-1: SerialNumber: syz [ 827.456370][T16006] usb 4-1: 0:2 : does not exist [ 827.464011][T16006] usb 4-1: unit 5 not found! [ 827.631667][T16006] usb 4-1: USB disconnect, device number 44 [ 827.663324][T19696] input: syz0 as /devices/virtual/input/input113 [ 827.695625][T10118] udevd[10118]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.841139][T19696] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 828.100186][ T808] usb 2-1: USB disconnect, device number 73 [ 828.100684][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4486'. [ 828.136475][T19705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4486'. [ 828.159713][T19705] 8021q: VLANs not supported on gre0 [ 828.446397][T16006] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 828.669004][T16006] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 828.684653][T16006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.700563][T19651] Set syz1 is full, maxelem 65536 reached [ 828.708078][T16006] usb 5-1: Product: syz [ 828.715085][T16006] usb 5-1: Manufacturer: syz [ 828.761290][T16006] usb 5-1: SerialNumber: syz [ 828.809162][T16006] usb 5-1: config 0 descriptor?? [ 828.841205][T16006] hub 5-1:0.0: bad descriptor, ignoring hub [ 828.861890][T16006] hub 5-1:0.0: probe with driver hub failed with error -5 [ 829.015596][ T808] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 829.044650][T16006] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 829.055653][ T5691] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 829.057857][T16006] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 829.074689][T16006] dib0700: firmware download failed at 7 with -22 [ 829.168547][ T808] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 829.178846][ T808] usb 2-1: config 0 has no interface number 0 [ 829.190130][ T808] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 829.205594][ T56] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 829.214635][ T5691] usb 1-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 829.230298][ T808] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 829.241951][ T5691] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 829.254795][ T808] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 829.264196][ T808] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 829.274022][ T5691] usb 1-1: string descriptor 0 read error: -22 [ 829.282498][ T5691] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 829.292610][ T808] usb 2-1: Manufacturer: syz [ 829.301146][ T808] usb 2-1: SerialNumber: syz [ 829.305893][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.317550][ T808] usb 2-1: config 0 descriptor?? [ 829.377918][ T56] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 829.388138][ T56] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.405921][ T56] usb 4-1: config 0 has no interface number 0 [ 829.419802][ T56] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 829.435613][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.452942][ T56] usb 4-1: Product: syz [ 829.462416][ T56] usb 4-1: Manufacturer: syz [ 829.470586][ T56] usb 4-1: SerialNumber: syz [ 829.483391][ T56] usb 4-1: config 0 descriptor?? [ 829.497992][ T56] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 829.697022][ T808] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 829.736887][ T808] usb 2-1: USB disconnect, device number 74 [ 830.242235][T19735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4489'. [ 830.305276][T19735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4489'. [ 830.319921][ T56] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 830.350003][ T56] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 830.365203][T19736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.377861][ T56] usb 4-1: USB disconnect, device number 45 [ 830.383995][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 830.384011][ T29] audit: type=1400 audit(1777816351.246:7197): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=19730 comm="syz.2.4494" [ 830.386917][T19736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.424739][ T5633] udevd[5633]: setting mode of /dev/bus/usb/004/045 to 020664 failed: No such file or directory [ 830.438558][ T5633] udevd[5633]: setting owner of /dev/bus/usb/004/045 to uid=0, gid=0 failed: No such file or directory [ 831.218878][T16006] usb 1-1: USB disconnect, device number 45 [ 831.334563][T19747] SET target dimension over the limit! [ 831.458429][T19749] bond7: option arp_interval: invalid value (18446744072904038628) [ 831.496080][T19749] bond7: option arp_interval: allowed values 0 - 2147483647 [ 831.548877][T19749] bond7 (unregistering): Released all slaves [ 831.683319][ T5691] usb 5-1: USB disconnect, device number 38 [ 832.042149][T19763] FAULT_INJECTION: forcing a failure. [ 832.042149][T19763] name failslab, interval 1, probability 0, space 0, times 0 [ 832.150052][T19763] CPU: 1 UID: 0 PID: 19763 Comm: syz.3.4505 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.150071][T19763] Tainted: [L]=SOFTLOCKUP [ 832.150074][T19763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 832.150081][T19763] Call Trace: [ 832.150085][T19763] [ 832.150090][T19763] dump_stack_lvl+0xe8/0x150 [ 832.150108][T19763] should_fail_ex+0x412/0x560 [ 832.150123][T19763] should_failslab+0xa8/0x100 [ 832.150138][T19763] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 832.150151][T19763] ? __alloc_skb+0x186/0x7d0 [ 832.150163][T19763] ? __alloc_skb+0x1d0/0x7d0 [ 832.150173][T19763] ? __local_bh_enable_ip+0xd0/0x130 [ 832.150185][T19763] __alloc_skb+0x1d0/0x7d0 [ 832.150196][T19763] ? netlink_ack_tlv_len+0x6c/0x210 [ 832.150210][T19763] netlink_ack+0x146/0xa50 [ 832.150229][T19763] netlink_rcv_skb+0x2b6/0x4b0 [ 832.150241][T19763] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 832.150254][T19763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 832.150274][T19763] ? bpf_lsm_capable+0x9/0x20 [ 832.150283][T19763] ? security_capable+0x7e/0x2c0 [ 832.150298][T19763] nfnetlink_rcv+0x2c0/0x27b0 [ 832.150311][T19763] ? kernel_text_address+0xa5/0xe0 [ 832.150324][T19763] ? __kernel_text_address+0xd/0x30 [ 832.150336][T19763] ? unwind_get_return_address+0x4d/0x90 [ 832.150348][T19763] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 832.150362][T19763] ? arch_stack_walk+0xfb/0x150 [ 832.150379][T19763] ? stack_trace_save+0xa9/0x100 [ 832.150393][T19763] ? __lock_acquire+0x6b5/0x2cf0 [ 832.150404][T19763] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 832.150418][T19763] ? kasan_save_track+0x4f/0x80 [ 832.150436][T19763] ? kasan_save_track+0x3e/0x80 [ 832.150447][T19763] ? __kasan_slab_alloc+0x6c/0x80 [ 832.150459][T19763] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 832.150470][T19763] ? __alloc_skb+0x27d/0x7d0 [ 832.150479][T19763] ? netlink_sendmsg+0x5d4/0xb40 [ 832.150494][T19763] ? __lock_acquire+0x6b5/0x2cf0 [ 832.150509][T19763] ? __netlink_lookup+0xc6/0x8b0 [ 832.150526][T19763] ? netlink_deliver_tap+0x2e/0x1b0 [ 832.150538][T19763] ? netlink_deliver_tap+0x2e/0x1b0 [ 832.150552][T19763] ? netlink_deliver_tap+0x2e/0x1b0 [ 832.150563][T19763] ? netlink_deliver_tap+0x2e/0x1b0 [ 