last executing test programs: 8.956436759s ago: executing program 3 (id=4053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100", @ANYRES64], 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80206433, &(0x7f0000000340)=""/177) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r5, 0x40087446, &(0x7f00000007c0)={0x1fffffffffffff72, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0xff, "340b7832c1efd131b8e6498c25f54a2700", 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r7, 0x541b, 0x0) close(r3) 7.493332095s ago: executing program 2 (id=4060): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x2826) socket$rds(0x15, 0x5, 0x0) dup(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x20004080) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0) 6.595085748s ago: executing program 2 (id=4064): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) r2 = io_uring_setup(0x178a, &(0x7f0000000140)={0x0, 0x52bd, 0x8, 0xfffffffe, 0x8000a}) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r4, &(0x7f0000000180)=""/118, 0x76) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000f2d000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x4) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYBLOB="0580040000000000500012800b00010067656e65766500004000028005000800"], 0x70}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000200)=0x8000) 5.84349528s ago: executing program 3 (id=4066): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002840)={0x0, &(0x7f0000000100)}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000200)) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020050b071800000000000109022400010000000009040000010300000009214000330122020009058103"], 0x0) userfaultfd(0x80801) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x2e, 0x107, 0xfffffffe, 0x25dfdbfc, {0xb, 0x7c}}, 0x14}}, 0xc000) syz_usb_control_io(r1, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000280012800b0001006d616373656300001800028005000f00020000000c000100feffff7f0000000008000500", @ANYRES32=r8, @ANYBLOB="3e4abb8645ba36df9e8d3f4fd1e1fd8028ef384785c7625d18af32d6e8054b81c57ade8494731837aee209e2b2b721f1544ce523fd068c91b0dd50ce32cec2fc4ba21a"], 0x50}}, 0x0) io_setup(0x5, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000197ffffff00000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a01010000000000000000000000061400000011"], 0x6c}}, 0x880) 5.750876884s ago: executing program 1 (id=4067): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x2826) socket$rds(0x15, 0x5, 0x0) dup(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x20004080) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x1}}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x2000000, 0x9}, 0x0, 0x0) 5.302065514s ago: executing program 4 (id=4070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdb7c, {0x0, 0x0, 0x0, r7, {0xfff3, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1f, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (fail_nth: 6) 4.724550799s ago: executing program 1 (id=4071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f00000015c0)=""/4115, 0x1013) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d517f6c640ecaae70200fddaaaf9bf24200008000000000000002414e89fb1779a3cac03ef3d698900000004e000000000842bd9b5e797bcd63765806fb6c1b38b448504995cc821d846b96fb4e9efc0340d45155285b29efe27775f5c07eb38c005f93980bc297d3ecf68205598de785de57f58d2e43cb09819c298becbbb2f4d52e4be116438805da23829ab483c239275fbf5e9140d59405d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)="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", 0x12f}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f000092d000/0x4000)=nil, 0x4000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) syz_io_uring_setup(0x2d0, &(0x7f0000000500)={0x0, 0x90e9, 0x80, 0xfffffffe, 0x376}, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x7c}}], 0x1, 0x44040) 4.648817654s ago: executing program 4 (id=4072): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 4.515511851s ago: executing program 4 (id=4073): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @multicast, 'dvmrp1\x00'}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) io_uring_setup(0x30aa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) pipe(&(0x7f0000000180)) 3.945394337s ago: executing program 4 (id=4074): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000580)={@local, @broadcast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x8, 0x58, 0x64, 0x0, 0xf4, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010102}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1, 0x60}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0xf, 0x2, 0x1, 0x2, 0x7, 0xfd}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x3, {{0xe, 0x2, 0xb, 0x2, 0x1, 0x0, 0x1, 0x9}, 0x2, {0x2, 0x5, 0x1, 0x14, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 3.679268458s ago: executing program 4 (id=4075): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000240)=0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="f9dd7ae75326780b4401482af114278acb43e1fc33ac27e549667924ef7be5c9b298e47e43a09e93c0d6471ac7f9520573bb3059ae3a11fc07ff56757086e37f41e121320e628f7b7779358f53a5304940022133ea47fd364f4d7325fb7d75023b9dbc153e7f7a4d1a3246d4cf79019e33a92bdeb642e2c42e52eb3862dcfeb2f567928b8653dcbeb0ef4a0d6f42c9eef38adbf0b5b5cad235946eb6b4d4ab677ac0249cad3e5c63d2aafa041d609a45d3958e72f4a07b812b0f52ef0b109ef146", 0xc1}], 0x1}}], 0x1, 0x20000004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x6, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r7) write(r5, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r8, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6}, &(0x7f00000000c0)=0x8) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x108000, @loopback}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 3.457950991s ago: executing program 2 (id=4076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100", @ANYRES64], 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="080100000101010100000000000000000200000308000c400000000434000f8008000340edc85214c5ef711302dbe151912654ee000000090800014000000008080002400000006e08000340000000040800014000000002080001407fffffff68000680080001007f000001080002006401010208000100e000000208000100ac1e00013c000380060001004e240000060001004e230000060001004e230000060001004e200000060002004e220000060001004e240000060001004e23000008000100640101001c0017000000000900000007000001e00000ed000000000c000004170c000f8008000240000000002800048024000380050001", @ANYRES8=r6, @ANYBLOB="ef120021d69eb4", @ANYRES64=r5, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES16=r11, @ANYRES32], 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000280)=0x3) 2.445478465s ago: executing program 4 (id=4081): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x30000052, 0x8001, 0x200000, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x5}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1c8}}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @thr={&(0x7f00000005c0)="a57d5b2ed0643a6e169d3b9841ffe7ff58e0594e4f029cf4a0cb3df47449ed0df0f0114b764ce8007b61334f90df1757b8e2ff37f367c669bcc62d73576c09b200122125e28e531220109ac5dc0b9d181e35d1b2ee6e1c1cad2a310f1e42a0b8c279ec75afec3ea0c9dbd10a283e64f1a39578928979d7e4313801afde1261baeaaec5a7fce5dbc99ea89904d576140f063833b7734c2b2ccb031f360f62e285ea2c304b85df7eb97d5e11e9ab1e6a4136ae1b1555b73e235ed937003c11a7c846b70e03ca8760ef7fe098fa73c1561d46c9bf3683f34447607aa2a40810212238405f1f4647be0e74bab98a0eb398b24084", &(0x7f00000006c0)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r9, r9, 0x0, 0x2000009) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) 2.176997515s ago: executing program 0 (id=4082): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x2826) socket$rds(0x15, 0x5, 0x0) dup(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x20004080) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x1}}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x2000000, 0x9}, 0x0, 0x0) 1.676797937s ago: executing program 1 (id=4083): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 1.590924714s ago: executing program 1 (id=4084): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x30000}, 0x0) 1.434486277s ago: executing program 1 (id=4085): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}, 0x1, 0x4000000}, 0x0) 1.271768148s ago: executing program 1 (id=4086): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) r2 = io_uring_setup(0x178a, &(0x7f0000000140)={0x0, 0x52bd, 0x8, 0xfffffffe, 0x8000a}) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r4, &(0x7f0000000180)=""/118, 0x76) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000f2d000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x4) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYBLOB="0580040000000000500012800b00010067656e65766500004000028005000800"], 0x70}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000200)=0x8000) 1.244970103s ago: executing program 0 (id=4087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x5, 0x4888}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 902.425168ms ago: executing program 0 (id=4088): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004500)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x224}}], 0x1, 0x40000) 790.479857ms ago: executing program 0 (id=4089): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffc52, &(0x7f0000001c80)=[{&(0x7f00000002c0)="b8eafd71e4885a1145b159784e9b65ad8af09ab2270b4f160baf563e95f4c7100a808e4b4f824de2c976493ce62eefbd47949ca10878e6c396d4fca394ca9ef0bc026dc5d834dc4492ac2c06fea40e2088f974416497a1d16e", 0x59}, {&(0x7f0000000580)="22c7f5c9c0cd792c955dbb13bb93b88ee2f1332672a8576f256afd904201d5d3a76fd8d604c1af13181856c8a615e30cae4770d8f39595a02d827baffa04a44d56ff8264f06eaeceac9095fd04ebed020558607d1ef220cc7a109631b5a4415f4d70669007d6a10db5b1affafe8ce23cb8ca4e7d6e58040044c8835f7ef7c6807ede04e5bbe49c254a2f0ce34d0a95f06606ba5aacd76e85c1aacf81dab20be144b20c68ac95ff2008", 0xa4}, {&(0x7f0000000440)="ff3b638dba1e2604afc5d0e8c6bf0e22e668fa2ca7a6927f0e292d34", 0x1c}, {&(0x7f0000000480)="b98da5672d2aee307fb5253c3f20479e7edb3eb81e34fcecee18aeadd14641e2bff1e972a9677c605a73c1cfc449d5708f039245452adbc351d1bc55c5ca9524441cbdfe2076a6d684f9c241b29e43f6fd91c3a84ae3cbcfc01eb429241e8ea413091e1d5a6ae98ff49045003da23ae0474bfa58a4d18e200dd5bcf2ca241152feaeee79", 0x84}, {&(0x7f0000000840)="690caf568c27419baf68bc80f82e720e99bf4dc34931ba3783c82c96b109d6fbe772c8a03663684508d0b381860378e1127421df1d9b314575f1c126b6b3ab21a9cbc56423ec0ebfcd8437e4a28644750a6eda01ab4a012f30eab21f4ed19285ad002dfd3596eb2d4862012bb8b883675b0a5587792041dd73bb0604659cab7b0c20a9d3106479dfd56fef15fe60a781c73caf01a9e183400973f1bc9f382783b20ee432318585179c7ffeb08064c62c6001b55cbe287c33d3e2748ced568adc343c9f6d210250ba30d66c", 0xcb}, {&(0x7f0000000540)="2c26fdd11aee8a51bc1fd2414d14118b145a150c", 0x14}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001bc0)="41665fdc6edb688bb3eec5cf9e8b41d0adc3aa1b28cff5d51a7d8dad75d91be2bdc2f2ad876ab89e49026f7950bd66a95b85769bbeac850aa6fad0abd4bb5122c2594b4b1884019955bfcdebfee53ea3992c5153611f21bbd62e30e9304572517e287fb902a851eb8d9407775fe0a5b33af7936dca0af68bcd4071a449426e9c7ec6d1bd32c820a7918e4fb0d759b6cf692a704c2c7007c16d0d93a5c50a1dbf7c8de628205ae951c6f7f747f70ccf35be3164f5375d2c", 0xb7}], 0x8}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5\r\xce}\x83\xabOv\'\xcd?\x1d2z\x9fn\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sdr={0x56544943, 0x8}}, 0x6b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r3, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f00000003c0)='./bus\x00', 0x2000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c0001800600", @ANYRES16, @ANYBLOB="785454f63ace2532535fe458e26a717fb1f470cbce39657622847a083b06c05d7cca8ca7fd3ef37e"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 0s ago: executing program 2 (id=4092): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x50000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0xffff1000, 0x76, &(0x7f0000000580)=""/118}, {0x0, 0x0, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x1, 0x0, 0x5, 0x0}) kernel console output (not intermixed with test programs): m="syz.3.3678" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1068.362121][ T29] audit: type=1326 audit(1780970298.092:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.3.3678" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1068.476541][ T29] audit: type=1326 audit(1780970298.092:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.3.3678" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1068.567023][ T29] audit: type=1326 audit(1780970298.092:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.3.3678" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1068.735848][ T29] audit: type=1326 audit(1780970298.102:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.3.3678" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1068.859580][ T29] audit: type=1326 audit(1780970298.112:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.3.3678" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1069.082703][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1069.163569][T10431] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1069.227681][T17968] wireguard0: left allmulticast mode [ 1069.324647][T10431] usb 2-1: Using ep0 maxpacket: 8 [ 1069.347936][T10431] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 1069.379658][T10431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1069.400428][T10431] usb 2-1: can't read configurations, error -61 [ 1069.457702][T14256] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1069.562817][T10431] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1069.665589][T14256] usb 3-1: Using ep0 maxpacket: 32 [ 1069.686948][T14256] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1069.709263][T14256] usb 3-1: config 0 has no interface number 0 [ 1069.721793][T14256] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1069.735032][T14256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.743418][T14256] usb 3-1: Product: syz [ 1069.747851][T14256] usb 3-1: Manufacturer: syz [ 1069.752635][T14256] usb 3-1: SerialNumber: syz [ 1069.752651][T10431] usb 2-1: Using ep0 maxpacket: 8 [ 1069.762460][T14256] usb 3-1: config 0 descriptor?? [ 1069.784992][T14256] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1069.796741][T10431] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 1069.799283][T10431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1069.853528][T10431] usb 2-1: can't read configurations, error -61 [ 1069.879166][T14256] usb 3-1: selecting invalid altsetting 1 [ 1069.894107][T14256] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1069.894311][T10431] usb usb2-port1: attempt power cycle [ 1069.916307][T14256] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1069.947628][T14256] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1069.957754][T17988] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1069.976209][T14256] usb 3-1: media controller created [ 