last executing test programs: 2m35.685616754s ago: executing program 1 (id=1971): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) (async) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x23, 0x75, {0x75, 0x11, "314ec899dc5c304ea44eec282d9fef24c8d47e2fe78e907ffa9b3de38471342ef37a93d1786839520da28614f4362f4ef25b6648001863aa8800563772106494fe7614a233f9911ad3e87289b3acd7f5e586e14fc13de52ad9090a63083317aa237e0358d7ff899b2301ebe6a6b1c6f8dd8759"}}, &(0x7f0000000080)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x10, 0x1, 0xa, "f18b07f6", "31a01cb5"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x8, 0xd8, 0x40, 0x9, 0x56fd, 0x6}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x14, 0x22, "d2f91ab75e9d6213d6a7efed68839a67538dc8c3f0e2ace5ddccae633d16d7ab50f0"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000500)={0x40, 0xb, 0x2, "e83a"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "a0e3"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3b}}) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (rerun: 64) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async, rerun: 64) socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async, rerun: 32) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) (async, rerun: 32) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 2m35.518230113s ago: executing program 1 (id=1973): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000000000000000000000000000000200"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x43c, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x61b9}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0xb2b, 0x80000003, 0x3, 0x0, 0x8000, 0x9, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x108e, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x10005, 0x1, 0x2, 0x8, 0x6, 0x1, 0xa, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffff8, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x7, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x5, 0x101, 0x5, 0xc, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x2, 0xfffff76b, 0x1, 0x4, 0x4275c4e8, 0x8, 0x5, 0x800, 0x0, 0x951, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000002, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x7f, 0xffff8000, 0x5, 0x7, 0x7, 0x1, 0x2, 0xe, 0x2, 0x7, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc2, 0x9, 0x3, 0x4, 0x283, 0xb, 0x7, 0x40, 0x7, 0x1, 0x0, 0xff, 0x7f, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x8, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0xfe9e, 0xffffffff, 0x4, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xd, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xb4f3, 0x9, 0x382ae49b, 0xbb, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x8a, 0x5, 0x5, 0x7, 0x7, 0x0, 0x7, 0x1, 0x0, 0xffffffff, 0xdfeb, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x43c}}, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000, 0x5, 0x0, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r4}, 0x8) (async) io_setup(0x222, &(0x7f0000000180)=0x0) ftruncate(r3, 0x0) (async) io_submit(r5, 0x3, &(0x7f0000000000)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x5, r3, &(0x7f0000000c00)="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", 0x200, 0xd}, 0x0, 0x0]) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x40, 0x3, 0xae, {0x7, 0x25, 0x1, 0xa, 0x3, 0x2d91}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf, 0x4, 0x7, {0x7, 0x25, 0x1, 0x4, 0x7, 0x1000}}}}}}}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) 2m34.967931438s ago: executing program 1 (id=1978): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3007, 0x6, 0x805, 0x100000, 0x10001}) (async, rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m34.676674674s ago: executing program 1 (id=1980): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x3c, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x8, 0xb, 0x0, 0x1, [@generic="07499ff3"]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 2m34.45185262s ago: executing program 1 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000043000701fefffffffcdbdf25047c000024000000280001"], 0x40}}, 0xc000) r1 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f00000000c0)='sourCe', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00212a0000002a043d7da3291591b5b80eca737ff0e9e5e6c1c9247303466a00"/48], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m33.810458128s ago: executing program 1 (id=1985): openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0xa) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f87, 0x40, 0x40, 0x4, 0x2, 0x19, 0x8, 0x2, 0x8, 0x0, 0x3f, 0x3f, {0xfffffffd, 0xfffffffc}, 0x3, 0xed}}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000a28000000000a0101000000005e1affd5020000000900010073797a300000000012000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000052780900030073797a32000000001400000011000100"/111, @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES8=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00'}) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xfffffffffffffffd, 0xc83c1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300031000000000000000fcdbdf25020a000008000000eb0000000000000005000600000000000a004e2100000001fc0100000000000022b6c68cab21f5b8e20000000000000001040000000000000002000100000000000000000d0000000005002e7214d077530500000000000a004e2000000005000000000000000000000000000000000000008000000000"], 0x80}, 0x1, 0x7}, 0x4805) r10 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r9, 0xffffffffffffffff}) r12 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r12, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, 0x3}, 0x10) ppoll(&(0x7f0000000040)=[{r11, 0x404}, {r9}], 0x2, 0x0, 0x0, 0x0) dup3(r9, r8, 0x0) truncate(0x0, 0x0) 2m18.74273725s ago: executing program 32 (id=1985): openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0xa) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f87, 0x40, 0x40, 0x4, 0x2, 0x19, 0x8, 0x2, 0x8, 0x0, 0x3f, 0x3f, {0xfffffffd, 0xfffffffc}, 0x3, 0xed}}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000a28000000000a0101000000005e1affd5020000000900010073797a300000000012000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000052780900030073797a32000000001400000011000100"/111, @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES8=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00'}) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xfffffffffffffffd, 0xc83c1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300031000000000000000fcdbdf25020a000008000000eb0000000000000005000600000000000a004e2100000001fc0100000000000022b6c68cab21f5b8e20000000000000001040000000000000002000100000000000000000d0000000005002e7214d077530500000000000a004e2000000005000000000000000000000000000000000000008000000000"], 0x80}, 0x1, 0x7}, 0x4805) r10 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r9, 0xffffffffffffffff}) r12 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r12, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, 0x3}, 0x10) ppoll(&(0x7f0000000040)=[{r11, 0x404}, {r9}], 0x2, 0x0, 0x0, 0x0) dup3(r9, r8, 0x0) truncate(0x0, 0x0) 10.591663879s ago: executing program 5 (id=2589): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x30, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x40024) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x40, 0xb, 0x2, "51d9"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x89, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x8, 0x7}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x2, 0x2, 0x4, 0x10, 0x2}, 0x10, &(0x7f0000000840)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x1, 0x78, 0x19e5, 0x5}]}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x825}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x402}}, {0x85, &(0x7f0000000980)=@string={0x85, 0x3, "e1f9b72b8ae9c3f7e56825e9742c4d40be285eb3c501cc12211af786b8ea139962d103956e1cf1082ba79a8aa732e048ddddd21c8931d98fbce10455f36590cf94c1943714e14db35fad00fe579589aede348c53df10db4ba991587160f3d3d78df3af36264e4ad54e0bc1f4bbbaa9ff847abce8d5f82d0065f2acdd9ccdfe4161a702"}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000cc0)={0x14, &(0x7f0000000b40)={0x40, 0x3, 0xcd, {0xcd, 0xacb1f5765224e75, "b6b958e659b91c77a74f939852b8378fa0ecf9911bd6d12d82a3409b8b6f29577244a8fd83f8283cf362c1b13133b5c40c6262e93c470d5954dc69479d3b43d3d760191fd4a1b83a238f273e344453f25e677aefc076ac8db9d98616a9d75f338ad707805deaaf03f077c82365cae0cf0c65b533a62a0aec3918f6632914367cda5c6305536239e23de0c5d9e2e8a2bfc94f32cb3a4b39b8ff58ac31a1b0f116f77a1fdc8d091a3b725a44ba8f68f3bf1fcbb9fc08b707ac916a539102a5057cdff6a9be8c0caddd86515c"}}, &(0x7f0000000c40)={0x0, 0x3, 0x73, @string={0x73, 0x3, "d1dbabcbca0dc00e02ac10bde0724c69c707f9155509df108f87c697eaf73005f719fc95b6cdddd7a33bfd0557882620f0a4cd8ebdb4692621e895c81c35b24168a2710765f78bf71218126a11f943158cf43613aadf6a5b158a4dcd77ecebcf6afbac789eec5ee8989cb8096b45cbfdc4"}}}, &(0x7f0000000f40)={0x34, &(0x7f0000000d00)={0x20, 0xb, 0x9d, "053c276c24af88d8157139b4b69a5239d9ab81ac0ed035e6fdf6f9003ec9f232cbab24f1536752d55e2273b6743dae8b5136f2b7c494768f65ed0566583393719341c902861f460d1f53af10a570ddfdf82ad94516ad995b2cd6621aecc10eeb2e094bb400f31e2250208f0bbfa8170ea3b518c27861d3c1d4a25051ad358bb9d08f65a2ed8f27b2f6210ad3911ae54edb28279deecde5c19479f81646"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000e80)={0x20, 0x0, 0x27, {0x25, "6fd0a475bc14ba37d1a8b877bb23d03c330a92c6ecbf3a013d582d3cbeb2c0bbab9674fda9"}}, &(0x7f0000000ec0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000f00)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000240)={0x0, 0x13, 0x7, "bd9908633b89e3"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xc9}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) r4 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x7, 0x1, 0x2, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0xf8, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0xe2, 0x80}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0xf9, 0x5, 0xff, 0x6}, 0x1a, &(0x7f0000000240)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x5, 0x2, 0xf819, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x5, 0x5}, @ptm_cap={0x3}]}, 0x1, [{0x51, &(0x7f0000000280)=@string={0x51, 0x3, "1f183f4640948c7826475fd97016f649c75c318443aaf3c9b110a2f54856168d9ab9073819b1f6a08a5c5e968516e02d95c9b926075a6ea0592d41ab5a4f6db23602ab8968974a043778457fe341ba"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x0, 0x11, 0xcc, {0xcc, 0x23, "a21b3b8202453b7efdb5e2a569a3db2bf399c96788eab04d3f6bc71e506822637d1c1dd4499a6bced41201abef164b8a131eda1d6100f7aa2d07af27263c2d42717c46bb7147b5aed64f12fee00b50b886394e57440b6e180a60cd69972867f5cee0d81c61ff47faee769d439a8bfa6feddfcbe5c83c6ec871588e427e2bb018a795fb07b700c6f5d32e8a6cfd6e2767e07430c8075abd8e0ea15c06001b8cff002520d2d3dabc81b1efb8b0e510c2e98d614bcd87785642fe5c40470f7e5a117678e70db9663d49cef8"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000780)={0x34, &(0x7f00000004c0)={0x40, 0x16, 0xa9, "b1b1518238b0ab6b9f6a20b4402275fc83cdf4f7841b45011b151df74c3d754fc546f8f51d6a96684e16862a77228934824d46e7f9b015625f2880dc1ad0d2e4457cd1f0e6a8d3e7c94bb87a4dec083bca3064bb7e1096c33a60677ff9453fc22a31f590c723f9e5145ef1e2dad48d183866ca1d378f9b6f4d8204f2a8302830c2f7daece18759531a76fd220b75360da2980a6048c9b98d6032a616266f669e19b2110b0d65ebc004"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7a}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0xc5, {0xc3, "74808b07fc59d555262c4dce7ef9b796079856c47fef51eb34bf2a9e850c3f3edd68ca6f19f9501a5efe138b5955cdf7abe5778065765a6c6f9950d74ee06073f8fbdd6dd83ddbfb14c383e90cbed1c3d6176c6faa71748a00668350d0a35c91f98233331c7d52a3e5333dc5afd279415c7dd1bd536b998ca2297a60158931ff27291fc0789fc21d074d1f12610b03ea85de72a0e7b312da468a16ed0342882278fa25a83b76ed01331044e7a8e1c871d8acffdc87f9c63341482e997dfb9af07f632f"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x6}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) 8.029284378s ago: executing program 3 (id=2596): syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x0) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d412ba800"/16, 0x10}], 0x1}], 0x1, 0x40800) (async) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d412ba800"/16, 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000100)={0x1, 0x300, {0x0, 0x40000000, 0x3006}}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086a05130000000000000109df0300020009218100030122280009058103400031cdf5"], 0x0) (async) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086a05130000000000000109df0300020009218100030122280009058103400031cdf5"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78883"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.774629248s ago: executing program 0 (id=2597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x300) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='fsid\x00', &(0x7f0000000800)='000007)0-\x06\x00\x00\x00\x00\x00\x00\x00\x00-0\b000000\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x1b, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYBLOB="4805a53852cd5a637072adff92378a0f00190f", @ANYRES32], 0x70}}, 0x0) 7.561255187s ago: executing program 0 (id=2600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f0000000540)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400"], 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r5 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)={0x1, 0x0, @b}, 0x48, 0x0) keyctl$revoke(0x3, r5) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000040000000002, 0xffffffffffffffff}) (async) syz_emit_ethernet(0xce, &(0x7f0000000b00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x4000) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r9, 0x3ff}, 0x8) r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) syz_usb_disconnect(r10) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 7.41876112s ago: executing program 0 (id=2601): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x208800) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xe, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000480)={0x80000000, 0x110, "bbd44e9158cbafd97c9c1845e36434137869e0897348c86001ee7f8e892f3163", 0x0, 0xfffffffffffffff7, 0x7, 0x0, 0x1, 0x8000, 0xea, 0x4, [0x0, 0xfffff800, 0x7fffffff, 0x8]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.205120538s ago: executing program 3 (id=2602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000fcb000)=0xfffffffc, 0x4) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r4 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x9, @meta={0x3854454d, 0x31912aef, 0x33565348, 0x6661, 0x4c319713}}, 0x10000}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585", @ANYRES16=r0], 0x0) 6.790420371s ago: executing program 0 (id=2603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002001a0000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002"], 0x128}}, 0x0) 6.577043211s ago: executing program 0 (id=2604): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="a8", 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0x20044840}, 0x24070) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0xffffffffffffff7b, &(0x7f0000000100)=""/16, 0x10}, 0x4be3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=""/102, 0x66}, 0x3f3}], 0x2, 0x4000a123, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x101005, @remote, 0x7}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x20000006) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x9) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 6.21690882s ago: executing program 5 (id=2605): rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000410000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.075155473s ago: executing program 5 (id=2606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r2, &(0x7f0000000100)={0x1, {&(0x7f0000000900)=""/212, 0xbf, 0x0, 0x2, 0x2}}, 0x98) write$vhost_msg(r2, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/54, 0x36, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r2, &(0x7f0000000a00)={0x1, {&(0x7f00000008c0)=""/38, 0x26, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000003c0)=""/14, 0xe, 0x0, 0x3, 0x2}}, 0x48) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) newfstatat(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x0, 0x4000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r4 = syz_io_uring_setup(0x538, &(0x7f00000002c0)={0x0, 0xa6d, 0x1, 0x3, 0x1e6, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000400)) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x4, 0x4, 0x4e, 0x0, r4}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) 5.7940968s ago: executing program 3 (id=2608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0100001600010025bd7000ffdbdf2500000000000000000000ffff64010100fe8000000000000000000000000000214e2300004e200003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000800ff"], 0x17c}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 5.531526342s ago: executing program 0 (id=2611): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8010000100301002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="802100000000000008001300", @ANYRES32=0x0, @ANYBLOB="14001680100001800c000500020000000700000008001f00080000001400350064756d6d79300000000000000000000008002e000400000024000e00050000000000000009000000000000004000000000000000ff0101040000000024000e0005000000000000000500000000000000050000000000000005000a0800000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000240)={0x0, 0x9, 0x5, {0x6}, 0x3e8}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000840)={0xd, &(0x7f0000000740)=[{0x2c, '\x00', @data=0x7, 0x200}, {0x41, '\x00', @data=0x2, 0x3ff}, {0x25, '\x00', @st={0x4, [{0x3, @uvalue=0xb1c}, {0x1, @uvalue=0x3}, {0x1, @uvalue=0x5}, {0x0, @svalue=0x8}]}, 0x83}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x0, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 4.960380287s ago: executing program 2 (id=2614): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24048044) r5 = io_uring_setup(0x1198, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x10, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)="12558e61255311a5084cf6e459188357367504e0cc6ce6ffbc5d8aee42df40864a1447821e0714f416afbf07aba184e02dadf0e821eb9f768e0fbf200aa1bd2a211b45bf9afb108c009db924ad83a97df0518ac77525ad359f94dcc5cf846e9d43190d4db739de622eb7f188ab02fe0ddb5af0c01787dbbef63391c3d7a39340e6458372e737d9fe3246806c2efb831575d0511bbcf6f1f494ce35d027e0aadc682f79454bb1b6c841a5a8785c97ec93fe50d008d3d9d33d2c8500d50ba026ddde84ec3e44013882d23f4f434a4f24fe303da11c6e44efed9693c736dd8ff61dd8e5c9ab8e", 