last executing test programs: 10.285462759s ago: executing program 2 (id=5357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000000c000000420000004000000006000100", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000005032882bcfd7a2dd000028790e912e8d040635f73e5e4bdf57c1d35acdaf050dc703a506bf0a51a6f2fcfe37f2136ba3009e7496cbb6aecbd2070e7b3f57c1d9c4268abe9368f8a5ba75e6433de486ac0f97a5e48537b66097e8be114f465270c516a47a035616e8d576ae2bca97bcb3fa62d287711bada304bb1b5988c1afffaa8e370535a5802a49118d3e348dc621ece37ebd8f51bbc48968a9cf2a952cc41944826d6fc6a554152c7eb3b87156b35dcd532076fc0ed02b08b7693336b9981a13be39d2b68e0ecec0e9416f08bc893029fef191f571dab837c3cd079d1bb1504be4c57fd6537706b1b86fd5c384e553646b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) userfaultfd(0x80001) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x3, r1, 0x5}) 8.336500067s ago: executing program 0 (id=5363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x48040) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000003c0)={0x0, 0xd, 0x7, "78561d42c9f38e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000000408010200000000000000000300000a060002400805000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/183, 0xb7, &(0x7f0000000380)=""/35, 0x3, 0x4}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x14, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd704000040000000b704000010000020720700fe00000000850000002f000000940000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66}, 0x94) 7.973642847s ago: executing program 3 (id=5365): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0xfbb5, 0x10000, 0x7, 0x119}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r5 = fsopen(&(0x7f0000000500)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000180)={0x50, 0x0, r11, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r12) close(r12) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0/file0\x00', 0x0, 0x10}, 0x18) r13 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0xc) 7.942311768s ago: executing program 2 (id=5366): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x20000000e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x4, 'dh\x00', 0x3, 0x3, 0x9}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x12) 7.725036887s ago: executing program 4 (id=5367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000065b600000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000040c0009800800014000000081400000000c0a010100000000000000000a0000030900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf258700000008000300dbf655c2d79b147dc9f2287ee04e6290fa344433344874197de34c1bec1ddac9f73f15aa2b8f", @ANYRES32=r3, @ANYBLOB="0c00990000000000180000000a00060008021100000100000600480016000000060048003c0000002e002a00832540e0050802110000012cf4ffffffffffffffff070000003cbd0000ffffffffffff070000001001ea00000600480065000000060048006300000067002a00823005030e05000000080211000001060000000d0000006600000002000802110000010a00000004ffffffffffff03000000262f0404da9048d208f9bc098135817655ebd16047f3b7a7c2f59f02a044ece85ee441c61e8f1fa9b2289c9e712a1537ef000600480024000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000818) 7.47021576s ago: executing program 3 (id=5368): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20048090}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(0x0, 0x136) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(0x0, 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0xfe, 0x7fff8000}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') lseek(r6, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x3ff, 0x61, 0x7fff, 0x8, 0xa65a, 0xffffffffffffffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000080)=0x2080483) pwritev(r8, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) capset(&(0x7f0000000080)={0x20080522, r7}, &(0x7f0000000040)={0x2, 0x200000, 0x20006eb, 0x0, 0x10001, 0x2}) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f00000000c0)={0xb16a, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) 7.429371249s ago: executing program 4 (id=5369): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1200) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd0000"], 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8e) mknodat$loop(r2, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 7.420574324s ago: executing program 0 (id=5370): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet(0xa, 0x1, 0x84) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0}, 0xffffff96) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000140)='pvfs2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x2, 0x4, 0x7, 0x8}, {0xf582, 0x2, 0x37, 0x2e9}, {0x4, 0xa, 0x4, 0x7}, {0x7, 0x3, 0x8}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001"], 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90) 6.685718342s ago: executing program 2 (id=5372): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000140)={0x0, 0x16, 0xbd, "34bc5440b1540dbd6884549a10aeaed535e6e090ee808f00ab498566f1096b35ca6eddb2f9bba659b9299f5600f7ff6d48d06c8446ae431f884514a1384616c57f4bf064bff6192390c41a6033a3cede82d52ab70a70cf832fcc50422cdb5b1a48076ec07ddfccb124a53ddc40ad2cd070eadef2c9ed7ab3f1948b473742ecfa55ad7d04b8782e4a4702737950d76484015dab1b8e64b7b429f9bbf95813968c1254001e51698f6adea1ec22ad3f1e5e8d581caa34fad87bf2ebfb280c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="4012da0000001e87f5d7ad366edf929dad375ee07bcaa972b9a5adc071008d4947e16f4e2e74f71c783a4f2b977b784aaca112bf1ac31920a04d2aef630b3d246cd460c530a2e87fd023684efd9a137d516a2edba9ec7dcc7815293c771c62f5ac5e0b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.374800482s ago: executing program 4 (id=5376): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4880) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x4f8, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r2, 0x2000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xfffe}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000b00)={r3, 0xe5c, 0x6, 0x3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x101, 0x1, r4, 0x0) syz_usb_connect$uac2(0x3, 0xd2, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x1, 0x40, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x0, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0xa, 0x2c, 0x6}, [@selector_unit={0xc, 0x24, 0xb, 0xa, 0x7, "3d5431309d54c0"}, @processing_unit={0x7, 0x24, 0x8, 0x3, 0x5, [0x3]}, @source_unit={0x8, 0x24, 0xa, 0xb, 0x2, 0x5, 0x81, 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x2, "3f59ca"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x9, 0x14, "0f870d"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x400, 0x9, 0x8, "c7e7421261d7df"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x8e, 0x2, 0x8f, 0xf8}]}, {{0x9, 0x5, 0x1, 0x9, 0x208, 0xe, 0x7, 0x7, {0x8, 0x25, 0x1, 0x80, 0x33, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x0, 0x0, 0x1001, 0x3, 0xfffffffb, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x53, 0x8, 0x7, {0x8, 0x25, 0x1, 0x80, 0x0, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x1, 0x1, 0x10, 0xb0}, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f240002141004082b78f1ba40323697f73aa9bfb40c9cd50b1001048600801601000396a5da5203d6ba7edcdf174fdad5cb081a46fe9cddda74ae9dc4885b994487210c81d673b05b4d018546692cd1b0872a94d102ac2a6492adecb60f4221ce4d2d218e215149ed09a23bbec1cb2bde4c51db2866952683ac8cd22dfe66fbd220e35eb1e35fcd99618f1bb21b637da8f868e9ddcc2f63291a3b06fb9e2deb22c3d2020d698b438b9c1cf9f6f557089b8fa62156d7869842b685fe1f2eb5f8036cde4ec7341f93549f0ab8d286e0b50e31086426315135d28aa2703694d5e83f32305061b2ead811dd9c84630574c55c5d6c1cddf1ba539d3d44c8b304e658", @ANYRES8=r1], 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x827}}, {0x38, &(0x7f00000009c0)=ANY=[@ANYBLOB="3803000e2d6f90b814fbc8228414d18458c40000007805773454bf456161bc4726003300000000f410934fb209f2d119d62abb54aaba9ee3bb7bca1e47037955b490681894464d7ccb8db02abf637eb102ec7e8157"]}, {0x83, &(0x7f00000004c0)=@string={0x83, 0x3, "2c5eca14f13ab8aa1865fc48a19c276aa3b70a4c873d070b510aa2a6695fdea6a4d81019581936cc70225fb99fdc330c9aa9d5dba483f8c02d41074d3eda23df8fbf223e49eadd56fbb9f2ad45f52865eba6b8d9011ea899372586f196b350549844d8b658fe8b8fd3f8f2ef876316c35aeb178f52e4172e9d5eb060a7d9ce3e8a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x300a}}]}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 5.106261715s ago: executing program 0 (id=5379): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x48040) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000003c0)={0x0, 0xd, 0x7, "78561d42c9f38e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000000408010200000000000000000300000a060002400805000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/183, 0xb7, &(0x7f0000000380)=""/35, 0x3, 0x4}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x14, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66}, 0x94) 4.461450235s ago: executing program 0 (id=5380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="1c0000000406df0b00000000000000000a00000a050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0xf, 0x1, 0x201, 0x710, 0x25dfdbff, {0x1, 0x0, 0x5}}, 0x14}}, 0x20008010) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) mq_timedsend(r3, &(0x7f0000000600)="6d12483bb95dab4d", 0x8, 0x7fff, 0x0) mq_timedreceive(r2, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 4.257369373s ago: executing program 1 (id=5381): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0, &(0x7f00000002c0)=[{}, {}], 0xb, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000940)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={r1, 0x0, &(0x7f00000001c0)}) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x100) ioctl$MON_IOCT_RING_SIZE(r2, 0x80089203, 0x2000000069b6a) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r4, 0x540b, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000040)=0x400007f) write$FUSE_DIRENT(r6, &(0x7f0000000340)=ANY=[], 0x128) read(r6, &(0x7f0000000280)=""/1, 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000200)={r9, 0x6}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000500)={r9, @in={{0x2, 0x4e21, @local}}, 0x7, 0xa5, 0xa, 0xe, 0x91, 0x2, 0xf6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={r9, @in={{0x2, 0x4e24, @local}}, 0x8, 0x9}, 0x90) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x2000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x8, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x2, 0x2e8, 0x99, 0x7fffffff, 0x0, [{0x2, 0x8, 0x4, '\x00', 0x59}, {0xfd, 0x9, 0x8}, {0x8, 0x6, 0x2, '\x00', 0x81}, {0x1, 0x4, 0x40, '\x00', 0x8}, {0x2, 0x81}, {0xff, 0x5, 0xf9, '\x00', 0x9}, {0xba, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x81, 0x2, '\x00', 0x3}, {0x5, 0x4, 0x6, '\x00', 0xec}, {0x0, 0xd, 0x5, '\x00', 0x1c}, {0x10, 0x78, 0x7, '\x00', 0x1d}, {0x8, 0x0, 0xff, '\x00', 0x4}, {0x4, 0x1, 0xe7, '\x00', 0xf3}, {0x6, 0x3, 0x8, '\x00', 0x7}, {0xa3, 0x3, 0x3a, '\x00', 0x1}, {0x8, 0x6, 0x0, '\x00', 0x5}, {0x7, 0x5, 0x6, '\x00', 0xfe}, {0x4, 0x0, 0x3, '\x00', 0x3}, {0xb, 0x62, 0x9, '\x00', 0x6}, {0x1, 0x40, 0xe, '\x00', 0xeb}, {0x6, 0xa4, 0x7, '\x00', 0x9}, {0xc, 0x61, 0xd, '\x00', 0x6}, {0x2, 0x6, 0x40, '\x00', 0x1}, {0x9, 0x8, 0x58, '\x00', 0xfb}]}}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0x200, 0xffff, 0xffff0000, 0xffffffd1, 0x98, "db96e29a06bad8a9dce0ad5e54618bda1b141f", 0x60e6, 0x80000000}) file_getattr(r0, 0x0, &(0x7f0000006040), 0x27, 0x1000) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x6) 4.143121369s ago: executing program 2 (id=5382): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d05}]}) close(r0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x30004040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$kcm(0xa, 0x8, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfffc, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x51}, 0x404096c) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000000c0)={0x12, 0x1, 0x80, "7e06feac3d4fd65aab2500b4820400f475a8f6010000000000002d00", 0x30314142}) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = socket$kcm(0x21, 0x5, 0xa) sendmsg$kcm(r14, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000110000000100000000000000000000001800000000000000100100000d000000aa000000e5a2d8"], 0x30}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r12, 0x4188aec6, &(0x7f0000000a80)={0x1, [{0x4, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x81, 0x0}, {0x2, 0x0, 0xffffffc0, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x2, 0x0, 0xfffffffc, 0x0}, {0x2, 0x8, 0x1, &(0x7f0000000000)="8a"}, {0x2, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x20344, 0x0}, {0x0, 0x0, 0xe, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x2, 0x0}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8) close(r0) 4.1428288s ago: executing program 3 (id=5383): chdir(&(0x7f0000000080)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$inet6(0xa, 0x80002, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x7) msgget$private(0x0, 0x236) 3.984594518s ago: executing program 1 (id=5384): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f000019b000/0x3000)=nil, 0x3000}, 0x1}) r3 = mq_open(&(0x7f0000000200)='!}\x00\xe5\xff\v\x00\x00\x01E!Tnux\xdetbn\xf4j%\x02k', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r3, &(0x7f00000001c0)=""/44, 0x2c, 0x800000080000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x2200, 0x0) io_submit(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x880, 0x0, 0x35d}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f000500000008000400", @ANYRESHEX=r6], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) 3.879612163s ago: executing program 4 (id=5385): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xda7497e56cf900f0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000100)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="40094b0000004b2124f9898d6d6a5ae0fd99b22eda8bdc52d8ffb209f14083313c516dae9965c896de0138a7c69aedf834335079dd0caf58820150404e9716f913c8972a43c8ab5c4f1e7fc0bd4abc2a06"], 0x0}, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x0, 0x16, 0x43, "34dec07f77ba0eb1a7e1da9b5d901ad11ad9b553164ad4cfa086604a76f13140cf37b51cf5b825f996bc93158ce571ee03f7842d45b2daeecb2a384dad293bde460dd6"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x2, 0x6a, 0x2, 0xff80, 0x4, 0x0, 0x100, 0x84, 0x5, 0x1000, 0x1, 0x6}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x4}, 0x0, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x4004}, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x400000000002d5, 0x2, 0x6], [0x9d8, 0x5, 0x800, 0x9, 0x8002, 0x3, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff0, 0x4a, 0x5, 0x6, 0xecf1, 0xdd, 0x5, 0x1, 0x2, 0x3, 0xc3c, 0x1, 0x8, 0x100000000, 0x4, 0xa51, 0x8, 0x401, 0x7ffffffffffffff, 0x7, 0x7, 0x82, 0x100, 0x5, 0x3, 0x1000000000000004, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x1, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x20000082c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x6, 0x22, 0xffffffffffffffff, 0x9, 0x401, 0x7ffffffffffffffc, 0x7, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x406, 0x83, 0x6, 0x2, 0x5, 0x2000003, 0xdf, 0x7fffffff, 0x7, 0x11, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x2f) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 3.704680057s ago: executing program 3 (id=5386): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x5, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r2, &(0x7f0000000280)=""/183, 0xb7) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x100843, 0x9c) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) fsopen(&(0x7f0000000000)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd7000fddbdf2500000000", @ANYRESOCT=r3, @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.49335501s ago: executing program 2 (id=5387): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1f, 0x0, "fec34e77f1263643b52aa7beb3171ddb9cbe0cfef7c87cb4af8b03bc9f40e8d97a8de1e0af2e350dce1d05f076b9cb42ce8acf171c1499fd401e7e756a5653ea39b4ecd9805ee428eb40cef5df6ef362"}, 0xd8) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 3.399322327s ago: executing program 0 (id=5388): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3, r10}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r11, r0, 0x0, 0x1002000ff) 3.20639039s ago: executing program 1 (id=5389): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x77, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca3", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x3}, 0x50) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$xdp(0x2c, 0x3, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r2, &(0x7f0000000540)={0x0, 0x0, 0x80, 0x1, 0x120000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x4, 0x8000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fde, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x1, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbf, 0x0, 0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80) 2.783625268s ago: executing program 1 (id=5390): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x48040) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000003c0)={0x0, 0xd, 0x7, "78561d42c9f38e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000000408010200000000000000000300000a060002400805000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/183, 0xb7, &(0x7f0000000380)=""/35, 0x3, 0x4}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x14, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66}, 0x94) 1.974688612s ago: executing program 1 (id=5391): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 11) 1.36284202s ago: executing program 1 (id=5392): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}}}}}]}}, 0x0) 864.296883ms ago: executing program 3 (id=5393): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) pipe(&(0x7f00000000c0)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x80, 0x6, 0x301, 0x2, 0x0, 0x101, 0x0}) 770.417523ms ago: executing program 0 (id=5394): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f729b0bf4366fa2d5005dd3fcc4a8a8982a8883633520c43653016bbef19b3fbd8cbede415ef106387315827bfec2d85762d9aef1736baea3dd53bcb9ac89a47de0eb9f39d794fbb"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xa9525000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x4, 0xfffffffffffffffe) r6 = dup(0xffffffffffffffff) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x0, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 666.955924ms ago: executing program 3 (id=5395): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x1) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) dup2(r0, r0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000002cc0)=[{0x7f, 0x8000, 0x0, 0x0}], 0x1}) 560.895032ms ago: executing program 4 (id=5396): chdir(&(0x7f0000000080)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$inet6(0xa, 0x80002, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x7) msgget$private(0x0, 0x236) 72.907838ms ago: executing program 2 (id=5397): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) unshare(0x20000400) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0xfffffffffffffffc, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x84) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214e, 0xc000, 0x0, 0xc6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000340)="b5", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r3, 0x2219, 0x1adf, 0x16, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r4, &(0x7f0000000180)=@other={'unlock', ' ', 'mem'}, 0xb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x201f00) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x2e0a5000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) 0s ago: executing program 4 (id=5398): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="001500e6000011228847447d41e09cc08e4745084a2b6838e08deac6c6656bce738cffa84b106594e25bbb54f2e53496161d256cb449c3817080d0c70404adeac9f0c79d12a4"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="0833de00000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0xe}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "1e82213b40542f51b9cc9d04678630e292e932b2b5604a27d5c6ade6946410b8dabd0bf69d181ccfaa5bb6527cfb3d"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a40)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 5745] gspca_stk1135: Sensor read failed [ 1293.934696][ T5745] gspca_stk1135: Detected sensor type unknown (0x0) [ 1293.942146][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 1293.949027][ T5745] gspca_stk1135: Sensor read failed [ 1293.954457][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 1293.972444][T23259] __vm_enough_memory: pid: 23259, comm: syz.3.5176, bytes: 4503599627366400 not enough memory for the allocation [ 1293.975331][ T5745] gspca_stk1135: Sensor read failed [ 1294.002972][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 1294.016917][T12370] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1294.025499][ T5745] gspca_stk1135: Sensor write failed [ 1294.035670][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 1294.050087][ T5745] gspca_stk1135: Sensor write failed [ 1294.055566][ T5745] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1294.069381][ T997] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1294.079093][ T997] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.087006][ T5745] usb 3-1: USB disconnect, device number 114 [ 1294.091601][ T997] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1294.113774][ T997] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1294.124753][ T997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.134007][ T997] usb 2-1: Product: syz [ 1294.139229][ T997] usb 2-1: Manufacturer: syz [ 1294.144138][ T997] usb 2-1: SerialNumber: syz [ 1294.168315][ T997] usb 2-1: config 0 descriptor?? [ 1294.199362][T12370] usb 5-1: Using ep0 maxpacket: 8 [ 1294.222648][T12370] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 1294.240682][T12370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.249021][T12370] usb 5-1: Product: syz [ 1294.253756][T12370] usb 5-1: Manufacturer: syz [ 1294.260814][T12370] usb 5-1: SerialNumber: syz [ 1294.277250][T12370] usb 5-1: config 0 descriptor?? [ 1294.289607][T12370] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1294.399342][ T5745] usb 2-1: USB disconnect, device number 108 [ 1294.746840][T12375] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1294.906838][T12375] usb 3-1: Using ep0 maxpacket: 8 [ 1294.923221][T12375] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1294.937272][ T997] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1294.953075][T12375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.991838][T12375] usb 3-1: config 0 descriptor?? [ 1295.028461][T12375] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1295.149519][ T997] usb 4-1: Using ep0 maxpacket: 8 [ 1295.165394][ T997] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1295.188867][ T997] usb 4-1: config 6 has an invalid interface number: 172 but max is 0 [ 1295.211263][ T997] usb 4-1: config 6 has no interface number 0 [ 1295.224373][ T997] usb 4-1: config 6 interface 172 has no altsetting 0 [ 1295.243730][ T997] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=76.1a [ 1295.277915][ T997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.311845][T12375] cxusb: set interface failed [ 1295.325181][ T997] usb 4-1: Product: ãšáŒ³ï«˜Öᶙﴉì‘ê²äª°å€šî¯žä¢·äœ¿é€‰ã”¬ä·”ꘂ斸⢿욱䫞쪀࿿墽褬嘩뵂༛诘﷎䘩拎놡ﲩ쿄ê¬ê¨£ì”¦î’Šé®˜æ”知ୱUæ”弎鸽癢æ¦ã±œá„´è½¢ç˜¼é»Šë¥è‘¹ì‡­çº¾ [ 1295.325227][T12375] dvb-usb: bulk message failed: -22 (1/0) [ 1295.398795][T12375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1295.412664][ T997] usb 4-1: Manufacturer: Ð [ 1295.415534][T12375] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1295.437290][T12375] usb 3-1: media controller created [ 1295.444799][ T997] usb 4-1: SerialNumber: 듊模颸ᆖ䀣膜଺᛫奨뻫崴箎⫊ヌ䔬ナ몳⶟⹹愖撖꾴鴉佫쟷뱱᳅鱠åâ¹ã†¡ã¼¹é”ªãª²à¾žç® [ 1295.493128][T12375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1295.661603][T12375] DVB: Unable to find symbol lgdt330x_attach() [ 1295.671174][T12375] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1295.685456][T12375] dvb-usb: bulk message failed: -22 (1/0) [ 1295.695214][T12375] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1295.721106][T12375] usb 3-1: USB disconnect, device number 115 [ 1295.813339][T12375] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1295.847320][ T997] usb_8dev 4-1:6.172 can0: sending command message failed [ 1295.882064][ T997] usb_8dev 4-1:6.172 can0: can't get firmware version [ 1295.993211][T23286] netlink: 'syz.0.5185': attribute type 5 has an invalid length. [ 1296.004724][ T997] usb_8dev 4-1:6.172: probe with driver usb_8dev failed with error -22 [ 1296.015542][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5185'. [ 1296.029652][ T997] usb 4-1: USB disconnect, device number 3 [ 1296.133007][T23288] syzkaller0: entered promiscuous mode [ 1296.141706][T23288] syzkaller0: entered allmulticast mode [ 1296.428668][T23305] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5188'. [ 1296.526349][T23308] __vm_enough_memory: pid: 23308, comm: syz.2.5191, bytes: 4503599627366400 not enough memory for the allocation [ 1296.559864][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1296.559887][ T30] audit: type=1326 audit(1785307578.668:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b2597c17 code=0x7ffc0000 [ 1296.586954][T12375] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1296.621373][ T30] audit: type=1326 audit(1785307578.698:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b253f219 code=0x7ffc0000 [ 1296.649173][ T30] audit: type=1326 audit(1785307578.698:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b2597c17 code=0x7ffc0000 [ 1296.698759][ T30] audit: type=1326 audit(1785307578.698:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b253f219 code=0x7ffc0000 [ 1296.733965][ T997] usb 5-1: USB disconnect, device number 107 [ 1296.743669][ T30] audit: type=1326 audit(1785307578.698:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b2597c17 code=0x7ffc0000 [ 1296.808617][T12375] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1296.824158][ T30] audit: type=1326 audit(1785307578.698:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b253f219 code=0x7ffc0000 [ 1296.836191][T12375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.873139][T12375] usb 4-1: Product: syz [ 1296.886568][T12375] usb 4-1: Manufacturer: syz [ 1296.900190][T23313] syzkaller1: entered promiscuous mode [ 1296.906264][ T30] audit: type=1326 audit(1785307578.698:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b2597c17 code=0x7ffc0000 [ 1296.923188][T12375] usb 4-1: SerialNumber: syz [ 1296.935977][T23313] syzkaller1: entered allmulticast mode [ 1296.945805][ T30] audit: type=1326 audit(1785307578.698:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b253f219 code=0x7ffc0000 [ 1296.982528][T12375] usb 4-1: config 0 descriptor?? [ 1297.010417][T12375] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1297.024371][ T30] audit: type=1326 audit(1785307578.698:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b2597c17 code=0x7ffc0000 [ 1297.052799][ T30] audit: type=1326 audit(1785307578.698:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b253f219 code=0x7ffc0000 [ 1297.372654][T23324] syzkaller0: entered promiscuous mode [ 1297.378431][T23324] syzkaller0: entered allmulticast mode [ 1297.456802][T12370] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1297.517614][ T997] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1297.616820][T12370] usb 2-1: Using ep0 maxpacket: 32 [ 1297.624325][T12370] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1297.634065][T12370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.652000][T12370] usb 2-1: config 0 descriptor?? [ 1297.667581][T12370] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1297.692818][ T997] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1297.707420][ T997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.725347][ T997] usb 5-1: Product: syz [ 1297.733362][ T997] usb 5-1: Manufacturer: syz [ 1297.740790][ T997] usb 5-1: SerialNumber: syz [ 1298.170310][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1298.183056][ T5699] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1298.183432][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1298.366893][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 1298.377928][ T5699] usb 1-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 1298.387201][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.395271][ T5699] usb 1-1: Product: syz [ 1298.399560][ T5699] usb 1-1: Manufacturer: syz [ 1298.404247][ T5699] usb 1-1: SerialNumber: syz [ 1298.414426][ T5699] usb 1-1: config 0 descriptor?? [ 1298.430224][ T5699] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1298.507242][T12364] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1298.657147][T12364] usb 3-1: Using ep0 maxpacket: 32 [ 1298.664854][T12364] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1298.673856][T12364] usb 3-1: config 0 has no interface number 0 [ 1298.680062][T12364] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1298.690048][T12370] gspca_nw80x: reg_w err -71 [ 1298.696194][T12370] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 1298.696623][T12364] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1298.716607][T12370] usb 2-1: USB disconnect, device number 109 [ 1298.727689][T12364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.735995][T12364] usb 3-1: Product: syz [ 1298.743351][T12364] usb 3-1: Manufacturer: syz [ 1298.749731][T12364] usb 3-1: SerialNumber: syz [ 1298.782910][T12364] usb 3-1: config 0 descriptor?? [ 1299.650178][ T5699] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1299.810530][T23339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.824079][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1299.834076][ T5699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 1299.847318][T23339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.860328][ T5699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 179, changing to 7 [ 1299.877720][ T5699] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 1299.888169][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.899206][ T5699] usb 2-1: Product: syz [ 1299.905643][ T5699] usb 2-1: Manufacturer: syz [ 1299.912494][ T5699] usb 2-1: SerialNumber: syz [ 1300.034400][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1300.049717][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1300.070273][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1300.083085][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1300.094535][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1300.106402][ T997] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1300.134609][ T997] usb 5-1: USB disconnect, device number 108 [ 1300.188967][T12375] gspca_stk1135: reg_w 0x352 err -71 [ 1300.201061][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.208287][T12375] gspca_stk1135: Sensor write failed [ 1300.214495][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.222227][T12375] gspca_stk1135: Sensor write failed [ 1300.228597][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.235521][T12375] gspca_stk1135: Sensor read failed [ 1300.243117][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.250457][T12375] gspca_stk1135: Sensor read failed [ 1300.256901][T12375] gspca_stk1135: Detected sensor type unknown (0x0) [ 1300.263997][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.270881][T12375] gspca_stk1135: Sensor read failed [ 1300.276316][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.282984][T12375] gspca_stk1135: Sensor read failed [ 1300.288484][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.295380][T12375] gspca_stk1135: Sensor write failed [ 1300.301044][T12375] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.308511][T12375] gspca_stk1135: Sensor write failed [ 1300.314097][T12375] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1300.335481][T12375] usb 4-1: USB disconnect, device number 4 [ 1300.369266][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.376061][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.528905][T12364] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1300.540139][T12364] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1300.551088][T12364] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1300.559148][T12364] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1300.579291][T12364] usb 