832.150577][T19763] netlink_unicast+0x75c/0x8e0 [ 832.150592][T19763] netlink_sendmsg+0x813/0xb40 [ 832.150609][T19763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.150622][T19763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 832.150635][T19763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 832.150649][T19763] ____sys_sendmsg+0x972/0x9f0 [ 832.150666][T19763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.150680][T19763] ? kstrtoull+0x12f/0x1d0 [ 832.150693][T19763] ___sys_sendmsg+0x2a5/0x360 [ 832.150705][T19763] ? __lock_acquire+0x6b5/0x2cf0 [ 832.150717][T19763] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.150729][T19763] ? get_pid_task+0x20/0x1f0 [ 832.150740][T19763] ? get_pid_task+0x20/0x1f0 [ 832.150750][T19763] ? get_pid_task+0x20/0x1f0 [ 832.150777][T19763] ? __fget_files+0x2a/0x420 [ 832.150794][T19763] ? __fget_files+0x3a0/0x420 [ 832.150812][T19763] __sys_sendmsg+0x183/0x260 [ 832.150837][T19763] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.150859][T19763] __do_fast_syscall_32+0x229/0x6e0 [ 832.150873][T19763] ? do_fast_syscall_32+0x33/0x70 [ 832.150884][T19763] ? lockdep_hardirqs_on+0x7a/0x110 [ 832.150895][T19763] ? asm_int80_emulation+0x1a/0x20 [ 832.150904][T19763] ? do_int80_emulation+0x286/0x530 [ 832.150915][T19763] ? trace_irq_disable+0x3b/0x140 [ 832.150930][T19763] do_fast_syscall_32+0x33/0x70 [ 832.150942][T19763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.150953][T19763] RIP: 0023:0xf7ff501c [ 832.150963][T19763] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 832.150977][T19763] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 832.150988][T19763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 832.150998][T19763] RDX: 0000000020004004 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.151004][T19763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.151010][T19763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 832.151015][T19763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.151029][T19763] [ 832.950428][T19769] syzkaller1: entered promiscuous mode [ 832.958695][T19769] syzkaller1: entered allmulticast mode [ 832.971509][T19769] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 832.997160][T19775] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4507'. [ 833.054581][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4507'. [ 833.195733][ T56] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 833.285649][ T5691] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 833.293311][ T5698] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 833.348622][ T56] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 833.363964][ T56] usb 1-1: config 0 has no interface number 0 [ 833.376794][ T56] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.406019][ T56] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.426375][ T56] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 833.448008][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.465774][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 833.472965][ T5691] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 833.481886][ T5691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.482490][ T56] usb 1-1: config 0 descriptor?? [ 833.496969][ T5698] usb 3-1: config 0 interface 0 has no altsetting 0 [ 833.511342][ T5698] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 833.521421][ T5691] usb 5-1: config 0 has no interface number 0 [ 833.532807][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.543311][ T5691] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 833.557726][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.566978][ T5698] usb 3-1: config 0 descriptor?? [ 833.586301][ T5698] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 833.596580][ T5691] usb 5-1: Product: syz [ 833.603422][ T5691] usb 5-1: Manufacturer: syz [ 833.609338][ T5698] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 833.628019][ T5691] usb 5-1: SerialNumber: syz [ 833.639957][ T5698] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 833.648168][ T5698] usb 3-1: media controller created [ 833.654487][ T5691] usb 5-1: config 0 descriptor?? [ 833.671536][ T5691] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 833.703251][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 833.798998][ T5698] set interface failed [ 833.811994][ T5698] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 833.843037][ T5698] error writing reg: 0xff, val: 0x00 [ 833.948156][ T5698] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 833.984864][ T56] prodikeys 0003:041E:2801.001C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 834.000345][ T5698] usb 3-1: USB disconnect, device number 64 [ 834.063106][ T56] hid_prodikeys: hid-prodikeys: failed to find output report [ 834.063106][ T56] [ 834.142726][T19774] wg1: entered promiscuous mode [ 834.158765][T19774] wg1: entered allmulticast mode [ 834.213997][ T29] audit: type=1326 audit(1777816355.186:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19780 comm="syz.3.4511" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7fc00000 [ 834.250281][ T29] audit: type=1326 audit(1777816355.186:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19780 comm="syz.3.4511" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff501c code=0x7fc00000 [ 834.319891][ T5698] usb 1-1: USB disconnect, device number 46 [ 834.551826][ T5691] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 834.559905][ T5691] gspca_pac7302 5-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 834.574461][ T5691] usb 5-1: USB disconnect, device number 39 [ 834.735055][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4514'. [ 835.351506][T19812] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3415132644 (218568489216 ns) > initial count (61062497600 ns). Using initial count to start timer. [ 835.419046][T19812] tipc: Failed to remove unknown binding: 66,0,0/0:1055509294/1055509296 [ 835.442946][T19812] tipc: Failed to remove unknown binding: 66,0,0/0:1055509294/1055509295 [ 835.457632][T19812] tipc: Failed to remove unknown binding: 66,0,0/0:1055509294/1055509296 [ 835.467338][T19812] tipc: Failed to remove unknown binding: 66,0,0/0:1055509294/1055509295 [ 835.629481][T19819] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4524'. [ 835.640579][T19819] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4524'. [ 835.945610][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 836.125696][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 836.132843][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 836.153188][ T9] usb 4-1: config 0 has no interface number 0 [ 836.179147][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 836.202284][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.229737][ T9] usb 4-1: Product: syz [ 836.247591][ T9] usb 4-1: Manufacturer: syz [ 836.259005][ T9] usb 4-1: SerialNumber: syz [ 836.348727][ T9] usb 4-1: config 0 descriptor?? [ 836.357587][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 836.455615][ T56] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 836.617822][ T56] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 