0xe5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r7, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2424}, {0x0}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.650729589s ago: executing program 4 (id=2615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) close(0x3) 4.069055096s ago: executing program 4 (id=2616): rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000600000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.88444731s ago: executing program 3 (id=2617): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x26, 0x5}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff000705810200020007050202000200"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) setxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x8008, 0x3}, {0x3, 0xff}]}, 0x14, 0x1) socket$kcm(0x10, 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x800, 0x40, &(0x7f00000012c0)={0xfffffffffffffff7, 0x9, 0x100000001, 0x5}) prctl$PR_SET_UNALIGN(0x6, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xd1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {0x4}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {0x16}, {}, {0x0, 0x1a, 0x40}]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) tkill(r8, 0x7) 3.825432285s ago: executing program 4 (id=2618): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xe}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$inet(r1, &(0x7f0000000c40)={&(0x7f0000000380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000540)="bbb5a94c0058e5bf789d2796640b27d0f955f803faeed96bcbebdb6d43f338fadd8cd6ed872cef25043c4a46f03a444bd42ae9c33b292ae30e112e7ce44c18d5650263d6aae741bf4f1836e983d0c6fb66c564d97f0335a8065ae31e743d9b7c7299cdb2a676850376a4eede72b40e51d7f4d4dbf27138e84119ef0fde78e90beca7e6a7b98f9bebf47bd2bfc39375e4cb852a05bef92ee6e465a51f03ed1cab849d685ab831bd0acc7edecb6b59aaad08affa8f74a2d8883c735aa52eee795a1e18aaad15016596b7dfeb3fd89dfc8332d1eb30fef4fb8c5e9e47124bc2b3e3ff0a0bd6432c7f8894e426", 0xeb}, {&(0x7f0000000640)="e082017bc45efa6c79b91263447678ad21221213088435add5fc2bc0e28ecb8ac7712124e9f4486edcd1f66812c96db800b77f5a439d17861f7e7a0ed42cd81eef930e93357064a445fb60e23c44bb82c98afb0ae1ff43799475e568c8a68a515520a780390ba5e4fb67952d5e2cf764c1425549a3a4d5e3e81cf6cc9ebc1527dc9121452f909323291ef21af898f364ba092bbe0a8fd2a265e8ff37ade9fb0862c2461864f12664d7681ce860c329260e335d40454fa0654fbdc07118de8cfa5ab9892bf836ac", 0xc7}, {&(0x7f0000000740)="c1548c0697933e11212fa786aa618450479b3f95e39e2f64b94db01dab93e65fe1bceb89088d1cd857d6a9fd2c2393f37b12441acb41da4c91d4a82e45fe9a4441af7df0ad9f4a84bd939c8c52558258a376db35546c4c6cfa1fc982aa7fb9289f73cd2f131efb8629cba7aa695c5b8305e3e281abaa0288b0a115790bbd8376febfe5905e6cf9acf8cc874e032f5d4a9babeb58d4c09271c355cfc177a153137836d9", 0xa3}, {&(0x7f0000000800)="3d10d550cd3a638ba47304bcc3c2381e35bb984e4d9d93af4fb407d23ae2b04e21b91df833b6bd83482e5b3c61e9d237af8f3314", 0x34}, {&(0x7f0000000840)}, {&(0x7f0000000880)="fa2eb3913514dec8c4aaef0fd96723278052d2e393f02275f8c11ac552d50e5618a48f8c1b2776cc5257dd9fad31f17d47af33ffbaa5e41505f60b9af7e24ac66936ab1e0dcda91c0ca0f569ad467fdadab47baf1d7d72e75d81db68f75a09785821314808e7ec5eeaf92e615f030967c2207ae9", 0x74}, {&(0x7f0000000900)="5234b722102e2addbeccfd1b0a23cdc76b84a5cddf83101670078bb3a6cd10a22e5814fba59f65e8b9224df52d435e8d0293bb7858a68b45175b25aa92583eeefa28bc2b82bb7ce86faddf22", 0x4c}, {&(0x7f0000000980)="e3a584cbda056e4d9d7fd35ac5a5aa63a65e35be4415a9405c9adc1686317b38d5b516dcec6524b22ec9c2dcff12019fe1304d5268985b037fa91098801c6c9cc2ab991414c4bf4e726bddc3d53ee28b348648feb594f4d4cfb954df7fc948553378bf9c66f0a93bf10523b761a5b3f8b8971281e870c2d650e3974048266375ae10d41085dd3c5ccb4afd161fa727708ff03571911bce84af9cc33b77a5d62bb1d028a3d07bce4718caea70ffbd4262a07689e330da4e65a6cabc4f26127c88696e82db3dcd72b37b245a0b92ffa9533280b834c27873696ff72df314bb34e9e8f904021228c9335864cb6668c06f1dab1fd63be9", 0xf5}, {&(0x7f0000000a80)="cf87c6d8165831a2c2ab8ec4487ed73dd58be5891476d05261ddc54e4e848428753df2a189d8c4a6ead029dc68ae7204c3617ebe9831db7ec086572b55f722a828", 0x41}], 0x9, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x48}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="264a0b52a348"}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4050860) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) accept(r0, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x80, 0x0, 0x0) 3.592798307s ago: executing program 2 (id=2619): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000aab5a78600df2508004b002800"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4000004) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r1, 0x10001, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) write(r2, &(0x7f0000000200)='1', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800d30074"], 0x24}, 0x1, 0x0, 0x0, 0x20020055}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r4, @ANYBLOB="00082cbd7000fbdbdf25520000000a000600ffffffffffff000038002a008c18d8049724b509a70d6cd4f678e2cc7bfc1366d8a2d63383f63e01027e151803c908021100000027600000030000000000000086002a00bd0608021100000037780603d39f203d4692901ca106003675e0747c0df539f9c6c07137de34c6ae77f4a96b48d3fa3e819a061e6205265c37015ad001f52febbb99399ebfe5f01f562e18eb71bb30008cf830d50b118aa38ad4f4dd020d852bd00af74bea1a2a3a34d408030d697c6bb66e501ff6970cea14a80406f8d9b9b0c08200"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bfc000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6_udp(0xa, 0x2, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x2, 0x4800002c, 0xffffffffffffffff, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64726f75705f69643de1839d8fc1d34aa0883623655bee05ee030941842391934c26fca88dab7e60411870e27ee0", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="41020000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fbdbdf258700000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r11 = inotify_init1(0x800) inotify_add_watch(r11, &(0x7f0000000e00)='./file0\x00', 0x140) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 3.181257386s ago: executing program 5 (id=2620): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000081dd22104c052e0000050102030109021200921f60e9cc7bdde00000f70467db37d3e538562180120deccebacbb7e6b75a2c7f90581c43ecac0a959b77180540f1049513ce62d73d23a68348c2e12bf5a0015e40dd6537e0e2ae178a1fe76d245e669ec811ebe2331e59ea9325cfa573aea93b540ba28cec72ee3afd970cd81ce560b758c37498ee6fdb22c3fdb89537e68c34b8676608ffda9becc9f64fd275b1d8782d67618d6c6eb768db130233739d162e5ffded179e210ffd7f8d16edf4ea1400ea06cbfde5b7fb2e76c239edc8c424463cfebc50ba10fcbc0c23c01e03d2ef776005138e56c1924e7171af9577fb"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f232e0f01ca66b80d0000000f23c00f21f8663502000b000f23f8660f38802466b82c0e2bea0f23c00f21f86635030001000f23f866b98a00000066b86c20213266ba31bead040f30f20f18f08148024ba00f0766b9c909000066b87025dab366ba83ae452a0f30", 0x68}], 0x1, 0x51, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800e885) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x44880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x10002, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = gettid() r3 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r2, @ANYBLOB="4f2598f2a1fc9b8254edb9f10955dd076516f6c185ce9ca315c4459cb3f3192d0106f6ec3b667b04532f949c4e9f79ee9ddb59d6dc03b4ffef75551a35e037f694742d891be868cba0593c258ac0213b7fd64f7ba897016ec3d0e425d2dabf43b556f3d054766e2a2af2a01666aa86028b112167b55834390f7fae59d4fdbb100000005d97a56712f90725d9a26af474cf3ca6466110cebfbf229ce266966a4f2480764c22347b718a87acea17b7", @ANYRES32=r3, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0xb, @remote, 0x5}], 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x102) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 2.998661338s ago: executing program 2 (id=2621): unshare(0x8040480) unshare(0x40000000) r0 = io_uring_setup(0x5dd8, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x7d}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.796732129s ago: executing program 4 (id=2622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xffa1) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='fsid\x00', &(0x7f0000000800)='000007)0-\x06\x00\x00\x00\x00\x00\x00\x00\x00-0\b000000\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x1b, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYBLOB="4805a53852cd5a637072adff92378a0f00190f", @ANYRES32], 0x70}}, 0x0) 2.723693189s ago: executing program 4 (id=2623): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) fsetxattr(r0, &(0x7f0000000340)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x10bc84) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0x0, 0x1}, {0x7, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff) write$sndseq(r3, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) syz_usb_control_io(r2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r8, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x7f, 0x2, "da488970", "d7690ecb"}}, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) 2.595263338s ago: executing program 2 (id=2624): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffc, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x5, 0x7ff, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x406, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10000, 0x3, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x7, 0x7f, 0x4, 0x4, 0x88, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0x3, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x8, 0xe181, 0x21, 0x9, 0x1, 0x10000, 0x86, 0x10, 0x19e, 0x6, 0x5, 0x4aa0, 0x3217, 0x1, 0x0, 0x4, 0x4, 0x8, 0xe, 0x6, 0x4, 0xb005, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfd, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x202, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x8, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x3, 0xffbffffd, 0x9, 0xfff, 0x6, 0x9, 0x3, 0x4, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0xffffffff, 0x8000, 0xdb4, 0x1000006, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0x4000aa, 0x9, 0x1ff, 0x2d0, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x100, 0x3, 0x1, 0x0, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x8]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8805}, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b060000000e8281098f"]) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x200202) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x402) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000800)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000300)="a065a4050cc0d204bc4ab255d359c3d5a77c26d6215c43215cf5b0547903408f0f19e63046981bf89c0a7d1cd181eba050e8ca75f18be0ac033d6465401b824ce30160b3a88ce4de275e7c55cc", 0x4d, r2}, 0x68) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0xffffff82, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x24044094}, 0x80) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f0000000100)={0x0, 0x7, 0x2, '\x00', &(0x7f0000000000)=0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r6, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x200000b, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r8, &(0x7f00000040c0)={0x2020}, 0x2020) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.421274681s ago: executing program 2 (id=2625): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) write$fb(r0, &(0x7f0000000380)="2efff7208cebb0d44ec22b4fee0e263a54a4bfed05d9d08d9a427acddb8de945ff67e68c571ea571f76bee857e2d01332669a6507116cbc64d1a9e303dfe6e648d40d9bc923a6d9ed89fe7dc5ab184f78963ce09", 0x54) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r6 = inotify_init1(0x80000) inotify_add_watch(r6, 0x0, 0x7f7) pipe(&(0x7f0000000000)) timerfd_gettime(r5, &(0x7f00000001c0)) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x3b, 0x9) 1.350210321s ago: executing program 2 (id=2626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x491, 0x0, 0x7ff}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x800) 1.339426941s ago: executing program 3 (id=2627): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x54) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r0, 0x2) (async) r1 = syz_open_pts(r0, 0x2) poll(&(0x7f0000000000)=[{r1, 0x63be}], 0x1, 0xa1) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x80, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x5, 0x1, 0x2, 0x2000, 0x4}) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000240)=[@nested_load_code={0x12e, 0x66, {0x3, "0f20d835080000000f22d848b8fd810000000000000f23d80f21f835000000d00f23f82ef0410164d8b70f01c50f0666ba6100ecc4c141d270006567400f23b0c4c18d6d877518000065470f01c4"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0x3, 0x1}}, @in_dx={0x69, 0x20, {0x3477, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_load_code={0x12e, 0x7c, {0x0, "66baf80cb8a4d9e98bef66bafc0c66b8438366ef64660fc7b605000000c423054b1f0448b89d000000000000000f23c00f21f835030006000f23f8410f22500f009d02000000c481cd73fd0065f20f06363e420f23aab9800000c00f3235000400000f30"}}, @rdmsr={0x66, 0x18, {0x2a3}}, @uexit={0x0, 0x18, 0x100}, @in_dx={0x69, 0x20, {0x143d, 0x6}}, @nested_load_syzos={0x136, 0x88, {0x3, 0x7, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x68a, 0x4, 0x8, 0x7fffffffffffffff}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x8000000000000001, 0x4}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x4, 0xffffffffffffffff}}, @nested_amd_vmload={0x182, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x616, 0x1, 0x81, 0xd}}, @uexit={0x0, 0x18, 0x5}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x9}}], 0x302}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x0, &(0x7f0000000080)) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x10) 1.217357994s ago: executing program 5 (id=2628): rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000700000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.037260949s ago: executing program 5 (id=2629): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) r4 = dup(r3) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000180)=@arm64={0xc9, 0x6, 0xf0, '\x00', 0xcb}) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4a00000034372e9fd894d751a8234b20c9570ac703225aa4018e51a42babbb6c2f2618c54375ad7b99648eab92d7dbb95c5ef75a3999e1be6fd75984602aa356eded47b423d205777d733c937412dc60ff21"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001280)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x8, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x300}, 0x700, 0x20, 0xb05, 0x8}}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x400000, 0x40) (async) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$binfmt_misc(r7, &(0x7f0000000040)="27d904b7b92c9d3335ace9e1ccef5fac97f9cad450aa184c5b74d0eb3c385b975d8992a1a26acfd4fb86e50a71af8c2610662b38f2ab", 0x36) 762.969647ms ago: executing program 3 (id=2630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r1 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x48ec3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='reno', 0x4) sendmmsg$inet6(r3, &(0x7f0000001200)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x800002, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xc}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f0000000180)='J'}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x810000, 0x0}, {0x7, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac0000001200010500"/52, @ANYRES8=r4, @ANYBLOB="00000000000000feffff"], 0xac}}, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d4"], 0x0) fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) 0s ago: executing program 4 (id=2631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040a01, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS64(r7, 0x80984120, &(0x7f0000000240)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x15, '\x00', @buffer={"010d1de90c61b857c2eb1b10777c84e1e74ff47695c6b9f70f72ad6cc5f48537", 0x20}, 0x7a7ce1c2}, {0x11, '\x00', @data=0x5, 0x54371935}, {0x26, '\x00', @data=0x2003, 0x802}]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000130005000500"/20, @ANYRES32=r3, @ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="11c31a31a23daa11dc9816608de2e57e68fabbd4eea49a0ff033568dad0450957f781a881f02dedbd9562cd68a1432806007f8372741a2baba4900"/70], 0x28}}, 0x51) r8 = socket(0x15, 0x5, 0x0) r9 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0x80, 0x1, 0x11, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r13 = epoll_create1(0x80000) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000480)={0xc9, 0x0, 0xc}) r14 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r13, r8, 0x0, 0x2, 0x0, 0x1}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="2c00068008000100010000000800"], 0x78}}, 0x0) kernel console output (not intermixed with test programs): m the interface descriptor's value: 18 [ 557.533960][ T43] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 557.544732][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.568782][ T43] usb 5-1: config 0 descriptor?? [ 557.799599][ T43] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 557.817188][ T43] usb 5-1: USB disconnect, device number 6 [ 557.837339][ T43] usblp0: removed [ 557.897591][ T5724] gspca_vc032x: reg_r err -71 [ 557.929465][ T5724] vc032x 6-1:1.0: probe with driver vc032x failed with error -71 [ 557.984289][ T5724] usb 6-1: USB disconnect, device number 15 [ 558.352291][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 558.522249][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 558.553598][ T43] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 558.566703][ T43] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 558.582326][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 558.609968][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.635952][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 558.670285][T13251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.699013][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 558.738773][ T43] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 558.755308][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.767211][ T43] usb 5-1: config 0 descriptor?? [ 558.971354][T13262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.065594][ T43] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 