3-1: USB disconnect, device number 116 [ 1300.794282][T23353] __vm_enough_memory: pid: 23353, comm: syz.4.5207, bytes: 4503599627366400 not enough memory for the allocation [ 1300.891854][T12375] usb 1-1: USB disconnect, device number 86 [ 1301.016833][T12364] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1301.167308][T12364] usb 4-1: Using ep0 maxpacket: 32 [ 1301.175424][T12364] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1301.184959][T12364] usb 4-1: config 0 has no interface number 0 [ 1301.193579][T12364] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1301.204898][T12364] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1301.215700][T12364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.226054][T12364] usb 4-1: Product: syz [ 1301.231858][T12364] usb 4-1: Manufacturer: syz [ 1301.236597][T12364] usb 4-1: SerialNumber: syz [ 1301.244706][T12364] usb 4-1: config 0 descriptor?? [ 1301.286875][T12375] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1301.316842][ T997] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1301.444409][T12375] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1301.455884][T12375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.465878][T12375] usb 1-1: Product: syz [ 1301.471022][T12375] usb 1-1: Manufacturer: syz [ 1301.475788][T12375] usb 1-1: SerialNumber: syz [ 1301.488207][ T997] usb 3-1: Using ep0 maxpacket: 32 [ 1301.510073][ T997] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1301.519967][ T997] usb 3-1: config 0 has no interface number 0 [ 1301.532285][ T997] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1301.545087][ T997] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1301.555545][ T997] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1301.568402][ T997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.576578][ T997] usb 3-1: Product: syz [ 1301.581942][ T997] usb 3-1: Manufacturer: syz [ 1301.587353][ T997] usb 3-1: SerialNumber: syz [ 1301.599995][ T997] usb 3-1: config 0 descriptor?? [ 1301.833076][ T997] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1301.861461][ T997] cx231xx 3-1:0.1: Failed to read PCB config [ 1301.872732][ T997] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1301.896469][ T997] usb 3-1: USB disconnect, device number 117 [ 1301.910740][T12375] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1301.941692][T12375] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1302.371874][ T997] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1302.396520][ T5699] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1302.405748][ T5699] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1302.417931][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.426588][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.440155][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.450192][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.459132][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.468391][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.481215][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.490007][ T5699] usb 2-1: unable to issue vendor read request (ret = -71) [ 1302.536877][ T997] usb 3-1: Using ep0 maxpacket: 32 [ 1302.558641][ T997] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1302.584061][ T997] usb 3-1: config 0 has no interface number 0 [ 1302.592186][ T5699] usb 2-1: USB disconnect, device number 110 [ 1302.601191][ T997] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1302.629815][ T997] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1302.642352][ T997] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1302.661157][ T997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.670136][ T997] usb 3-1: Product: syz [ 1302.674605][ T997] usb 3-1: Manufacturer: syz [ 1302.680364][ T997] usb 3-1: SerialNumber: syz [ 1302.730610][ T997] usb 3-1: config 0 descriptor?? [ 1302.743838][T17092] udevd[17092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1302.954020][ T997] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1302.965907][ T997] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1303.056919][ T5699] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1303.077048][ T997] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1303.085698][ T997] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1303.103886][T12364] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1303.112164][ T997] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1303.120505][T12364] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1303.128470][ T997] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1303.137701][T12364] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1303.146210][T12364] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1303.146399][ T997] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1303.168378][T23357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.169664][T12364] usb 4-1: USB disconnect, device number 5 [ 1303.186407][ T997] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 1303.196071][T12375] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1303.220084][T23357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.233188][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.258625][ T5699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1303.281217][ T5699] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1303.299368][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1303.314490][ T5699] usb 2-1: SerialNumber: syz [ 1303.323971][ T997] i2c i2c-2: Added multiplexed i2c bus 4 [ 1303.351784][ T997] i2c i2c-2: Added multiplexed i2c bus 5 [ 1303.363153][ T997] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1303.383000][T22432] Bluetooth: hci3: unexpected event for opcode 0x6e0f [ 1303.391440][ T997] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1303.443986][ T997] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1303.464694][ T997] usb 3-1: USB disconnect, device number 118 [ 1303.583019][ T5699] usb 2-1: 0:2 : does not exist [ 1303.668502][ T5699] usb 2-1: USB disconnect, device number 111 [ 1303.765288][T17087] udevd[17087]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1303.863104][T12375] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1303.901731][T12375] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1303.929963][T12375] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1303.944455][T12375] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1303.964502][T12375] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1303.991038][T12375] usb 1-1: USB disconnect, device number 87 [ 1304.166800][ T5699] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1304.339594][ T5699] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1304.359236][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.379351][ T5699] usb 4-1: Product: syz [ 1304.388671][ T5699] usb 4-1: Manufacturer: syz [ 1304.400423][ T5699] usb 4-1: SerialNumber: syz [ 1304.414990][ T5699] usb 4-1: config 0 descriptor?? [ 1304.439647][ T5699] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1304.527090][T12375] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1304.686777][T12375] usb 2-1: Using ep0 maxpacket: 8 [ 1304.699002][T12375] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1304.726892][T12375] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1304.751075][T12375] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1304.771844][T23392] __vm_enough_memory: pid: 23392, comm: syz.0.5221, bytes: 4503599627366400 not enough memory for the allocation [ 1304.779793][T12375] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1304.808907][T12375] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1304.822786][T12375] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1304.832164][T12375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.060775][T12375] usb 2-1: GET_CAPABILITIES returned 0 [ 1305.068755][T12375] usbtmc 2-1:16.0: can't read capabilities [ 1305.461019][T23400] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1305.846823][T12375] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1306.029696][T12375] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1306.041766][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1306.053721][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1306.064560][T12375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1306.078438][T12375] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1306.088111][T12375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.099467][T12375] usb 3-1: config 0 descriptor?? [ 1306.266923][ T997] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1306.395018][T22432] Bluetooth: hci2: unexpected event for opcode 0x041c [ 1306.432913][ T997] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1306.453588][ T997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.464491][ T997] usb 5-1: Product: syz [ 1306.470181][ T997] usb 5-1: Manufacturer: syz [ 1306.474965][ T997] usb 5-1: SerialNumber: syz [ 1306.534856][T12375] plantronics 0003:047F:FFFF.00BB: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1306.567844][T23410] syzkaller0: entered promiscuous mode [ 1306.574688][T23410] syzkaller0: entered allmulticast mode [ 1306.749651][T23413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1306.894255][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1306.907569][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1307.087421][T12364] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1307.168757][T12370] usb 3-1: USB disconnect, device number 119 [ 1307.266815][T12364] usb 1-1: Using ep0 maxpacket: 32 [ 1307.282822][T12364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1307.297071][T12364] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1307.306624][T12364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.320940][T12364] usb 1-1: Product: syz [ 1307.334652][T12364] usb 1-1: Manufacturer: syz [ 1307.342946][T12364] usb 1-1: SerialNumber: syz [ 1307.382218][T12375] usb 2-1: USB disconnect, device number 112 [ 1307.407921][T22432] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1307.422902][T22432] Bluetooth: hci3: Injecting HCI hardware error event [ 1307.439746][ T5632] Bluetooth: hci3: hardware error 0x00 [ 1307.608846][ T5699] gspca_stk1135: reg_w 0x352 err -71 [ 1307.620017][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.630640][ T5699] gspca_stk1135: Sensor write failed [ 1307.636511][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.645063][ T5699] gspca_stk1135: Sensor write failed [ 1307.652290][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.660040][ T5699] gspca_stk1135: Sensor read failed [ 1307.665386][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.673021][ T5699] gspca_stk1135: Sensor read failed [ 1307.680455][ T5699] gspca_stk1135: Detected sensor type unknown (0x0) [ 1307.688176][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.701984][ T5699] gspca_stk1135: Sensor read failed [ 1307.716909][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.727116][ T5699] gspca_stk1135: Sensor read failed [ 1307.737757][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.754542][ T5699] gspca_stk1135: Sensor write failed [ 1307.764715][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 1307.779057][ T5699] gspca_stk1135: Sensor write failed [ 1307.786394][T12364] usb 1-1: unit 0 not found! [ 1307.795487][ T5699] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1307.829290][ T5699] usb 4-1: USB disconnect, device number 6 [ 1307.866794][T12375] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1308.002173][T23415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5229'. [ 1308.026818][T12375] usb 2-1: Using ep0 maxpacket: 32 [ 1308.050100][T12375] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1308.072984][T12375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.093105][T12364] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1308.106253][T12375] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1308.127064][T12364] usb 1-1: unit 0 not found! [ 1308.139779][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1308.166338][T12364] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1308.198259][T13699] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1308.208992][T12364] usb 1-1: unit 0 not found! [ 1308.361398][T12364] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1308.377132][T13699] usb 3-1: Using ep0 maxpacket: 8 [ 1308.389564][T12364] usb 1-1: USB disconnect, device number 88 [ 1308.400756][T13699] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.414058][T13699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1308.425739][T13699] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1308.466590][T13699] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1308.484785][T13699] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 1308.493919][ T5699] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1308.502232][T13699] usb 3-1: Product: syz [ 1308.509906][T13699] usb 3-1: SerialNumber: syz [ 1308.513803][T17101] udevd[17101]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.704804][ T5699] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1308.727297][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.749511][ T5699] usb 4-1: Product: syz [ 1308.759665][ T5699] usb 4-1: Manufacturer: syz [ 1308.776368][ T5699] usb 4-1: SerialNumber: syz [ 1308.791020][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1308.810346][T23419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.835300][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1308.850226][T23419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.885625][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5231'. [ 1308.895572][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1308.918049][ T997] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1308.943088][T12375] gspca_nw80x: reg_w err -71 [ 1308.948320][T12375] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 1308.979634][T12375] usb 2-1: USB disconnect, device number 113 [ 1308.980303][ T997] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1309.040950][ T997] usb 5-1: USB disconnect, device number 109 [ 1309.238843][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1309.256389][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1309.275954][T23435] __vm_enough_memory: pid: 23435, comm: syz.0.5234, bytes: 4503599627366400 not enough memory for the allocation [ 1309.489639][ T5632] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1309.766784][T12370] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1309.878705][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1309.898193][T12364] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1309.927936][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1309.948654][T12370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.980316][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1310.007184][T12370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.023354][T12370] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1310.039185][ T5699] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1310.060699][T12370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.077335][T12364] usb 2-1: Using ep0 maxpacket: 32 [ 1310.094434][T12364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1310.114153][T12370] usb 5-1: config 0 descriptor?? [ 1310.121072][T12364] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1310.189041][T12364] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1310.219376][T12364] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1310.229801][T23443] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5238'. [ 1310.241031][T12364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.263315][T12364] usb 2-1: Product: syz [ 1310.285469][T12364] usb 2-1: Manufacturer: syz [ 1310.305347][T12364] usb 2-1: SerialNumber: syz [ 1310.322781][T23443] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5238'. [ 1310.571626][T12370] hid_parser_main: 4 callbacks suppressed [ 1310.571653][T12370] cp2112 0003:10C4:EA90.00BC: unknown main item tag 0x0 [ 1310.619676][T12364] usb 2-1: unit 0 not found! [ 1310.658932][T12370] cp2112 