836.633419][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.646109][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 836.669094][ T56] usb 3-1: config 0 has no interface number 0 [ 836.676383][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 836.700077][ T56] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 836.739619][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.768816][ T56] usb 3-1: Product: syz [ 836.784311][ T56] usb 3-1: Manufacturer: syz [ 836.805880][ T56] usb 3-1: SerialNumber: syz [ 836.837516][ T56] usb 3-1: config 0 descriptor?? [ 836.861037][ T56] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 837.052245][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 837.052781][ T5722] usb 4-1: USB disconnect, device number 46 [ 837.109249][ T5722] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 837.125000][ T5722] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 837.140728][ T5722] quatech2 4-1:0.51: device disconnected [ 837.985944][ T56] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 837.993434][ T56] gspca_pac7302 3-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 838.049897][ T56] usb 3-1: USB disconnect, device number 65 [ 838.203030][T19867] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4539'. [ 838.275634][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 839.435545][T19873] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4542'. [ 839.764727][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4546'. [ 839.796191][ T56] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 839.823494][T19885] pimreg: entered allmulticast mode [ 839.847878][T19884] pimreg: left allmulticast mode [ 839.856243][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4546'. [ 839.987667][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 840.034058][T19827] Set syz1 is full, maxelem 65536 reached [ 840.050440][ T56] usb 5-1: string descriptor 0 read error: -22 [ 840.062676][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'. [ 840.063285][ T56] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 840.124008][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.188638][ T56] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 840.378044][ T56] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 840.436662][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4552'. [ 840.487275][T19896] vlan4: entered promiscuous mode [ 840.616386][ T56] usb 5-1: USB disconnect, device number 40 [ 840.645586][ T9] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 840.774960][T19900] ip6t_REJECT: ECHOREPLY is not supported [ 840.807678][ T9] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 840.816126][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.845084][ T9] usb 2-1: config 0 has no interface number 0 [ 840.858635][ T9] usb 2-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 840.890312][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 840.902504][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.912356][ T9] usb 2-1: Product: syz [ 840.917327][ T9] usb 2-1: Manufacturer: syz [ 840.922299][ T9] usb 2-1: SerialNumber: syz [ 840.931433][ T9] usb 2-1: config 0 descriptor?? [ 840.947663][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 841.020088][T19909] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4556'. [ 841.237631][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 841.284996][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 841.665726][ T5698] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 841.836097][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 841.859904][ T5698] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 841.894296][ T5698] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.926219][ T5698] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 841.949693][ T5698] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.969892][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 841.986637][ T5698] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.001911][ T9] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 842.025883][ T5698] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 842.036457][ T9] usb 2-1: USB disconnect, device number 75 [ 842.057196][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.589145][T19945] FAULT_INJECTION: forcing a failure. [ 842.589145][T19945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.603591][T19945] CPU: 0 UID: 0 PID: 19945 Comm: syz.1.4571 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.603619][T19945] Tainted: [L]=SOFTLOCKUP [ 842.603626][T19945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 842.603635][T19945] Call Trace: [ 842.603644][T19945] [ 842.603651][T19945] dump_stack_lvl+0xe8/0x150 [ 842.603677][T19945] should_fail_ex+0x412/0x560 [ 842.603707][T19945] _copy_from_iter+0x1d3/0x1670 [ 842.603730][T19945] ? rcu_is_watching+0x15/0xb0 [ 842.603773][T19945] ? __pfx__copy_from_iter+0x10/0x10 [ 842.603801][T19945] ? netlink_sendmsg+0x650/0xb40 [ 842.603821][T19945] ? skb_put+0x11b/0x210 [ 842.603845][T19945] netlink_sendmsg+0x6c0/0xb40 [ 842.603874][T19945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.603905][T19945] ? aa_sock_msg_perm+0xf1/0x1b0 [ 842.603927][T19945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 842.603951][T19945] ____sys_sendmsg+0x972/0x9f0 [ 842.603980][T19945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.604005][T19945] ? kstrtoull+0x12f/0x1d0 [ 842.604031][T19945] ___sys_sendmsg+0x2a5/0x360 [ 842.604050][T19945] ? __lock_acquire+0x6b5/0x2cf0 [ 842.604072][T19945] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.604095][T19945] ? get_pid_task+0x20/0x1f0 [ 842.604115][T19945] ? get_pid_task+0x20/0x1f0 [ 842.604132][T19945] ? get_pid_task+0x20/0x1f0 [ 842.604175][T19945] ? __fget_files+0x2a/0x420 [ 842.604193][T19945] ? __fget_files+0x3a0/0x420 [ 842.604220][T19945] __sys_sendmsg+0x183/0x260 [ 842.604241][T19945] ? __pfx___sys_sendmsg+0x10/0x10 [ 842.604280][T19945] __do_fast_syscall_32+0x229/0x6e0 [ 842.604302][T19945] ? do_fast_syscall_32+0x33/0x70 [ 842.604321][T19945] ? lockdep_hardirqs_on+0x7a/0x110 [ 842.604339][T19945] ? asm_int80_emulation+0x1a/0x20 [ 842.604355][T19945] ? do_int80_emulation+0x286/0x530 [ 842.604374][T19945] ? trace_irq_disable+0x3b/0x140 [ 842.604399][T19945] do_fast_syscall_32+0x33/0x70 [ 842.604418][T19945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 842.604436][T19945] RIP: 0023:0xf6fef01c [ 842.604450][T19945] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 842.604464][T19945] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 842.604481][T19945] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 842.604492][T19945] RDX: 000000002002888c RSI: 0000000000000000 RDI: 0000000000000000 [ 842.604502][T19945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 842.604512][T19945] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 842.604521][T19945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 842.604547][T19945] [ 842.901846][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4572'. [ 842.953074][T19950] input: syz0 as /devices/virtual/input/input115 [ 