559.080171][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.091929][T13262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.120052][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.156988][T13262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2198'. [ 559.167386][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2198'. [ 559.283192][T13266] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2200'. [ 559.411271][T13269] loop5: detected capacity change from 0 to 7 [ 559.431124][T13269] Dev loop5: unable to read RDB block 7 [ 559.436950][T13269] loop5: unable to read partition table [ 559.444360][T13269] loop5: partition table beyond EOD, truncated [ 559.457310][T13269] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 559.652466][T13276] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 559.829321][ T5724] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 559.981322][T13286] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2209'. [ 559.990692][ T5720] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 560.001144][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 560.009107][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.024001][ T5724] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 560.035547][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.051091][ T5724] usb 6-1: Product: syz [ 560.055682][ T5724] usb 6-1: Manufacturer: syz [ 560.062655][ T5724] usb 6-1: SerialNumber: syz [ 560.073590][ T43] usb 5-1: USB disconnect, device number 7 [ 560.074387][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.109134][T13235] vhci_hcd: connection reset by peer [ 560.136950][ T36] vhci_hcd vhci_hcd.4: stop threads [ 560.143512][ T36] vhci_hcd vhci_hcd.4: release socket [ 560.156007][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 560.170410][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 560.179119][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.183435][ T43] usblp0: removed [ 560.195808][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.195894][ T5720] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 560.195921][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.262729][ T5720] usb 1-1: config 0 descriptor?? [ 560.314808][T13288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.338652][T13288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.388870][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.408690][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.505085][ T5724] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 560.520076][ T5724] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.527969][ T5724] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 560.543869][ T5724] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 560.551148][ T5724] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.558522][ T5724] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 560.572975][ T5724] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 560.579140][ T5724] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.634610][ T5724] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 560.653957][ T5724] usb 6-1: USB disconnect, device number 16 [ 560.687557][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.708049][T13279] input: syz0 as /devices/virtual/input/input42 [ 560.736075][ T5720] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 560.750795][ T5720] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 560.928593][ T5720] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 560.988541][T13297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.004657][T13297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.029942][ T7468] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 561.129578][ T5720] ft260 0003:0403:6030.0021: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 561.236929][T13302] loop5: detected capacity change from 0 to 7 [ 561.252441][T13302] Dev loop5: unable to read RDB block 7 [ 561.264063][T13302] loop5: unable to read partition table [ 561.272056][T13302] loop5: partition table beyond EOD, truncated [ 561.278817][T13302] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 561.340062][ T5720] ft260 0003:0403:6030.0021: failed to retrieve status: -32, no wakeup [ 561.350667][ T5720] ft260 0003:0403:6030.0021: failed to retrieve status: -32 [ 561.475637][T13305] syzkaller0: entered promiscuous mode [ 561.482695][T13305] syzkaller0: entered allmulticast mode [ 561.496718][ T7468] usb 5-1: No LPM exit latency info found, disabling LPM. [ 561.567358][T13279] ft260 0003:0403:6030.0021: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 561.705147][ T7468] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 0 [ 561.716609][ T7468] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 4 [ 561.728903][ T7468] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 561.882735][T13308] hfs: unable to load iocharset "io#harset" [ 561.905590][T13308] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2216'. [ 561.931730][ T7471] IPVS: starting estimator thread 0... [ 562.032917][T13312] IPVS: using max 25 ests per chain, 60000 per kthread [ 562.259415][ T5722] usb 42-1: device descriptor read/8, error -110 [ 562.542873][T13326] socket: no more sockets [ 562.631360][ T43] usb 1-1: USB disconnect, device number 102 [ 562.650653][ T5722] usb usb42-port1: attempt power cycle [ 563.080745][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.087190][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.243093][ T5722] usb usb42-port1: unable to enumerate USB device [ 563.582000][ T7468] usb 5-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40 [ 563.613554][ T7468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.672094][ T7468] usb 5-1: can't set config #1, error -71 [ 563.708160][ T7468] usb 5-1: USB disconnect, device number 8 [ 564.169555][ T5720] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 564.309331][ T5720] usb 5-1: device descriptor read/64, error -71 [ 564.559400][ T5720] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 564.591541][ T7468] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 564.634046][ T7468] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 564.709417][ T5720] usb 5-1: device descriptor read/64, error -71 [ 564.820000][ T5720] usb usb5-port1: attempt power cycle [ 565.159577][ T5720] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 565.190263][ T5720] usb 5-1: device descriptor read/8, error -71 [ 565.439534][ T5720] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 565.484008][ T5720] usb 5-1: device descriptor read/8, error -71 [ 565.635311][ T5720] usb usb5-port1: unable to enumerate USB device [ 565.983578][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 565.983592][ T29] audit: type=1326 audit(1785998226.804:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 566.017099][ T5720] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 566.026823][ T29] audit: type=1326 audit(1785998226.834:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 566.077842][ T29] audit: type=1326 audit(1785998226.834:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 566.111303][ T29] audit: type=1326 audit(1785998226.834:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 566.139264][ T29] audit: type=1326 audit(1785998226.834:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9d799de42 code=0x7ffc0000 [ 566.189311][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 566.196852][ T5720] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 566.212855][ T29] audit: type=1326 audit(1785998226.834:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 566.239656][ T5720] usb 6-1: config 0 has no interface number 0 [ 566.246790][ T5720] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 566.257603][ T5720] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 566.270606][ T29] audit: type=1326 audit(1785998226.834:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 566.303521][ T29] audit: type=1326 audit(1785998226.834:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd9d799ded7 code=0x7ffc0000 [ 566.304319][ T5720] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 566.342165][ T29] audit: type=1326 audit(1785998226.834:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 566.371394][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.380854][ T29] audit: type=1326 audit(1785998226.844:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.2.2234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd9d795add1 code=0x7ffc0000 [ 566.406089][ T5720] usb 6-1: Product: syz [ 566.411389][ T5720] usb 6-1: Manufacturer: syz [ 566.416180][ T5720] usb 6-1: SerialNumber: syz [ 566.431981][ T5720] usb 6-1: config 0 descriptor?? [ 566.438134][T13357] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 566.445825][T13357] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 566.660027][T13357] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 566.671176][T13357] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 566.892440][ T5720] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 566.926332][ T5720] asix 6-1:0.34: probe with driver asix failed with error -61 [ 567.248988][T13384] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2241'. [ 567.578875][T13392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2242'. [ 567.685415][T13394] syz_tun: left allmulticast mode [ 567.693055][T13394] pimreg: left allmulticast mode [ 567.699143][T13394] ip6tnl0: left allmulticast mode [ 567.923655][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.936333][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.277435][ T7469] go7007-loader 3-1:7.29: unable to load firmware from file "go7007/px-tv402u.fw" [ 568.312448][ T7469] go7007-loader 3-1:7.29: probe failed [ 568.374188][ T7469] usb 3-1: USB disconnect, device number 81 [ 568.496471][T13409] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 568.523806][T13409] syzkaller1: linktype set to 769 [ 568.745886][ T7469] usb 6-1: USB disconnect, device number 17 [ 569.671592][ T7459] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 569.795067][T13442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.849316][ T7459] usb 1-1: unable to get BOS descriptor or descriptor too short [ 569.866865][ T7459] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.895760][ T7459] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.915901][ T7459] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 569.933035][ T7459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.947998][T13442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.997316][ T7459] usb 1-1: Product: syz [ 570.011978][ T7459] usb 1-1: Manufacturer: syz [ 570.044845][ T7459] usb 1-1: SerialNumber: syz [ 570.062606][T13442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.082724][T13442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.136500][ T7459] usb 1-1: selecting invalid altsetting 1 [ 570.146555][ T7459] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 570.161057][ T7459] usb 1-1: selecting invalid altsetting 1 [ 570.171007][ T7459] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 570.237071][ T7459] usb 1-1: selecting invalid altsetting 1 [ 570.527464][ T7459] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 570.541186][ T7459] usb 1-1: USB disconnect, device number 103 [ 570.613404][ T6997] udevd[6997]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.051098][ T7468] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 571.200161][ T5722] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 571.242246][ T7468] usb 5-1: Using ep0 maxpacket: 32 [ 571.267861][ T7468] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 571.278996][ T7468] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 571.308585][ T7468] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.328532][ T7468] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 571.342822][ T36] bond0: (slave netdevsim1): Releasing backup interface [ 571.368926][ T7468] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 571.380541][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 571.395099][ T7468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.403826][ T5722] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 571.413862][ T5722] usb 1-1: config 0 has no interface number 0 [ 571.421891][ T7468] usb 5-1: Product: syz [ 571.426439][ T5722] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 571.439978][ T7468] usb 5-1: Manufacturer: syz [ 571.444799][ T7468] usb 5-1: SerialNumber: syz [ 571.451803][ T5722] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 571.477562][ T5722] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 571.487897][ T7469] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 571.498528][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 571.510474][ T7468] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input43 [ 571.523898][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.536344][ T5722] usb 1-1: Product: syz [ 571.546824][ T5722] usb 1-1: Manufacturer: syz [ 571.554996][ T5722] usb 1-1: SerialNumber: syz [ 571.571379][ T5722] usb 1-1: config 0 descriptor?? [ 571.578268][T13456] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 571.587024][T13456] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 571.689680][ T7468] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 571.723980][ T7469] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 571.739668][ T7468] (id 0x00) [ 571.743694][ T7469] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.755338][ T7469] usb 6-1: config 0 has no interface number 0 [ 571.769376][ T7469] usb 6-1: config 0 interface 205 has no altsetting 0 [ 571.786716][ T7469] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 571.797925][ T7469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.809766][T13456] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 571.818161][ T7469] usb 6-1: Product: syz [ 571.823723][ T7469] usb 6-1: Manufacturer: syz [ 571.828757][T13456] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 571.841749][ T7469] usb 6-1: SerialNumber: syz [ 571.865786][ T7469] usb 6-1: config 0 descriptor?? [ 571.889577][ T7468] rc_core: IR keymap rc-imon-pad not found [ 571.895888][ T7468] Registered IR keymap rc-empty [ 571.905499][ T7469] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 571.919283][ T7468] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 571.930871][ T7469] dvb-usb: bulk message failed: -22 (3/0) [ 571.941323][ T7468] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 571.976806][ T7468] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 571.991264][ T7469] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 572.015214][ T7469] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 572.033278][ T7468] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input44 [ 572.048949][ T5722] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 572.060919][ T7469] usb 6-1: media controller created [ 572.072194][ T7468] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:14> initialized [ 572.086290][ T7469] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.096297][ T5722] asix 1-1:0.34: probe with driver asix failed with error -61 [ 572.214972][ T7469] dvb-usb: bulk message failed: -22 (6/0) [ 572.267308][ T7469] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 572.356540][ T7469] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45 [ 572.458643][ T7469] dvb-usb: schedule remote query interval to 150 msecs. [ 572.481133][ T7469] dvb-usb: bulk message failed: -22 (3/0) [ 572.531406][ T7469] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 572.580193][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 572.642868][ T7466] dvb-usb: bulk message failed: -22 (1/0) [ 572.683592][ T7466] dvb-usb: error while querying for an remote control event. [ 572.906680][ T36] bridge_slave_1: left allmulticast mode [ 572.920783][ T7466] dvb-usb: bulk message failed: -22 (1/0) [ 572.941987][ T7466] dvb-usb: error while querying for an remote control event. [ 572.966615][ T36] bridge_slave_1: left promiscuous mode [ 573.011899][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.068259][ T36] bridge_slave_0: left allmulticast mode [ 573.088512][T13478] imon:send_packet: task interrupted [ 573.095615][ T36] bridge_slave_0: left promiscuous mode [ 573.115479][T13478] imon:send_packet: packet tx failed (-512) [ 573.134646][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.147284][ T7466] dvb-usb: bulk message failed: -22 (1/0) [ 573.171289][T13478] imon:vfd_write: send packet #2 failed [ 573.183337][ T7466] dvb-usb: error while querying for an remote control event. [ 573.227110][T13478] imon:send_packet: packet tx failed (-32) [ 573.272681][T13478] imon:vfd_write: send packet #0 failed [ 573.285592][ T36] pim6reg: left allmulticast mode [ 573.297978][ T36] pimreg: left allmulticast mode [ 573.369483][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 573.400372][ T5722] dvb-usb: error while querying for an remote control event. [ 573.599925][ T7469] dvb-usb: bulk message failed: -22 (1/0) [ 573.639365][ T7469] dvb-usb: error while querying for an remote control event. [ 573.829781][ T5722] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 573.859337][ T7469] dvb-usb: bulk message failed: -22 (1/0) [ 573.882624][ T7469] dvb-usb: error while querying for an remote control event. [ 573.936212][ T5720] usb 1-1: USB disconnect, device number 104 [ 574.038612][ T5722] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.120164][ T7466] dvb-usb: bulk message failed: -22 (1/0) [ 574.150921][ T7466] dvb-usb: error while querying for an remote control event. [ 574.173758][ T5722] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 574.248589][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 574.282019][ T5722] usb 3-1: Product: syz [ 574.309622][ T5722] usb 3-1: Manufacturer: syz [ 574.337724][ T5722] usb 3-1: SerialNumber: syz [ 574.404872][ T7469] dvb-usb: bulk message failed: -22 (1/0) [ 574.414852][ T7469] dvb-usb: error while querying for an remote control event. [ 574.442181][ T7466] usb 6-1: USB disconnect, device number 18 [ 574.805927][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.831961][ T7466] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 574.857282][T13497] kvm: user requested TSC rate below hardware speed [ 574.916133][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.950215][ T5722] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 575.034562][ T5722] usb 3-1: USB disconnect, device number 82 [ 575.040022][ T5724] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 575.126255][ T5722] usblp1: removed [ 575.230859][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 575.274711][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 575.291403][ T5724] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 575.392058][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.451766][ T5724] usb 1-1: config 0 descriptor?? [ 575.650759][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.674699][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.686064][ T36] bond0 (unregistering): Released all slaves [ 575.714552][ T36] bond1 (unregistering): Released all slaves [ 575.772825][ T36] bond2 (unregistering): Released all slaves [ 575.844121][ T36] bond3 (unregistering): Released all slaves [ 575.908338][T13481] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 575.921811][ T5724] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x3 [ 575.938910][ T5724] nzxt-kraken2 0003:1E71:170E.0023: reserved main item tag 0xd [ 575.978985][ T5724] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 575.989354][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 576.009288][ T5724] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 576.051665][ T5724] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 576.083810][ T5724] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 576.148188][ T5724] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 576.220932][ T36] tipc: Left network mode [ 576.228265][ T5724] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 576.260407][ T5722] usb 5-1: USB disconnect, device number 14 [ 576.375521][ T5724] nzxt-kraken2 0003:1E71:170E.0023: hidraw0: USB HID v0.09 Device [HID 1e71:170e] on usb-dummy_hcd.0-1/input0 [ 576.547506][ T5724] usb 1-1: USB disconnect, device number 105 [ 577.053054][T13509] fido_id[13509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 577.150191][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 577.907300][T13525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 578.479462][ T5724] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 578.652236][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 578.678482][ T5724] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 578.701950][ T5724] usb 5-1: config 0 has no interface number 0 [ 578.748146][ T5724] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 578.795920][ T5724] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 578.834866][ T5724] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 578.867798][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.869372][ T36] hsr_slave_0: left promiscuous mode [ 578.896644][ T5724] usb 5-1: Product: syz [ 578.934519][ T5724] usb 5-1: Manufacturer: syz [ 578.937908][ T36] hsr_slave_1: left promiscuous mode [ 578.966186][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.979786][ T5724] usb 5-1: SerialNumber: syz [ 579.015084][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.030722][ T5724] usb 5-1: config 0 descriptor?? [ 579.054093][T13539] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 579.076797][T13539] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 579.326111][T13539] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 579.392046][T13539] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 579.691441][ T5724] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 579.761470][ T5724] asix 5-1:0.34: probe with driver asix failed with error -61 [ 580.326061][T13560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.362488][ T7468] usb 5-1: USB disconnect, device number 15 [ 581.202909][T13569] loop8: detected capacity change from 0 to 7 [ 581.232284][T13569] Dev loop8: unable to read RDB block 7 [ 581.265189][T13569] loop8: unable to read partition table [ 581.298757][T13569] loop8: partition table beyond EOD, truncated [ 581.361326][T13569] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 581.635279][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 581.921781][ T5724] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 581.990048][T13579] loop5: detected capacity change from 0 to 7 [ 582.019846][T13579] Dev loop5: unable to read RDB block 7 [ 582.065627][T13579] loop5: unable to read partition table [ 582.098203][T13579] loop5: partition table beyond EOD, truncated [ 582.111727][ T5724] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.133608][T13579] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 582.203075][ T5724] usb 1-1: config 0 interface 0 has no altsetting 0 [ 582.228234][ T5724] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 582.266996][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.327770][T13572] nvme nvme0: rdma connection establishment failed (-104) [ 582.362663][ T5724] usb 1-1: config 0 descriptor?? [ 582.376269][T13582] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2287'. [ 582.847092][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.911302][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.233556][ T5724] usbhid 1-1:0.0: can't add hid device: -71 [ 583.268000][ T5724] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 583.339158][ T5724] usb 1-1: USB disconnect, device number 106 [ 583.382767][ T5722] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 583.684100][ T36] IPVS: stop unused estimator thread 0... [ 583.959443][ T5724] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 584.152457][T13613] loop8: detected capacity change from 0 to 7 [ 584.177883][ T5724] usb 5-1: No LPM exit latency info found, disabling LPM. [ 584.198318][T13613] Dev loop8: unable to read RDB block 7 [ 584.271235][ T5724] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 0 [ 584.282734][T13613] loop8: unable to read partition table [ 584.317142][T13613] loop8: partition table beyond EOD, truncated [ 584.351643][ T5724] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 4 [ 584.374516][T13613] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 584.452583][ T5724] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 584.708297][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 584.708347][ T29] audit: type=1326 audit(1785998245.514:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 584.810878][ T29] audit: type=1326 audit(1785998245.514:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 584.871765][ T29] audit: type=1326 audit(1785998245.514:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 584.902958][ T29] audit: type=1326 audit(1785998245.514:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 584.980683][T13620] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 585.108891][ T29] audit: type=1326 audit(1785998245.514:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 585.177560][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 585.217458][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2297'. [ 585.253269][ T7459] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 585.312363][ T29] audit: type=1326 audit(1785998245.514:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 585.439486][ T7459] usb 1-1: Using ep0 maxpacket: 16 [ 585.483826][ T29] audit: type=1326 audit(1785998245.524:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 585.595380][ T7459] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 585.595980][ T29] audit: type=1326 audit(1785998245.524:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 585.688003][ T29] audit: type=1326 audit(1785998245.514:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 585.690021][ T7459] usb 1-1: config 0 has no interface number 0 [ 585.856790][ T29] audit: type=1326 audit(1785998245.564:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13616 comm="syz.2.2295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9d799e0d9 code=0x7ffc0000 [ 585.926903][ T7459] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 586.032509][ T7459] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 586.116200][ T7459] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 586.159769][ T7459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.227420][ T7459] usb 1-1: Product: syz [ 586.283903][ T7459] usb 1-1: Manufacturer: syz [ 586.332650][ T7459] usb 1-1: SerialNumber: syz [ 586.413832][ T7459] usb 1-1: config 0 descriptor?? [ 586.431224][T13620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 586.453615][T13620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 586.684375][T13620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 586.719623][T13620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 586.939888][T13644] netlink: 'syz.2.2300': attribute type 11 has an invalid length. [ 586.959338][T13644] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2300'. [ 586.989485][ T7459] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 587.040762][ T7459] asix 1-1:0.34: probe with driver asix failed with error -61 [ 587.475849][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 588.599966][ T5722] usb 1-1: USB disconnect, device number 107 [ 589.033606][T13671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 589.048728][T13671] block device autoloading is deprecated and will be removed. [ 589.563092][T13680] syzkaller0: entered promiscuous mode [ 589.580211][T13680] syzkaller0: entered allmulticast mode [ 589.703668][T13683] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2310'. [ 589.828461][T13680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 589.895896][T13690] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2311'. [ 589.929027][T13693] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2312'. [ 589.968826][T13696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2308'. [ 590.171928][ T7469] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 590.307650][T13699] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 590.569402][ T7459] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 590.739361][ T7459] usb 1-1: Using ep0 maxpacket: 16 [ 590.777695][ T7459] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 590.796710][ T7459] usb 1-1: config 0 has no interface number 0 [ 590.810949][ T7459] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 590.828289][ T7459] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 590.855802][ T7459] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 590.867027][ T7459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.886791][ T7459] usb 1-1: Product: syz [ 590.896966][ T7459] usb 1-1: Manufacturer: syz [ 590.911076][ T7459] usb 1-1: SerialNumber: syz [ 591.852332][T13736] fuse: Bad value for 'fd' [ 591.860813][T13736] fuse: Bad value for 'fd' [ 591.870268][T13736] fuse: Bad value for 'fd' [ 591.877045][T13736] fuse: Bad value for 'fd' [ 591.883755][T13736] fuse: Bad value for 'fd' [ 591.889155][T13736] fuse: Bad value for 'fd' [ 591.894719][T13736] fuse: Bad value for 'fd' [ 591.910342][T13736] fuse: Bad value for 'fd' [ 591.937217][T13731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.995030][ T7459] usb 1-1: config 0 descriptor?? [ 592.008492][T13735] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 592.018498][T13699] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 592.037181][T13737] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 592.053985][T13699] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 592.282775][T13699] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 592.321595][T13699] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 592.399405][ T5720] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 592.557080][ T7459] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 592.599694][ T5720] usb 6-1: Using ep0 maxpacket: 32 [ 592.609008][ T7459] asix 1-1:0.34: probe with driver asix failed with error -61 [ 592.640366][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.669301][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.705597][ T5720] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 592.718724][ T7464] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 592.750793][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.863230][ T5724] usb 5-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40 [ 592.882020][ T5720] usb 6-1: config 0 descriptor?? [ 592.911085][ T7464] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.927513][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.945089][ T7464] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 592.958269][ T7464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.042229][ T5724] usb 5-1: can't set config #1, error -71 [ 593.065496][ T7464] usb 3-1: config 0 descriptor?? [ 593.091865][ T5724] usb 5-1: USB disconnect, device number 16 [ 593.357767][ T5720] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 593.382689][ T5720] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 593.550678][ T5720] ft260 0003:0403:6030.0024: chip code: 0000 0000 [ 593.710960][ T7464] ath6kl: mismatched byte count 0 vs. expected 12 [ 593.740629][ T7464] ath6kl: Failed to init ath6kl core: -22 [ 593.765477][ T5720] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 593.795721][ T7464] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 593.838065][T13762] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 593.900651][T13762] bond4: entered promiscuous mode [ 593.907089][T13762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.937851][ T7464] usb 3-1: USB disconnect, device number 84 [ 593.972926][ T5720] ft260 0003:0403:6030.0024: failed to retrieve status: -32, no wakeup [ 593.996998][ T5720] ft260 0003:0403:6030.0024: failed to retrieve status: -32 [ 594.018873][T13764] bond4: (slave veth3): making interface the new active one [ 594.032207][T13764] veth3: entered promiscuous mode [ 594.051617][T13764] bond4: (slave veth3): Enslaving as an active interface with an up link [ 594.138151][ T5720] usb 1-1: USB disconnect, device number 108 [ 595.270873][ T7469] usb 6-1: USB disconnect, device number 20 [ 595.383322][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 595.588572][T13787] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 596.236091][T13809] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 596.519862][ T5720] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 596.558488][T13812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.691809][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 596.728700][ T5720] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 596.768782][ T5720] usb 1-1: config 0 has no interface number 0 [ 596.783913][ T5720] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 596.816633][ T5720] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 596.866929][ T5720] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 596.924443][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.942296][ T5720] usb 1-1: Product: syz [ 596.946936][ T5720] usb 1-1: Manufacturer: syz [ 596.960471][ T5720] usb 1-1: SerialNumber: syz [ 596.993545][ T5720] usb 1-1: config 0 descriptor?? [ 597.031691][T13809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 597.066306][T13809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 597.329441][T13809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 597.358243][T13809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 597.605981][ T5720] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 597.627060][ T5720] asix 1-1:0.34: probe with driver asix failed with error -61 [ 598.276160][T13827] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.283724][T13827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.300251][T13827] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.313995][T13827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.477204][T13827] team0: Port device bridge0 added [ 598.609415][ T7469] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 598.737797][T13829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.750538][ T7469] usb 5-1: device descriptor read/64, error -71 [ 599.009881][ T7469] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 599.169971][ T7469] usb 5-1: device descriptor read/64, error -71 [ 599.211459][ T7466] usb 1-1: USB disconnect, device number 109 [ 599.301202][ T7469] usb usb5-port1: attempt power cycle [ 599.702234][ T7469] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 599.737043][T13845] loop5: detected capacity change from 0 to 7 [ 599.775651][ T7469] usb 5-1: device descriptor read/8, error -71 [ 599.790961][T13845] Dev loop5: unable to read RDB block 7 [ 599.807041][T13845] loop5: unable to read partition table [ 599.827323][T13845] loop5: partition table beyond EOD, truncated [ 599.845661][T13845] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 599.931826][T13849] loop8: detected capacity change from 0 to 7 [ 599.957789][T13849] Dev loop8: unable to read RDB block 7 [ 599.975043][T13849] loop8: unable to read partition table [ 599.989994][T13849] loop8: partition table beyond EOD, truncated [ 600.001422][T13849] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 600.019800][ T7468] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 600.090172][ T7469] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 600.141679][ T7469] usb 5-1: device descriptor read/8, error -71 [ 600.189434][ T7468] usb 6-1: Using ep0 maxpacket: 16 [ 600.194513][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.195104][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.197049][ T7468] usb 6-1: unable to get BOS descriptor or descriptor too short [ 600.197972][ T7468] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 600.198015][ T7468] usb 6-1: can't read configurations, error -71 [ 600.282428][ T7469] usb usb5-port1: unable to enumerate USB device [ 600.410288][ T7466] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 600.425439][T13865] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2358'. [ 600.435243][T13865] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 600.546865][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 600.546885][ T29] audit: type=1326 audit(1785998261.364:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 600.588849][ T29] audit: type=1326 audit(1785998261.364:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 600.617671][ T7466] usb 3-1: Using ep0 maxpacket: 8 [ 600.624855][ T29] audit: type=1326 audit(1785998261.364:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 600.669438][ T7466] usb 3-1: unable to