1070.010361][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1070.028014][T14256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1070.112697][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1070.184826][T14256] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1070.209086][T14256] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1070.231380][T14256] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1070.333528][T10431] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1070.341034][T14256] usb 3-1: USB disconnect, device number 52 [ 1070.370152][T10431] usb 2-1: Using ep0 maxpacket: 8 [ 1070.385874][T10431] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 1070.435457][T10431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1070.469984][T10431] usb 2-1: can't read configurations, error -61 [ 1070.613131][T10431] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1070.655663][T10431] usb 2-1: Using ep0 maxpacket: 8 [ 1070.664483][T10431] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 1070.685814][T10431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1070.699360][T10431] usb 2-1: can't read configurations, error -61 [ 1070.710162][T10431] usb usb2-port1: unable to enumerate USB device [ 1070.861258][T18000] FAULT_INJECTION: forcing a failure. [ 1070.861258][T18000] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.875608][T18000] CPU: 1 UID: 0 PID: 18000 Comm: syz.2.3689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.875631][T18000] Tainted: [L]=SOFTLOCKUP [ 1070.875637][T18000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1070.875647][T18000] Call Trace: [ 1070.875652][T18000] [ 1070.875659][T18000] dump_stack_lvl+0xe8/0x150 [ 1070.875679][T18000] should_fail_ex+0x412/0x560 [ 1070.875697][T18000] should_failslab+0xa8/0x100 [ 1070.875711][T18000] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1070.875729][T18000] ? __alloc_skb+0x1d0/0x7d0 [ 1070.875746][T18000] ? __local_bh_enable_ip+0xd0/0x130 [ 1070.875762][T18000] __alloc_skb+0x1d0/0x7d0 [ 1070.875791][T18000] ethnl_default_notify+0x5af/0xbf0 [ 1070.875825][T18000] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1070.875840][T18000] ? rcu_is_watching+0x15/0xb0 [ 1070.875864][T18000] ? mutex_is_locked+0x17/0x50 [ 1070.875878][T18000] ? rtnl_is_locked+0x15/0x20 [ 1070.875893][T18000] ethnl_default_set_doit+0x6ad/0xad0 [ 1070.875914][T18000] genl_family_rcv_msg_doit+0x22a/0x330 [ 1070.875929][T18000] ? __asan_memcpy+0x40/0x70 [ 1070.875950][T18000] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1070.875973][T18000] ? bpf_lsm_capable+0x9/0x20 [ 1070.875985][T18000] ? security_capable+0x7e/0x2c0 [ 1070.876006][T18000] genl_rcv_msg+0x61c/0x7a0 [ 1070.876025][T18000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.876039][T18000] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1070.876053][T18000] ? __pfx_ref_tracker_free+0x10/0x10 [ 1070.876074][T18000] netlink_rcv_skb+0x232/0x4b0 [ 1070.876092][T18000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.876107][T18000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1070.876135][T18000] ? down_read+0x270/0x2e0 [ 1070.876155][T18000] ? genl_rcv+0xd/0x40 [ 1070.876170][T18000] genl_rcv+0x28/0x40 [ 1070.876183][T18000] netlink_unicast+0x75c/0x8e0 [ 1070.876206][T18000] netlink_sendmsg+0x813/0xb40 [ 1070.876224][T18000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.876238][T18000] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1070.876256][T18000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1070.876274][T18000] ____sys_sendmsg+0x972/0x9f0 [ 1070.876292][T18000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.876314][T18000] ___sys_sendmsg+0x2a5/0x360 [ 1070.876326][T18000] ? __lock_acquire+0x6b5/0x2cf0 [ 1070.876342][T18000] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.876357][T18000] ? kstrtoull+0x12f/0x1d0 [ 1070.876406][T18000] ? __fget_files+0x2a/0x420 [ 1070.876420][T18000] ? __fget_files+0x3a0/0x420 [ 1070.876441][T18000] __sys_sendmmsg+0x2e7/0x4e0 [ 1070.876457][T18000] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1070.876486][T18000] ? fput+0xa0/0xd0 [ 1070.876500][T18000] ? ksys_write+0x242/0x270 [ 1070.876521][T18000] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1070.876537][T18000] __do_fast_syscall_32+0x23e/0x6f0 [ 1070.876551][T18000] ? do_fast_syscall_32+0x33/0x70 [ 1070.876563][T18000] ? lockdep_hardirqs_on+0x7a/0x110 [ 1070.876575][T18000] ? asm_int80_emulation+0x1a/0x20 [ 1070.876586][T18000] ? do_int80_emulation+0x29f/0x550 [ 1070.876602][T18000] do_fast_syscall_32+0x33/0x70 [ 1070.876616][T18000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1070.876630][T18000] RIP: 0023:0xf7fc301c [ 1070.876646][T18000] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1070.876657][T18000] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1070.876671][T18000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1070.876679][T18000] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 1070.876687][T18000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1070.876694][T18000] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1070.876701][T18000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1070.876719][T18000] [ 1071.252575][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1071.403363][T14420] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1071.539483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.567939][T14420] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1071.576455][T14420] usb 4-1: config 8 has no interface number 0 [ 1071.582903][T14420] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1071.595056][T14420] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1071.606276][T14420] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1071.616429][T14420] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1071.622602][T14256] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1071.623368][T14420] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1071.640415][T14420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.664692][T17997] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1071.775048][T14256] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1071.784392][T14256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.801993][T14256] usb 3-1: config 0 descriptor?? [ 1071.810402][T14256] cp210x 3-1:0.0: cp210x converter detected [ 1072.231447][T14256] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1072.282657][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1072.460415][T14420] usb 4-1: string descriptor 0 read error: -71 [ 1072.495174][T14420] ir_toy 4-1:8.177: required endpoints not found [ 1072.540011][T14420] usb 4-1: USB disconnect, device number 69 [ 1072.581196][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3692'. [ 1072.774769][T10431] usb 3-1: USB disconnect, device number 53 [ 1072.810931][T10431] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1072.864688][T10431] cp210x 3-1:0.0: device disconnected [ 1072.919578][T18019] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1073.322756][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1073.328800][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1073.774198][T18032] xt_cgroup: path and classid specified [ 1074.133234][T18040] input: syz0 as /devices/virtual/input/input138 [ 1074.155172][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1074.177791][T14256] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1074.193155][T18040] FAULT_INJECTION: forcing a failure. [ 1074.193155][T18040] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.241522][T18040] CPU: 0 UID: 0 PID: 18040 Comm: syz.3.3701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.241559][T18040] Tainted: [L]=SOFTLOCKUP [ 1074.241568][T18040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.241580][T18040] Call Trace: [ 1074.241589][T18040] [ 1074.241599][T18040] dump_stack_lvl+0xe8/0x150 [ 1074.241640][T18040] should_fail_ex+0x412/0x560 [ 1074.241671][T18040] should_failslab+0xa8/0x100 [ 1074.241694][T18040] __kmalloc_cache_noprof+0x88/0x660 [ 1074.241725][T18040] ? rfkill_connect+0x57/0x140 [ 1074.241853][T18040] rfkill_connect+0x57/0x140 [ 1074.241880][T18040] input_register_device+0xce0/0x1140 [ 1074.241920][T18040] uinput_create_device+0x422/0x680 [ 1074.241956][T18040] uinput_ioctl_handler+0x417/0x14a0 [ 1074.241990][T18040] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1074.242032][T18040] ? __fget_files+0x2a/0x420 [ 1074.242068][T18040] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1074.242102][T18040] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1074.242135][T18040] ? __fget_files+0x3a0/0x420 [ 1074.242166][T18040] ? fput+0xa0/0xd0 [ 1074.242190][T18040] ? ksys_write+0x242/0x270 [ 1074.242228][T18040] __do_fast_syscall_32+0x23e/0x6f0 [ 1074.242252][T18040] ? do_fast_syscall_32+0x33/0x70 [ 1074.242273][T18040] ? lockdep_hardirqs_on+0x7a/0x110 [ 1074.242293][T18040] ? asm_int80_emulation+0x1a/0x20 [ 1074.242312][T18040] ? do_int80_emulation+0x29f/0x550 [ 1074.242332][T18040] ? trace_irq_disable+0x3b/0x140 [ 1074.242364][T18040] do_fast_syscall_32+0x33/0x70 [ 1074.242387][T18040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1074.242411][T18040] RIP: 0023:0xf7f6901c [ 1074.242431][T18040] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1074.242447][T18040] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1074.242470][T18040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 1074.242483][T18040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1074.242498][T18040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1074.242509][T18040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1074.242521][T18040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1074.242551][T18040] [ 1074.352657][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1074.541069][T18040] input: failed to attach handler rfkill to device input138, error: -12 [ 1074.591084][T14256] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1074.610414][T14256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.659116][T14256] usb 3-1: Product: syz [ 1074.672426][T14256] usb 3-1: Manufacturer: syz [ 1074.683313][T14256] usb 3-1: SerialNumber: syz [ 1074.839593][T18046] hma(sha224): entered promiscuous mode [ 1075.231707][T14256] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1075.245453][T14256] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1075.264618][T14256] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1075.281908][T14256] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1075.333975][T14256] usb 3-1: USB disconnect, device number 54 [ 1075.392761][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1076.432647][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1077.473107][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1078.460999][T18124] fuse: Unknown parameter '/dev/dsp' [ 1078.512806][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1078.609597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.753051][ T5728] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1078.799926][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 1078.799945][ T29] audit: type=1326 audit(1780970308.972:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18131 comm="syz.3.3726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x0 [ 1078.932645][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 1078.955052][ T5728] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1078.962799][ T5728] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1078.994364][T18134] fuse: Unknown parameter '/dev/dsp' [ 1079.004633][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1079.036660][ T5728] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1079.058067][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1079.117571][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1079.147279][ T5728] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1079.205572][ T5728] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1079.238782][ T5728] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1079.248663][ T5728] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1079.298748][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1079.345585][ T5728] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1079.385090][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1079.420013][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1079.456715][ T5728] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1079.529862][ T5728] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1079.551933][ T5728] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1079.559656][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1079.619689][ T5728] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1079.660718][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1079.693657][ T5728] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1079.749559][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1079.787702][ T5728] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1079.825809][ T5728] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1079.864468][ T5728] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1079.898654][ T5728] usb 3-1: string descriptor 0 read error: -22 [ 1079.910882][ T5728] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1079.959519][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.080311][ T5728] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1080.341364][T10431] usb 3-1: USB disconnect, device number 55 [ 1080.360633][T18145] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1080.592701][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1080.683482][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1080.691146][ T5728] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1080.787483][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1080.872697][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 1080.883287][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.895658][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.910745][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.922211][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1080.933050][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.943028][ T5728] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 1080.953392][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.964038][ T5728] usb 2-1: Product: syz [ 1080.969389][ T24] usb 4-1: config 0 descriptor?? [ 1080.980236][ T5728] usb 2-1: Manufacturer: syz [ 1080.990127][ T5728] usb 2-1: SerialNumber: syz [ 1081.048015][ T5728] usb 2-1: config 0 descriptor?? [ 1081.066130][ T5728] kobil_sct 2-1:0.0: required endpoints missing [ 1081.271171][T18166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.324447][T18166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.408157][ T5728] usb 2-1: USB disconnect, device number 74 [ 1081.632751][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1082.046533][ T24] ath6kl: Failed to submit usb control message: -110 [ 1082.077980][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 1082.111954][ T24] ath6kl: Unable to send get target info: -110 [ 1082.190288][ T24] ath6kl: Failed to init ath6kl core: -110 [ 