843.094505][T19952] vlan1: entered allmulticast mode [ 843.108035][T19952] bridge4: entered allmulticast mode [ 843.122673][T19949] erspan0: left allmulticast mode [ 843.123044][T19950] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 843.139709][T19949] erspan0: left promiscuous mode [ 843.145082][T19949] bridge3: port 1(erspan0) entered disabled state [ 843.177607][T19949] bridge4: port 1(erspan0) entered blocking state [ 843.191123][T19949] bridge4: port 1(erspan0) entered disabled state [ 843.208766][T19949] erspan0: entered allmulticast mode [ 843.228047][T19949] erspan0: entered promiscuous mode [ 843.240592][T19949] bridge4: port 1(erspan0) entered blocking state [ 843.247189][T19949] bridge4: port 1(erspan0) entered forwarding state [ 843.277418][ T56] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 843.363617][T19961] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4575'. [ 843.379556][T19960] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4575'. [ 843.392064][T16006] usb 4-1: USB disconnect, device number 47 [ 843.435616][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 843.445178][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 843.463320][T19961] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4575'. [ 843.473985][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 843.489152][ T56] usb 3-1: string descriptor 0 read error: -22 [ 843.517511][ T56] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 843.540321][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.585936][ T5683] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 843.595617][T19951] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 843.628160][ T56] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.648232][ T56] usb 3-1: MIDIStreaming interface descriptor not found [ 843.757452][ T5683] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 843.803737][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.841368][ T5683] usb 2-1: Product: syz [ 843.858280][ T5683] usb 2-1: Manufacturer: syz [ 843.887316][ T5683] usb 2-1: SerialNumber: syz [ 843.919228][ T5683] usb 2-1: config 0 descriptor?? [ 843.961149][ T5683] hub 2-1:0.0: bad descriptor, ignoring hub [ 843.992490][ T5683] hub 2-1:0.0: probe with driver hub failed with error -5 [ 844.059506][ T56] usb 3-1: USB disconnect, device number 66 [ 844.395730][ T5698] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 844.425668][ T9] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 844.560246][ T5698] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 844.579126][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.593160][ T9] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 844.611704][ T5698] usb 1-1: config 0 descriptor?? [ 844.617500][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.640850][ T5698] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 844.647010][ T9] usb 4-1: config 0 has no interface number 0 [ 844.661872][ T9] usb 4-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 844.700123][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 844.720692][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.741222][ T9] usb 4-1: Product: syz [ 844.752804][ T9] usb 4-1: Manufacturer: syz [ 844.765576][ T9] usb 4-1: SerialNumber: syz [ 844.788321][ T9] usb 4-1: config 0 descriptor?? [ 844.827513][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 844.844911][ T5698] gspca_cpia1: usb_control_msg 03, error -71 [ 844.865139][ T5698] gspca_cpia1: usb_control_msg 01, error -71 [ 844.900892][ T5698] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 844.963627][ T5698] usb 1-1: USB disconnect, device number 48 [ 845.631137][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 845.651808][ T9] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 845.652242][ T56] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 845.732345][ T9] usb 4-1: USB disconnect, device number 48 [ 845.926235][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 845.980189][T19996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.018596][T19996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.096392][T19996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.165802][T19996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.248520][T19996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.322727][T19996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.413639][T20005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4590'. [ 846.594935][ T5683] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 846.627573][ T5683] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 846.641069][ T5683] dib0700: firmware download failed at 7 with -22 [ 846.661022][T20009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4592'. [ 846.671930][ T5683] usb 2-1: USB disconnect, device number 76 [ 846.732306][ T56] usb 3-1: unable to get BOS descriptor or descriptor too short [ 846.755128][ T56] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 846.773120][ T56] usb 3-1: can't read configurations, error -71 [ 846.846315][T16006] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 846.981437][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4597'. [ 846.999465][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4597'. [ 847.016955][T16006] usb 1-1: Using ep0 maxpacket: 8 [ 847.041638][T16006] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 847.060704][T16006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 847.070884][ T5722] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 847.084716][T16006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 847.095240][T16006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 847.105441][T16006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.120914][T16006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 847.130357][T16006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.586940][ T5683] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 847.761740][ T5683] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 847.798189][ T5683] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.829890][ T5683] usb 4-1: config 0 has no interface number 0 [ 847.858153][ T5683] usb 4-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.896078][ T5683] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 847.912864][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.945124][ T5683] usb 4-1: Product: syz [ 847.951941][ T5683] usb 4-1: Manufacturer: syz [ 847.964742][ T5683] usb 4-1: SerialNumber: syz [ 848.015676][T20036] input: syz0 as /devices/virtual/input/input116 [ 848.023064][ T5683] usb 4-1: config 0 descriptor?? [ 848.053899][ T5683] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 848.172282][T20036] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 848.479037][ T9] usb 1-1: USB disconnect, device number 49 [ 848.687863][T20042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4603'. [ 848.862828][ T5683] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 848.873312][ T5683] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 848.884825][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4605'. [ 