0003:10C4:EA90.00BC: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1310.812088][T12364] usb 2-1: USB disconnect, device number 114 [ 1310.823665][T12370] cp2112 0003:10C4:EA90.00BC: error requesting version [ 1310.885775][T12370] cp2112 0003:10C4:EA90.00BC: probe with driver cp2112 failed with error -32 [ 1310.941684][T12370] usb 5-1: USB disconnect, device number 110 [ 1311.163490][T13699] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1311.181610][T13699] cdc_ncm 3-1:1.0: bind() failure [ 1311.211808][T13699] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1311.242807][T13699] gspca_spca501: reg write: error -71 [ 1311.268070][T13699] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1311.299370][T13699] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 1311.315254][T23460] tipc: Cannot configure node identity twice [ 1311.347051][T12364] usb 4-1: USB disconnect, device number 7 [ 1311.358781][T13699] usb 3-1: USB disconnect, device number 120 [ 1311.816843][T12370] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1311.851291][T13699] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1311.894772][T23479] fuse: Unknown parameter '‚yotmode' [ 1311.911127][T23479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1311.920639][ T5699] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1311.928485][T23479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1311.981477][T12370] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1312.004268][T12375] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1312.014976][T12370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.027193][T13699] usb 3-1: Using ep0 maxpacket: 16 [ 1312.031872][T12370] usb 5-1: Product: syz [ 1312.038735][T12370] usb 5-1: Manufacturer: syz [ 1312.044027][T12370] usb 5-1: SerialNumber: syz [ 1312.050985][T13699] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1312.061033][T13699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.074024][T13699] usb 3-1: config 0 has no interface number 0 [ 1312.083628][T13699] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1312.093472][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1312.095562][T13699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.115518][T13699] usb 3-1: Product: syz [ 1312.122189][T13699] usb 3-1: Manufacturer: syz [ 1312.123681][ T5699] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1312.129504][T13699] usb 3-1: SerialNumber: syz [ 1312.144492][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.148310][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1312.148362][ T30] audit: type=1326 audit(1785307594.248:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23480 comm="syz.1.5250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b259de99 code=0x7fc00000 [ 1312.191362][ T30] audit: type=1326 audit(1785307594.298:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23480 comm="syz.1.5250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb0b259de99 code=0x7fc00000 [ 1312.218884][ T30] audit: type=1326 audit(1785307594.298:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23480 comm="syz.1.5250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b259de99 code=0x7fc00000 [ 1312.228933][ T5699] usb 4-1: config 0 descriptor?? [ 1312.253148][T12375] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1312.260457][T13699] usb 3-1: config 0 descriptor?? [ 1312.281542][T12375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1312.300581][T12375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1312.301623][T13699] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 1312.312931][T12375] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.332191][T23473] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1312.355711][T12375] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.380382][T12375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.399780][T12375] usb 1-1: config 0 descriptor?? [ 1312.501044][T12370] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1312.520374][T12370] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1312.540603][T23467] netlink: 'syz.2.5246': attribute type 1 has an invalid length. [ 1312.632520][T13699] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1312.641980][T13699] uvcvideo 3-1:0.105: No valid video chain found. [ 1312.660228][T13699] usb 3-1: USB disconnect, device number 121 [ 1312.771347][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.784007][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.791502][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.800349][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.808701][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.822171][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.839422][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.853301][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.861815][T12375] plantronics 0003:047F:FFFF.00BE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1312.885088][ T5699] asus 0003:0B05:1ABE.00BD: unknown main item tag 0x0 [ 1312.906142][ T5699] asus 0003:0B05:1ABE.00BD: reserved main item tag 0xd [ 1312.921860][ T5699] asus 0003:0B05:1ABE.00BD: hidraw1: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0 [ 1313.245716][T23491] netlink: 'syz.2.5252': attribute type 17 has an invalid length. [ 1313.257458][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1313.342050][T23493] netlink: 'syz.2.5253': attribute type 6 has an invalid length. [ 1313.350870][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5253'. [ 1313.432302][T23495] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1313.443553][T23495] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1313.455504][T23495] vhci_hcd vhci_hcd.0: Device attached [ 1313.580469][ T997] usb 1-1: USB disconnect, device number 89 [ 1313.627885][T12375] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1313.696963][T12375] usb 35-1: new full-speed USB device number 13 using vhci_hcd [ 1313.707625][ T5745] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1313.764889][T12370] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1313.807057][T13699] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1313.848237][ T5699] asus 0003:0B05:1ABE.00BD: Asus handshake 5a failed to receive ack: -71 [ 1313.868456][ T5699] usb 4-1: USB disconnect, device number 8 [ 1313.877095][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 1313.893191][ T5745] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1313.928222][ T5745] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 1313.948499][T13699] usb 3-1: device descriptor read/64, error -71 [ 1313.950949][ T5745] usb 2-1: config 9 has no interface number 0 [ 1313.982336][ T5745] usb 2-1: config 9 interface 57 has no altsetting 0 [ 1313.997941][ T5745] usb 2-1: string descriptor 0 read error: -22 [ 1314.007588][ T5745] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1314.027547][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.206832][T13699] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1314.357581][T13699] usb 3-1: device descriptor read/64, error -71 [ 1314.380501][T23516] fuse: Bad value for 'fd' [ 1314.413703][T12370] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1314.459709][ T5745] video4linux radio48: keene_cmd_main failed (-71) [ 1314.471935][T23496] vhci_hcd: connection reset by peer [ 1314.484809][T12370] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1314.505098][ T5745] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 1314.512109][T13699] usb usb3-port1: attempt power cycle [ 1314.522700][T22636] vhci_hcd vhci_hcd.1: stop threads [ 1314.528968][T12370] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1314.541884][T22636] vhci_hcd vhci_hcd.1: release socket [ 1314.541887][ T5745] usb 2-1: USB disconnect, device number 115 [ 1314.559759][T12370] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1314.573467][T22636] vhci_hcd vhci_hcd.1: disconnect device [ 1314.593531][T12370] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1314.631570][T12370] usb 5-1: USB disconnect, device number 111 [ 1314.887058][T13699] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1314.917842][T13699] usb 3-1: device descriptor read/8, error -71 [ 1314.927237][T23523] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1314.955114][T23523] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1315.140825][T23528] netlink: 'syz.4.5263': attribute type 17 has an invalid length. [ 1315.152642][T23529] FAULT_INJECTION: forcing a failure. [ 1315.152642][T23529] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.166348][T23529] CPU: 0 UID: 0 PID: 23529 Comm: syz.0.5265 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.166388][T23529] Tainted: [L]=SOFTLOCKUP [ 1315.166398][T23529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1315.166422][T23529] Call Trace: [ 1315.166431][T23529] [ 1315.166442][T23529] dump_stack_lvl+0xe8/0x150 [ 1315.166484][T23529] should_fail_ex+0x40c/0x560 [ 1315.166520][T23529] should_failslab+0xa8/0x100 [ 1315.166557][T23529] __kmalloc_noprof+0xfe/0x720 [ 1315.166589][T23529] ? sock_kmalloc+0xd6/0x160 [ 1315.166615][T23529] ? sock_kmalloc+0xd6/0x160 [ 1315.166654][T23529] sock_kmalloc+0xd6/0x160 [ 1315.166686][T23529] alg_setkey+0x55/0x190 [ 1315.166715][T23529] ? alg_setsockopt+0x3c5/0x4a0 [ 1315.166745][T23529] alg_setsockopt+0x3da/0x4a0 [ 1315.166776][T23529] ? __pfx_alg_setsockopt+0x10/0x10 [ 1315.166808][T23529] do_sock_setsockopt+0x17c/0x1b0 [ 1315.166838][T23529] __x64_sys_setsockopt+0x13d/0x1b0 [ 1315.166867][T23529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.166892][T23529] do_syscall_64+0x174/0x580 [ 1315.166918][T23529] ? trace_irq_disable+0x3b/0x140 [ 1315.166949][T23529] ? clear_bhb_loop+0x40/0x90 [ 1315.166977][T23529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.167000][T23529] RIP: 0033:0x7fd10399de99 [ 1315.167023][T23529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.167043][T23529] RSP: 002b:00007fd104941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1315.167066][T23529] RAX: ffffffffffffffda RBX: 00007fd103c25fa0 RCX: 00007fd10399de99 [ 1315.167083][T23529] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1315.167096][T23529] RBP: 00007fd104941090 R08: 0000000000000020 R09: 0000000000000000 [ 1315.167111][T23529] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1315.167125][T23529] R13: 00007fd103c26038 R14: 00007fd103c25fa0 R15: 00007fd103d4fa48 [ 1315.167160][T23529] [ 1315.171177][T13699] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1315.309183][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5263'. [ 1315.517972][T23531] lo: MTU too low for tipc bearer [ 1315.525873][T13699] usb 3-1: device descriptor read/8, error -71 [ 1315.548405][T23531] tipc: Enabling of bearer rejected, failed to enable media [ 1315.580341][T23531] loop5: detected capacity change from 0 to 7 [ 1315.596552][ C1] blk_print_req_error: 131 callbacks suppressed [ 1315.596576][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.617123][ C1] buffer_io_error: 130 callbacks suppressed [ 1315.617143][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.632465][T23534] openvswitch: netlink: IP tunnel dst address not specified [ 1315.664460][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.678650][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.690018][T13699] usb usb3-port1: unable to enumerate USB device [ 1315.695064][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.706764][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.716718][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.726794][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.739404][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.750141][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.758820][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.769259][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.778500][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.788694][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.798731][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.809343][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.818866][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.828583][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.837310][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1315.847516][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1315.857770][T23531] ldm_validate_partition_table(): Disk read failed. [ 1315.866185][T23531] Dev loop5: unable to read RDB block 0 [ 1315.881787][T23531] loop5: unable to read partition table [ 1315.909265][T23531] loop5: partition table beyond EOD, truncated [ 1315.926833][T23531] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1316.302936][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5270'. [ 1316.348194][T12370] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1316.446801][ T5745] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1316.509089][T12370] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1316.519272][T12370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.542862][T12370] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1316.567099][T13699] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1316.576894][T12370] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1316.587588][T12370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.596284][T12370] usb 2-1: Product: syz [ 1316.601191][T12370] usb 2-1: Manufacturer: syz [ 1316.605883][T12370] usb 2-1: SerialNumber: syz [ 1316.610862][ T5745] usb 1-1: Using ep0 maxpacket: 8 [ 1316.618277][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.630389][ T5745] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1316.644652][T12370] usb 2-1: config 0 descriptor?? [ 1316.660610][ T5745] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1316.681954][ T5745] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1316.692672][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.705692][ T5745] usb 1-1: Product: syz [ 1316.713418][ T5745] usb 1-1: Manufacturer: syz [ 1316.723219][ T5745] usb 1-1: SerialNumber: syz [ 1316.729878][T13699] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1316.760652][T13699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1316.788834][T13699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1316.809004][T13699] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1316.842933][T13699] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1316.856783][T13699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.887073][T13699] usb 5-1: config 0 descriptor?? [ 1316.914959][ T997] usb 2-1: USB disconnect, device number 116 [ 1317.365549][T23553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5273'. [ 1317.381417][T13699] plantronics 0003:047F:FFFF.00BF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1317.855099][T23561] [U]  [ 1317.867182][T23561] [U] K{‘ [ 1317.882514][T23561] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1317.941720][T23561] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1317.983226][T13699] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1317.999185][T23561] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1318.098734][T23561] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1318.212176][T13699] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1318.227217][T23561] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1318.261841][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1318.291030][T13699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.319267][ T997] usb 5-1: USB disconnect, device number 112 [ 1318.331045][T13699] usb 2-1: Product: syz [ 1318.359652][T13699] usb 2-1: Manufacturer: syz [ 1318.381658][T13699] usb 2-1: SerialNumber: syz [ 1318.413068][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1318.437501][T23561] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1318.465324][T23561] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1318.496444][T23561] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 1318.837334][T12375] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1318.860312][T23561] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 