1082.215424][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1082.672600][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1082.699146][T18178] program syz.0.3739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1082.773137][T10431] usb 4-1: USB disconnect, device number 70 [ 1082.831601][T18178] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3739'. [ 1083.351378][T18192] syzkaller0: entered promiscuous mode [ 1083.359642][T18192] syzkaller0: entered allmulticast mode [ 1083.712650][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1084.072750][T14420] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1084.264308][T14420] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=ff.fa [ 1084.297932][T14420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.317902][T14420] usb 4-1: Product: syz [ 1084.333964][T14420] usb 4-1: Manufacturer: syz [ 1084.366265][T14420] usb 4-1: SerialNumber: syz [ 1084.397129][T14420] usb 4-1: can't set config #1, error -71 [ 1084.429055][T14420] usb 4-1: USB disconnect, device number 71 [ 1084.752660][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1085.052694][ T24] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1085.203854][ T24] usb 3-1: device descriptor read/64, error -71 [ 1085.452689][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1085.593114][ T24] usb 3-1: device descriptor read/64, error -71 [ 1085.679704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.713402][ T24] usb usb3-port1: attempt power cycle [ 1085.792680][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1086.072598][ T24] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1086.093399][ T24] usb 3-1: device descriptor read/8, error -71 [ 1086.362708][ T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1086.409747][ T24] usb 3-1: device descriptor read/8, error -71 [ 1086.455125][T18229] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1086.531033][T15040] Bluetooth: hci3: command 0x0406 tx timeout [ 1086.547182][ T24] usb usb3-port1: unable to enumerate USB device [ 1086.602605][ T5728] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1086.711867][T18232] fuse: Bad value for 'user_id' [ 1086.718456][T18232] fuse: Bad value for 'user_id' [ 1086.752778][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 1086.761631][ T5728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.772166][ T5728] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1086.781318][ T5728] usb 2-1: config 1 has no interface number 0 [ 1086.787946][ T5728] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1086.812135][ T5728] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1086.824359][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.832438][ T5728] usb 2-1: Product: syz [ 1086.836897][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1086.844190][ T5728] usb 2-1: Manufacturer: syz [ 1086.848852][ T5728] usb 2-1: SerialNumber: syz [ 1087.166486][ T5728] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1087.207170][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.401572][ T5630] bridge0: entered promiscuous mode [ 1087.612085][ T29] audit: type=1326 audit(1780970317.782:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18246 comm="syz.4.3761" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x0 [ 1087.872589][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1088.023025][ T5728] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1088.190133][T18223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3753'. [ 1088.208601][ T5728] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1088.229044][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.237468][ T5728] usb 4-1: Product: syz [ 1088.241713][ T5728] usb 4-1: Manufacturer: syz [ 1088.246481][ T5728] usb 4-1: SerialNumber: syz [ 1088.256469][ T5728] usb 4-1: config 0 descriptor?? [ 1088.467630][ T5728] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1088.912602][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1089.221507][ T24] usb 2-1: USB disconnect, device number 75 [ 1089.702080][ T5728] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1089.716228][ T5728] usb 4-1: USB disconnect, device number 72 [ 1089.733084][T10431] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1089.896539][T10431] usb 2-1: config 0 has no interfaces? [ 1089.913958][T10431] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1089.926408][T10431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.935706][T10431] usb 2-1: Product: syz [ 1089.940835][T10431] usb 2-1: Manufacturer: syz [ 1089.946253][T10431] usb 2-1: SerialNumber: syz [ 1089.952671][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1089.955143][T10431] usb 2-1: config 0 descriptor?? [ 1090.020977][T18268] Cannot find add_set index 0 as target [ 1090.029306][ T29] audit: type=1326 audit(1780970320.212:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc301c code=0x7ffc0000 [ 1090.055363][ T29] audit: type=1326 audit(1780970320.212:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc301c code=0x7ffc0000 [ 1090.080369][ T29] audit: type=1326 audit(1780970320.252:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7fc301c code=0x7ffc0000 [ 1090.142634][ T29] audit: type=1326 audit(1780970320.252:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc301c code=0x7ffc0000 [ 1090.250716][ T29] audit: type=1326 audit(1780970320.252:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc301c code=0x7ffc0000 [ 1090.500837][T18277] netlink: 'syz.2.3770': attribute type 10 has an invalid length. [ 1090.508734][T18272] FAULT_INJECTION: forcing a failure. [ 1090.508734][T18272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.508773][T18272] CPU: 1 UID: 0 PID: 18272 Comm: syz.0.3769 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.508798][T18272] Tainted: [L]=SOFTLOCKUP [ 1090.508805][T18272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1090.508817][T18272] Call Trace: [ 1090.508825][T18272] [ 1090.508833][T18272] dump_stack_lvl+0xe8/0x150 [ 1090.508867][T18272] should_fail_ex+0x412/0x560 [ 1090.508898][T18272] _copy_from_iter+0x1d3/0x1670 [ 1090.508922][T18272] ? rcu_is_watching+0x15/0xb0 [ 1090.508956][T18272] ? __pfx__copy_from_iter+0x10/0x10 [ 1090.508986][T18272] ? netlink_sendmsg+0x650/0xb40 [ 1090.509019][T18272] ? skb_put+0x11b/0x210 [ 1090.509053][T18272] netlink_sendmsg+0x6c0/0xb40 [ 1090.509084][T18272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.509109][T18272] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1090.509143][T18272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1090.509176][T18272] ____sys_sendmsg+0x972/0x9f0 [ 1090.509207][T18272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.509234][T18272] ? kstrtoull+0x12f/0x1d0 [ 1090.509273][T18272] ___sys_sendmsg+0x2a5/0x360 [ 1090.509294][T18272] ? __lock_acquire+0x6b5/0x2cf0 [ 1090.509324][T18272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.509348][T18272] ? get_pid_task+0x20/0x1f0 [ 1090.509375][T18272] ? get_pid_task+0x20/0x1f0 [ 1090.509399][T18272] ? get_pid_task+0x20/0x1f0 [ 1090.509457][T18272] ? __fget_files+0x2a/0x420 [ 1090.509484][T18272] ? __fget_files+0x3a0/0x420 [ 1090.509519][T18272] __sys_sendmsg+0x183/0x260 [ 1090.509544][T18272] ? __pfx___sys_sendmsg+0x10/0x10 [ 1090.509589][T18272] __do_fast_syscall_32+0x23e/0x6f0 [ 1090.509615][T18272] ? do_fast_syscall_32+0x33/0x70 [ 1090.509636][T18272] ? lockdep_hardirqs_on+0x7a/0x110 [ 1090.509654][T18272] ? asm_int80_emulation+0x1a/0x20 [ 1090.509674][T18272] ? do_int80_emulation+0x29f/0x550 [ 1090.509693][T18272] ? trace_irq_disable+0x3b/0x140 [ 1090.509722][T18272] do_fast_syscall_32+0x33/0x70 [ 1090.509743][T18272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.509765][T18272] RIP: 0023:0xf7f3401c [ 1090.509783][T18272] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1090.509799][T18272] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1090.509820][T18272] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 1090.509833][T18272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.509844][T18272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.509855][T18272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1090.509866][T18272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.509894][T18272] [ 1090.570197][T18279] Invalid logical block size (150994944) [ 1090.582258][T16048] usb 2-1: USB disconnect, device number 76 [ 1090.659566][T18277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3770'. [ 1090.849477][T18277] dummy0: entered promiscuous mode [ 1090.992692][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1091.143034][T18293] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1091.343801][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3776'. [ 1091.464754][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1091.732721][T10431] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1091.902696][T10431] usb 4-1: Using ep0 maxpacket: 8 [ 1091.913528][T10431] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.935981][T10431] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.965133][T10431] usb 4-1: config 1 has no interface number 0 [ 1091.982101][T10431] usb 4-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1092.022976][T10431] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1092.032760][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1092.051087][T10431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.082099][T10431] usb 4-1: Product: syz [ 1092.100224][T10431] usb 4-1: Manufacturer: syz [ 1092.119598][T10431] usb 4-1: SerialNumber: syz [ 1092.523848][T10431] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1092.581064][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1092.749822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.072711][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1093.508923][T18292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1094.112646][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1094.548486][ T5728] usb 4-1: USB disconnect, device number 73 [ 1095.152637][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1095.219376][T18342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.257035][T18342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.428942][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'. [ 1095.458426][T16048] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1095.612991][T16048] usb 2-1: device descriptor read/64, error -71 [ 1095.895800][T16048] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1096.052693][T16048] usb 2-1: device descriptor read/64, error -71 [ 1096.183204][T16048] usb usb2-port1: attempt power cycle [ 1096.202703][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1096.573080][T16048] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1096.631593][T16048] usb 2-1: device descriptor read/8, error -71 [ 1096.855629][ T5630] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1096.952643][T16048] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1097.035162][T16048] usb 2-1: device descriptor read/8, error -71 [ 1097.132680][ T5630] usb 4-1: device descriptor read/64, error -71 [ 1097.184686][T16048] usb usb2-port1: unable to enumerate USB device [ 1097.242580][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1097.452828][ T5630] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1097.632759][ T5630] usb 4-1: device descriptor read/64, error -71 [ 1097.880504][ T5630] usb usb4-port1: attempt power cycle [ 1098.232770][ T5630] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1098.268258][ T5630] usb 4-1: device descriptor read/8, error -71 [ 1098.282588][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1098.552800][ T5630] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1098.583561][ T5630] usb 4-1: device descriptor read/8, error -71 [ 1098.713634][ T5630] usb usb4-port1: unable to enumerate USB device [ 1099.312718][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1099.682901][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1099.783987][T18393] vlan2: entered promiscuous mode [ 1099.798493][T18397] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1099.807496][T18393] bond0: entered promiscuous mode [ 1099.819937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.853161][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1099.865084][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1099.887347][ T24] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1099.912997][ T24] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1099.931121][ T24] usb 3-1: config 14 has no interface number 0 [ 1099.942891][ T24] usb 3-1: config 14 has no interface number 1 [ 1099.957001][ T24] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1099.990189][ T24] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1100.018606][ T24] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1100.060831][ T24] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1100.082861][ T24] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1100.104532][ T24] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.146857][ T24] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1100.152632][ T5630] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1100.169807][ T24] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1100.200725][ T24] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1100.220431][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.256458][ T24] usb 3-1: Product: syz [ 1100.270898][ T24] usb 3-1: Manufacturer: syz [ 1100.314233][ T5630] usb 4-1: Using ep0 maxpacket: 32 [ 1100.328691][ T5630] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1100.352729][ T24] usb 3-1: SerialNumber: syz [ 1100.362600][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1100.381319][ T5630] usb 4-1: config 1 has no interface number 0 [ 1100.402816][ T5630] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.439428][ T5630] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1100.476519][ T5630] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1100.502947][ T5630] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1100.541511][ T5630] usb 4-1: config 1 has no interface number 0 [ 1100.556460][ T5630] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.582232][T18401] syzkaller0: entered promiscuous mode [ 1100.586410][ T5630] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1100.590607][T18401] syzkaller0: entered allmulticast mode [ 1100.631815][ T5630] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1100.671541][ T5630] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1100.706569][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.725220][ T5630] usb 4-1: Product: syz [ 1100.733428][ T5630] usb 4-1: Manufacturer: syz [ 1100.749799][ T5630] usb 4-1: SerialNumber: syz [ 1100.797418][T18401] tipc: Started in network mode [ 1100.805834][ T24] legousbtower 3-1:14.57: interrupt endpoints not found [ 1100.815109][ T5630] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 1100.853613][T18401] tipc: Node identity 82c77c34c722, cluster identity 4711 [ 1100.910905][T18401] tipc: Enabled bearer , priority 0 [ 1101.031619][T18400] tipc: Resetting bearer [ 