848.892694][ T5683] usb 4-1: USB disconnect, device number 49 [ 848.910214][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4605'. [ 848.995753][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 849.094520][T20049] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4606'. [ 849.109887][T20049] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4606'. [ 849.177068][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 849.191380][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.209496][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.224157][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 849.235044][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.268256][ T9] hub 3-1:32.0: USB hub found [ 849.269192][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4607'. [ 849.466800][ T9] hub 3-1:32.0: 1 port detected [ 849.673281][ T9] hub 3-1:32.0: hub_hub_status failed (err = -71) [ 849.701272][ T9] hub 3-1:32.0: config failed, can't get hub status (err -71) [ 849.751786][ T9] usbhid 3-1:32.0: fixing wrong optional hid class descriptors count [ 849.778893][ T9] usbhid 3-1:32.0: can't add hid device: -22 [ 849.793533][ T9] usbhid 3-1:32.0: probe with driver usbhid failed with error -22 [ 849.825649][ T5698] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 849.836761][ T9] usb 3-1: USB disconnect, device number 69 [ 850.001046][ T5698] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 850.020886][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.039300][ T5698] usb 1-1: Product: syz [ 850.052719][ T5698] usb 1-1: Manufacturer: syz [ 850.069024][ T5698] usb 1-1: SerialNumber: syz [ 850.089072][ T5698] usb 1-1: config 0 descriptor?? [ 850.105319][ T5698] hub 1-1:0.0: bad descriptor, ignoring hub [ 850.117506][ T5698] hub 1-1:0.0: probe with driver hub failed with error -5 [ 850.329900][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4615'. [ 850.344210][ T5698] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 850.377395][ T5698] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 850.406575][ T5698] dib0700: firmware download failed at 7 with -22 [ 850.546271][T20076] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4617'. [ 850.624280][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4617'. [ 850.725642][ T5698] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 850.885763][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 850.898366][ T5698] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 850.914444][ T5698] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.942749][ T5698] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.967363][ T5698] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.981050][ T5698] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.011975][ T5698] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 851.024595][T20087] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4620'. [ 851.033822][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.105592][ T9] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 851.268568][ T9] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 851.298195][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.331846][ T9] usb 2-1: config 0 has no interface number 0 [ 851.358495][ T9] usb 2-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.398822][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 851.418536][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.432820][ T9] usb 2-1: Product: syz [ 851.465186][ T9] usb 2-1: Manufacturer: syz [ 851.480909][ T9] usb 2-1: SerialNumber: syz [ 851.502377][ T9] usb 2-1: config 0 descriptor?? [ 851.531055][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 851.893048][T20104] input: syz0 as /devices/virtual/input/input117 [ 851.950790][T20104] usbtmc 3-1:16.0: simple usb_control_msg returned 0 [ 852.200415][ T5683] usb 3-1: USB disconnect, device number 70 [ 852.445779][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 852.457288][ T9] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 852.481092][ T9] usb 2-1: USB disconnect, device number 77 [ 852.785731][ T5698] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 852.811719][T20122] SET target dimension over the limit! [ 852.924780][T20125] wireguard0: entered allmulticast mode [ 852.945595][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 852.952310][ T5698] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.959269][ T5698] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 852.968789][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.981485][ T5698] usb 5-1: config 0 descriptor?? [ 852.999467][ T5698] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 853.016037][ T5698] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 853.044932][ T5698] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 853.062499][ T5698] usb 5-1: media controller created [ 853.083255][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.196347][ T5698] set interface failed [ 853.196376][ T5698] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 853.231031][ T5698] error writing reg: 0xff, val: 0x00 [ 853.276004][ T5683] usb 1-1: USB disconnect, device number 50 [ 853.299635][ T5698] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 853.343488][ T5698] usb 5-1: USB disconnect, device number 43 [ 853.696098][ T5683] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 853.826568][ T5722] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 853.852705][T20148] __nla_validate_parse: 7 callbacks suppressed [ 853.852717][T20148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4643'. [ 853.895962][ T5683] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 853.905463][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.914998][ T5683] usb 2-1: Product: syz [ 853.921349][ T5683] usb 2-1: Manufacturer: syz [ 853.926977][ T5683] usb 2-1: SerialNumber: syz [ 853.937628][ T5683] usb 2-1: config 0 descriptor?? [ 853.957085][ T5683] hub 2-1:0.0: bad descriptor, ignoring hub [ 853.971221][ T5683] hub 2-1:0.0: probe with driver hub failed with error -5 [ 853.979820][T16006] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 853.997360][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 854.012804][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.024038][ T5722] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 854.080751][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.095413][ T5722] usb 1-1: config 0 descriptor?? [ 854.135715][T16006] usb 4-1: Using ep0 maxpacket: 8 [ 854.142797][T16006] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 854.153095][T16006] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.171828][T16006] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.192105][T16006] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.204607][T16006] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.222529][T16006] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 854.234745][ T5683] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 854.246550][T16006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.259907][ T5683] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 