1318.937460][T23561] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1318.952729][T13699] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1318.969813][T13699] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1319.048343][T23561] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1319.074148][T23561] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1319.219388][T23561] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1319.245749][T23561] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1319.283055][T23561] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1319.291068][T23561] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1319.369797][T23561] [U] ¹ EC [ 1319.393259][T23561] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 1319.474585][T23571] netlink: 'syz.4.5277': attribute type 8 has an invalid length. [ 1319.483684][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5277'. [ 1319.509273][T23561] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1320.044029][T23575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1320.215538][T13699] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1320.246215][T23577] FAULT_INJECTION: forcing a failure. [ 1320.246215][T23577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.300773][T23577] CPU: 1 UID: 0 PID: 23577 Comm: syz.4.5279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.300830][T23577] Tainted: [L]=SOFTLOCKUP [ 1320.300840][T23577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1320.300856][T23577] Call Trace: [ 1320.300866][T23577] [ 1320.300875][T23577] dump_stack_lvl+0xe8/0x150 [ 1320.300915][T23577] should_fail_ex+0x40c/0x560 [ 1320.300947][T23577] _copy_from_user+0x2d/0xb0 [ 1320.300977][T23577] ___sys_sendmsg+0x1c6/0x360 [ 1320.301005][T23577] ? __lock_acquire+0x683/0x2cf0 [ 1320.301040][T23577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1320.301092][T23577] ? __fget_files+0x2a/0x420 [ 1320.301125][T23577] ? __fget_files+0x3a2/0x420 [ 1320.301167][T23577] __x64_sys_sendmsg+0x1b1/0x290 [ 1320.301195][T23577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1320.301235][T23577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.301252][T23577] do_syscall_64+0x174/0x580 [ 1320.301282][T23577] ? trace_irq_disable+0x3b/0x140 [ 1320.301313][T23577] ? clear_bhb_loop+0x40/0x90 [ 1320.301340][T23577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.301365][T23577] RIP: 0033:0x7f69bbf9de99 [ 1320.301380][T23577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.301394][T23577] RSP: 002b:00007f69bce0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.301411][T23577] RAX: ffffffffffffffda RBX: 00007f69bc225fa0 RCX: 00007f69bbf9de99 [ 1320.301434][T23577] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000016 [ 1320.301448][T23577] RBP: 00007f69bce0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.301463][T23577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.301476][T23577] R13: 00007f69bc226038 R14: 00007f69bc225fa0 R15: 00007f69bc34fa48 [ 1320.301509][T23577] [ 1320.645587][T23582] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20003 [ 1320.818464][ T5745] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1320.837823][ T5745] usb 1-1: 0:2 : does not exist [ 1320.877751][T12375] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1320.905283][T13699] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1320.931529][T13699] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1320.966507][T13699] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1320.986087][T13699] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1321.033505][T13699] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1321.057066][T12375] usb 5-1: Using ep0 maxpacket: 8 [ 1321.079306][T12375] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1321.087813][ T5745] usb 1-1: USB disconnect, device number 90 [ 1321.100616][T13699] usb 2-1: USB disconnect, device number 117 [ 1321.103092][T12375] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1321.158130][T12375] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1321.191519][T12375] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1321.216815][T12375] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.233279][T21451] udevd[21451]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.273936][T12375] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1321.302241][T12375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.553109][T12375] usb 5-1: GET_CAPABILITIES returned 0 [ 1321.573165][T12375] usbtmc 5-1:16.0: can't read capabilities [ 1321.590764][T23594] fuse: Unknown parameter 'fTyó J™dÅd' [ 1321.604341][T23587] syz.2.5280 (23587): drop_caches: 2 [ 1321.755215][T23599] netlink: 'syz.3.5286': attribute type 11 has an invalid length. [ 1322.021492][T23608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5289'. [ 1322.137301][T23610] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20003 [ 1322.584974][T23611] syz.0.5288 (23611): drop_caches: 2 [ 1322.678641][T23611] syz.0.5288 (23611): drop_caches: 2 [ 1322.856811][T12375] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1323.034017][T12375] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1323.058262][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1323.077112][T12375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1323.090853][T12375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1323.105127][T12375] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1323.115216][T12375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.127657][T12375] usb 3-1: config 0 descriptor?? [ 1323.593368][T12375] plantronics 0003:047F:FFFF.00C0: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1323.647784][ T5745] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1323.748288][T12375] usb 5-1: USB disconnect, device number 113 [ 1323.786202][T23629] __vm_enough_memory: pid: 23629, comm: syz.0.5295, bytes: 4503599627366400 not enough memory for the allocation [ 1323.817437][ T5745] usb 4-1: Using ep0 maxpacket: 32 [ 1323.825322][ T5745] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1323.835555][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.849666][ T5745] usb 4-1: config 0 descriptor?? [ 1323.871736][ T5745] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1324.218373][T12375] usb 3-1: USB disconnect, device number 126 [ 1324.509729][T23640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1324.817059][T12375] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1324.876082][ T5745] gspca_nw80x: reg_w err -71 [ 1324.891370][ T5745] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1324.941654][ T5745] usb 4-1: USB disconnect, device number 9 [ 1324.959989][ T30] audit: type=1326 audit(1785307607.068:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.1.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0b259de99 code=0x0 [ 1324.986727][T12375] usb 1-1: Using ep0 maxpacket: 16 [ 1325.003079][T12375] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1325.031283][T23650] FAULT_INJECTION: forcing a failure. [ 1325.031283][T23650] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.034898][T12375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1325.055095][T23650] CPU: 1 UID: 0 PID: 23650 Comm: syz.2.5301 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.055192][T23650] Tainted: [L]=SOFTLOCKUP [ 1325.055223][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1325.055266][T23650] Call Trace: [ 1325.055295][T23650] [ 1325.055319][T23650] dump_stack_lvl+0xe8/0x150 [ 1325.055431][T23650] should_fail_ex+0x40c/0x560 [ 1325.055525][T23650] should_failslab+0xa8/0x100 [ 1325.055634][T23650] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1325.055690][T23650] ? dup_task_struct+0x52/0x8e0 [ 1325.055716][T23650] ? dup_task_struct+0x52/0x8e0 [ 1325.055749][T23650] dup_task_struct+0x52/0x8e0 [ 1325.055774][T23650] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.055802][T23650] copy_process+0x820/0x4390 [ 1325.055863][T23650] ? __pfx_copy_process+0x10/0x10 [ 1325.055898][T23650] ? mutex_init_lockdep+0xdf/0x110 [ 1325.055924][T23650] vhost_task_create+0x1f9/0x380 [ 1325.055958][T23650] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1325.056085][T23650] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1325.056181][T23650] ? __pfx_vhost_task_create+0x10/0x10 [ 1325.056289][T23650] ? __pfx_vhost_task_fn+0x10/0x10 [ 1325.056404][T23650] ? __lock_acquire+0x683/0x2cf0 [ 1325.056489][T23650] ? __kasan_slab_free+0x5c/0x80 [ 1325.056570][T23650] ? kfree+0x1c5/0x640 [ 1325.056647][T23650] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1325.056734][T23650] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 1325.056845][T23650] ? look_up_lock_class+0x57/0x110 [ 1325.056911][T23650] ? register_lock_class+0x31/0x2e0 [ 1325.056994][T23650] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1325.057077][T23650] ? __lock_acquire+0x683/0x2cf0 [ 1325.057165][T23650] ? __mutex_lock+0x30d/0x1550 [ 1325.057247][T23650] ? kasan_quarantine_put+0xbb/0x1f0 [ 1325.057353][T23650] ? do_raw_write_lock+0x11d/0x260 [ 1325.057486][T23650] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1325.057601][T23650] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1325.057662][T23650] ? hook_file_ioctl+0x1f0/0x5f0 [ 1325.057786][T23650] ? __fget_files+0x2a/0x420 [ 1325.057872][T23650] ? __fget_files+0x2a/0x420 [ 1325.057954][T23650] ? __fget_files+0x3a2/0x420 [ 1325.058034][T23650] ? __fget_files+0x2a/0x420 [ 1325.058111][T23650] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1325.058192][T23650] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1325.058237][T23650] __se_sys_ioctl+0xfc/0x170 [ 1325.058277][T23650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.058348][T23650] do_syscall_64+0x174/0x580 [ 1325.058411][T23650] ? trace_irq_disable+0x3b/0x140 [ 1325.058485][T23650] ? clear_bhb_loop+0x40/0x90 [ 1325.058559][T23650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.058633][T23650] RIP: 0033:0x7f85d239de99 [ 1325.058694][T23650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.058740][T23650] RSP: 002b:00007f85d32d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.058805][T23650] RAX: ffffffffffffffda RBX: 00007f85d2626090 RCX: 00007f85d239de99 [ 1325.058870][T23650] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1325.058913][T23650] RBP: 00007f85d32d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.058969][T23650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.059003][T23650] R13: 00007f85d2626128 R14: 00007f85d2626090 R15: 00007f85d274fa48 [ 1325.059104][T23650] [ 1325.449157][T12375] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1325.458392][T12375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.466448][T12375] usb 1-1: Product: syz [ 1325.477149][T12375] usb 1-1: Manufacturer: syz [ 1325.481866][T12375] usb 1-1: SerialNumber: syz [ 1325.499434][T12375] usb 1-1: config 0 descriptor?? [ 1325.515939][T12375] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1325.536708][T12375] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1325.857297][ T5745] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1326.021762][ T5745] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1326.032071][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.041661][ T5745] usb 4-1: Product: syz [ 1326.045901][ T5745] usb 4-1: Manufacturer: syz [ 1326.050652][ T5745] usb 4-1: SerialNumber: syz [ 1326.057872][T13699] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1326.083600][T23663] random: crng reseeded on system resumption [ 1326.116950][T12375] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1326.123968][T12375] em28xx 1-1:0.0: Config register raw data: 0xfc [ 1326.130459][T12375] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 1326.136831][T12375] em28xx 1-1:0.0: No AC97 audio processor [ 1326.216961][T13699] usb 3-1: Using ep0 maxpacket: 8 [ 1326.223790][T13699] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1326.232329][T13699] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1326.242521][T13699] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1326.252642][T13699] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1326.263087][T13699] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.277439][T13699] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1326.289349][T13699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.505527][T13699] usb 3-1: GET_CAPABILITIES returned 0 [ 1326.511857][T13699] usbtmc 3-1:16.0: can't read capabilities [ 1326.521971][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1326.541914][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1326.574442][T12375] usb 1-1: USB disconnect, device number 91 [ 1327.791978][T23674] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1328.211105][T23682] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20003 [ 1328.391085][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1328.423541][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1328.457378][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1328.478127][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1328.508567][ T5745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1328.562503][ T5745] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1328.604183][ T5745] usb 4-1: USB disconnect, device number 10 [ 1328.673040][T23683] syz.0.5311 (23683): drop_caches: 2 [ 1328.682333][T23683] syz.0.5311 (23683): drop_caches: 2 [ 1328.819225][ T5745] usb 3-1: USB disconnect, device number 127 [ 1328.827170][T12364] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1328.955738][T23691] fuse: Bad value for 'user_id' [ 1328.962389][T23691] fuse: Bad value for 'user_id' [ 1328.998967][T12364] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1329.024984][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1329.054260][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1329.086127][T12364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1329.123795][T12364] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1329.143474][T12364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.164902][T12364] usb 2-1: config 0 descriptor?? [ 1329.497731][ T997] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1329.619460][T12364] plantronics 0003:047F:FFFF.00C1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1329.647913][ T5745] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1329.683036][ T997] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1329.693848][ T997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.704460][ T997] usb 4-1: Product: syz [ 1329.713160][ T997] usb 4-1: Manufacturer: syz [ 1329.718855][ T997] usb 4-1: SerialNumber: syz [ 1329.768914][T12370] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1329.811452][ T5745] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1329.821584][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.828332][T13699] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1329.831231][ T5745] usb 1-1: Product: syz [ 1329.842470][ T5745] usb 1-1: Manufacturer: syz [ 1329.848353][ T5745] usb 1-1: SerialNumber: syz [ 1329.926854][T12370] usb 3-1: Using ep0 maxpacket: 8 [ 1329.935089][T12370] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1329.947865][T12370] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1329.958187][T12370] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1329.968723][T12370] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1329.979774][T12370] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.992952][T12370] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1330.002285][T12370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.007089][T13699] usb 5-1: Using ep0 maxpacket: 16 [ 1330.022462][T13699] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1330.031238][T13699] usb 5-1: config 0 has no interface number 0 [ 1330.042126][T13699] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1330.063659][T13699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.073458][T13699] usb 5-1: Product: syz [ 1330.078320][T13699] usb 5-1: Manufacturer: syz [ 1330.082998][T13699] usb 5-1: SerialNumber: syz [ 1330.092165][T13699] usb 5-1: config 0 descriptor?? [ 1330.103142][T13699] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1330.157582][ T997] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1330.169892][ T997] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1330.222581][T12370] usb 3-1: GET_CAPABILITIES returned 0 [ 1330.228450][T12370] usbtmc 3-1:16.0: can't read capabilities [ 1330.266096][ T5745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1330.279116][ T5745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1330.301184][ T30] audit: type=1326 audit(1785307612.408:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.4.5322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7fc00000 [ 1330.370204][T12364] usb 2-1: USB disconnect, device number 118 [ 1330.618493][T13699] gspca_spca1528: reg_w err -110 [ 1330.647216][T13699] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1330.708299][T23724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5326'. [ 1330.783149][T23726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1331.098262][T13699] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1331.257982][T13699] usb 2-1: Using ep0 maxpacket: 32 [ 1331.265400][T13699] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1331.274843][T13699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.289593][T13699] usb 2-1: config 0 descriptor?? [ 1331.301803][T13699] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1331.399809][ T997] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1331.711623][ T5745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1331.927848][ T5745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1331.940735][ T5745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1331.954090][ T5745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1331.968230][ T5745] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1331.980069][ T5745] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1331.995967][ T5745] usb 1-1: USB disconnect, device number 92 [ 1332.016434][ T997] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1332.045046][ T997] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1332.058330][ T997] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1332.070954][ T997] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1332.082905][ T997] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1332.098688][ T997] usb 4-1: USB disconnect, device number 11 [ 1332.306815][T13699] gspca_nw80x: reg_w err -71 [ 1332.311928][T13699] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 1332.324334][T13699] usb 2-1: USB disconnect, device number 119 [ 1332.458629][ T30] audit: type=1326 audit(1785307614.558:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.4.5322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f69bbf9de99 code=0x7fc00000 [ 1332.526382][ T5745] usb 5-1: USB disconnect, device number 114 [ 1332.639176][ T30] audit: type=1326 audit(1785307614.748:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23729 comm="syz.0.5329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1332.667320][T12370] usb 3-1: USB disconnect, device number 2 [ 1332.787125][T23737] FAULT_INJECTION: forcing a failure. [ 1332.787125][T23737] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.805289][T23737] CPU: 0 UID: 0 PID: 23737 Comm: syz.4.5333 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.805326][T23737] Tainted: [L]=SOFTLOCKUP [ 1332.805336][T23737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1332.805353][T23737] Call Trace: [ 1332.805362][T23737] [ 1332.805372][T23737] dump_stack_lvl+0xe8/0x150 [ 1332.805414][T23737] should_fail_ex+0x40c/0x560 [ 1332.805452][T23737] should_failslab+0xa8/0x100 [ 1332.805490][T23737] __kmalloc_noprof+0xfe/0x720 [ 1332.805521][T23737] ? io_cache_alloc_new+0x40/0x100 [ 1332.805552][T23737] ? io_cache_alloc_new+0x40/0x100 [ 1332.805589][T23737] io_cache_alloc_new+0x40/0x100 [ 1332.805630][T23737] __io_prep_rw+0x281/0xe70 [ 1332.805667][T23737] ? __fget_files+0x3a2/0x420 [ 1332.805702][T23737] ? __pfx___io_prep_rw+0x10/0x10 [ 1332.805735][T23737] ? rcu_is_watching+0x15/0xb0 [ 1332.805759][T23737] ? io_file_get_normal+0x1b4/0x2e0 [ 1332.805802][T23737] io_prep_readv_fixed+0x22/0xd0 [ 1332.805837][T23737] io_submit_sqes+0xbde/0x2310 [ 1332.805901][T23737] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1332.805943][T23737] ? __fget_files+0x3a2/0x420 [ 1332.805978][T23737] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1332.806011][T23737] ? fput+0xa0/0xd0 [ 1332.806040][T23737] ? ksys_write+0x242/0x270 [ 1332.806065][T23737] ? __pfx_ksys_write+0x10/0x10 [ 1332.806093][T23737] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1332.806125][T23737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.806152][T23737] do_syscall_64+0x174/0x580 [ 1332.806180][T23737] ? trace_irq_disable+0x3b/0x140 [ 1332.806210][T23737] ? clear_bhb_loop+0x40/0x90 [ 1332.806238][T23737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.806260][T23737] RIP: 0033:0x7f69bbf9de99 [ 1332.806280][T23737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.806300][T23737] RSP: 002b:00007f69bce0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1332.806323][T23737] RAX: ffffffffffffffda RBX: 00007f69bc225fa0 RCX: 00007f69bbf9de99 [ 1332.806339][T23737] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1332.806353][T23737] RBP: 00007f69bce0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.806367][T23737] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 1332.806380][T23737] R13: 00007f69bc226038 R14: 00007f69bc225fa0 R15: 00007f69bc34fa48 [ 1332.806416][T23737] [ 1333.339124][T22432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1333.364055][T22432] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1333.375150][ T30] audit: type=1326 audit(1785307615.468:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23729 comm="syz.0.5329" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1333.375430][T22432] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1333.408464][T12370] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1333.431852][T22432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1333.440231][T22432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1333.568506][T12370] usb 3-1: Using ep0 maxpacket: 32 [ 1333.587852][T12370] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1333.599909][T12370] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1333.623454][T12370] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.679930][T12370] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1333.720349][T12370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.762844][T12370] usb 3-1: Product: syz [ 1333.776829][T12370] usb 3-1: Manufacturer: syz [ 1333.794898][T12370] usb 3-1: SerialNumber: syz [ 1333.896903][T12375] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1333.906766][T13699] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1333.930327][T23757] IPVS: set_ctl: invalid protocol: 50 172.30.0.5:20003 [ 1334.040234][T23748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.057650][T12375] usb 1-1: Using ep0 maxpacket: 32 [ 1334.067169][T12375] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1334.080166][T12375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.091187][T23748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.098767][T23748] bridge_slave_0: entered allmulticast mode [ 1334.108054][T23748] bridge_slave_0: entered promiscuous mode [ 1334.117578][T13699] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1334.132817][T23748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.140065][T13699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1334.168998][T23748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.177605][T13699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1334.189417][T23748] bridge_slave_1: entered allmulticast mode [ 1334.211693][T13699] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1334.214772][T12375] usb 1-1: config 0 descriptor?? [ 1334.236007][T23748] bridge_slave_1: entered promiscuous mode [ 1334.247170][T23761] syz.4.5338 (23761): drop_caches: 2 [ 1334.274788][T12375] as10x_usb: device has been detected [ 1334.299010][T13699] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1334.328355][T12375] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1334.358550][T13699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.383655][T12375] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1334.424401][T12375] as10x_usb: error during firmware upload part1 [ 1334.442718][T13699] usb 4-1: config 0 descriptor?? [ 1334.468111][T12375] Registered device nBox DVB-T Dongle [ 1334.555874][T23761] syz.4.5338 (23761): drop_caches: 2 [ 1334.583047][T23752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1334.591959][T23748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.608282][T23752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1334.625780][T23752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1334.634990][T23748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.650947][T23752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1334.661619][T23752] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1334.692822][T23752] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1334.734413][ T997] usb 1-1: USB disconnect, device number 93 [ 1334.785767][ T997] Unregistered device nBox DVB-T Dongle [ 1334.792474][ T997] as10x_usb: device has been disconnected [ 1334.919958][T13699] plantronics 0003:047F:FFFF.00C2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1335.071304][T21825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.162101][T23748] team0: Port device team_slave_0 added [ 1335.211354][T21825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.240423][T23748] team0: Port device team_slave_1 added [ 1335.333808][T23748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.341267][T23748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.390122][T23748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.447512][T21825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.471267][T23748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.480445][T23748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.508906][T23748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.544085][ T30] audit: type=1326 audit(1785307617.648:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23769 comm="syz.0.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1335.607975][ T30] audit: type=1326 audit(1785307617.688:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23769 comm="syz.0.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1335.639504][ T30] audit: type=1326 audit(1785307617.688:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23769 comm="syz.0.5340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1335.695039][T21825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.830991][T12370] usb 3-1: unit 0 not found! [ 1335.842051][ T997] usb 4-1: USB disconnect, device number 12 [ 1335.859030][T23748] hsr_slave_0: entered promiscuous mode [ 1335.878946][T23748] hsr_slave_1: entered promiscuous mode [ 1335.904964][T23748] debugfs: 'hsr0' already exists in 'hsr' [ 1335.919257][T23748] Cannot create hsr debugfs directory [ 1336.026780][ T5745] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1336.065614][T12370] usb 3-1: USB disconnect, device number 3 [ 1336.143467][T17087] udevd[17087]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1336.203311][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1336.234331][ T5745] usb 1-1: not running at top speed; connect to a high speed hub [ 1336.249051][ T30] audit: type=1326 audit(1785307618.348:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.2.5342" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85d239de99 code=0x0 [ 1336.273978][ T5745] usb 1-1: config 5 has an invalid interface number: 41 but max is 0 [ 1336.274011][ T5745] usb 1-1: config 5 has no interface number 0 [ 1336.274045][ T5745] usb 1-1: config 5 interface 41 has no altsetting 0 [ 1336.280468][ T5745] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= a.1b [ 1336.309496][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.356132][ T5745] usb 1-1: Product: syz [ 1336.357902][T23780] kvm: emulating exchange as write [ 1336.367308][ T5745] usb 1-1: Manufacturer: syz [ 1336.374056][ T5745] usb 1-1: SerialNumber: syz [ 1336.490846][ T30] audit: type=1326 audit(1785307618.598:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23783 comm="syz.4.5344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7fc00000 [ 1336.526946][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 1336.687251][ T5632] Bluetooth: hci4: command 0x041b tx timeout [ 1336.689571][T17137] Bluetooth: hci2: command 0x0c1a tx timeout [ 1336.699873][T22432] Bluetooth: hci1: command 0x0419 tx timeout [ 1336.774005][T21825] vlan4: left promiscuous mode [ 1336.782241][T21825] bridge0: port 3(vlan4) entered disabled state [ 1336.800636][T21825] bridge_slave_1: left allmulticast mode [ 1336.806821][T21825] bridge_slave_1: left promiscuous mode [ 1336.813751][T21825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.829235][T21825] bridge_slave_0: left promiscuous mode [ 1336.835460][T21825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.987669][T12370] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1337.028092][T23797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1337.163268][T12370] usb 4-1: Using ep0 maxpacket: 32 [ 1337.169538][T21825] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1337.190763][T12370] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1337.208773][T12370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.219063][T23804] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1337.234374][T12370] usb 4-1: config 0 descriptor?? [ 1337.256163][ T5745] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.41/input/input181 [ 1337.266239][ T30] audit: type=1326 audit(1785307619.358:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23783 comm="syz.4.5344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f69bbf9de99 code=0x7fc00000 [ 1337.291130][T12370] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1337.333630][ T4975] bcm5974 1-1:5.41: could not read from device [ 1337.345839][ T5745] usb 1-1: USB disconnect, device number 94 [ 1337.629113][T21825] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1337.711339][T23812] fuse: Bad value for 'fd' [ 1337.784118][T21825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.796329][T21825] bond_slave_0: left promiscuous mode [ 1337.805926][T21825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.820590][T21825] bond_slave_1: left promiscuous mode [ 1337.834718][T21825] bond0 (unregistering): Released all slaves [ 1337.870027][T21825] bond1 (unregistering): Released all slaves [ 1337.914769][T21825] bond2 (unregistering): Released all slaves [ 1337.942670][T21825] bond3 (unregistering): Released all slaves [ 1337.963492][T23816] binder: 23814:23816 ioctl c0306201 200000000480 returned -14 [ 1338.158873][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1338.220038][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1338.274052][T12370] gspca_nw80x: reg_w err -71 [ 1338.292010][T12370] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1338.327081][T12370] usb 4-1: USB disconnect, device number 13 [ 1338.574398][ T30] audit: type=1326 audit(1785307620.678:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23823 comm="syz.0.5350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1338.627163][ T30] audit: type=1326 audit(1785307620.708:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23823 comm="syz.0.5350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1338.661832][ T30] audit: type=1326 audit(1785307620.708:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23823 comm="syz.0.5350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1338.690777][ T30] audit: type=1326 audit(1785307620.708:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23823 comm="syz.0.5350" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10399de99 code=0x7fc00000 [ 1338.767831][T22432] Bluetooth: hci4: command 0x041b tx timeout [ 1339.096925][T12370] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1339.202675][T23842] program syz.4.5356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1339.231446][ T5712] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1339.285064][T21825] hsr_slave_0: left promiscuous mode [ 1339.302604][T12370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.319015][T21825] hsr_slave_1: left promiscuous mode [ 1339.331165][T21825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.340929][T12370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.358122][T21825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.361495][T12370] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1339.377831][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 1339.389758][T12370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.394377][T21825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.406499][ T5712] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1339.418795][T12370] usb 1-1: config 0 descriptor?? [ 1339.423948][ T5712] usb 3-1: config 0 has no interface number 0 [ 1339.439984][T21825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.449787][ T5712] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1339.456866][T12371] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1339.463149][ T5712] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1339.491460][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.503512][T21825] veth1_macvtap: left promiscuous mode [ 1339.509816][ T5712] usb 3-1: Product: syz [ 1339.514578][T21825] veth1_vlan: left promiscuous mode [ 1339.520136][ T5712] usb 3-1: Manufacturer: syz [ 1339.526084][T21825] veth0_vlan: left promiscuous mode [ 1339.532655][ T5712] usb 3-1: SerialNumber: syz [ 1339.544974][ T5712] usb 3-1: config 0 descriptor?? [ 1339.617114][T12371] usb 5-1: Using ep0 maxpacket: 16 [ 1339.633879][T12371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.666839][T12371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1339.687828][T12371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1339.724949][T12371] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1339.750692][T12371] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1339.788266][T12371] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1339.797942][T12371] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1339.823259][T12371] usb 5-1: Manufacturer: syz [ 1339.841310][T12371] usb 5-1: config 0 descriptor?? [ 1339.863807][T12370] hid_parser_main: 454 callbacks suppressed [ 1339.863834][T12370] pyra 0003:1E7D:2CF6.00C3: unknown main item tag 0x0 [ 1339.899679][T12370] pyra 0003:1E7D:2CF6.00C3: unknown main item tag 0x0 [ 1339.923675][T12370] pyra 0003:1E7D:2CF6.00C3: unknown main item tag 0x0 [ 1339.931937][T21825] team0 (unregistering): Port device batadv2 removed [ 1339.938947][T12370] pyra 0003:1E7D:2CF6.00C3: unknown main item tag 0x0 [ 1339.956058][T12370] pyra 0003:1E7D:2CF6.00C3: unknown main item tag 0x0 [ 1339.968604][T12370] pyra 0003:1E7D:2CF6.00C3: unknown main item tag 0x0 [ 1339.986850][T12370] pyra 0003:1E7D:2CF6.00C3: unknown main item tag 0x0 [ 1340.037298][T12370] pyra 0003:1E7D:2CF6.00C3: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1340.065288][T21825] team0 (unregistering): Port device batadv1 removed [ 1340.097485][ T997] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1340.236355][T12371] rc_core: IR keymap rc-hauppauge not found [ 1340.242755][T12371] Registered IR keymap rc-empty [ 1340.253681][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.277398][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.295837][ T997] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1340.316780][ T997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1340.326469][T12371] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1340.343458][ T997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1340.366315][ T997] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1340.390916][ T997] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1340.401305][ T997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.411244][T12371] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input183 [ 1340.439043][ T997] usb 4-1: config 0 descriptor?? [ 1340.447153][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.486316][T12370] pyra 0003:1E7D:2CF6.00C3: couldn't init struct pyra_device [ 1340.494234][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.504298][T12370] pyra 0003:1E7D:2CF6.00C3: couldn't install mouse [ 1340.526869][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.534603][T12370] pyra 0003:1E7D:2CF6.00C3: probe with driver pyra failed with error -32 [ 1340.577364][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.607327][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.636974][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.668503][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.698290][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.716823][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.738346][T12371] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1340.762101][T12371] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1340.771651][T12371] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1340.832310][T21825] team0 (unregistering): Port device team_slave_1 removed [ 1340.847421][T22432] Bluetooth: hci4: command 0x041b tx timeout [ 1340.888256][T21825] team0 (unregistering): Port device team_slave_0 removed [ 1340.938304][ T997] plantronics 0003:047F:FFFF.00C4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1341.211839][ T5712] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1341.232328][ T5712] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1341.240250][ T5712] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1341.251394][ T5712] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1341.290200][ T5712] usb 3-1: USB disconnect, device number 4 [ 1341.650472][T12371] usb 4-1: USB disconnect, device number 14 [ 1341.837650][T23748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1341.882726][T23748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1341.900318][T23748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1341.934660][T23748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1341.974659][T23748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1341.988921][T23748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1341.997960][T23748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1342.032656][T23748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1342.159065][T21825] IPVS: stop unused estimator thread 0... [ 1342.214379][ T5712] usb 5-1: USB disconnect, device number 115 [ 1342.256788][ T997] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1342.406121][T23748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.441707][T23748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.449439][ T997] usb 3-1: Using ep0 maxpacket: 16 [ 1342.462847][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.466419][ T997] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1342.470902][T21825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.496199][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.504098][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.515856][ T997] usb 3-1: config 0 has no interface number 0 [ 1342.538300][ T997] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1342.569388][ T997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.588438][ T997] usb 3-1: Product: syz [ 1342.599737][ T997] usb 3-1: Manufacturer: syz [ 1342.614164][ T997] usb 3-1: SerialNumber: syz [ 1342.641413][ T997] usb 3-1: config 0 descriptor?? [ 1342.674147][ T997] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1342.701469][T23748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.722363][T13699] usb 1-1: USB disconnect, device number 95 [ 1342.729066][ T5712] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1342.799176][T23894] IPVS: set_ctl: invalid protocol: 50 172.30.0.4:20003 [ 1342.885881][T23748] veth0_vlan: entered promiscuous mode [ 1342.897657][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 1342.925480][ T5712] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1342.935818][T22432] Bluetooth: hci4: command 0x041b tx timeout [ 1342.979855][T23748] veth1_vlan: entered promiscuous mode [ 1342.987483][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.031540][ T5712] usb 5-1: config 0 descriptor?? [ 1343.104159][ T5712] as10x_usb: device has been detected [ 1343.136227][T23748] veth0_macvtap: entered promiscuous mode [ 1343.159153][ T5712] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1343.202019][ T5712] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1343.206389][T23748] veth1_macvtap: entered promiscuous mode [ 1343.221650][T23895] syz.3.5359 (23895): drop_caches: 2 [ 1343.257591][ T5712] as10x_usb: error during firmware upload part1 [ 1343.288629][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1343.288650][ T30] audit: type=1326 audit(1785307625.388:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1343.320671][ T997] gspca_spca1528: reg_w err -71 [ 1343.328223][ T5712] Registered device nBox DVB-T Dongle [ 1343.357213][ T997] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1343.405298][ T997] usb 3-1: USB disconnect, device number 5 [ 1343.414729][T23895] syz.3.5359 (23895): drop_caches: 2 [ 1343.422432][ T30] audit: type=1326 audit(1785307625.388:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1343.450410][T23888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1343.484135][T23888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1343.528135][T23748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.541893][T23888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1343.565695][T23888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1343.569268][T23748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.608647][ T30] audit: type=1326 audit(1785307625.398:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1343.679515][T12375] usb 5-1: USB disconnect, device number 116 [ 1343.685129][ T30] audit: type=1326 audit(1785307625.398:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1343.722574][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.779380][ T30] audit: type=1326 audit(1785307625.398:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1343.781351][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.823014][T12375] Unregistered device nBox DVB-T Dongle [ 1343.825119][T12375] as10x_usb: device has been disconnected [ 1343.861637][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.885079][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.903614][ T30] audit: type=1326 audit(1785307625.438:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1343.947627][ T30] audit: type=1326 audit(1785307625.438:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1344.007969][ T30] audit: type=1326 audit(1785307625.438:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1344.039378][ T30] audit: type=1326 audit(1785307625.438:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1344.070049][ T30] audit: type=1326 audit(1785307625.448:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.2.5357" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d239de99 code=0x7fc00000 [ 1344.410257][T22693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.451999][T23924] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20003 [ 1344.486593][T22693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.611664][T22693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.661299][T22693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.850544][T23929] syz.2.5366 (23929): drop_caches: 2 [ 1345.079438][T23929] syz.2.5366 (23929): drop_caches: 2 [ 1345.377267][T13699] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1345.386952][ T5699] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1345.417332][T22432] Bluetooth: hci0: command 0x0c1a tx timeout [ 1345.559533][T13699] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1345.569759][T22432] Bluetooth: hci4: command 0x041b tx timeout [ 1345.576813][T22432] Bluetooth: hci1: command 0x0419 tx timeout [ 1345.578671][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 1345.582866][T22432] Bluetooth: hci2: command 0x0c1a tx timeout [ 1345.604626][T13699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.627153][T13699] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1345.646104][T13699] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1345.663129][T13699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.677677][T13699] usb 5-1: Product: syz [ 1345.678760][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.682561][T13699] usb 5-1: Manufacturer: syz [ 1345.705907][T13699] usb 5-1: SerialNumber: syz [ 1345.721938][T13699] usb 5-1: config 0 descriptor?? [ 1345.731708][ T5699] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1345.760346][ T5699] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1345.772066][T12369] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1345.789353][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.811663][ T5699] usb 1-1: Product: syz [ 1345.831896][ T5699] usb 1-1: Manufacturer: syz [ 1345.835707][T23958] tipc: Failed to remove unknown binding: 66,0,0/0:1428364513/1428364515 [ 1345.846214][ T5699] usb 1-1: SerialNumber: syz [ 1345.866006][ T5699] usb 1-1: config 0 descriptor?? [ 1345.930216][T12369] usb 3-1: Using ep0 maxpacket: 32 [ 1345.959990][ T5699] usb 5-1: USB disconnect, device number 117 [ 1345.968084][T12369] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1345.987735][T12369] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1346.013234][T12369] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1346.030710][T12369] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1346.042808][T12369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.054307][T12371] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1346.072379][T12369] usb 3-1: Product: syz [ 1346.094287][T12369] usb 3-1: Manufacturer: syz [ 1346.103254][T12369] usb 3-1: SerialNumber: syz [ 1346.121658][T12369] usb 3-1: config 0 descriptor?? [ 1346.191356][ T5699] usb 1-1: USB disconnect, device number 96 [ 1346.240609][T12371] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1346.266979][T12371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1346.275169][T23967] fuse: Unknown parameter 'âï†Ü' [ 1346.295443][T12371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1346.306242][T12371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1346.321443][T12371] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1346.333466][T12371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.655623][T12369] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1346.665648][T12371] usb 4-1: config 0 descriptor?? [ 1347.071376][T12369] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1347.079937][ T5699] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1347.096095][T23982] __vm_enough_memory: pid: 23982, comm: syz.1.5378, bytes: 4503599627366400 not enough memory for the allocation [ 1347.139326][T12371] plantronics 0003:047F:FFFF.00C5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1347.257095][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 1347.264690][ T5699] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1347.274286][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.290996][ T5699] usb 5-1: config 0 descriptor?? [ 1347.305785][ T5699] as10x_usb: device has been detected [ 1347.313803][ T5699] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1347.338733][T13699] usb 3-1: USB disconnect, device number 6 [ 1347.340436][ T5699] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1347.371734][ T5699] as10x_usb: error during firmware upload part1 [ 1347.379911][ T5699] Registered device nBox DVB-T Dongle [ 1347.561863][T23974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1347.574199][T23974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1347.581270][T23974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1347.588509][T23974] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1347.614205][ T5699] usb 5-1: USB disconnect, device number 118 [ 1347.671635][ T5699] Unregistered device nBox DVB-T Dongle [ 1347.680715][ T5699] as10x_usb: device has