1101.190003][T14420] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1101.285549][ T24] legousbtower 3-1:14.228: get version request failed: -71 [ 1101.294431][ T24] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 1101.297605][T18400] tipc: Disabling bearer [ 1101.319231][ T24] usb 3-1: USB disconnect, device number 60 [ 1101.392824][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1101.417738][T14420] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1101.453743][T14420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.473626][T14420] usb 2-1: Product: syz [ 1101.485540][T14420] usb 2-1: Manufacturer: syz [ 1101.501318][T14420] usb 2-1: SerialNumber: syz [ 1101.519722][T14420] usb 2-1: config 0 descriptor?? [ 1101.733566][T14420] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1102.062741][T10431] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 1102.216289][T10431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1102.228256][T10431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1102.239845][T10431] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1102.253271][T10431] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 1102.262361][T10431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.273506][T10431] usb 3-1: config 0 descriptor?? [ 1102.281618][T18419] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1102.432923][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1102.710070][T10431] hid_parser_main: 425 callbacks suppressed [ 1102.710100][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.725228][T14256] usb 4-1: USB disconnect, device number 78 [ 1102.725426][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.772791][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.804368][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.820785][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.830083][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.839300][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.849663][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.862681][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.893612][T10431] logitech-hidpp-device 0003:046D:C081.003C: unknown main item tag 0x0 [ 1102.917633][T10431] logitech-hidpp-device 0003:046D:C081.003C: hidraw0: USB HID v0.08 Device [HID 046d:c081] on usb-dummy_hcd.2-1/input0 [ 1102.945254][T10431] usb 3-1: USB disconnect, device number 61 [ 1103.008738][T18422] fido_id[18422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1103.421842][T14420] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1103.451359][T14420] usb 2-1: USB disconnect, device number 81 [ 1103.472637][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1103.762775][T14420] IPVS: starting estimator thread 0... [ 1103.865189][T18434] IPVS: using max 52 ests per chain, 124800 per kthread [ 1104.512628][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1104.742860][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1105.332769][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1105.344211][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.355993][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.365294][ T24] usb 3-1: config 1 has no interface number 0 [ 1105.371774][ T24] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1105.389524][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1105.398895][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.407446][ T24] usb 3-1: Product: syz [ 1105.411679][ T24] usb 3-1: Manufacturer: syz [ 1105.417014][ T24] usb 3-1: SerialNumber: syz [ 1105.554592][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1105.716345][ T24] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1105.768554][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1106.592589][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1106.772657][T14420] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1106.862739][T10431] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1106.890055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.923960][T14420] usb 4-1: config 49 has too many interfaces: 48, using maximum allowed: 32 [ 1106.933287][T14420] usb 4-1: config 49 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.944184][T14420] usb 4-1: config 49 has 0 interfaces, different from the descriptor's value: 48 [ 1106.948403][T18433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3816'. [ 1106.956644][T14420] usb 4-1: New USB device found, idVendor=7d65, idProduct=a415, bcdDevice= 0.40 [ 1106.990328][T14420] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1107.000708][T14420] usb 4-1: Product: syz [ 1107.005226][T14420] usb 4-1: Manufacturer: syz [ 1107.033755][T10431] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1107.043443][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.052854][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.064102][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.071787][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.081377][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.092697][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.102060][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.113141][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.126152][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.135460][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.144854][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.170569][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.178489][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.187831][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.200758][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.208725][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.218356][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.229705][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.238294][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.247678][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.259036][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.268231][T10431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.277597][T10431] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.289048][T10431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1107.314222][T18472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.326523][T10431] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1107.342641][T10431] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1107.351844][T18472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.361680][T10431] usb 2-1: Product: syz [ 1107.366249][T10431] usb 2-1: Manufacturer: syz [ 1107.374663][T10431] usb 2-1: SerialNumber: syz [ 1107.403437][T10431] usb 2-1: config 0 descriptor?? [ 1107.426847][T10431] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1107.592980][T14420] usb 4-1: USB disconnect, device number 79 [ 1107.632935][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1107.692464][T14256] usb 2-1: USB disconnect, device number 82 [ 1107.720837][T14256] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1107.992826][T14256] usb 3-1: USB disconnect, device number 62 [ 1108.168781][ T29] audit: type=1800 audit(1780970338.342:4193): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3830" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1108.672616][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1108.689978][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 1108.703540][T18495] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.716432][T18495] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1108.743062][T14256] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1108.843199][T14420] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1108.937683][T14256] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1108.974942][T14256] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1109.017753][T14420] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1109.044901][T14420] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1109.044921][T14256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1109.044950][T14256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1109.139710][T14420] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1109.192831][T14420] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1109.210731][T14420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.246030][T14420] usb 3-1: Product: syz [ 1109.252150][T18506] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 1109.261015][T14420] usb 3-1: Manufacturer: syz [ 1109.275137][T14420] usb 3-1: SerialNumber: syz [ 1109.288608][T14256] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.311478][T14420] usb 3-1: config 0 descriptor?? [ 1109.326868][T18493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1109.334818][T18493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1109.375505][T14420] usb 3-1: ucan: probing device on interface #0 [ 1109.377751][T14256] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1109.406936][T14256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.437221][T14256] usb 4-1: Product: syz [ 1109.478028][T14256] usb 4-1: Manufacturer: syz [ 1109.492614][T14256] usb 4-1: SerialNumber: syz [ 1109.526106][T14256] usb 4-1: config 0 descriptor?? [ 1109.554484][T14256] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1109.573818][T14256] imon 4-1:0.0: unable to initialize intf0, err -90 [ 1109.590592][T14256] imon:imon_probe: failed to initialize context! [ 1109.600689][T14256] imon 4-1:0.0: unable to register, err -19 [ 1109.722584][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1109.783794][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'. [ 1109.841178][T10431] usb 4-1: USB disconnect, device number 80 [ 1109.853825][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'. [ 1110.030398][T14420] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 1110.096753][T14420] usb 3-1: USB disconnect, device number 63 [ 1110.754262][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1110.790191][T18518] openvswitch: netlink: Flow actions attr not present in new flow. [ 1111.587493][T18530] syz.0.3849 (18530): drop_caches: 2 [ 1111.792877][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1111.992796][T10431] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1112.172610][T10431] usb 4-1: Using ep0 maxpacket: 16 [ 1112.189550][T10431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.202960][T10431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.214726][T10431] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1112.226866][T10431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.250123][T10431] usb 4-1: config 0 descriptor?? [ 1112.690343][T10431] hid_parser_main: 27 callbacks suppressed [ 1112.709710][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1112.735544][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1112.775970][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1112.793229][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1112.832927][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1112.852039][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1112.872826][T14256] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1112.878384][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1113.007332][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1113.021502][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1113.031615][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1113.040441][T10431] apple 0003:05AC:024B.003D: unknown main item tag 0x0 [ 1113.084280][T14256] usb 3-1: Using ep0 maxpacket: 16 [ 1113.096289][T10431] apple 0003:05AC:024B.003D: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.3-1/input0 [ 1113.102828][T14256] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1113.154970][T14256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.197068][T14256] usb 3-1: Product: syz [ 1113.210233][T14256] usb 3-1: Manufacturer: syz [ 1113.223013][T14256] usb 3-1: SerialNumber: syz [ 1113.255819][T14256] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1113.270747][T14256] r8152-cfgselector 3-1: config 0 descriptor?? [ 1113.722821][T10431] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1113.855483][T18533] IPVS: You probably need to specify IP address on multicast interface. [ 1113.871184][T18533] IPVS: Error connecting to the multicast addr [ 1113.883377][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1113.904800][T10431] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1113.927440][T10431] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1113.960166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.968854][T10431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1113.986777][T10431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1114.002095][T14420] r8152-cfgselector 3-1: USB disconnect, device number 64 [ 1114.032107][T10431] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1114.104574][T10431] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1114.114809][T10431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.146914][T10431] usb 2-1: Product: syz [ 1114.153554][T10431] usb 2-1: Manufacturer: syz [ 1114.162131][T10431] usb 2-1: SerialNumber: syz [ 1114.188395][T10431] usb 2-1: config 0 descriptor?? [ 1114.224888][T10431] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1114.236371][T10431] imon 2-1:0.0: unable to initialize intf0, err -90 [ 1114.259098][T10431] imon:imon_probe: failed to initialize context! [ 1114.270418][T10431] imon 2-1:0.0: unable to register, err -19 [ 1114.492193][T10431] usb 2-1: USB disconnect, device number 83 [ 1114.924375][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1115.020427][ T5728] usb 4-1: USB disconnect, device number 81 [ 1115.244573][T14256] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1115.264333][T18561] syz.3.3857 (18561): /proc/18560/oom_adj is deprecated, please use /proc/18560/oom_score_adj instead. [ 1115.377677][T18564] fuse: Bad value for 'fd' [ 1115.402654][T14256] usb 3-1: Using ep0 maxpacket: 32 [ 1115.415384][T14256] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1115.415420][T14256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.437854][T14256] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1115.883455][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.890234][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.922667][ T5728] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1115.952640][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1116.062908][ T5728] usb 4-1: device descriptor read/64, error -71 [ 1116.303379][ T5728] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1116.444146][ T5728] usb 4-1: device descriptor read/64, error -71 [ 1116.575255][ T5728] usb usb4-port1: attempt power cycle [ 1116.933252][T14256] gspca_nw80x: reg_w err -110 [ 1116.938372][ T5728] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1116.946194][T14256] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 1116.973446][ T5728] usb 4-1: device descriptor read/8, error -71 [ 1116.992605][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1117.149089][T14420] usb 3-1: USB