854.270735][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.283257][T20156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.295612][ T5698] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 854.303373][ T5683] dib0700: firmware download failed at 7 with -22 [ 854.325985][T20156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.388777][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.398407][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.408328][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.420418][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.432490][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.448500][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.459804][ T5698] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 854.469278][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.479498][ T5698] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.491310][ T5698] usb 3-1: config 0 has no interface number 0 [ 854.497660][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'. [ 854.507139][ T5698] usb 3-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.528616][ T5722] usbhid 1-1:0.0: can't add hid device: -71 [ 854.539243][ T5722] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 854.552764][ T5722] usb 1-1: USB disconnect, device number 51 [ 854.564722][ T5698] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 854.575062][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.586684][ T5698] usb 3-1: Product: syz [ 854.593203][ T5698] usb 3-1: Manufacturer: syz [ 854.616862][ T5698] usb 3-1: SerialNumber: syz [ 854.642780][ T5698] usb 3-1: config 0 descriptor?? [ 854.673321][ T5698] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 854.955624][T16006] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 855.110144][T16006] usb 5-1: unable to get BOS descriptor or descriptor too short [ 855.129424][T16006] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 855.151798][T16006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.163295][T20157] input: syz0 as /devices/virtual/input/input118 [ 855.177625][T16006] usb 5-1: Product: syz [ 855.190051][T16006] usb 5-1: Manufacturer: syz [ 855.201110][T16006] usb 5-1: SerialNumber: syz [ 855.232508][T20157] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 855.518246][ T9] usb 4-1: USB disconnect, device number 50 [ 855.693416][ T5698] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 855.712540][ T5698] gspca_pac7302 3-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 855.736989][ T5698] usb 3-1: USB disconnect, device number 71 [ 856.258643][T20159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 856.265953][T20159] IPv6: NLM_F_CREATE should be set when creating new route [ 856.273198][T20159] IPv6: NLM_F_CREATE should be set when creating new route [ 856.280490][T20159] IPv6: NLM_F_CREATE should be set when creating new route [ 856.403560][ T5722] usb 5-1: USB disconnect, device number 44 [ 856.461644][T16006] usb 2-1: USB disconnect, device number 78 [ 856.576299][T20192] FAULT_INJECTION: forcing a failure. [ 856.576299][T20192] name failslab, interval 1, probability 0, space 0, times 0 [ 856.592659][T20193] FAULT_INJECTION: forcing a failure. [ 856.592659][T20193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.612136][T20193] CPU: 0 UID: 0 PID: 20193 Comm: syz.3.4658 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.612165][T20193] Tainted: [L]=SOFTLOCKUP [ 856.612171][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.612181][T20193] Call Trace: [ 856.612189][T20193] [ 856.612196][T20193] dump_stack_lvl+0xe8/0x150 [ 856.612220][T20193] should_fail_ex+0x412/0x560 [ 856.612245][T20193] _copy_from_user+0x2d/0xb0 [ 856.612267][T20193] kstrtouint_from_user+0xd6/0x180 [ 856.612289][T20193] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 856.612324][T20193] proc_fail_nth_write+0x8e/0x210 [ 856.612345][T20193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 856.612367][T20193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 856.612387][T20193] vfs_write+0x29a/0xb90 [ 856.612414][T20193] ? __pfx_vfs_write+0x10/0x10 [ 856.612437][T20193] ? __fget_files+0x2a/0x420 [ 856.612460][T20193] ? __fget_files+0x3a0/0x420 [ 856.612477][T20193] ? __fget_files+0x2a/0x420 [ 856.612503][T20193] ksys_write+0x150/0x270 [ 856.612528][T20193] ? __pfx_ksys_write+0x10/0x10 [ 856.612554][T20193] ? asm_int80_emulation+0x1a/0x20 [ 856.612575][T20193] do_int80_emulation+0x181/0x530 [ 856.612596][T20193] ? trace_irq_disable+0x3b/0x140 [ 856.612617][T20193] ? asm_int80_emulation+0x1a/0x20 [ 856.612632][T20193] ? clear_bhb_loop+0x40/0x90 [ 856.612647][T20193] ? clear_bhb_loop+0x40/0x90 [ 856.612668][T20193] asm_int80_emulation+0x1a/0x20 [ 856.612683][T20193] RIP: 0023:0xf71f616b [ 856.612699][T20193] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 856.612713][T20193] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 856.612730][T20193] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54b65d0 [ 856.612741][T20193] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 856.612750][T20193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 856.612760][T20193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 856.612777][T20193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 856.612805][T20193] [ 856.844863][T20192] CPU: 1 UID: 0 PID: 20192 Comm: syz.1.4657 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.844891][T20192] Tainted: [L]=SOFTLOCKUP [ 856.844898][T20192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.844908][T20192] Call Trace: [ 856.844915][T20192] [ 856.844923][T20192] dump_stack_lvl+0xe8/0x150 [ 856.844949][T20192] should_fail_ex+0x412/0x560 [ 856.844974][T20192] should_failslab+0xa8/0x100 [ 856.845001][T20192] __kmalloc_noprof+0xe8/0x760 [ 856.845022][T20192] ? trace_kmalloc+0x2a/0xf0 [ 856.845040][T20192] ? tomoyo_encode+0x28b/0x550 [ 856.845068][T20192] tomoyo_encode+0x28b/0x550 [ 856.845094][T20192] tomoyo_realpath_from_path+0x58d/0x5d0 [ 856.845118][T20192] ? tomoyo_domain+0xd7/0x130 [ 856.845144][T20192] ? tomoyo_path_number_perm+0x219/0x630 [ 856.845162][T20192] tomoyo_path_number_perm+0x246/0x630 [ 856.845183][T20192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 856.845199][T20192] ? __lock_acquire+0x6b5/0x2cf0 [ 856.845253][T20192] ? __fget_files+0x2a/0x420 [ 856.845277][T20192] ? __fget_files+0x3a0/0x420 [ 856.845295][T20192] ? __fget_files+0x2a/0x420 [ 856.845317][T20192] security_file_ioctl_compat+0xc3/0x2a0 [ 856.845338][T20192] __ia32_compat_sys_ioctl+0x139/0x950 [ 856.845365][T20192] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 856.845392][T20192] ? __fget_files+0x3a0/0x420 [ 856.845416][T20192] ? fput+0xa0/0xd0 [ 856.845435][T20192] ? ksys_write+0x242/0x270 [ 856.845469][T20192] __do_fast_syscall_32+0x229/0x6e0 [ 856.845494][T20192] ? do_fast_syscall_32+0x33/0x70 [ 856.845512][T20192] ? lockdep_hardirqs_on+0x7a/0x110 [ 856.845530][T20192] ? asm_int80_emulation+0x1a/0x20 [ 856.845545][T20192] ? do_int80_emulation+0x286/0x530 [ 856.845562][T20192] ? trace_irq_disable+0x3b/0x140 [ 856.845584][T20192] do_fast_syscall_32+0x33/0x70 [ 