get BOS descriptor or descriptor too short [ 600.693375][ T7466] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 600.722666][ T29] audit: type=1326 audit(1785998261.404:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 600.751061][ T7466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 600.776096][ T7466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 600.787435][ T29] audit: type=1326 audit(1785998261.404:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 600.817410][ T7466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 600.834548][ T7466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 600.857571][ T29] audit: type=1326 audit(1785998261.404:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 600.897699][ T7466] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 600.908817][ T7466] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 600.924684][ T29] audit: type=1326 audit(1785998261.404:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 600.953794][T13871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.965014][ T7466] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 600.975157][ T7466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.984625][ T7466] usb 3-1: Product: syz [ 600.990387][ T7466] usb 3-1: Manufacturer: syz [ 601.002998][ T7466] usb 3-1: SerialNumber: syz [ 601.008079][ T29] audit: type=1326 audit(1785998261.474:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 601.053561][T13871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.066429][ T7466] usb 3-1: config 0 descriptor?? [ 601.076387][ T29] audit: type=1326 audit(1785998261.474:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 601.110238][T13856] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 601.127134][ T7466] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.162285][ T29] audit: type=1326 audit(1785998261.474:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.0.2359" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 601.449751][ T5724] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 601.513681][ T7466] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 601.573141][ T7466] usb 3-1: USB disconnect, device number 85 [ 601.632448][ T5724] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.648842][ T5724] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 601.670230][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.697868][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.743821][ T5724] as10x_usb: device has been detected [ 601.776701][ T5724] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 601.796872][ T7464] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 601.867199][ T5724] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 601.972648][ T7464] usb 1-1: config 1 interface 0 has no altsetting 0 [ 601.988569][ T7464] usb 1-1: string descriptor 0 read error: -22 [ 602.004682][ T7464] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 602.026856][ T7464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.052696][ T5724] as10x_usb: error during firmware upload part1 [ 602.084509][ T5724] Registered device Abilis Systems DVB-Titan [ 602.496158][ T7464] usbhid 1-1:1.0: can't add hid device: -32 [ 602.553352][ T7464] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 602.612366][ T7464] usb 1-1: USB disconnect, device number 110 [ 602.769036][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2366'. [ 603.039547][ T5724] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 603.226119][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 603.248617][ T5724] usb 5-1: not running at top speed; connect to a high speed hub [ 603.277139][ T5724] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 603.320071][ T5724] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 4 [ 603.366384][ T5724] usb 5-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 603.414708][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.448940][ T5724] usb 5-1: Product: syz [ 603.477166][ T5724] usb 5-1: Manufacturer: syz [ 603.507634][ T5724] usb 5-1: SerialNumber: syz [ 603.916457][ T5724] usb 5-1: unit 0 not found! [ 604.656140][ T5724] usb 5-1: USB disconnect, device number 21 [ 605.435567][ T7466] usb 6-1: USB disconnect, device number 23 [ 605.465646][ T5724] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 605.617183][ T7466] Unregistered device Abilis Systems DVB-Titan [ 605.625768][ T7466] as10x_usb: device has been disconnected [ 605.661858][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 605.683249][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.719370][ T5724] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 605.757694][T13948] loop8: detected capacity change from 0 to 7 [ 605.760154][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.821468][T13948] Dev loop8: unable to read RDB block 7 [ 605.852971][T13948] loop8: unable to read partition table [ 605.906711][T13948] loop8: partition table beyond EOD, truncated [ 605.935953][ T5724] usb 5-1: config 0 descriptor?? [ 605.938048][T13948] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 606.446157][ T5724] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 606.994821][T13938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 607.289851][ T7471] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 607.427000][ T7466] usb 5-1: USB disconnect, device number 22 [ 607.462307][ T7471] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.498053][ T7471] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 607.529368][ T7471] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x55, changing to 0x5 [ 607.554103][ T7471] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 607.628401][ T7471] usb 1-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 607.651362][T13988] syzkaller0: entered promiscuous mode [ 607.683880][T13988] syzkaller0: entered allmulticast mode [ 607.717097][ T7471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.837047][ T7471] usb 1-1: Product: syz [ 607.918203][ T7471] usb 1-1: Manufacturer: syz [ 607.952661][ T7471] usb 1-1: SerialNumber: syz [ 608.009557][ T5724] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 608.199580][ T5724] usb 3-1: device descriptor read/64, error -71 [ 608.488206][ T5724] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 608.680005][ T5724] usb 3-1: device descriptor read/64, error -71 [ 608.829779][ T5724] usb usb3-port1: attempt power cycle [ 609.223119][ T5724] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 609.276987][ T5724] usb 3-1: device descriptor read/8, error -71 [ 609.530632][ T5724] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 609.570638][ T5724] usb 3-1: device descriptor read/8, error -71 [ 609.619461][ T7464] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 609.694959][ T5724] usb usb3-port1: unable to enumerate USB device [ 609.759394][ T7464] usb 5-1: device descriptor read/64, error -71 [ 609.946344][ T7471] usb 1-1: unit 4 not found! [ 609.969803][ T7471] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 610.016703][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'. [ 610.039621][ T7464] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 610.074242][ T7471] usb 1-1: USB disconnect, device number 111 [ 610.180342][ T7464] usb 5-1: device descriptor read/64, error -71 [ 610.309737][ T7464] usb usb5-port1: attempt power cycle [ 610.377105][T14015] EXT4-fs: Conflicting test_dummy_encryption options [ 610.661209][ T7464] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 610.688376][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 610.702097][ T7464] usb 5-1: device descriptor read/8, error -71 [ 610.725362][T14017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2390'. [ 610.834958][T14017] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 610.939495][ T7464] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 610.970327][ T7464] usb 5-1: device descriptor read/8, error -71 [ 611.100358][ T7464] usb usb5-port1: unable to enumerate USB device [ 611.797824][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'. [ 611.910951][ T7471] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 612.080306][ T7471] usb 3-1: device descriptor read/64, error -71 [ 612.196859][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'. [ 612.284144][T14036] macvtap1: entered allmulticast mode [ 612.306804][T14036] dummy0: entered allmulticast mode [ 612.349680][ T7471] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 612.370994][T14036] dummy0: entered promiscuous mode [ 612.519672][ T7471] usb 3-1: device descriptor read/64, error -71 [ 612.660306][ T7471] usb usb3-port1: attempt power cycle [ 613.061234][ T7471] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 613.110940][ T7471] usb 3-1: device descriptor read/8, error -71 [ 613.369446][ T7471] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 613.411610][ T7471] usb 3-1: device descriptor read/8, error -71 [ 613.458143][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 613.458162][ T29] audit: type=1326 audit(1785998274.274:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.0.2402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfe459e0d9 code=0x0 [ 613.529883][ T7471] usb usb3-port1: unable to enumerate USB device [ 614.999552][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 615.049378][ T7459] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 615.239422][ T7459] usb 3-1: Using ep0 maxpacket: 8 [ 615.256605][ T7459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 615.295318][ T7459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.327044][ T7459] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.365308][ T7459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 615.406735][ T7459] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 615.450312][ T7459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.504795][ T7459] usb 3-1: config 0 descriptor?? [ 615.989723][T14101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2415'. [ 616.113102][ T7466] usb 3-1: USB disconnect, device number 94 [ 616.204180][T14066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2403'. [ 616.336510][T14107] ipvlan0: entered promiscuous mode [ 616.641730][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.660712][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.703941][T14117] netlink: 'syz.0.2420': attribute type 1 has an invalid length. [ 616.857572][T14117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.869386][ T7464] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 616.912915][ T7466] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 616.957386][T14118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.977949][T14118] bond3: (slave netdevsim1): Enslaving as an active interface with a down link [ 617.019522][ T7464] usb 5-1: Using ep0 maxpacket: 32 [ 617.035619][ T7464] usb 5-1: unable to get BOS descriptor or descriptor too short [ 617.057362][ T7464] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.074177][ T7464] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.089360][ T7466] usb 6-1: Using ep0 maxpacket: 16 [ 617.102193][ T7464] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 617.114316][ T7464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.116601][ T7466] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.126064][ T7464] usb 5-1: Product: syz [ 617.126092][ T7464] usb 5-1: Manufacturer: syz [ 617.126110][ T7464] usb 5-1: SerialNumber: syz [ 617.171034][ T7466] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.237010][ T7466] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.270957][ T7466] usb 6-1: config 0 interface 0 has no altsetting 0 [ 617.280583][ T7466] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 617.297387][ T7466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.313507][ T7466] usb 6-1: config 0 descriptor?? [ 617.397545][ T7464] usb 5-1: unit 4 not found! [ 617.406321][ T7464] usb 5-1: unit 0 not found! [ 617.443727][T14136] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2426'. [ 617.565797][T14138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.580361][T14138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.752102][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.772204][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.789776][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.802018][ T7469] usb 5-1: USB disconnect, device number 27 [ 617.814766][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.844091][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.865350][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.883378][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.896510][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.908743][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.924370][ T7466] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 617.948808][ T7466] glorious 0003:258A:0033.0026: hidraw0: USB HID v0.04 Device [Glorious Model D] on usb-dummy_hcd.5-1/input0 [ 617.994917][T14116] syzkaller0: entered promiscuous mode [ 618.002231][T14116] syzkaller0: entered allmulticast mode [ 618.015669][ T36] TC_ACT_REPEAT abuse ? [ 618.274510][ T7464] usb 6-1: USB disconnect, device number 24 [ 618.905421][ T7469] hid-generic 00E1:000E:0081.0027: hidraw0: HID v40a953.f3 Device [syz1] on syz1 [ 619.005983][T14173] FAULT_INJECTION: forcing a failure. [ 619.005983][T14173] name failslab, interval 1, probability 0, space 0, times 0 [ 619.073043][T14173] CPU: 0 UID: 0 PID: 14173 Comm: syz.4.2438 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.073082][T14173] Tainted: [L]=SOFTLOCKUP [ 619.073091][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.073105][T14173] Call Trace: [ 619.073115][T14173] [ 619.073135][T14173] dump_stack_lvl+0xe8/0x150 [ 619.073177][T14173] should_fail_ex+0x40c/0x560 [ 619.073210][T14173] ? __se_sys_add_key+0x289/0x420 [ 619.073244][T14173] should_failslab+0xa8/0x100 [ 619.073281][T14173] __kvmalloc_node_noprof+0x176/0x860 [ 619.073320][T14173] ? __se_sys_add_key+0x289/0x420 [ 619.073357][T14173] __se_sys_add_key+0x289/0x420 [ 619.073392][T14173] ? __pfx___se_sys_add_key+0x10/0x10 [ 619.073433][T14173] ? __x64_sys_add_key+0x20/0xc0 [ 619.073465][T14173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.073491][T14173] do_syscall_64+0x174/0x580 [ 619.073520][T14173] ? trace_irq_disable+0x3b/0x140 [ 619.073551][T14173] ? clear_bhb_loop+0x40/0x90 [ 619.073579][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.073607][T14173] RIP: 0033:0x7facc3d9e0d9 [ 619.073629][T14173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.073650][T14173] RSP: 002b:00007facc4c85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 619.073675][T14173] RAX: ffffffffffffffda RBX: 00007facc4025fa0 RCX: 00007facc3d9e0d9 [ 619.073693][T14173] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000040 [ 619.073709][T14173] RBP: 00007facc4c85090 R08: 0000000016a0b5f3 R09: 0000000000000000 [ 619.073723][T14173] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 619.073737][T14173] R13: 00007facc4026038 R14: 00007facc4025fa0 R15: 00007facc414fa48 [ 619.073773][T14173] [ 619.332812][T14171] fido_id[14171]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 619.643925][T14184] syzkaller0: entered promiscuous mode [ 619.653864][T14184] syzkaller0: entered allmulticast mode [ 619.670929][T14186] loop8: detected capacity change from 0 to 7 [ 619.677443][T14184] TC_ACT_REPEAT abuse ? [ 619.685908][T14186] Dev loop8: unable to read RDB block 7 [ 619.694138][T14186] loop8: unable to read partition table [ 619.700410][T14186] loop8: partition table beyond EOD, truncated [ 619.717339][T14186] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 619.730516][ T7471] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 619.790498][ T5724] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 619.899086][ T7471] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 619.908945][ T7471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.917761][ T7471] usb 5-1: Product: syz [ 619.923263][ T7471] usb 5-1: Manufacturer: syz [ 619.928171][ T7471] usb 5-1: SerialNumber: syz [ 619.971501][ T5724] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 619.984628][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.005573][ T5724] usb 6-1: config 0 descriptor?? [ 620.031475][ T5724] cp210x 6-1:0.0: cp210x converter detected [ 620.089563][ T7464] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 620.227282][ T7471] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 620.259751][ T7464] usb 3-1: Using ep0 maxpacket: 32 [ 620.291703][ T7471] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 620.317949][ T7471] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 620.326120][ T7464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.382196][ T7471] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 620.390815][ T7464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.417460][ T5724] usb 6-1: cp210x converter now attached to ttyUSB0 [ 620.441716][ T7464] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 620.492219][ T7464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.594718][ T7464] usb 3-1: config 0 descriptor?? [ 620.621473][ T5724] usb 6-1: USB disconnect, device number 25 [ 620.687842][ T5724] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 620.699882][ T7471] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 620.748210][ T5724] cp210x 6-1:0.0: device disconnected [ 620.791927][ T7471] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 620.885460][ T7471] usb 5-1: USB disconnect, device number 28 [ 620.965811][ T7464] ft260 0003:0403:6030.0028: failed to retrieve chip version [ 621.017306][ T7464] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -71 [ 621.076089][ T7464] usb 3-1: USB disconnect, device number 95 [ 621.179026][T14204] syzkaller0: entered promiscuous mode [ 621.194728][T14204] syzkaller0: entered allmulticast mode [ 621.396565][T14208] loop5: detected capacity change from 0 to 7 [ 621.419463][T14208] Dev loop5: unable to read RDB block 7 [ 621.441713][T14208] loop5: unable to read partition table [ 621.471935][T14208] loop5: partition table beyond EOD, truncated [ 621.499316][T14208] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 621.652042][ T7466] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 621.831122][ T7466] usb 1-1: Using ep0 maxpacket: 32 [ 621.842244][ T7466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 621.879440][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2453'. [ 621.890955][ T7466] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 621.914628][ T7466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 621.952842][ T7466] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 621.977107][ T7466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.001094][ T7466] usb 1-1: Product: syz [ 622.020331][ T7466] usb 1-1: Manufacturer: syz [ 622.030141][ T7466] usb 1-1: SerialNumber: syz [ 622.057193][ T7466] usb 1-1: config 0 descriptor?? [ 622.082995][T14226] syzkaller0: entered promiscuous mode [ 622.089564][T14226] syzkaller0: entered allmulticast mode [ 622.101766][T14226] TC_ACT_REPEAT abuse ? [ 622.211477][T14229] program syz.4.2456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.229779][T14230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.495590][ T7466] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 622.536681][T14229] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 622.737129][T14244] openvswitch: netlink: Message has 4 unknown bytes. [ 622.759555][T14244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.906477][ T7466] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 623.199986][ T7471] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 623.381725][ T7471] usb 3-1: Using ep0 maxpacket: 16 [ 623.399303][ T7466] usb 1-1: USB disconnect, device number 112 [ 623.434938][ T7471] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 623.456542][ T7471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.496340][ T7471] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 623.514226][ T7471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.555516][ T7471] usb 3-1: Product: syz [ 623.561229][ T7471] usb 3-1: Manufacturer: syz [ 623.571225][ T7471] usb 3-1: SerialNumber: syz [ 623.604208][ T7471] usb 3-1: config 0 descriptor?? [ 623.634517][ T7471] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 623.646649][ T7471] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 623.751234][T14259] loop8: detected capacity change from 0 to 7 [ 623.766602][T14259] Dev loop8: unable to read RDB block 7 [ 623.775925][T14259] loop8: unable to read partition table [ 623.785497][T14259] loop8: partition table beyond EOD, truncated [ 623.793214][T14259] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 624.128698][T14267] syzkaller1: entered promiscuous mode [ 624.136640][T14267] syzkaller1: entered allmulticast mode [ 624.238988][ T7471] em28xx 3-1:0.0: unknown em28xx chip ID (242) [ 624.249624][ T7466] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 624.320552][ T7469] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 624.409432][ T7466] usb 6-1: Using ep0 maxpacket: 8 [ 624.418172][ T7466] usb 6-1: unable to get BOS descriptor or descriptor too short [ 624.430477][ T7466] usb 6-1: config 10 has an invalid interface number: 91 but max is 0 [ 624.440008][ T7466] usb 6-1: config 10 has no interface number 0 [ 624.446673][ T7471] em28xx 3-1:0.0: Config register raw data: 0xbf [ 624.453855][ T7466] usb 6-1: config 10 interface 91 has no altsetting 0 [ 624.461289][ T7471] em28xx 3-1:0.0: I2S Audio (5 sample rate(s)) [ 624.468819][ T7471] em28xx 3-1:0.0: No AC97 audio processor [ 624.478309][ T7466] usb 6-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 624.488518][ T7466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.497943][ T7466] usb 6-1: Product: syz [ 624.505565][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.505633][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.526390][ T7466] usb 6-1: Manufacturer: syz [ 624.531330][ T7469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.543897][ T7466] usb 6-1: SerialNumber: syz [ 624.554465][ T7469] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 624.565454][ T7469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.576758][ T7469] usb 1-1: Product: syz [ 624.583446][ T7469] usb 1-1: Manufacturer: syz [ 624.588511][ T7469] usb 1-1: SerialNumber: syz [ 624.600706][ T7469] usb 1-1: config 0 descriptor?? [ 624.634299][ T7469] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 625.065464][ T7471] usb 3-1: USB disconnect, device number 96 [ 625.574687][ T7466] uvcvideo 6-1:10.91: Found Unit with invalid ID 0 [ 625.624175][ T7466] uvcvideo 6-1:10.91: Found UVC 0.40 device syz (097b:61f6) [ 625.693779][ T7466] uvcvideo 6-1:10.91: Entity type for entity Output 32771 was not initialized! [ 625.719299][T14274] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2471'. [ 625.756260][ T7466] uvcvideo 6-1:10.91: Entity type for entity Media 2 was not initialized! [ 625.864454][ T7466] usb 6-1: USB disconnect, device number 26 [ 626.034760][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.192836][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.307526][ T29] audit: type=1326 audit(1785998287.124:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 626.343690][ T7466] usb 1-1: USB disconnect, device number 113 [ 626.412965][ T29] audit: type=1326 audit(1785998287.124:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 626.452327][ T29] audit: type=1326 audit(1785998287.204:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 626.505765][ T29] audit: type=1326 audit(1785998287.204:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 626.549518][ T29] audit: type=1326 audit(1785998287.204:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 626.577674][ T29] audit: type=1326 audit(1785998287.224:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 627.031935][ T7464] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 627.169647][ T7464] usb 6-1: device descriptor read/64, error -71 [ 627.262101][ T29] audit: type=1326 audit(1785998288.074:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 627.315032][ T29] audit: type=1326 audit(1785998288.074:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14279 comm="syz.3.2470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26819e0d9 code=0x7ffc0000 [ 627.490749][ T7464] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 627.629377][ T5724] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 627.637548][ T7464] usb 6-1: device descriptor read/64, error -71 [ 627.668873][T14300] loop8: detected capacity change from 0 to 7 [ 627.700283][T14300] Dev loop8: unable to read RDB block 7 [ 627.712523][T14300] loop8: unable to read partition table [ 627.729784][T14300] loop8: partition table beyond EOD, truncated [ 627.746520][T14300] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 627.774480][ T7464] usb usb6-port1: attempt power cycle [ 627.801484][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 627.841774][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.889436][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.930580][ T5724] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 627.955417][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.997752][ T5724] usb 3-1: config 0 descriptor?? [ 628.149428][ T7464] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 628.200494][ T7464] usb 6-1: device descriptor read/8, error -71 [ 628.297009][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.344433][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.459540][ T7464] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 628.590445][ T7464] usb 6-1: device descriptor read/8, error -71 [ 628.612644][T14312] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 628.652810][T14312] syzkaller1: linktype set to 823 [ 628.680256][ T5724] usbhid 3-1:0.0: can't add hid device: -71 [ 628.706253][ T5724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 628.761396][ T7464] usb usb6-port1: unable to enumerate USB device [ 628.776401][ T5724] usb 3-1: USB disconnect, device number 97 [ 629.006806][T14286] syz.3.2470 (14286): drop_caches: 2 [ 629.209706][ T7464] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 629.371600][ T7464] usb 5-1: Using ep0 maxpacket: 16 [ 629.389663][ T7464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.409918][ T7464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.425147][ T7464] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 629.437358][ T7464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.461578][ T7464] usb 5-1: config 0 descriptor?? [ 629.788197][T14323] netlink: 'syz.3.2482': attribute type 49 has an invalid length. [ 630.319030][T14333] sctp: [Deprecated]: syz.4.2481 (pid 14333) Use of int in max_burst socket option. [ 630.319030][T14333] Use struct sctp_assoc_value instead [ 631.536026][T14349] loop8: detected capacity change from 0 to 7 [ 631.602608][T14349] Dev loop8: unable to read RDB block 7 [ 631.614813][T14349] loop8: unable to read partition table [ 631.621826][T14349] loop8: partition table beyond EOD, truncated [ 631.653107][T14349] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 632.205252][T14358] xt_hashlimit: size too large, truncated to 1048576 [ 632.291699][T14360] netlink: 'syz.0.2493': attribute type 3 has an invalid length. [ 632.337347][ T7464] usbhid 5-1:0.0: can't add hid device: -71 [ 632.367333][ T7464] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 632.459628][ T7464] usb 5-1: USB disconnect, device number 29 [ 632.576083][T14365] syzkaller0: entered promiscuous mode [ 632.595104][ T29] audit: type=1326 audit(1785998293.414:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd32d9e0d9 code=0x7ffc0000 [ 632.668782][T14365] syzkaller0: entered allmulticast mode [ 632.748764][ T29] audit: type=1326 audit(1785998293.414:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd32d9e0d9 code=0x7ffc0000 [ 632.914596][ T29] audit: type=1326 audit(1785998293.414:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd32d9e0d9 code=0x7ffc0000 [ 632.997857][ T29] audit: type=1326 audit(1785998293.414:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd32d9e0d9 code=0x7ffc0000 [ 633.075848][ T29] audit: type=1326 audit(1785998293.504:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd32d9de42 code=0x7ffc0000 [ 633.142876][ T29] audit: type=1326 audit(1785998293.504:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd32d9de42 code=0x7ffc0000 [ 633.203683][ T29] audit: type=1326 audit(1785998293.544:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd32d9e0d9 code=0x7ffc0000 [ 633.334820][ T29] audit: type=1326 audit(1785998293.544:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd32d9de42 code=0x7ffc0000 [ 633.491050][ T29] audit: type=1326 audit(1785998293.544:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdd32d9ded7 code=0x7ffc0000 [ 633.620660][ T29] audit: type=1326 audit(1785998293.544:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.5.2494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdd32d5add1 code=0x7ffc0000 [ 633.697309][T14384] syzkaller0: entered promiscuous mode [ 633.714528][T14384] syzkaller0: entered allmulticast mode [ 633.960159][ T7469] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 634.152293][ T7469] usb 1-1: Using ep0 maxpacket: 16 [ 634.188287][ T7469] usb 1-1: unable to get BOS descriptor or descriptor too short [ 634.227138][ T7469] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.273154][ T7469] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.337037][ T7469] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 634.409623][ T7469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.459464][ T7469] usb 1-1: Product: syz [ 634.550190][ T7469] usb 1-1: Manufacturer: syz [ 634.595996][T14392] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2501'. [ 634.641395][ T7469] usb 1-1: SerialNumber: syz [ 634.899041][T14398] loop5: detected capacity change from 0 to 7 [ 634.922275][T14383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.948615][T14398] Dev loop5: unable to read RDB block 7 [ 634.977882][T14398] loop5: unable to read partition table [ 634.991812][T14383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.001838][T14398] loop5: partition table beyond EOD, truncated [ 635.042330][T14398] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 635.069091][ T7469] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 635.125559][ T7469] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 635.494118][ T7469] usb 1-1: USB disconnect, device number 114 [ 635.595194][ T6997] udevd[6997]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.650126][ T7471] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 635.875635][ T7471] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 635.887157][ T7471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.904222][ T7471] usb 5-1: config 0 descriptor?? [ 635.921872][ T7471] cp210x 5-1:0.0: cp210x converter detected [ 636.167536][ T7471] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 636.183354][ T7471] cp210x 5-1:0.0: querying part number failed [ 636.215520][ T7471] usb 5-1: cp210x converter now attached to ttyUSB0 [ 636.260237][ T7471] usb 5-1: USB disconnect, device number 30 [ 636.269994][ T7464] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 636.304815][ T7471] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 636.327414][ T7471] cp210x 5-1:0.0: device disconnected [ 636.435359][ T7464] usb 6-1: Using ep0 maxpacket: 32 [ 636.453732][ T7464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.477016][T14421] syzkaller0: entered promiscuous mode [ 636.484118][T14421] syzkaller0: entered allmulticast mode [ 636.491698][ T7464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.502493][T14421] TC_ACT_REPEAT abuse ? [ 636.524240][ T7464] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 636.559483][ T7464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.582479][ T7464] usb 6-1: config 0 descriptor?? [ 636.834598][ T7464] hid_parser_main: 32 callbacks suppressed [ 636.834625][ T7464] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 636.903711][ T7464] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 636.989902][ T7464] ft260 0003:0403:6030.0029: failed to retrieve chip version [ 637.021527][ T7464] ft260 0003:0403:6030.0029: probe with driver ft260 failed with error -71 [ 637.059955][ T7471] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 637.086845][ T7464] usb 6-1: USB disconnect, device number 31 [ 637.126364][T14442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2517'. [ 637.220782][ T7471] usb 3-1: Using ep0 maxpacket: 8 [ 637.236919][ T7471] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 637.254181][ T7471] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 637.287649][ T7471] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.296671][ T7471] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 637.313776][ T7471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.319550][ T5724] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 637.335093][ T7471] usb 3-1: config 0 descriptor?? [ 637.348543][T14436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.360846][T14436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.386081][T14436] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 637.413458][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.422567][ T36] bridge0: port 1(bridge_slave_0) entered listening state [ 637.445447][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.460612][ T36] bridge0: port 2(bridge_slave_1) entered listening state [ 637.477438][ T7459] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 637.516070][ T5724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 637.558976][ T5724] usb 1-1: not running at top speed; connect to a high speed hub [ 637.582130][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.609345][ T5724] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.638269][ T5724] usb 1-1: string descriptor 0 read error: -22 [ 637.653861][ T5724] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 637.679338][ T7459] usb 5-1: Using ep0 maxpacket: 16 [ 637.684865][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.702411][ T7459] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.717068][ T7459] usb 5-1: config 0 interface 0 has no altsetting 0 [ 637.732087][ T5724] usb 1-1: 0:1 : does not exist [ 637.738808][ T5724] usb 1-1: 0:2 : does not exist [ 637.749849][ T7459] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 637.763420][ T7459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.791768][ T7459] usb 5-1: config 0 descriptor?? [ 637.796954][ T7466] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 637.957611][ T7469] usb 1-1: USB disconnect, device number 115 [ 638.012165][ T7466] usb 6-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 638.035313][ T7466] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 638.055327][ T7466] usb 6-1: config 0 interface 0 has no altsetting 0 [ 638.066001][ T7466] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 638.078747][ T7466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.094231][ T7466] usb 6-1: config 0 descriptor?? [ 638.127757][T14450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.145578][T14450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.233123][T14454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.248447][T14454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.299939][ T7459] mcp2221 0003:04D8:00DD.002A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 638.414165][T14459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.426730][T14459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.530311][ T7466] usb 6-1: string descriptor 0 read error: -71 [ 638.565846][ T7466] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 638.603008][ T7466] usb 6-1: USB disconnect, device number 32 [ 638.776200][T14465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2524'. [ 638.793852][ T7459] usb 5-1: USB disconnect, device number 31 [ 638.904235][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 638.904257][ T29] audit: type=1326 audit(1785998299.724:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 638.969704][ T29] audit: type=1326 audit(1785998299.734:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfe459dd6b code=0x7ffc0000 [ 639.002775][ T29] audit: type=1326 audit(1785998299.734:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfe459dd6b code=0x7ffc0000 [ 639.030146][ T29] audit: type=1326 audit(1785998299.764:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 639.071697][ T29] audit: type=1326 