disconnect, device number 65 [ 1117.224845][ T5728] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1117.253518][ T5728] usb 4-1: device descriptor read/8, error -71 [ 1117.373219][ T5728] usb usb4-port1: unable to enumerate USB device [ 1117.940388][T18597] bridge_slave_0: left allmulticast mode [ 1117.984679][T18597] bridge_slave_0: left promiscuous mode [ 1118.010434][T18597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.046550][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1118.116823][T18597] bridge_slave_1: left allmulticast mode [ 1118.137895][T18597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.174509][T18597] : (slave bond_slave_0): Releasing backup interface [ 1118.224140][T18597] : (slave bond_slave_1): Releasing backup interface [ 1118.251268][T18597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.261422][T18597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.270772][T18597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1118.332777][T18599] tipc: Enabling of bearer rejected, failed to enable media [ 1118.373086][T18602] syzkaller0: entered promiscuous mode [ 1118.389483][T18602] syzkaller0: entered allmulticast mode [ 1118.800744][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3871'. [ 1119.017807][T18624] tipc: Enabled bearer , priority 0 [ 1119.032341][T18624] syzkaller0: entered promiscuous mode [ 1119.038426][T18624] syzkaller0: entered allmulticast mode [ 1119.083087][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1119.100779][T18624] syzkaller0: mtu greater than device maximum [ 1119.116385][T18623] tipc: Resetting bearer [ 1119.191980][T18623] tipc: Disabling bearer [ 1119.553400][T10431] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1119.715981][T10431] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.728303][T10431] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1119.739560][T10431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.751862][T10431] usb 3-1: config 0 descriptor?? [ 1119.769156][T10431] pwc: Askey VC010 type 2 USB webcam detected. [ 1120.071349][T18636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1120.112693][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1120.196994][T10431] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1120.235884][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.258881][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.294717][T10431] pwc: recv_control_msg error -32 req 02 val 2700 [ 1120.302196][T10431] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1120.316696][T10431] pwc: recv_control_msg error -32 req 04 val 1000 [ 1120.324679][T10431] pwc: recv_control_msg error -32 req 04 val 1300 [ 1120.334474][T10431] pwc: recv_control_msg error -32 req 04 val 1400 [ 1120.337009][T18642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3880'. [ 1121.030281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.030565][T16047] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1121.115492][T16047] dvb_usb_gp8psk 1-1:6.229: probe with driver dvb_usb_gp8psk failed with error -110 [ 1121.162771][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1121.181591][T16047] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 1121.223808][T16047] usb 1-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 1121.266488][T16047] usb 1-1: Falling back to sysfs fallback for: dvb-usb-gp8psk-01.fw [ 1122.192578][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1122.337211][T10431] pwc: recv_control_msg error -71 req 02 val 2000 [ 1122.369947][T10431] pwc: recv_control_msg error -71 req 02 val 2100 [ 1122.386399][T10431] pwc: recv_control_msg error -71 req 04 val 1500 [ 1122.399324][T10431] pwc: recv_control_msg error -71 req 02 val 2500 [ 1122.406348][T10431] pwc: recv_control_msg error -71 req 02 val 2400 [ 1122.413429][T10431] pwc: recv_control_msg error -71 req 02 val 2600 [ 1122.420202][T10431] pwc: recv_control_msg error -71 req 02 val 2900 [ 1122.427271][T10431] pwc: recv_control_msg error -71 req 02 val 2800 [ 1122.434401][T10431] pwc: recv_control_msg error -71 req 04 val 1100 [ 1122.441116][T10431] pwc: recv_control_msg error -71 req 04 val 1200 [ 1122.451076][T10431] pwc: Registered as video103. [ 1122.460748][T10431] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input140 [ 1122.485586][T10431] usb 3-1: USB disconnect, device number 66 [ 1123.242599][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1124.272629][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1125.322576][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1125.590775][ T4998] udevd[4998]: worker [16356] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1126.362613][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1127.392730][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1128.100398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.432641][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1129.472606][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1130.522645][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1131.552581][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1132.592574][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1133.632625][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1134.672570][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1135.170520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.712589][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1136.752661][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1137.792581][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1138.832725][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1139.872608][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1140.912636][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1141.962605][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1142.240631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.992573][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1144.032611][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1145.072680][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1146.112574][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1147.152575][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1148.192573][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1149.232559][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1149.310748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.272618][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1151.322619][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1152.352660][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1153.392602][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1154.432632][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1155.472708][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1156.173545][T18660] KVM: debugfs: duplicate directory 18660-4 [ 1156.380855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.423902][T10431] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1156.512563][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1156.597846][T10431] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1156.631410][T10431] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1156.667565][T10431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1156.701221][T10431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1156.720651][T18671] vlan2: entered promiscuous mode [ 1156.721327][T10431] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1156.734886][T18671] gretap0: entered promiscuous mode [ 1156.765974][T18671] vlan2: entered allmulticast mode [ 1156.766553][T10431] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1156.784571][T18671] gretap0: entered allmulticast mode [ 1156.790340][T10431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.809190][T10431] usb 4-1: Product: syz [ 1156.818169][T10431] usb 4-1: Manufacturer: syz [ 1156.827610][T10431] usb 4-1: SerialNumber: syz [ 1156.856049][T10431] usb 4-1: config 0 descriptor?? [ 1156.880099][T10431] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1156.894627][T10431] imon 4-1:0.0: unable to initialize intf0, err -90 [ 1156.912425][T10431] imon:imon_probe: failed to initialize context! [ 1156.943255][T10431] imon 4-1:0.0: unable to register, err -19 [ 1157.181370][T10431] usb 4-1: USB disconnect, device number 86 [ 1157.253139][T16048] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1157.428030][T16048] usb 2-1: Using ep0 maxpacket: 8 [ 1157.453219][T16048] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.494229][T16048] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1157.511350][T16048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.520061][T16048] usb 2-1: Product: syz [ 1157.524990][T16048] usb 2-1: Manufacturer: syz [ 1157.530283][T16048] usb 2-1: SerialNumber: syz [ 1157.541614][T16048] usb 2-1: config 0 descriptor?? [ 1157.552620][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1157.567188][T16048] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1157.602627][ T29] audit: type=1326 audit(1780970387.772:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1157.682890][ T29] audit: type=1326 audit(1780970387.772:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1157.759492][ T29] audit: type=1326 audit(1780970387.772:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1157.841942][ T29] audit: type=1326 audit(1780970387.772:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1157.918144][ T29] audit: type=1326 audit(1780970387.812:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1158.012217][ T29] audit: type=1326 audit(1780970387.812:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1158.084433][T16048] gspca_t613: unknown sensor 0000 [ 1158.105975][T16048] t613 2-1:0.0: probe with driver t613 failed with error -22 [ 1158.116720][ T29] audit: type=1326 audit(1780970387.812:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1158.145201][T16048] usb 2-1: USB disconnect, device number 84 [ 1158.159546][ T29] audit: type=1326 audit(1780970387.812:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1158.186108][ T29] audit: type=1326 audit(1780970387.812:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1158.223117][ T29] audit: type=1326 audit(1780970387.812:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.3887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1158.592570][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1159.373648][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3892'. [ 1159.632629][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1160.092722][T16048] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1160.253793][T16048] usb 2-1: Using ep0 maxpacket: 8 [ 1160.264411][T16048] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.292564][T16048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1160.312890][T16048] usb 2-1: config 1 has no interface number 0 [ 1160.322685][T16048] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1160.376875][T16048] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1160.396382][T16048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.412620][T16048] usb 2-1: Product: syz [ 1160.422581][T16048] usb 2-1: Manufacturer: syz [ 1160.432629][T16048] usb 2-1: SerialNumber: syz [ 1160.673075][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1160.779326][T16048] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1160.787061][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1160.801940][T18708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1160.874794][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.712565][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1161.920681][T18683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1162.752575][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1162.954059][ T5630] usb 2-1: USB disconnect, device number 85 [ 1163.450968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.812597][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1163.831864][T18743] bond1: Unable to set up delay as MII monitoring is disabled [ 1163.911026][T18743] bond1 (unregistering): Released all slaves [ 1164.459915][T18749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1164.799169][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3912'. [ 1164.811886][T18766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1164.830908][T18768] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1164.842984][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1165.680636][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 1165.680656][ T29] audit: type=1326 audit(1780970395.852:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1165.801114][ T29] audit: type=1326 audit(1780970395.852:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1165.872682][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1165.912556][ T29] audit: type=1326 audit(1780970395.862:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 1166.011870][ T29] audit: type=1326 audit(1780970395.862:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 1166.039593][ T29] audit: type=1326 audit(1780970395.862:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1166.065013][ T29] audit: type=1326 audit(1780970395.862:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1166.091143][ T29] audit: type=1326 audit(1780970395.862:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 1166.116628][ T29] audit: type=1326 audit(1780970395.862:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1166.185239][ T29] audit: type=1326 audit(1780970395.872:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1166.309481][ T29] audit: type=1326 audit(1780970395.872:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.3.3918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1166.486407][T18788] binder_alloc: 18785: binder_alloc_buf, no vma [ 1166.912675][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1167.110527][T18797] netlink: 'syz.2.3924': attribute type 1 has an invalid length. [ 1167.213648][T18800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1167.324176][T18794] dvmrp8: entered allmulticast mode [ 1167.459011][T18797] bond3: entered promiscuous mode [ 1167.488557][T18797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1167.528032][T18800] bond3: entered allmulticast mode [ 1167.617387][T18805] bond3: (slave bridge2): making interface the new active one [ 1167.644153][T18805] bridge2: entered promiscuous mode [ 1167.653265][T18805] bridge2: entered allmulticast mode [ 1167.700485][T18805] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1167.952711][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1168.992623][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1169.260854][T18835] syzkaller0: entered promiscuous mode [ 1169.274912][T18835] syzkaller0: entered allmulticast mode [ 1169.308701][T18835] tipc: Enabled bearer , priority 0 [ 1169.337667][T18835] tipc: Resetting bearer [ 1169.364524][T18834] tipc: Resetting bearer [ 1169.469784][T18834] tipc: Disabling bearer [ 1169.565673][T18842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1170.032570][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1170.435226][T18861] input: syz1 as /devices/virtual/input/input141 [ 1170.521077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.072673][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1172.112556][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1172.422839][T18881] syzkaller0: entered promiscuous mode [ 1172.469120][T18881] syzkaller0: entered allmulticast mode [ 1172.539837][T18881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3947'. [ 1173.152569][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1173.892935][ T5712] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1174.065086][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 1174.093328][ T5712] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1174.124787][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.178487][ T5712] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1174.192604][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1174.514625][T18910] syz.2.3955 (18910): drop_caches: 2 [ 1175.232563][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1175.376234][ T5712] gspca_nw80x: reg_w err -71 [ 1175.402095][ T5712] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 1175.445606][ T5712] usb 4-1: USB disconnect, device number 87 [ 1176.272550][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1176.502619][T10431] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1176.599195][T18938] fuse: Bad value for 'fd' [ 1176.663133][T10431] usb 4-1: Using ep0 maxpacket: 16 [ 1176.687826][T10431] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1176.714551][T10431] usb 4-1: config 0 has no interface number 0 [ 1176.736256][T10431] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1176.786379][T10431] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1176.825428][T10431] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1176.871632][T10431] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1176.902916][T10431] usb 4-1: Product: syz [ 1176.916162][T10431] usb 4-1: SerialNumber: syz [ 1176.949301][T10431] usb 4-1: config 0 descriptor?? [ 1176.978820][T18943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1176.979180][T10431] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1177.045985][T10431] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input142 [ 1177.091981][T18944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1177.325922][T14160] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.326333][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1177.349223][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.362104][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.387467][T14160] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.445970][T14160] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.511538][T14160] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.543545][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1177.543802][ T5712] usb 4-1: USB disconnect, device number 88 [ 1177.550836][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1177.591216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.691990][ T5712] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1178.553247][ T5712] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1178.562303][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1178.587898][T16048] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1178.753544][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 1178.758825][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1178.763957][T16048] usb 2-1: Using ep0 maxpacket: 8 [ 1178.772065][ T5712] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1178.784678][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.793355][T16048] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.807905][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1178.835736][T16048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1178.855653][ T5712] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1178.862174][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1178.877291][T16048] usb 2-1: config 1 has no interface number 0 [ 1178.891795][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1178.902046][T16048] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1178.913693][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.930815][T16048] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1178.940281][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1178.951068][T16048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.963764][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.972055][T16048] usb 2-1: Product: syz [ 1178.984711][T16048] usb 2-1: Manufacturer: syz [ 1179.006990][T16048] usb 2-1: SerialNumber: syz [ 1179.251421][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 1179.260776][ T24] usbtmc 3-1:16.0: can't read capabilities [ 1179.363889][T16048] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1179.529813][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.065853][ T5712] gspca_nw80x: reg_w err -71 [ 1180.080191][ T5712] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 1180.099686][ T5712] usb 4-1: USB disconnect, device number 89 [ 1180.194237][T18964] Cannot find add_set index 3 as target [ 1180.879678][T18953] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1181.142688][ T5712] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1181.323097][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 1181.355601][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1181.409186][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1181.441247][ T5712] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1181.451841][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.460620][ T5712] usb 4-1: Product: syz [ 1181.465501][ T5712] usb 4-1: Manufacturer: syz [ 1181.471294][ T5712] usb 4-1: SerialNumber: syz [ 1181.484330][ T5712] usb 4-1: config 0 descriptor?? [ 1181.497113][ T5712] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1181.507149][ T5712] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1181.596143][T10431] usb 3-1: USB disconnect, device number 67 [ 1181.669827][T18986] sctp: [Deprecated]: syz.0.3982 (pid 18986) Use of int in max_burst socket option. [ 1181.669827][T18986] Use struct sctp_assoc_value instead [ 1181.703477][T18986] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1181.710049][T18986] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1181.720979][T18986] vhci_hcd vhci_hcd.0: Device attached [ 1181.734301][T18988] vhci_hcd: connection closed [ 1181.734524][ T3368] vhci_hcd vhci_hcd.0: stop threads [ 1181.753612][ T3368] vhci_hcd vhci_hcd.0: release socket [ 1181.759234][ T3368] vhci_hcd vhci_hcd.0: disconnect device [ 1182.074079][T14420] usb 2-1: USB disconnect, device number 86 [ 1182.124973][ T5712] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1182.161757][ T5712] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1182.423118][T18980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.626321][T16047] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1182.833715][T18980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.845932][T16047] dvb_usb_gp8psk 1-1:6.151: probe with driver dvb_usb_gp8psk failed with error -110 [ 1182.895250][T16047] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 1182.910296][T16047] usb 1-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 1182.920277][T16047] usb 1-1: Falling back to sysfs fallback for: dvb-usb-gp8psk-01.fw [ 1182.928094][T18980] syz_tun: entered allmulticast mode [ 1182.991868][T18979] syz_tun: left allmulticast mode [ 1183.014492][ T5712] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1183.025389][ T5712] em28xx 4-1:0.0: No AC97 audio processor [ 1183.049218][ T5712] usb 4-1: USB disconnect, device number 90 [ 1183.079253][ T5712] em28xx 4-1:0.0: Disconnecting em28xx [ 1183.095949][ T5712] em28xx 4-1:0.0: Freeing device [ 1184.661308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.047457][T19020] random: crng reseeded on system resumption [ 1185.134449][T19020] FAULT_INJECTION: forcing a failure. [ 1185.134449][T19020] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1185.185599][T19020] CPU: 1 UID: 0 PID: 19020 Comm: syz.3.3994 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.185633][T19020] Tainted: [L]=SOFTLOCKUP [ 1185.185642][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.185653][T19020] Call Trace: [ 1185.185662][T19020] [ 1185.185673][T19020] dump_stack_lvl+0xe8/0x150 [ 1185.185705][T19020] should_fail_ex+0x412/0x560 [ 1185.185737][T19020] prepare_alloc_pages+0x22a/0x650 [ 1185.185779][T19020] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1185.185817][T19020] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1185.185853][T19020] ? __pfx_policy_nodemask+0x10/0x10 [ 1185.185888][T19020] alloc_pages_mpol+0x235/0x490 [ 1185.185917][T19020] alloc_pages_noprof+0xac/0x2a0 [ 1185.185941][T19020] get_zeroed_page_noprof+0x1a/0x90 [ 1185.185962][T19020] get_image_page+0x36/0x330 [ 1185.185991][T19020] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1185.186025][T19020] memory_bm_create+0x3b9/0xf80 [ 1185.186063][T19020] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1185.186098][T19020] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1185.186131][T19020] create_basic_memory_bitmaps+0x98/0x360 [ 1185.186168][T19020] snapshot_open+0x1aa/0x280 [ 1185.186194][T19020] ? __pfx_snapshot_open+0x10/0x10 [ 1185.186216][T19020] misc_open+0x2d5/0x350 [ 1185.186330][T19020] chrdev_open+0x4cd/0x5e0 [ 1185.186356][T19020] ? __pfx_chrdev_open+0x10/0x10 [ 1185.186380][T19020] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1185.186416][T19020] ? __pfx_chrdev_open+0x10/0x10 [ 1185.186445][T19020] do_dentry_open+0x822/0x13a0 [ 1185.186482][T19020] vfs_open+0x3b/0x340 [ 1185.186502][T19020] ? path_openat+0x2df0/0x3860 [ 1185.186532][T19020] path_openat+0x2e08/0x3860 [ 1185.186578][T19020] ? __pfx_stack_trace_save+0x10/0x10 [ 1185.186612][T19020] ? stack_depot_save_flags+0x33/0x810 [ 1185.186649][T19020] ? __pfx_path_openat+0x10/0x10 [ 1185.186676][T19020] ? __ia32_compat_sys_openat+0x131/0x160 [ 1185.186708][T19020] ? __lock_acquire+0x6b5/0x2cf0 [ 1185.186745][T19020] do_file_open+0x23e/0x4a0 [ 1185.186781][T19020] ? __pfx_do_file_open+0x10/0x10 [ 1185.186834][T19020] ? _raw_spin_unlock+0x28/0x50 [ 1185.186865][T19020] ? alloc_fd+0x64b/0x6c0 [ 1185.186902][T19020] do_sys_openat2+0x113/0x200 [ 1185.186927][T19020] ? __fget_files+0x3a0/0x420 [ 1185.186952][T19020] ? __pfx_do_sys_openat2+0x10/0x10 [ 1185.186981][T19020] ? fput+0xa0/0xd0 [ 1185.187005][T19020] ? ksys_write+0x242/0x270 [ 1185.187038][T19020] __ia32_compat_sys_openat+0x131/0x160 [ 1185.187072][T19020] __do_fast_syscall_32+0x23e/0x6f0 [ 1185.187097][T19020] ? do_fast_syscall_32+0x33/0x70 [ 1185.187118][T19020] ? lockdep_hardirqs_on+0x7a/0x110 [ 1185.187139][T19020] ? asm_int80_emulation+0x1a/0x20 [ 1185.187159][T19020] ? do_int80_emulation+0x29f/0x550 [ 1185.187180][T19020] ? trace_irq_disable+0x3b/0x140 [ 1185.187221][T19020] do_fast_syscall_32+0x33/0x70 [ 1185.187244][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1185.187268][T19020] RIP: 0023:0xf7f6901c [ 1185.187290][T19020] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1185.187307][T19020] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1185.187329][T19020] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 1185.187343][T19020] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1185.187356][T19020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1185.187367][T19020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1185.187379][T19020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1185.187412][T19020] [ 1186.074801][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 1186.468843][T19040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1186.642761][T14420] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1186.805725][T14420] usb 2-1: Using ep0 maxpacket: 8 [ 1186.842014][T14420] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.858220][T19044] FAULT_INJECTION: forcing a failure. [ 1186.858220][T19044] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.876910][T14420] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1186.895254][T14420] usb 2-1: config 1 has no interface number 0 [ 1186.901487][T19044] CPU: 0 UID: 0 PID: 19044 Comm: syz.2.4002 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.901508][T19044] Tainted: [L]=SOFTLOCKUP [ 1186.901514][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1186.901521][T19044] Call Trace: [ 1186.901527][T19044] [ 1186.901533][T19044] dump_stack_lvl+0xe8/0x150 [ 1186.901554][T19044] should_fail_ex+0x412/0x560 [ 1186.901572][T19044] should_failslab+0xa8/0x100 [ 1186.901586][T19044] __kvmalloc_node_noprof+0x178/0x8a0 [ 1186.901603][T19044] ? rcu_is_watching+0x15/0xb0 [ 1186.901618][T19044] ? nf_hook_entries_grow+0x288/0x720 [ 1186.901637][T19044] nf_hook_entries_grow+0x288/0x720 [ 1186.901651][T19044] ? netlink_sendmsg+0x813/0xb40 [ 1186.901669][T19044] __nf_register_net_hook+0x2c9/0x930 [ 1186.901689][T19044] nf_register_net_hook+0xb2/0x190 [ 1186.901703][T19044] nf_register_net_hooks+0x44/0x1b0 [ 1186.901718][T19044] nf_ct_netns_do_get+0x363/0x5c0 [ 1186.901734][T19044] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1186.901769][T19044] nf_ct_netns_get+0x8b/0x320 [ 1186.901785][T19044] nft_connlimit_do_init+0x1de/0x2e0 [ 1186.901808][T19044] nft_set_elem_expr_alloc+0x213/0x5f0 [ 1186.901829][T19044] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 1186.901855][T19044] ? nft_rhash_init+0x2de/0x3b0 [ 1186.901875][T19044] ? __pfx_nft_rhash_init+0x10/0x10 [ 1186.901891][T19044] ? kasan_quarantine_put+0xbb/0x1f0 [ 1186.901908][T19044] ? __pfx_nft_rhash_key+0x10/0x10 [ 1186.901918][T19044] ? __pfx_nft_rhash_obj+0x10/0x10 [ 1186.901929][T19044] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 1186.901943][T19044] nft_set_expr_alloc+0x397/0x760 [ 1186.901965][T19044] nf_tables_newset+0x1c6b/0x2580 [ 1186.901989][T19044] ? __pfx_nf_tables_newset+0x10/0x10 [ 1186.902016][T19044] ? __nla_parse+0x40/0x60 [ 1186.902034][T19044] nfnetlink_rcv+0x123e/0x27b0 [ 1186.902073][T19044] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1186.902100][T19044] ? ref_tracker_free+0x693/0x840 [ 1186.902132][T19044] ? __netlink_deliver_tap+0x807/0x850 [ 1186.902156][T19044] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.902174][T19044] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.902195][T19044] netlink_unicast+0x75c/0x8e0 [ 1186.902218][T19044] netlink_sendmsg+0x813/0xb40 [ 1186.902236][T19044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.902250][T19044] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1186.902269][T19044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1186.902288][T19044] ____sys_sendmsg+0x972/0x9f0 [ 1186.902307][T19044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1186.902322][T19044] ? kstrtoull+0x12f/0x1d0 [ 1186.902345][T19044] ___sys_sendmsg+0x2a5/0x360 [ 1186.902357][T19044] ? __lock_acquire+0x6b5/0x2cf0 [ 1186.902373][T19044] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.902387][T19044] ? get_pid_task+0x20/0x1f0 [ 1186.902402][T19044] ? get_pid_task+0x20/0x1f0 [ 1186.902415][T19044] ? get_pid_task+0x20/0x1f0 [ 1186.902451][T19044] ? __fget_files+0x2a/0x420 [ 1186.902471][T19044] ? __fget_files+0x3a0/0x420 [ 1186.902505][T19044] __sys_sendmsg+0x183/0x260 [ 1186.902527][T19044] ? __pfx___sys_sendmsg+0x10/0x10 [ 1186.902557][T19044] __do_fast_syscall_32+0x23e/0x6f0 [ 1186.902573][T19044] ? do_fast_syscall_32+0x33/0x70 [ 1186.902585][T19044] ? lockdep_hardirqs_on+0x7a/0x110 [ 1186.902597][T19044] ? asm_int80_emulation+0x1a/0x20 [ 1186.902609][T19044] ? do_int80_emulation+0x29f/0x550 [ 1186.902621][T19044] ? trace_irq_disable+0x3b/0x140 [ 1186.902640][T19044] do_fast_syscall_32+0x33/0x70 [ 1186.902654][T19044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1186.902668][T19044] RIP: 0023:0xf7fc301c [ 1186.902682][T19044] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1186.902692][T19044] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1186.902706][T19044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1186.902715][T19044] RDX: 0000000020050800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1186.902723][T19044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1186.902730][T19044] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1186.902736][T19044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1186.902762][T19044] [ 1187.310143][T14420] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1187.393692][T14420] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1187.402911][T14420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.410939][T14420] usb 2-1: Product: syz [ 1187.415206][T14420] usb 2-1: Manufacturer: syz [ 1187.419815][T14420] usb 2-1: SerialNumber: syz [ 1187.699109][T14420] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1188.148601][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.475173][T19022] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1188.712119][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4005'. [ 1188.890617][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 1188.890638][ T29] audit: type=1326 audit(1780970419.062:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1188.928228][ T29] audit: type=1326 audit(1780970419.082:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1189.034482][ T29] audit: type=1326 audit(1780970419.112:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71161ab code=0x7ffc0000 [ 1189.133530][ T29] audit: type=1326 audit(1780970419.112:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71161ab code=0x7ffc0000 [ 1189.186588][ T29] audit: type=1326 audit(1780970419.112:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1189.211654][ T29] audit: type=1326 audit(1780970419.112:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1189.211711][ T29] audit: type=1326 audit(1780970419.142:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71161ab code=0x7ffc0000 [ 1189.211758][ T29] audit: type=1326 audit(1780970419.142:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1189.211809][ T29] audit: type=1326 audit(1780970419.142:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1189.211855][ T29] audit: type=1326 audit(1780970419.142:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19060 comm="syz.4.4008" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6fdf01c code=0x7ffc0000 [ 1190.180637][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1190.269601][ T5630] usb 2-1: USB disconnect, device number 87 [ 1190.514319][T16048] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1190.696922][T16048] usb 4-1: Using ep0 maxpacket: 8 [ 1190.713135][T16048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1190.753719][T16048] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1190.786534][T16048] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1190.796827][T16048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.805750][T16048] usb 4-1: Product: syz [ 1190.810179][T16048] usb 4-1: Manufacturer: syz [ 1190.816118][T16048] usb 4-1: SerialNumber: syz [ 1190.822696][ T5630] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1190.839407][T16048] usb 4-1: config 0 descriptor?? [ 1191.015796][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.031054][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.071633][T16048] usb 4-1: USB disconnect, device number 91 [ 1191.073814][ T5630] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1191.110220][ T5630] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1191.131016][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.172840][ T5630] usb 2-1: config 0 descriptor?? [ 1191.594778][T19089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.624922][T19089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.669222][ T5630] usbhid 2-1:0.0: can't add hid device: -71 [ 1191.694958][ T5630] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1191.731421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.751290][ T5630] usb 2-1: USB disconnect, device number 88 [ 1191.783171][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1191.942597][T16048] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1192.072731][T10431] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1192.113250][T16048] usb 3-1: Using ep0 maxpacket: 16 [ 1192.121548][T16048] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1192.134641][T16048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1192.147940][T16048] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1192.157406][T16048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.165688][T16048] usb 3-1: Product: syz [ 1192.169937][T16048] usb 3-1: Manufacturer: syz [ 1192.174960][T16048] usb 3-1: SerialNumber: syz [ 1192.181814][T16048] usb 3-1: config 0 descriptor?? [ 1192.195484][T16048] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1192.204918][T10431] usb 4-1: device descriptor read/64, error -71 [ 1192.211685][T16048] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1192.381432][T19108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4025'. [ 1192.442816][T10431] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1192.582600][T10431] usb 4-1: device descriptor read/64, error -71 [ 1192.702913][T10431] usb usb4-port1: attempt power cycle [ 1192.815265][T16048] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1192.835177][T16048] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1193.055965][T19097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.072688][T10431] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1193.081627][T19097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.113378][T10431] usb 4-1: device descriptor read/8, error -71 [ 1193.133693][T16048] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1193.152383][T16048] em28xx 3-1:0.0: No AC97 audio processor [ 1193.187266][T16048] usb 3-1: USB disconnect, device number 68 [ 1193.230508][T16048] em28xx 3-1:0.0: Disconnecting em28xx [ 1193.251559][T16048] em28xx 3-1:0.0: Freeing device [ 1193.362754][T10431] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1193.382657][ T5630] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1193.413178][T10431] usb 4-1: device descriptor read/8, error -71 [ 1193.544004][T10431] usb usb4-port1: unable to enumerate USB device [ 1193.554278][ T5630] usb 2-1: Using ep0 maxpacket: 8 [ 1193.572392][ T5630] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.600272][ T5630] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1193.615708][ T5630] usb 2-1: config 1 has no interface number 0 [ 1193.628040][ T5630] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1193.649304][ T5630] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1193.665849][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.678840][ T5630] usb 2-1: Product: syz [ 1193.686063][ T5630] usb 2-1: Manufacturer: syz [ 1193.696346][ T5630] usb 2-1: SerialNumber: syz [ 1193.863935][T19119] fuse: Bad value for 'fd' [ 1194.023541][ T5630] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1194.169145][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1194.662910][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1194.825977][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1194.836290][ T24] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1194.853575][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1194.853596][ T29] audit: type=1326 audit(1780970425.022:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1194.859080][ T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1194.864242][ T29] audit: type=1326 audit(1780970425.022:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1194.886681][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.928496][ T24] usb 3-1: Product: syz [ 1194.932989][ T24] usb 3-1: Manufacturer: syz [ 1194.934522][ T29] audit: type=1326 audit(1780970425.062:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 1194.955303][ T24] usb 3-1: SerialNumber: syz [ 1194.976304][ T29] audit: type=1326 audit(1780970425.062:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 1195.001376][ T29] audit: type=1326 audit(1780970425.062:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1195.020401][ T24] usb 3-1: config 0 descriptor?? [ 1195.048432][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1195.057344][ T29] audit: type=1326 audit(1780970425.062:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1195.057400][ T29] audit: type=1326 audit(1780970425.082:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 1195.057444][ T29] audit: type=1326 audit(1780970425.082:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1195.057489][ T29] audit: type=1326 audit(1780970425.082:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1195.057533][ T29] audit: type=1326 audit(1780970425.082:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.3.4035" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6901c code=0x7ffc0000 [ 1195.123440][T19111] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1195.150779][ T24] usb 3-1: setting power ON [ 1195.205048][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1195.206054][ T5630] usb 2-1: USB disconnect, device number 89 [ 1195.218731][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1195.229521][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1195.240230][ T24] usb 3-1: media controller created [ 1195.262536][ T5719] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1195.289359][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.308485][ T24] usb 3-1: selecting invalid altsetting 6 [ 1195.319222][ T24] usb 3-1: digital interface selection failed (-22) [ 1195.326121][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1195.335222][ T24] usb 3-1: setting power OFF [ 1195.341649][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1195.348396][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1195.358036][ T24] (NULL device *): no alternate interface [ 1195.381195][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1195.418709][ T24] usb 3-1: USB disconnect, device number 69 [ 1195.450878][ T5719] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1195.463514][ T5719] usb 4-1: config 8 has no interface number 0 [ 1195.480622][ T5719] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1195.522119][ T5719] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1195.535653][ T5719] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1195.546029][ T5719] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1195.553344][ T5719] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1195.562643][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.576673][T19137] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1196.013412][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1196.380179][ T5719] usb 4-1: string descriptor 0 read error: -71 [ 1196.401055][ T5719] ir_toy 4-1:8.177: required endpoints not found [ 1196.416357][ T5719] usb 4-1: USB disconnect, device number 96 [ 1196.513706][T19149] syzkaller0: entered promiscuous mode [ 1196.519269][T19149] syzkaller0: entered allmulticast mode [ 1196.639185][T14420] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1196.868676][T14420] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1196.896454][T14420] usb 3-1: config 8 has no interface number 0 [ 1196.903344][T14420] usb 3-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1196.916582][T14420] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1196.927929][T14420] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1196.957712][T14420] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1196.964986][T14420] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1196.974151][T14420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.015358][T19146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1197.934290][T14420] usb 3-1: string descriptor 0 read error: -71 [ 1197.935522][ T5719] IPVS: starting estimator thread 0... [ 1197.946513][T14420] ir_toy 3-1:8.177: required endpoints not found [ 1197.977825][T14420] usb 3-1: USB disconnect, device number 70 [ 1198.073403][T19164] IPVS: using max 34 ests per chain, 81600 per kthread [ 1198.803468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.012225][ T5719] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1199.191138][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 1199.220987][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.231720][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1199.260318][ T5719] usb 3-1: config 1 has no interface number 0 [ 1199.266939][ T5719] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1199.321531][ T5719] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1199.333990][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.342295][ T5719] usb 3-1: Product: syz [ 1199.347206][ T5719] usb 3-1: Manufacturer: syz [ 1199.352827][ T5719] usb 3-1: SerialNumber: syz [ 1199.515327][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4048'. [ 1199.756374][ T5719] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1199.853518][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1201.369742][ T5719] usb 3-1: USB disconnect, device number 71 [ 1204.377444][ T5719] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1204.542550][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 1204.551516][ T5719] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1204.562570][ T5719] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.576253][ T5719] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1204.586923][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.599094][ T5719] usb 4-1: config 0 descriptor?? [ 1204.610964][ T5719] hub 4-1:0.0: bad descriptor, ignoring hub [ 1204.618026][ T5719] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1204.628313][ T5719] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1205.871651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.030394][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1206.201211][T19216] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4062'. [ 1206.812859][ T5719] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1206.962606][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 