856.845605][T20192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 856.845624][T20192] RIP: 0023:0xf6fef01c [ 856.845640][T20192] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 856.845654][T20192] RSP: 002b:00000000f53bc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 856.845672][T20192] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0686611 [ 856.845684][T20192] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 856.845694][T20192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 856.845703][T20192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 856.845714][T20192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 856.845740][T20192] [ 857.196474][T20192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 857.212414][ T5698] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 857.455631][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 857.476941][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 857.500257][ T5698] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 857.517111][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.534945][ T5698] usb 1-1: config 0 descriptor?? [ 857.547150][ T5698] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 857.570000][ T5698] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 857.582287][ T5698] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 857.590953][ T5698] usb 1-1: media controller created [ 857.636524][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.744655][ T5698] set interface failed [ 857.744684][ T5698] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 857.768904][ T5698] error writing reg: 0xff, val: 0x00 [ 857.862673][ T5698] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 857.929470][ T5698] usb 1-1: USB disconnect, device number 52 [ 858.120715][T20218] veth0: entered promiscuous mode [ 858.205606][ T5722] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 858.340125][T20221] tipc: Enabled bearer , priority 10 [ 858.358580][T20221] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.366026][T20221] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.387932][T20221] bridge0: entered allmulticast mode [ 858.393931][ T5722] usb 2-1: config 0 has an invalid interface number: 97 but max is 1 [ 858.407643][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.434642][ T5722] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 858.482535][ T5722] usb 2-1: config 0 has no interface number 0 [ 858.508148][ T5722] usb 2-1: too many endpoints for config 0 interface 97 altsetting 101: 115, using maximum allowed: 30 [ 858.546206][ T5722] usb 2-1: config 0 interface 97 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 858.588771][ T5722] usb 2-1: config 0 interface 97 has no altsetting 0 [ 858.609708][ T5722] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 858.625423][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.652669][ T5722] usb 2-1: config 0 descriptor?? [ 858.673914][ T5722] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 858.691520][ T5722] dvb-usb: bulk message failed: -22 (3/0) [ 858.716545][ T5722] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 858.734157][ T5722] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 858.754004][ T5722] usb 2-1: media controller created [ 858.772616][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 858.808444][ T5722] dvb-usb: bulk message failed: -22 (6/0) [ 858.835829][ T5698] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 858.846908][ T5722] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 858.870424][T20216] dvb-usb: bulk message failed: -22 (4/0) [ 858.885727][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input119 [ 858.922010][ T5722] dvb-usb: schedule remote query interval to 150 msecs. [ 858.922036][ T5722] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 858.928394][ T5722] usb 2-1: USB disconnect, device number 79 [ 859.001916][ T5722] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 859.022185][ T5698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 859.049754][ T5698] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 859.071183][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.091086][ T5698] usb 3-1: Product: syz [ 859.097229][ T5698] usb 3-1: Manufacturer: syz [ 859.102885][ T5698] usb 3-1: SerialNumber: syz [ 859.140493][T20239] syzkaller1: entered promiscuous mode [ 859.155916][T20239] syzkaller1: entered allmulticast mode [ 859.164779][T20239] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 859.181608][T20239] tipc: Enabling of bearer rejected, already enabled [ 859.332360][T20247] __nla_validate_parse: 63 callbacks suppressed [ 859.332380][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4680'. [ 859.426033][ T5691] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 859.455611][ T5722] tipc: Node number set to 14849 [ 859.575648][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 859.584038][ T5691] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 859.605563][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.617238][ T5691] usb 5-1: config 0 descriptor?? [ 859.655614][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 859.795782][ T5722] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 859.805602][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 859.818730][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 859.838737][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.855898][ T5691] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 859.871627][ T9] usb 4-1: config 0 descriptor?? [ 859.878564][ T5691] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 859.887027][ T5691] dib0700: firmware download failed at 7 with -22 [ 859.947095][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 859.959004][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 859.966412][ T5722] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 859.978201][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.991867][ T5722] usb 1-1: config 0 descriptor?? [ 860.014817][ T5722] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 860.040576][ T5722] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 860.079619][ T5722] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 860.095031][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 860.095117][T20250] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 860.113624][T20250] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 860.122020][T20250] CPU: 1 UID: 0 PID: 20250 Comm: syz.3.4681 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.132932][T20250] Tainted: [L]=SOFTLOCKUP [ 860.137234][T20250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 860.147270][T20250] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 860.152629][T20250] Code: e0 63 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 b9 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 46 3d 87 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 860.172213][T20250] RSP: 0018:ffffc900040defa0 EFLAGS: 00010206 [ 860.178268][T20250] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a446303 [ 860.186318][T20250] RDX: 0000000000000000 RSI: ffffffff8e2189d3 RDI: 00000000000000c0 [ 860.194273][T20250] RBP: ffffc900040df158 R08: ffffc900040df0c7 R09: 0000000000000000 [ 860.202228][T20250] R10: ffffc900040df0a0 R11: fffff5200081be19 R12: 0000000000000068 [ 860.210178][T20250] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200081be0c [ 860.218126][T20250] FS: 0000000000000000(0000) GS:ffff888125390000(0063) knlGS:00000000f5495b40 [ 860.227043][T20250] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 860.233607][T20250] CR2: 00000000f54b44d8 CR3: 0000000020ec8000 CR4: 00000000003526f0 [ 860.241559][T20250] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 860.249514][T20250] DR3: 0000000000000030 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 860.257467][T20250] Call Trace: [ 860.260734][T20250] [ 860.263646][T20250] ? __mutex_lock+0x319/0x1550 [ 860.268399][T20250] ? __mutex_trylock_common+0x158/0x260 [ 860.273930][T20250] ? dvb_usbv2_generic_write+0x26/0x60 [ 860.279369][T20250] ? __pfx___mutex_lock+0x10/0x10 [ 860.284373][T20250] ? __pfx___mutex_lock+0x10/0x10 [ 860.289375][T20250] ? __mutex_lock+0x319/0x1550 [ 860.294121][T20250] dvb_usbv2_generic_write+0x26/0x60 [ 860.299388][T20250] mxl111sf_ctrl_msg+0x160/0x2f0 [ 860.304400][T20250] mxl111sf_write_reg+0xa9/0x1b0 [ 860.309319][T20250] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 860.314869][T20250] ? unwind_next_frame+0xa6/0x2550 [ 860.319960][T20250] mxl111sf_i2c_xfer+0x496/0x5100 [ 860.324964][T20250] ? unwind_next_frame+0xa6/0x2550 [ 860.330054][T20250] ? is_bpf_text_address+0x26/0x2b0 [ 860.335231][T20250] ? __lock_acquire+0x6b5/0x2cf0 [ 860.340148][T20250] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 860.345586][T20250] ? kernel_text_address+0xa5/0xe0 [ 860.350688][T20250] ? __kernel_text_address+0xd/0x30 [ 860.355868][T20250] ? do_raw_spin_lock+0x12b/0x2f0 [ 860.360882][T20250] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 860.366665][T20250] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.371840][T20250] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 860.377647][T20250] ? stack_depot_save_flags+0x3f3/0x810 [ 860.383173][T20250] ? kasan_save_track+0x4f/0x80 [ 860.388006][T20250] ? kasan_save_track+0x3e/0x80 [ 860.392839][T20250] ? __kasan_kmalloc+0x93/0xb0 [ 860.397581][T20250] ? __kmalloc_cache_noprof+0x31c/0x660 [ 860.403127][T20250] ? __i2c_smbus_xfer+0x7e5/0x1eb0 [ 860.408219][T20250] ? i2c_smbus_xfer+0x1f4/0x310 [ 860.413053][T20250] ? i2cdev_ioctl_smbus+0x434/0x730 [ 860.418233][T20250] ? compat_i2cdev_ioctl+0x29d/0x5c0 [ 860.423502][T20250] ? __ia32_compat_sys_ioctl+0x5ea/0x950 [ 860.429115][T20250] ? __do_fast_syscall_32+0x229/0x6e0 [ 860.434474][T20250] ? do_fast_syscall_32+0x33/0x70 [ 860.439479][T20250] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 860.445970][T20250] __i2c_transfer+0x79a/0x1f70 [ 860.450721][T20250] ? __kasan_kmalloc+0x93/0xb0 [ 860.455467][T20250] ? __kmalloc_cache_noprof+0x15b/0x660 [ 860.461001][T20250] __i2c_smbus_xfer+0xfca/0x1eb0 [ 860.465923][T20250] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 860.471283][T20250] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.476552][T20250] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 860.482342][T20250] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 860.487698][T20250] i2c_smbus_xfer+0x1f4/0x310 [ 860.492356][T20250] i2cdev_ioctl_smbus+0x434/0x730 [ 860.497387][T20250] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 860.502918][T20250] compat_i2cdev_ioctl+0x29d/0x5c0 [ 860.508011][T20250] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 860.513627][T20250] ? __fget_files+0x3a0/0x420 [ 860.518291][T20250] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 860.523824][T20250] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 860.529265][T20250] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 860.535227][T20250] ? __se_sys_futex_time32+0x3ab/0x440 [ 860.540666][T20250] ? rcu_is_watching+0x15/0xb0 [ 860.545439][T20250] __do_fast_syscall_32+0x229/0x6e0 [ 860.550633][T20250] ? do_fast_syscall_32+0x33/0x70 [ 860.555667][T20250] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.560874][T20250] ? asm_int80_emulation+0x1a/0x20 [ 860.565966][T20250] ? do_int80_emulation+0x286/0x530 [ 860.571144][T20250] ? trace_irq_disable+0x3b/0x140 [ 860.576239][T20250] do_fast_syscall_32+0x33/0x70 [ 860.581073][T20250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 860.587380][T20250] RIP: 0023:0xf7ff501c [ 860.591434][T20250] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 860.611023][T20250] RSP: 002b:00000000f549550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 860.619450][T20250] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000720 [ 860.627457][T20250] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 860.635416][T20250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.643378][T20250] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 860.651343][T20250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.659316][T20250] [ 860.662336][T20250] Modules linked in: [ 860.667025][T20250] ---[ end trace 0000000000000000 ]--- [ 860.674609][ T5722] usb 1-1: media controller created [ 860.683701][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 860.700610][T20227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 860.707706][T20250] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 860.708629][T20227] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4670'. [ 860.747367][T20261] netlink: 'syz.1.4683': attribute type 4 has an invalid length. [ 860.770038][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 860.785035][ T5722] set interface failed [ 860.786054][T20250] Code: e0 63 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 b9 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 46 3d 87 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 860.817218][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 860.825687][ T9] usb 4-1: media controller created [ 860.832269][ T5683] usb 3-1: USB disconnect, device number 72 [ 860.839088][T20250] RSP: 0018:ffffc900040defa0 EFLAGS: 00010206 [ 860.840445][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 860.857748][T20250] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a446303 [ 860.885619][T20250] RDX: 0000000000000000 RSI: ffffffff8e2189d3 RDI: 00000000000000c0 [ 860.894247][T20250] RBP: ffffc900040df158 R08: ffffc900040df0c7 R09: 0000000000000000 [ 860.917359][T20250] R10: ffffc900040df0a0 R11: fffff5200081be19 R12: 0000000000000068 [ 860.932657][T20250] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200081be0c [ 860.947807][T20250] FS: 0000000000000000(0000) GS:ffff888125390000(0063) knlGS:00000000f5495b40 [ 860.963543][T20250] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 860.974827][T20250] CR2: 00000000f71a77d0 CR3: 0000000020ec8000 CR4: 00000000003526f0 [ 860.988280][T20250] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 861.001447][T20250] DR3: 0000000000000030 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 861.014001][T20250] Kernel panic - not syncing: Fatal exception [ 861.020458][T20250] Kernel Offset: disabled [ 861.024779][T20250] Rebooting in 86400 seconds..