audit(1785998299.764:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 639.102716][ T29] audit: type=1326 audit(1785998299.764:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 639.132879][ T29] audit: type=1326 audit(1785998299.764:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 639.170143][ T5722] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 639.213911][ T29] audit: type=1326 audit(1785998299.764:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 639.288936][ T29] audit: type=1326 audit(1785998299.764:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 639.334223][ T5722] usb 1-1: device descriptor read/64, error -71 [ 639.369987][ T29] audit: type=1326 audit(1785998299.764:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.0.2525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 639.412523][T14472] syzkaller0: entered promiscuous mode [ 639.430951][T14472] syzkaller0: entered allmulticast mode [ 639.446362][T12537] TC_ACT_REPEAT abuse ? [ 639.609372][ T5722] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 639.771985][ T5722] usb 1-1: device descriptor read/64, error -71 [ 639.881019][ T5722] usb usb1-port1: attempt power cycle [ 640.241613][ T5722] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 640.278501][ T7471] usbhid 3-1:0.0: can't add hid device: -71 [ 640.287499][ T7471] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 640.305564][ T5722] usb 1-1: device descriptor read/8, error -71 [ 640.345258][ T7471] usb 3-1: USB disconnect, device number 98 [ 640.599385][ T5722] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 640.638150][T14490] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2530'. [ 640.674871][ T5722] usb 1-1: device descriptor read/8, error -71 [ 640.759283][ T7471] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 640.821944][ T5722] usb usb1-port1: unable to enumerate USB device [ 640.839428][ T5724] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 640.984418][ T7471] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 641.013181][ T7471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.033507][ T5724] usb 6-1: No LPM exit latency info found, disabling LPM. [ 641.035092][ T7471] usb 3-1: Product: syz [ 641.066934][ T7471] usb 3-1: Manufacturer: syz [ 641.085142][ T5724] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 0 [ 641.123741][ T7471] usb 3-1: SerialNumber: syz [ 641.193288][ T5724] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 4 [ 641.252568][ T5724] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 641.303279][ T7471] usb 3-1: config 0 descriptor?? [ 641.660735][T14488] syzkaller1: entered promiscuous mode [ 641.681581][T14488] syzkaller1: entered allmulticast mode [ 641.775133][T14488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.880950][T14488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.331364][ T7471] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 642.356681][ T7471] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 642.449328][ T7469] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 642.520329][ T7471] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 642.576415][ T7471] usb 3-1: USB disconnect, device number 99 [ 642.662149][ T7469] usb 1-1: no configurations [ 642.691211][ T7469] usb 1-1: can't read configurations, error -22 [ 642.869415][ T7469] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 643.071680][ T7469] usb 1-1: no configurations [ 643.092713][ T7469] usb 1-1: can't read configurations, error -22 [ 643.145762][ T7469] usb usb1-port1: attempt power cycle [ 643.419478][ T7471] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 643.439861][T14502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.510266][ T7469] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 643.551794][ T7469] usb 1-1: no configurations [ 643.577155][ T7469] usb 1-1: can't read configurations, error -22 [ 643.611851][ T7471] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.679336][ T7471] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.717630][ T7471] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 643.738132][ T7471] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 643.774534][ T7471] usb 3-1: Product: syz [ 643.779428][ T7469] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 643.799334][ T7471] usb 3-1: Manufacturer: syz [ 643.811037][ T7469] usb 1-1: no configurations [ 643.819037][ T7469] usb 1-1: can't read configurations, error -22 [ 643.837724][ T7471] hub 3-1:4.0: USB hub found [ 643.856635][ T7469] usb usb1-port1: unable to enumerate USB device [ 644.115967][ T5724] usb 6-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40 [ 644.140925][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.177895][ T7471] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 644.194016][ T5724] usb 6-1: can't set config #1, error -71 [ 644.212041][ T5724] usb 6-1: USB disconnect, device number 33 [ 644.364253][T14513] x_tables: ip_tables: osf match: only valid for protocol 6 [ 644.380113][T14513] x_tables: ip_tables: osf match: only valid for protocol 6 [ 644.533671][T14521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2541'. [ 645.002198][ T5724] usb 3-1: reset full-speed USB device number 100 using dummy_hcd [ 645.017552][ T5724] usb 3-1: device reset changed ep0 maxpacket size! [ 645.055017][ T5724] usb 3-1: USB disconnect, device number 100 [ 645.379541][ T5724] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 645.453187][T14540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2546'. [ 645.572243][ T5724] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 645.605007][ T5724] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.620105][ T5724] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.639040][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.829449][ T7459] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 645.887694][ T5724] usb 3-1: GET_CAPABILITIES returned 0 [ 645.894882][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.897887][ T5724] usbtmc 3-1:16.0: can't read capabilities [ 645.965381][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.011111][ T7459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.043362][ T7459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.069731][ T5724] usb 3-1: USB disconnect, device number 101 [ 646.119765][ T7459] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 646.137590][ T7459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.186346][ T7459] usb 1-1: config 0 descriptor?? [ 646.632114][T14556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.648651][T14556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.889598][ T7459] aquacomputer_d5next 0003:0C70:F0B6.002B: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 647.407968][T14562] Invalid argument reading file caps for ./file0 [ 647.497917][ T7469] usb 1-1: USB disconnect, device number 124 [ 647.830685][T14573] usb usb8: usbfs: process 14573 (syz.5.2553) did not claim interface 0 before use [ 648.028966][ T29] kauditd_printk_skb: 939 callbacks suppressed [ 648.029134][ T29] audit: type=1326 audit(1785998308.844:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.152899][ T29] audit: type=1326 audit(1785998308.904:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.186693][T14575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 648.324689][ T29] audit: type=1326 audit(1785998308.974:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.440626][ T29] audit: type=1326 audit(1785998308.974:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.529387][ T7459] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 648.568364][T14584] tipc: Enabling of bearer rejected, failed to enable media [ 648.584894][ T29] audit: type=1326 audit(1785998309.004:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.657653][T14584] tipc: Enabling of bearer rejected, failed to enable media [ 648.682129][ T29] audit: type=1326 audit(1785998309.004:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.790571][ T29] audit: type=1326 audit(1785998309.004:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.862002][ T29] audit: type=1326 audit(1785998309.004:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.933782][ T29] audit: type=1326 audit(1785998309.004:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 648.990103][ T7469] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 649.029356][ T29] audit: type=1326 audit(1785998309.004:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14574 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfe459e0d9 code=0x7ffc0000 [ 649.140170][ T7469] usb 6-1: device descriptor read/64, error -71 [ 649.145018][ T7459] usb 1-1: unable to get BOS descriptor or descriptor too short [ 649.168189][ T7459] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 649.253611][ T7459] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 649.311066][ T7459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.335016][ T7459] usb 1-1: Product: syz [ 649.347594][ T7459] usb 1-1: Manufacturer: syz [ 649.370678][ T7459] usb 1-1: SerialNumber: syz [ 649.419612][ T7469] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 649.579595][ T7469] usb 6-1: device descriptor read/64, error -71 [ 649.656125][ T7459] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 649.703595][ T7469] usb usb6-port1: attempt power cycle [ 649.858295][ T7459] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 649.882805][ T7459] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 649.891621][T14600] macvtap1: entered allmulticast mode [ 649.904038][T14600] dummy0: entered allmulticast mode [ 649.931995][T14600] dummy0: left allmulticast mode [ 650.069949][ T7469] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 650.104222][ T7469] usb 6-1: device descriptor read/8, error -71 [ 650.263591][ T7459] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 650.369534][ T7469] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 650.401602][ T7459] usb 1-1: USB disconnect, device number 125 [ 650.420668][ T7469] usb 6-1: device descriptor read/8, error -71 [ 650.560177][ T7469] usb usb6-port1: unable to enumerate USB device [ 651.018139][T14624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.041655][T14624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.179764][ T7471] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 651.344084][ T7471] usb 1-1: New USB device found, idVendor=174f, idProduct=6a30, bcdDevice=26.3f [ 651.359264][ T7471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.368259][ T7471] usb 1-1: Product: syz [ 651.373626][ T7471] usb 1-1: Manufacturer: syz [ 651.380308][ T7471] usb 1-1: SerialNumber: syz [ 651.388347][ T7471] usb 1-1: config 0 descriptor?? [ 651.399357][ T7459] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 651.482088][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.498237][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.559612][ T7459] usb 5-1: Using ep0 maxpacket: 16 [ 651.569644][ T7459] usb 5-1: unable to get BOS descriptor or descriptor too short [ 651.587232][ T7459] usb 5-1: config 9 has an invalid interface number: 133 but max is 0 [ 651.596303][ T7459] usb 5-1: config 9 has no interface number 0 [ 651.609862][ T7459] usb 5-1: config 9 interface 133 has no altsetting 0 [ 651.632180][ T7459] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice= 9.59 [ 651.645218][ T7459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.655471][ T7459] usb 5-1: Product: ࠠ [ 651.662678][ T7459] usb 5-1: Manufacturer: ㏕ᒪ쩄漵籇됔浪࡯ﯹヾ眖恰寠䤸᧩栜蓴ᩴᫎffl瓓猪蚶㭪壽蕫鲭㰨芶㹳䃁䡍癷윴藺指๜沴ⶃ鿰ᢁ䬯濧閰塠핔脋躟먅殬뙻䄐熼칦쐲櫺礍㵬걸굺ꪃ蝞钪⢔覐뛝꠰梗ࠂ妗︧렒᯽餽ꄽ슅庫■㡃귴卆巤朵 [ 651.718548][ T7459] usb 5-1: SerialNumber: 훍扎뼥벹篇驲ᤐ烪⽳ቲྣ煪疁䲰쬼튿퟊䜫熓︰뷶덋䖢铦㇉ึ [ 652.032275][ T7459] option 5-1:9.133: GSM modem (1-port) converter detected [ 652.096674][ T7459] usb 5-1: USB disconnect, device number 32 [ 652.135095][ T7459] option 5-1:9.133: device disconnected [ 652.190819][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 652.449548][ T7461] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 652.620405][ T7461] usb 6-1: Using ep0 maxpacket: 16 [ 652.666058][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 652.683875][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 652.728064][ T7461] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.757095][ T7461] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.787856][ T7461] usb 6-1: config 0 interface 0 has no altsetting 0 [ 652.811779][ T7461] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 652.868251][ T7461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.907326][ T7461] usb 6-1: config 0 descriptor?? [ 653.111640][T14674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2579'. [ 653.220081][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.248506][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.502713][ T7461] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0935.002C/input/input47 [ 653.626331][ T7461] uclogic 0003:28BD:0935.002C: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:0935] on usb-dummy_hcd.5-1/input0 [ 653.700995][ T7471] usb 6-1: USB disconnect, device number 38 [ 653.721585][ T7464] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 653.778519][T14683] fido_id[14683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 653.889311][ T7464] usb 3-1: Using ep0 maxpacket: 32 [ 653.905501][ T7469] usb 1-1: USB disconnect, device number 126 [ 653.954958][ T7464] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 654.015573][ T7464] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.071779][ T7464] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 654.108530][ T7464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.149558][ T7464] usb 3-1: Product: syz [ 654.156413][ T7464] usb 3-1: Manufacturer: syz [ 654.162033][ T7464] usb 3-1: SerialNumber: syz [ 654.177174][ T7464] usb 3-1: config 0 descriptor?? [ 654.189820][ T7464] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 654.303867][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'. [ 654.429581][ T7461] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 654.590468][ T7461] usb 1-1: Using ep0 maxpacket: 32 [ 654.603706][ T7461] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 654.621350][ T7461] usb 1-1: config 0 has no interface number 0 [ 654.660955][ T7461] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 654.673912][ T7461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.693484][ T7461] usb 1-1: Product: syz [ 654.704266][ T7461] usb 1-1: Manufacturer: syz [ 654.714906][ T7461] usb 1-1: SerialNumber: syz [ 654.729943][ T7469] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 654.747066][ T7461] usb 1-1: config 0 descriptor?? [ 654.895832][ T7469] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 654.907074][ T7469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.916285][ T7469] usb 6-1: Product: syz [ 654.921774][ T7469] usb 6-1: Manufacturer: syz [ 654.926843][ T7469] usb 6-1: SerialNumber: syz [ 655.037027][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.050080][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.177081][T14711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2591'. [ 655.188464][ T7461] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 655.203506][ T7461] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 655.235530][T14689] loop4: detected capacity change from 0 to 2640 [ 655.269402][T14689] buffer_io_error: 8 callbacks suppressed [ 655.269458][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.320710][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.339642][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.359729][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.386324][ T7469] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 655.418226][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.462996][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.499641][ T7469] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 655.503282][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.525512][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.539063][T14689] ldm_validate_partition_table(): Disk read failed. [ 655.550524][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.562703][T14689] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.574632][T14689] Dev loop4: unable to read RDB block 0 [ 655.585393][T14689] loop4: unable to read partition table [ 655.606185][T14689] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 655.645503][ T4991] ldm_validate_partition_table(): Disk read failed. [ 655.669605][ T4991] Dev loop4: unable to read RDB block 0 [ 655.836136][ T4991] loop4: unable to read partition table [ 655.842708][ T7461] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 655.864889][ T7461] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 655.952388][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 656.094101][ T4991] ldm_validate_partition_table(): Disk read failed. [ 656.107445][ T4991] Dev loop4: unable to read RDB block 0 [ 656.125110][ T4991] loop4: unable to read partition table [ 656.281093][T14721] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 656.305299][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.322471][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.343817][ T4991] ldm_validate_partition_table(): Disk read failed. [ 656.362929][ T4991] Dev loop4: unable to read RDB block 0 [ 656.373782][ T4991] loop4: unable to read partition table [ 656.405638][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.420869][T14723] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.457398][T14724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2595'. [ 656.729658][ T7471] usb 3-1: USB disconnect, device number 102 [ 657.017415][T14729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.036925][T14730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.052122][T14729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.062804][T14730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.187896][ T7464] usb 1-1: USB disconnect, device number 127 [ 657.207066][ T7469] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 657.242840][ T7469] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 657.278545][ T7469] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 657.330529][ T7469] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 657.563230][T14716] netlink: 'syz.5.2589': attribute type 23 has an