1206.969422][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.979867][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1206.989046][ T5719] usb 3-1: config 1 has no interface number 0 [ 1207.004574][ T5719] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1207.017669][ T5719] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1207.027093][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.036472][ T5719] usb 3-1: Product: syz [ 1207.040741][ T5719] usb 3-1: Manufacturer: syz [ 1207.045721][ T5719] usb 3-1: SerialNumber: syz [ 1207.341517][ T5719] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1207.376299][T16848] udevd[16848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.435688][T10431] usb 4-1: reset high-speed USB device number 97 using dummy_hcd [ 1207.614824][T10431] usb 4-1: device firmware changed [ 1207.668840][T10431] usb 4-1: USB disconnect, device number 97 [ 1207.735176][T19238] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4070'. [ 1207.755710][T19238] FAULT_INJECTION: forcing a failure. [ 1207.755710][T19238] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.769479][T19238] CPU: 1 UID: 0 PID: 19238 Comm: syz.4.4070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.769513][T19238] Tainted: [L]=SOFTLOCKUP [ 1207.769521][T19238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1207.769533][T19238] Call Trace: [ 1207.769542][T19238] [ 1207.769552][T19238] dump_stack_lvl+0xe8/0x150 [ 1207.769588][T19238] should_fail_ex+0x412/0x560 [ 1207.769622][T19238] should_failslab+0xa8/0x100 [ 1207.769645][T19238] __kmalloc_cache_noprof+0x88/0x660 [ 1207.769677][T19238] ? tcf_chain_create+0xb0/0x310 [ 1207.769785][T19238] tcf_chain_create+0xb0/0x310 [ 1207.769814][T19238] __tcf_chain_get+0x111/0x3c0 [ 1207.769849][T19238] tc_new_tfilter+0x77e/0x1780 [ 1207.769875][T19238] ? kmem_cache_free+0x182/0x650 [ 1207.769929][T19238] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1207.769970][T19238] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1207.770019][T19238] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1207.770042][T19238] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1207.770075][T19238] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1207.770103][T19238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1207.770130][T19238] ? ref_tracker_free+0x693/0x840 [ 1207.770169][T19238] ? __pfx_ref_tracker_free+0x10/0x10 [ 1207.770206][T19238] netlink_rcv_skb+0x232/0x4b0 [ 1207.770240][T19238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1207.770271][T19238] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1207.770317][T19238] ? netlink_deliver_tap+0x2e/0x1b0 [ 1207.770348][T19238] ? netlink_deliver_tap+0x2e/0x1b0 [ 1207.770385][T19238] netlink_unicast+0x75c/0x8e0 [ 1207.770429][T19238] netlink_sendmsg+0x813/0xb40 [ 1207.770462][T19238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.770487][T19238] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1207.770523][T19238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1207.770556][T19238] ____sys_sendmsg+0x972/0x9f0 [ 1207.770591][T19238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.770618][T19238] ? kstrtoull+0x12f/0x1d0 [ 1207.770658][T19238] ___sys_sendmsg+0x2a5/0x360 [ 1207.770678][T19238] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.770707][T19238] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.770730][T19238] ? get_pid_task+0x20/0x1f0 [ 1207.770758][T19238] ? get_pid_task+0x20/0x1f0 [ 1207.770782][T19238] ? get_pid_task+0x20/0x1f0 [ 1207.770839][T19238] ? __fget_files+0x2a/0x420 [ 1207.770866][T19238] ? __fget_files+0x3a0/0x420 [ 1207.770904][T19238] __sys_sendmsg+0x183/0x260 [ 1207.770929][T19238] ? __pfx___sys_sendmsg+0x10/0x10 [ 1207.770977][T19238] __do_fast_syscall_32+0x23e/0x6f0 [ 1207.771007][T19238] ? do_fast_syscall_32+0x33/0x70 [ 1207.771029][T19238] ? lockdep_hardirqs_on+0x7a/0x110 [ 1207.771051][T19238] ? asm_int80_emulation+0x1a/0x20 [ 1207.771073][T19238] ? do_int80_emulation+0x29f/0x550 [ 1207.771095][T19238] ? trace_irq_disable+0x3b/0x140 [ 1207.771129][T19238] do_fast_syscall_32+0x33/0x70 [ 1207.771162][T19238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1207.771186][T19238] RIP: 0023:0xf6fdf01c [ 1207.771206][T19238] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1207.771224][T19238] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1207.771246][T19238] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1207.771261][T19238] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 1207.771273][T19238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1207.771285][T19238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1207.771297][T19238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1207.771330][T19238] [ 1208.272978][T10431] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1208.388450][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1208.442815][T10431] usb 4-1: Using ep0 maxpacket: 32 [ 1208.451933][T10431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.466092][T10431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.495254][T10431] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1208.533012][T10431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.576051][T10431] usb 4-1: config 0 descriptor?? [ 1208.677329][ T24] usb 3-1: USB disconnect, device number 72 [ 1208.829173][T19249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.840468][T19249] batadv_slave_1: entered promiscuous mode [ 1209.100641][T19229] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1209.108949][T14420] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1209.175191][T10431] usbhid 4-1:0.0: can't add hid device: -71 [ 1209.181314][T10431] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1209.215917][T10431] usb 4-1: USB disconnect, device number 98 [ 1209.993301][ T5719] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1210.162785][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 1210.187659][ T5719] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1210.201733][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1210.244060][ T5719] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1210.264607][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.310618][ T5719] usb 3-1: config 0 descriptor?? [ 1210.345174][ T5719] hub 3-1:0.0: bad descriptor, ignoring hub [ 1210.363890][ T5719] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1210.384499][T10431] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1210.400753][ T5719] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1210.491832][T19270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4080'. [ 1210.565353][T10431] usb 4-1: Using ep0 maxpacket: 32 [ 1210.585220][T10431] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1210.634369][T10431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.685002][T10431] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1211.368910][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'. [ 1211.630382][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.659788][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.782350][ T48] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1211.875428][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.886033][T10431] gspca_nw80x: reg_w err -71 [ 1211.896476][T10431] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 1211.899938][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.942027][T10431] usb 4-1: USB disconnect, device number 99 [ 1211.991054][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.031967][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.151970][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.186480][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.259375][ T48] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1212.401444][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.447104][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.541132][T14159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.566381][T14159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.864912][T14161] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1212.941756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.994848][ T5719] usb 3-1: USB disconnect, device number 73 [ 1213.070424][T14161] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1213.170484][T14420] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1213.187858][T14161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.209973][T14161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.295294][T14164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.308778][T14164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.352985][T14420] usb 2-1: Using ep0 maxpacket: 8 [ 1213.376225][T14420] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.407017][T14420] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1213.427993][T14160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.452971][T14160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.467346][T14420] usb 2-1: config 1 has no interface number 0 [ 1213.494247][ T48] ------------[ cut here ]------------ [ 1213.501867][ T48] !bss [ 1213.501886][ T48] WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x3da/0x450, CPU#0: kworker/u8:3/48 [ 1213.515643][ T48] Modules linked in: [ 1213.520076][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.530979][ T48] Tainted: [L]=SOFTLOCKUP [ 1213.535393][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1213.545598][ T48] Workqueue: cfg80211 cfg80211_event_work [ 1213.552044][ T48] RIP: 0010:__cfg80211_ibss_joined+0x3da/0x450 [ 1213.558642][ T48] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 28 a9 00 cc e8 02 75 c4 f6 90 0f 0b 90 eb b5 e8 f7 74 c4 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb a5 e8 e7 74 c4 f6 90 0f 0b 90 e9 d6 fd [ 1213.578471][ T48] RSP: 0000:ffffc90000b87940 EFLAGS: 00010293 [ 1213.584715][ T48] RAX: ffffffff8b0142a9 RBX: dffffc0000000000 RCX: ffff8880226f3e00 [ 1213.593393][ T48] RDX: 0000000000000000 RSI: ffffffff8dfa4dc8 RDI: ffffffff8c28b9e0 [ 1213.601401][ T48] RBP: ffffc90000b87a10 R08: ffffffff903036f7 R09: 1ffffffff20606de [ 1213.609823][ T48] R10: dffffc0000000000 R11: fffffbfff20606df R12: ffff8880a66fce50 [ 1213.617877][ T48] R13: 1ffff92000170f30 R14: ffff88805aa13458 R15: 0000000000000006 [ 1213.625920][ T48] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 1213.634946][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.641532][ T48] CR2: 000000008003d018 CR3: 00000000342d0000 CR4: 00000000003526f0 [ 1213.649623][ T48] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1213.657738][ T48] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1213.665943][ T48] Call Trace: [ 1213.669282][ T48] [ 1213.672248][ T48] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1213.678241][ T48] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1213.684157][ T48] cfg80211_process_wdev_events+0x398/0x5a0 [ 1213.690108][ T48] cfg80211_process_rdev_events+0xa1/0x110 [ 1213.696459][ T48] cfg80211_event_work+0x2c/0x60 [ 1213.701405][ T48] ? process_scheduled_works+0xa70/0x1860 [ 1213.707476][ T48] process_scheduled_works+0xb5d/0x1860 [ 1213.713264][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 1213.719273][ T48] ? assign_work+0x3d5/0x5e0 [ 1213.723964][ T48] worker_thread+0xa53/0xfc0 [ 1213.728573][ T48] kthread+0x389/0x470 [ 1213.732717][ T48] ? __pfx_worker_thread+0x10/0x10 [ 1213.737856][ T48] ? __pfx_kthread+0x10/0x10 [ 1213.742608][ T48] ret_from_fork+0x514/0xb70 [ 1213.747275][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.752656][ T48] ? __switch_to+0xc79/0x1410 [ 1213.757417][ T48] ? __pfx_kthread+0x10/0x10 [ 1213.762058][ T48] ret_from_fork_asm+0x1a/0x30 [ 1213.766991][ T48] [ 1213.770053][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1213.777453][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.788339][ T48] Tainted: [L]=SOFTLOCKUP [ 1213.792671][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1213.802733][ T48] Workqueue: cfg80211 cfg80211_event_work [ 1213.808487][ T48] Call Trace: [ 1213.811879][ T48] [ 1213.814815][ T48] vpanic+0x56c/0xa60 [ 1213.818818][ T48] ? __pfx__printk+0x10/0x10 [ 1213.823424][ T48] ? __pfx_vpanic+0x10/0x10 [ 1213.827940][ T48] ? is_bpf_text_address+0x292/0x2b0 [ 1213.833236][ T48] ? is_bpf_text_address+0x26/0x2b0 [ 1213.838448][ T48] panic+0xc5/0xd0 [ 1213.842175][ T48] ? __pfx_panic+0x10/0x10 [ 1213.846604][ T48] ? ret_from_fork_asm+0x1a/0x30 [ 1213.851553][ T48] __warn+0x315/0x4c0 [ 1213.855540][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 1213.861096][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 1213.866647][ T48] __report_bug+0x29a/0x540 [ 1213.871162][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 1213.876714][ T48] ? __pfx___report_bug+0x10/0x10 [ 1213.881772][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 1213.887325][ T48] report_bug+0x16a/0x220 [ 1213.891750][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 1213.897317][ T48] ? __cfg80211_ibss_joined+0x3dc/0x450 [ 1213.902896][ T48] handle_bug+0x9c/0x200 [ 1213.907153][ T48] exc_invalid_op+0x1a/0x50 [ 1213.911667][ T48] asm_exc_invalid_op+0x1a/0x20 [ 1213.916529][ T48] RIP: 0010:__cfg80211_ibss_joined+0x3da/0x450 [ 1213.922696][ T48] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 28 a9 00 cc e8 02 75 c4 f6 90 0f 0b 90 eb b5 e8 f7 74 c4 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb a5 e8 e7 74 c4 f6 90 0f 0b 90 e9 d6 fd [ 1213.942326][ T48] RSP: 0000:ffffc90000b87940 EFLAGS: 00010293 [ 1213.948401][ T48] RAX: ffffffff8b0142a9 RBX: dffffc0000000000 RCX: ffff8880226f3e00 [ 1213.956376][ T48] RDX: 0000000000000000 RSI: ffffffff8dfa4dc8 RDI: ffffffff8c28b9e0 [ 1213.964373][ T48] RBP: ffffc90000b87a10 R08: ffffffff903036f7 R09: 1ffffffff20606de [ 1213.972352][ T48] R10: dffffc0000000000 R11: fffffbfff20606df R12: ffff8880a66fce50 [ 1213.980328][ T48] R13: 1ffff92000170f30 R14: ffff88805aa13458 R15: 0000000000000006 [ 1213.988315][ T48] ? __cfg80211_ibss_joined+0x3d9/0x450 [ 1213.993882][ T48] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1213.999783][ T48] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1214.005608][ T48] cfg80211_process_wdev_events+0x398/0x5a0 [ 1214.011521][ T48] cfg80211_process_rdev_events+0xa1/0x110 [ 1214.017339][ T48] cfg80211_event_work+0x2c/0x60 [ 1214.022282][ T48] ? process_scheduled_works+0xa70/0x1860 [ 1214.028005][ T48] process_scheduled_works+0xb5d/0x1860 [ 1214.033586][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 1214.039593][ T48] ? assign_work+0x3d5/0x5e0 [ 1214.044225][ T48] worker_thread+0xa53/0xfc0 [ 1214.048860][ T48] kthread+0x389/0x470 [ 1214.052947][ T48] ? __pfx_worker_thread+0x10/0x10 [ 1214.058061][ T48] ? __pfx_kthread+0x10/0x10 [ 1214.062660][ T48] ret_from_fork+0x514/0xb70 [ 1214.067266][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 1214.072389][ T48] ? __switch_to+0xc79/0x1410 [ 1214.077079][ T48] ? __pfx_kthread+0x10/0x10 [ 1214.081692][ T48] ret_from_fork_asm+0x1a/0x30 [ 1214.086487][ T48] [ 1214.089776][ T48] Kernel Offset: disabled [ 1214.094103][ T48] Rebooting in 86400 seconds..