been disconnected [ 1347.746457][T13699] usb 4-1: USB disconnect, device number 15 [ 1348.757240][T13699] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1348.888740][T24033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1348.939662][T13699] usb 5-1: Using ep0 maxpacket: 32 [ 1348.956747][ T997] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1348.978878][T13699] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1349.010252][T13699] usb 5-1: config 0 has no interface number 0 [ 1349.033127][T13699] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1349.064742][T13699] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1349.096713][T13699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.112449][T13699] usb 5-1: Product: syz [ 1349.132534][T13699] usb 5-1: Manufacturer: syz [ 1349.153312][T13699] usb 5-1: SerialNumber: syz [ 1349.158161][ T997] usb 3-1: Using ep0 maxpacket: 16 [ 1349.181120][ T997] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1349.201737][T13699] usb 5-1: config 0 descriptor?? [ 1349.226870][ T997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1349.252694][ T997] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1349.271038][ T997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.288441][ T997] usb 3-1: Product: syz [ 1349.312659][ T997] usb 3-1: Manufacturer: syz [ 1349.331679][ T997] usb 3-1: SerialNumber: syz [ 1349.370838][ T997] usb 3-1: config 0 descriptor?? [ 1349.402295][ T997] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1349.433612][ T997] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1349.567471][T17137] Bluetooth: hci0: command 0x0c1a tx timeout [ 1349.657248][T17137] Bluetooth: hci4: command 0x041b tx timeout [ 1349.663390][T22432] Bluetooth: hci1: command 0x0419 tx timeout [ 1349.663411][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 1349.996107][ T997] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1350.010774][ T997] em28xx 3-1:0.0: Config register raw data: 0x41 [ 1350.175866][T24053] FAULT_INJECTION: forcing a failure. [ 1350.175866][T24053] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.222227][T24053] CPU: 1 UID: 0 PID: 24053 Comm: syz.1.5391 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.222264][T24053] Tainted: [L]=SOFTLOCKUP [ 1350.222273][T24053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1350.222288][T24053] Call Trace: [ 1350.222297][T24053] [ 1350.222308][T24053] dump_stack_lvl+0xe8/0x150 [ 1350.222351][T24053] should_fail_ex+0x40c/0x560 [ 1350.222401][T24053] should_failslab+0xa8/0x100 [ 1350.222438][T24053] __kmalloc_cache_noprof+0xa8/0x660 [ 1350.222470][T24053] ? __kmalloc_cache_noprof+0x150/0x660 [ 1350.222500][T24053] ? sctp_add_bind_addr+0x8c/0x370 [ 1350.222523][T24053] ? sctp_add_bind_addr+0x8c/0x370 [ 1350.222551][T24053] sctp_add_bind_addr+0x8c/0x370 [ 1350.222578][T24053] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1350.222704][T24053] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1350.222741][T24053] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1350.222778][T24053] ? sctp_v6_is_any+0x64/0x80 [ 1350.222833][T24053] ? sctp_copy_one_addr+0x93/0x360 [ 1350.222872][T24053] sctp_bind_addr_copy+0xb3/0x3c0 [ 1350.222907][T24053] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1350.222942][T24053] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1350.222974][T24053] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1350.223010][T24053] ? __local_bh_enable_ip+0xd0/0x130 [ 1350.223037][T24053] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1350.223065][T24053] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1350.223105][T24053] sctp_sendmsg+0x159b/0x2d00 [ 1350.223149][T24053] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1350.223183][T24053] ? aa_sk_perm+0x6d5/0x900 [ 1350.223225][T24053] ? __might_fault+0xaf/0x130 [ 1350.223257][T24053] ? sock_rps_record_flow+0x19/0x350 [ 1350.223284][T24053] ? inet_sendmsg+0x298/0x320 [ 1350.223310][T24053] ? __pfx_inet_sendmsg+0x10/0x10 [ 1350.223330][T24053] sock_sendmsg_nosec+0x10e/0x180 [ 1350.223369][T24053] __sys_sendto+0x408/0x5a0 [ 1350.223399][T24053] ? ksys_write+0x1e6/0x270 [ 1350.223426][T24053] ? __pfx___sys_sendto+0x10/0x10 [ 1350.223446][T24053] ? __mutex_unlock_slowpath+0x731/0x900 [ 1350.223505][T24053] ? __pfx_ksys_write+0x10/0x10 [ 1350.223534][T24053] __x64_sys_sendto+0xde/0x100 [ 1350.223558][T24053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.223584][T24053] do_syscall_64+0x174/0x580 [ 1350.223610][T24053] ? trace_irq_disable+0x3b/0x140 [ 1350.223640][T24053] ? clear_bhb_loop+0x40/0x90 [ 1350.223668][T24053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.223692][T24053] RIP: 0033:0x7f7470d9de99 [ 1350.223714][T24053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.223734][T24053] RSP: 002b:00007f7471c54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1350.223758][T24053] RAX: ffffffffffffffda RBX: 00007f7471025fa0 RCX: 00007f7470d9de99 [ 1350.223774][T24053] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1350.223788][T24053] RBP: 00007f7471c54090 R08: 000020000005ffe4 R09: 000000000000001c [ 1350.223803][T24053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.223815][T24053] R13: 00007f7471026038 R14: 00007f7471025fa0 R15: 00007f747114fa48 [ 1350.223848][T24053] [ 1350.976365][T13699] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 30 failed: -71 [ 1351.010658][T13699] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1351.071329][T13699] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1351.095537][T13699] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1351.135124][T13699] usb 5-1: USB disconnect, device number 119 [ 1351.226998][ T5699] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1351.401241][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.416092][ T5699] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1351.440350][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.466608][ T5699] usb 2-1: config 0 descriptor?? [ 1351.596433][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 1351.596449][ T30] audit: type=1326 audit(1785307633.698:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1351.657311][ T30] audit: type=1326 audit(1785307633.738:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1351.683907][ T30] audit: type=1326 audit(1785307633.738:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1351.697787][T12371] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1351.718759][ T30] audit: type=1326 audit(1785307633.738:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1351.754845][ T30] audit: type=1326 audit(1785307633.738:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1351.785531][T12369] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1351.809142][ T5699] usbhid 2-1:0.0: can't add hid device: -71 [ 1351.821792][ T5699] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1351.840183][ T5699] usb 2-1: USB disconnect, device number 120 [ 1351.880857][ T30] audit: type=1326 audit(1785307633.738:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1351.915642][ T30] audit: type=1326 audit(1785307633.738:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1351.917992][T12375] usb 3-1: USB disconnect, device number 7 [ 1351.987158][ T30] audit: type=1326 audit(1785307633.738:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1352.011630][T12371] usb 4-1: Using ep0 maxpacket: 32 [ 1352.020331][T12369] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1352.034490][T12371] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1352.041678][T12371] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1352.056299][T12369] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1352.070533][T12371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.094709][T12375] em28xx 3-1:0.0: Disconnecting em28xx [ 1352.105587][T12369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1352.138311][ T30] audit: type=1326 audit(1785307633.738:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1352.165376][ T30] audit: type=1326 audit(1785307633.738:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bbf9de99 code=0x7ffc0000 [ 1352.193008][T12369] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1352.216022][T12371] usb 4-1: config 0 descriptor?? [ 1352.223364][T12375] em28xx 3-1:0.0: Freeing device [ 1352.228530][T12369] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1352.241216][T12371] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1352.253571][T12369] usb 1-1: Product: syz [ 1352.258028][ T5699] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1352.267343][T12369] usb 1-1: Manufacturer: syz [ 1352.278073][T12371] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1352.290671][T12369] usb 1-1: SerialNumber: syz [ 1352.299717][T12369] usb 1-1: config 0 descriptor?? [ 1352.305441][T12371] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1352.315923][T12371] usb 4-1: media controller created [ 1352.333257][T12369] usb 1-1: selecting invalid altsetting 0 [ 1352.405173][T12371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1352.425020][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.446161][T24063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.467341][ T5699] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1352.481014][T24063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.492220][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.540613][T24063] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 1352.552960][T24063] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 1352.561803][T24063] CPU: 0 UID: 0 PID: 24063 Comm: syz.3.5395 Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.572962][T24063] Tainted: [L]=SOFTLOCKUP [ 1352.577431][T24063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1352.587516][T24063] RIP: 0010:__mutex_lock+0x149/0x1550 [ 1352.593111][T24063] Code: c0 80 75 78 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d 75 05 a6 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 2c 2b 62 f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 1352.613330][T24063] RSP: 0018:ffffc90010617460 EFLAGS: 00010206 [ 1352.620314][T24063] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a787503 [ 1352.628429][T24063] RDX: 0000000000000000 RSI: ffffffff8e4b276c RDI: 00000000000000c0 [ 1352.637676][T24063] RBP: ffffc900106175f8 R08: ffffc90010617567 R09: 0000000000000000 [ 1352.646125][T24063] R10: ffffc90010617540 R11: fffff520020c2ead R12: 0000000000000068 [ 1352.655489][T24063] R13: 0000000000000000 R14: 1ffff920020c2ea0 R15: 0000000000000000 [ 1352.663775][T24063] FS: 00007f569f9d06c0(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 1352.672870][T24063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1352.681137][T24063] CR2: 0000200000002cc0 CR3: 000000004d114000 CR4: 00000000003526f0 [ 1352.689795][T24063] Call Trace: [ 1352.693372][T24063] [ 1352.696352][T24063] ? __mutex_lock+0x30d/0x1550 [ 1352.701762][T24063] ? dvb_usbv2_generic_write+0x26/0x60 [ 1352.709778][T24063] ? __mutex_trylock_common+0x15f/0x270 [ 1352.716936][T24063] ? __pfx___mutex_lock+0x10/0x10 [ 1352.722456][T24063] ? __pfx___mutex_lock+0x10/0x10 [ 1352.728488][T24063] ? trace_contention_end+0x3d/0x140 [ 1352.734538][T24063] ? __mutex_lock+0x30d/0x1550 [ 1352.742303][T24063] dvb_usbv2_generic_write+0x26/0x60 [ 1352.750815][T24063] mxl111sf_ctrl_msg+0x160/0x2f0 [ 1352.757009][T24063] mxl111sf_write_reg+0xa9/0x1b0 [ 1352.762419][T24063] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 1352.768274][T24063] mxl111sf_i2c_xfer+0x463/0x5060 [ 1352.773616][T24063] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 1352.779302][T24063] ? is_bpf_text_address+0x26/0x2b0 [ 1352.785686][T24063] ? __kmalloc_noprof+0x1ad/0x720 [ 1352.790751][T24063] ? kernel_text_address+0xa5/0xe0 [ 1352.798168][T24063] ? __kernel_text_address+0xd/0x30 [ 1352.805425][T24063] ? unwind_get_return_address+0x4d/0x90 [ 1352.811650][T24063] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1352.819403][T24063] ? arch_stack_walk+0xfb/0x150 [ 1352.825293][T24063] ? stack_trace_save+0xa9/0x100 [ 1352.830807][T24063] ? __pfx_stack_trace_save+0x10/0x10 [ 1352.836230][T24063] ? stack_depot_save_flags+0x33/0x800 [ 1352.841818][T24063] ? stack_trace_save+0x1/0x100 [ 1352.847182][T24063] ? __kmalloc_noprof+0x1ad/0x720 [ 1352.852739][T24063] ? kasan_save_track+0x4f/0x80 [ 1352.858437][T24063] ? look_up_lock_class+0x57/0x110 [ 1352.864823][T24063] ? register_lock_class+0x31/0x2e0 [ 1352.870330][T24063] ? __lock_acquire+0x683/0x2cf0 [ 1352.875867][T24063] ? do_raw_spin_lock+0x12b/0x2f0 [ 1352.881819][T24063] __i2c_transfer+0x7be/0x1fe0 [ 1352.886637][T24063] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1352.894199][T24063] ? lockdep_hardirqs_on+0x7a/0x110 [ 1352.900241][T24063] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1352.906098][T24063] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1352.911564][T24063] ? i2c_transfer+0xc8/0x2d0 [ 1352.916812][T24063] i2c_transfer+0x1cc/0x2d0 [ 1352.921368][T24063] i2cdev_ioctl_rdwr+0x460/0x740 [ 1352.926523][T24063] i2cdev_ioctl+0x6a5/0x880 [ 1352.932220][T24063] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1352.937380][T24063] ? __fget_files+0x3a2/0x420 [ 1352.942113][T24063] ? __fget_files+0x2a/0x420 [ 1352.947933][T24063] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1352.953369][T24063] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1352.958557][T24063] __se_sys_ioctl+0xfc/0x170 [ 1352.963367][T24063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.971927][T24063] do_syscall_64+0x174/0x580 [ 1352.977182][T24063] ? trace_irq_disable+0x3b/0x140 [ 1352.982257][T24063] ? clear_bhb_loop+0x40/0x90 [ 1352.987061][T24063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.994222][T24063] RIP: 0033:0x7f569eb9de99 [ 1352.999029][T24063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.022404][T24063] RSP: 002b:00007f569f9d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.030862][T24063] RAX: ffffffffffffffda RBX: 00007f569ee25fa0 RCX: 00007f569eb9de99 [ 1353.039611][T24063] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 1353.047932][T24063] RBP: 00007f569ec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1353.056303][T24063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.065452][T24063] R13: 00007f569ee26038 R14: 00007f569ee25fa0 R15: 00007f569ef4fa48 [ 1353.073563][T24063] [ 1353.076651][T24063] Modules linked in: [ 1353.081839][T24063] ---[ end trace 0000000000000000 ]--- [ 1353.096908][T24063] RIP: 0010:__mutex_lock+0x149/0x1550 [ 1353.111740][T12369] usb 1-1: USB disconnect, device number 97 [ 1353.119748][ T5699] usb 2-1: config 0 descriptor?? [ 1353.187432][T12375] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1353.227623][T17101] udevd[17101]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1353.246613][T24063] Code: c0 80 75 78 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d 75 05 a6 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 2c 2b 62 f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 1353.328265][T24063] RSP: 0018:ffffc90010617460 EFLAGS: 00010206 [ 1353.346313][T24063] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a787503 [ 1353.363583][T12375] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1353.374519][T12375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.390289][T24063] RDX: 0000000000000000 RSI: ffffffff8e4b276c RDI: 00000000000000c0 [ 1353.399430][T12375] usb 5-1: Product: syz [ 1353.403636][T12375] usb 5-1: Manufacturer: syz [ 1353.413697][T12375] usb 5-1: SerialNumber: syz [ 1353.422950][T24063] RBP: ffffc900106175f8 R08: ffffc90010617567 R09: 0000000000000000 [ 1353.450454][T24063] R10: ffffc90010617540 R11: fffff520020c2ead R12: 0000000000000068 [ 1353.473272][T24063] R13: 0000000000000000 R14: 1ffff920020c2ea0 R15: 0000000000000000 [ 1353.495213][T24063] FS: 00007f569f9d06c0(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 1353.517426][T24063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1353.533085][T24063] CR2: 00007f69bbfeb580 CR3: 000000004d114000 CR4: 00000000003526f0 [ 1353.551714][T24063] Kernel panic - not syncing: Fatal exception [ 1353.559422][T24063] Kernel Offset: disabled [ 1353.564507][T24063] Rebooting in 86400 seconds..