invalid length. [ 657.729322][ T7469] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 657.892517][ T7469] usb 5-1: unable to get BOS descriptor or descriptor too short [ 657.913613][ T7469] usb 5-1: not running at top speed; connect to a high speed hub [ 657.942234][ T7469] usb 5-1: config 16 has an invalid interface number: 36 but max is 0 [ 657.970662][ T7469] usb 5-1: config 16 has no interface number 0 [ 657.993538][ T7469] usb 5-1: config 16 interface 36 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 658.017587][ T7469] usb 5-1: config 16 interface 36 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 658.046736][ T7469] usb 5-1: config 16 interface 36 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.104145][ T7469] usb 5-1: config 16 interface 36 has no altsetting 0 [ 658.146760][ T7469] usb 5-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=4a.9d [ 658.168403][ T7469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.219844][ T7469] usb 5-1: Product: syz [ 658.238442][ T7469] usb 5-1: Manufacturer: syz [ 658.263849][ T7469] usb 5-1: SerialNumber: syz [ 658.291198][T14753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2603'. [ 658.327429][T14736] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 658.445796][T14752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.471002][T14752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.586159][T14756] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 32, id = 0 [ 658.630325][ T7469] hub 5-1:16.36: bad descriptor, ignoring hub [ 658.657361][ T7469] hub 5-1:16.36: probe with driver hub failed with error -5 [ 658.683416][ T7469] option 5-1:16.36: GSM modem (1-port) converter detected [ 658.730679][ T7461] usb 6-1: USB disconnect, device number 39 [ 658.771310][ T7469] usb 5-1: USB disconnect, device number 33 [ 658.828581][ T7469] option 5-1:16.36: device disconnected [ 659.644247][T14773] vlan0: left promiscuous mode [ 659.672428][T14773] hsr0: left promiscuous mode [ 659.908420][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 660.001093][ T7469] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 660.289982][T14787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2608'. [ 660.404272][ T7469] usb 1-1: Using ep0 maxpacket: 32 [ 660.450782][ T7469] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 660.496711][T14791] pim6reg1: entered promiscuous mode [ 660.522142][ T7469] usb 1-1: config 0 has no interface number 0 [ 660.545947][ T7469] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 660.563436][T14791] pim6reg1: entered allmulticast mode [ 660.628560][ T7469] usb 1-1: config 0 interface 89 has no altsetting 0 [ 660.654924][ T7469] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 660.693727][ T7469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.713002][ T7469] usb 1-1: Product: syz [ 660.748478][ T7469] usb 1-1: Manufacturer: syz [ 660.761170][ T7469] usb 1-1: SerialNumber: syz [ 660.778342][ T7469] usb 1-1: config 0 descriptor?? [ 660.802678][ T7469] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 660.824343][ T7469] em28xx 1-1:0.89: Video interface 89 found: [ 660.953336][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 660.953356][ T29] audit: type=1326 audit(1785998321.774:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14782 comm="syz.2.2614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d799e0d9 code=0x7fc00000 [ 661.457317][ T7469] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 661.889759][T14801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.905363][T14801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.209383][ T7464] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 662.379577][ T7464] usb 6-1: Using ep0 maxpacket: 16 [ 662.453317][ T7464] usb 6-1: config 31 has too many interfaces: 146, using maximum allowed: 32 [ 662.508646][ T7464] usb 6-1: config 31 has an invalid descriptor of length 123, skipping remainder of the config [ 662.556570][ T7464] usb 6-1: config 31 has 0 interfaces, different from the descriptor's value: 146 [ 662.592697][ T7464] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 662.612224][ T7464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.635516][ T7464] usb 6-1: Product: syz [ 662.689103][ T7464] usb 6-1: Manufacturer: syz [ 662.712135][ T7464] usb 6-1: SerialNumber: syz [ 662.769712][ T7461] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 662.923654][T14818] syzkaller0: entered promiscuous mode [ 662.929680][ T7461] usb 5-1: Using ep0 maxpacket: 8 [ 662.941577][ T7461] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 662.956886][T14818] syzkaller0: entered allmulticast mode [ 662.966294][T14803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.985402][ T7461] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 663.009993][T14803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.036507][ T7461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.096576][ T7461] usb 5-1: Product: syz [ 663.118866][ T7461] usb 5-1: Manufacturer: syz [ 663.141725][ T7461] usb 5-1: SerialNumber: syz [ 663.185128][ T7464] usb 6-1: USB disconnect, device number 40 [ 663.244348][ T7461] usb 5-1: config 0 descriptor?? [ 663.281134][ T7461] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 663.386022][ T7469] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 663.411760][ T7469] em28xx 1-1:0.89: board has no eeprom [ 663.499707][ T7469] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 663.559743][ T7469] em28xx 1-1:0.89: analog set to bulk mode. [ 663.608086][ T5722] em28xx 1-1:0.89: Registering V4L2 extension [ 663.870438][ T5722] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 663.917725][ T5722] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 663.986183][ T5722] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 664.037870][ T5722] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 664.056029][ T5722] em28xx 1-1:0.89: Config register raw data: 0xfffffffb [ 664.132519][ T5722] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 664.176801][ T5722] em28xx 1-1:0.89: No AC97 audio processor [ 664.285314][T14836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2630'. [ 664.296985][T14836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2630'. [ 664.325266][ T7461] gspca_zc3xx: reg_w_i err -71 [ 664.387056][ T7469] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 664.441284][T14837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.519999][ T5722] usb 1-1: Decoder not found [ 664.531830][ T5722] em28xx 1-1:0.89: failed to create media graph [ 664.583886][T14837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.611422][ T5722] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 664.622218][ T7469] usb 6-1: Using ep0 maxpacket: 16 [ 664.641298][ T7469] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 664.674612][ T7469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 664.719341][ T7469] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 664.744962][ T7469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.765096][T14836] xt_cgroup: invalid path, errno=-2 [ 664.811501][ T7469] usb 6-1: Product: syz [ 664.817001][ T7469] usb 6-1: Manufacturer: syz [ 664.842508][ T7469] usb 6-1: SerialNumber: syz [ 664.877232][ T7469] usb 6-1: config 0 descriptor?? [ 664.894871][ T7469] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 664.911359][ T7469] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 664.966210][T14838] ================================================================== [ 664.970231][ T7461] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 664.976391][T14838] BUG: KASAN: slab-use-after-free in v4l2_open+0x397/0x3a0 [ 664.976435][T14838] Read of size 4 at addr ffff88802ba18860 by task v4l_id/14838 [ 664.976456][T14838] [ 664.976473][T14838] CPU: 1 UID: 0 PID: 14838 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 664.976505][T14838] Tainted: [L]=SOFTLOCKUP [ 664.976538][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.976610][T14838] Call Trace: [ 664.976642][T14838] [ 664.976667][T14838] dump_stack_lvl+0xe8/0x150 [ 664.976788][T14838] print_address_description+0x55/0x1e0 [ 664.976872][T14838] ? v4l2_open+0x397/0x3a0 [ 664.976951][T14838] print_report+0x58/0x70 [ 664.977032][T14838] kasan_report+0x117/0x150 [ 664.977126][T14838] ? v4l2_open+0x397/0x3a0 [ 664.977217][T14838] v4l2_open+0x397/0x3a0 [ 664.977309][T14838] chrdev_open+0x4d9/0x600 [ 664.977386][T14838] ? __pfx_chrdev_open+0x10/0x10 [ 664.977453][T14838] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 664.977525][T14838] ? __pfx_chrdev_open+0x10/0x10 [ 664.977601][T14838] do_dentry_open+0x816/0x1380 [ 664.977693][T14838] vfs_open+0x3b/0x340 [ 664.977787][T14838] ? path_openat+0x2e2d/0x3830 [ 664.977853][T14838] path_openat+0x2e44/0x3830 [ 664.977920][T14838] ? kasan_save_track+0x3e/0x80 [ 664.978010][T14838] ? do_sys_openat2+0xcc/0x200 [ 664.978103][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.978203][T14838] do_file_open+0x23e/0x4a0 [ 664.978271][T14838] ? __pfx_do_file_open+0x10/0x10 [ 664.978355][T14838] ? _raw_spin_unlock+0x28/0x50 [ 664.978424][T14838] ? alloc_fd+0x651/0x6c0 [ 664.978522][T14838] do_sys_openat2+0x115/0x200 [ 664.978606][T14838] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.978690][T14838] ? exc_page_fault+0x6a/0xc0 [ 664.978763][T14838] ? do_user_addr_fault+0xc4a/0x1340 [ 664.978855][T14838] __x64_sys_openat+0x138/0x170 [ 664.978944][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.979004][T14838] do_syscall_64+0x174/0x580 [ 664.979083][T14838] ? trace_irq_disable+0x3b/0x140 [ 664.979168][T14838] ? clear_bhb_loop+0x40/0x90 [ 664.979328][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.979396][T14838] RIP: 0033:0x7fc4812a7407 [ 664.979459][T14838] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 664.979505][T14838] RSP: 002b:00007ffcfca5b070 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 664.979572][T14838] RAX: ffffffffffffffda RBX: 00007fc4819fe880 RCX: 00007fc4812a7407 [ 664.979617][T14838] RDX: 0000000000000000 RSI: 00007ffcfca5cf1c RDI: ffffffffffffff9c [ 664.979653][T14838] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 664.979695][T14838] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 664.979740][T14838] R13: 00007ffcfca5b2c0 R14: 00007fc481b65000 R15: 000055e309e3d4d8 [ 664.979806][T14838] [ 664.979828][T14838] [ 665.010720][ T7461] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 665.021673][T14838] Allocated by task 5722: [ 665.021696][T14838] kasan_save_track+0x3e/0x80 [ 665.021730][T14838] __kasan_kmalloc+0x93/0xb0 [ 665.021757][T14838] __kmalloc_cache_noprof+0x32d/0x660 [ 665.021783][T14838] em28xx_v4l2_init+0x103/0x3300 [ 665.021813][T14838] em28xx_init_extension+0x120/0x1d0 [ 665.021839][T14838] process_scheduled_works+0xa8e/0x14e0 [ 665.021861][T14838] worker_thread+0xa47/0xfb0 [ 665.021882][T14838] kthread+0x388/0x470 [ 665.021909][T14838] ret_from_fork+0x514/0xb70 [ 665.021937][T14838] ret_from_fork_asm+0x1a/0x30 [ 665.021956][T14838] [ 665.021963][T14838] Freed by task 5722: [ 665.021974][T14838] kasan_save_track+0x3e/0x80 [ 665.022000][T14838] kasan_save_free_info+0x40/0x50 [ 665.022022][T14838] __kasan_slab_free+0x5c/0x80 [ 665.457209][T14838] kfree+0x1c5/0x640 [ 665.461859][T14838] em28xx_v4l2_init+0x1919/0x3300 [ 665.469477][T14838] em28xx_init_extension+0x120/0x1d0 [ 665.477664][T14838] process_scheduled_works+0xa8e/0x14e0 [ 665.483260][T14838] worker_thread+0xa47/0xfb0 [ 665.487906][T14838] kthread+0x388/0x470 [ 665.492023][T14838] ret_from_fork+0x514/0xb70 [ 665.496662][T14838] ret_from_fork_asm+0x1a/0x30 [ 665.503921][T14838] [ 665.507076][T14838] The buggy address belongs to the object at ffff88802ba18000 [ 665.507076][T14838] which belongs to the cache kmalloc-8k of size 8192 [ 665.524133][T14838] The buggy address is located 2144 bytes inside of [ 665.524133][T14838] freed 8192-byte region [ffff88802ba18000, ffff88802ba1a000) [ 665.539982][T14838] [ 665.542699][T14838] The buggy address belongs to the physical page: [ 665.549515][T14838] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ba18 [ 665.559904][T14838] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 665.568971][T14838] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 665.576566][T14838] page_type: f5(slab) [ 665.580940][T14838] raw: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 665.590175][T14838] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 665.599302][T14838] head: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 665.612865][T14838] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 665.635990][T14838] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 665.644792][T14838] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 665.655191][T14838] page dumped because: kasan: bad access detected [ 665.665126][T14838] page_owner tracks the page as allocated [ 665.672983][T14838] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14469, tgid 14467 (syz.0.2525), ts 639640181273, free_ts 583318935894 [ 665.701484][T14838] post_alloc_hook+0x1f9/0x250 [ 665.708632][T14838] get_page_from_freelist+0x21fa/0x2270 [ 665.716530][T14838] __alloc_frozen_pages_noprof+0x18d/0x380 [ 665.735055][T14838] allocate_slab+0x79/0x5e0 [ 665.744230][T14838] refill_objects+0x2d5/0x350 [ 665.750526][T14838] __pcs_replace_empty_main+0x2bf/0x6b0 [ 665.758884][T14838] __kmalloc_cache_noprof+0x3a7/0x660 [ 665.768072][T14838] audit_log_d_path+0xb8/0x1a0 [ 665.775519][T14838] audit_log_d_path_exe+0x42/0x70 [ 665.791515][T14838] audit_log_task+0x2c3/0x3d0 [ 665.796757][T14838] audit_seccomp+0x85/0x190 [ 665.803464][T14838] __seccomp_filter+0xd14/0x1e00 [ 665.808505][T14838] do_syscall_64+0x10e/0x580 [ 665.815563][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.823526][T14838] page last free pid 13603 tgid 13596 stack trace: [ 665.832364][T14838] __free_frozen_pages+0xc1e/0xd10 [ 665.838623][T14838] __slab_free+0x274/0x2c0 [ 665.843188][T14838] qlist_free_all+0x99/0x100 [ 665.848777][T14838] kasan_quarantine_reduce+0x148/0x160 [ 665.855765][T14838] __kasan_slab_alloc+0x22/0x80 [ 665.864489][T14838] __kmalloc_cache_noprof+0x2ab/0x660 [ 665.870007][T14838] do_check_common+0x1bf/0x5750 [ 665.875250][T14838] do_check_main+0x63/0x1f0 [ 665.880861][T14838] bpf_check+0x4a4f/0x5480 [ 665.889435][T14838] bpf_prog_load+0x1577/0x1c00 [ 665.894508][T14838] __sys_bpf+0xd0d/0xd90 [ 665.898804][T14838] __x64_sys_bpf+0xba/0xd0 [ 665.903367][T14838] do_syscall_64+0x174/0x580 [ 665.910137][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.916323][T14838] [ 665.919565][T14838] Memory state around the buggy address: [ 665.925319][T14838] ffff88802ba18700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.936071][T14838] ffff88802ba18780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.944301][T14838] >ffff88802ba18800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.967199][T14838] ^ [ 665.982947][T14838] ffff88802ba18880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 666.001848][T14838] ffff88802ba18900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 666.010985][T14838] ================================================================== [ 666.025373][ T5722] em28xx 1-1:0.89: Registering snapshot button... [ 666.036067][ T5722] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input48 [ 666.057774][ T5722] em28xx 1-1:0.89: Remote control support is not available for this card. [ 666.072108][T14838] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 666.085796][T14838] CPU: 1 UID: 0 PID: 14838 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 666.106202][T14838] Tainted: [L]=SOFTLOCKUP [ 666.110773][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.126431][T14838] Call Trace: [ 666.130317][T14838] [ 666.133731][T14838] vpanic+0x56c/0xa60 [ 666.143352][T14838] ? __pfx_vpanic+0x10/0x10 [ 666.152093][T14838] panic+0xc5/0xd0 [ 666.156487][T14838] ? __pfx_panic+0x10/0x10 [ 666.169442][T14838] ? preempt_schedule_thunk+0x16/0x40 [ 666.175707][T14838] ? preempt_schedule_thunk+0x16/0x40 [ 666.185604][T14838] ? v4l2_open+0x397/0x3a0 [ 666.191996][T14838] check_panic_on_warn+0x89/0xb0 [ 666.209239][T14838] ? v4l2_open+0x397/0x3a0 [ 666.215666][T14838] end_report+0x73/0x170 [ 666.230866][T14838] ? v4l2_open+0x397/0x3a0 [ 666.238579][T14838] kasan_report+0x128/0x150 [ 666.243930][T14838] ? v4l2_open+0x397/0x3a0 [ 666.248659][T14838] v4l2_open+0x397/0x3a0 [ 666.254398][T14838] chrdev_open+0x4d9/0x600 [ 666.258980][T14838] ? __pfx_chrdev_open+0x10/0x10 [ 666.269265][T14838] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 666.290577][T14838] ? __pfx_chrdev_open+0x10/0x10 [ 666.303551][T14838] do_dentry_open+0x816/0x1380 [ 666.309472][T14838] vfs_open+0x3b/0x340 [ 666.316164][T14838] ? path_openat+0x2e2d/0x3830 [ 666.326114][T14838] path_openat+0x2e44/0x3830 [ 666.339336][T14838] ? kasan_save_track+0x3e/0x80 [ 666.350801][T14838] ? do_sys_openat2+0xcc/0x200 [ 666.356497][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.366038][T14838] do_file_open+0x23e/0x4a0 [ 666.372638][T14838] ? __pfx_do_file_open+0x10/0x10 [ 666.379858][T14838] ? _raw_spin_unlock+0x28/0x50 [ 666.386005][T14838] ? alloc_fd+0x651/0x6c0 [ 666.390474][T14838] do_sys_openat2+0x115/0x200 [ 666.396299][T14838] ? __pfx_do_sys_openat2+0x10/0x10 [ 666.404699][T14838] ? exc_page_fault+0x6a/0xc0 [ 666.410042][T14838] ? do_user_addr_fault+0xc4a/0x1340 [ 666.415467][T14838] __x64_sys_openat+0x138/0x170 [ 666.420387][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.426488][T14838] do_syscall_64+0x174/0x580 [ 666.431127][T14838] ? trace_irq_disable+0x3b/0x140 [ 666.436379][T14838] ? clear_bhb_loop+0x40/0x90 [ 666.442236][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.452912][T14838] RIP: 0033:0x7fc4812a7407 [ 666.463937][T14838] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 666.486303][T14838] RSP: 002b:00007ffcfca5b070 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 666.498275][T14838] RAX: ffffffffffffffda RBX: 00007fc4819fe880 RCX: 00007fc4812a7407 [ 666.508122][T14838] RDX: 0000000000000000 RSI: 00007ffcfca5cf1c RDI: ffffffffffffff9c [ 666.520253][T14838] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 666.535374][T14838] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 666.547662][T14838] R13: 00007ffcfca5b2c0 R14: 00007fc481b65000 R15: 000055e309e3d4d8 [ 666.556342][T14838] [ 666.561956][T14838] Kernel Offset: disabled [ 666.567643][T14838] Rebooting in 86400 seconds..