last executing test programs: 2m32.308100027s ago: executing program 0 (id=4779): syz_emit_ethernet(0x8e, &(0x7f00000069c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a7abd6a00582f01fc000000000000000000000000000005ff0200000000000000000000000000015a0a"], 0x0) 2m32.12731427s ago: executing program 0 (id=4782): socket(0x15, 0x5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000380)='k', 0x1, 0xc) (async) pwrite64(r2, &(0x7f0000000380)='k', 0x1, 0xc) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004641004000640000ff069078ac1414bbac84a707ab39f946dee66ed5752a1414bb940400000000000000000000000000000000000400004e2100004e21000000"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004641004000640000ff069078ac1414bbac84a707ab39f946dee66ed5752a1414bb940400000000000000000000000000000000000400004e2100004e21000000"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000900)=ANY=[@ANYBLOB="12015002000000102505a8a440000102030109021b00010107a00909040007020701020009050102200002050d52643b9ebbc954ee97b89857f96ddd49b3155268581ce2084f6a32dd9ab372039c6bd6a9194c3beaffd00d14e08b13305feb32c6c306cf3804e90282f072274b593ed003823f8cf2715c2ef0f0657e812f3f39ddc1f63dc22dde7f61f8b89db8f4a78526095422633b050ce080f7509d2723fba679209cd09d1b3dd466c52981f9074b0f089f72725174089c7cd1a92d134d54af4ed6627f8bde804b6c5c3116c927b52ed06c4c2ea6855e83d2a15f5de6898fc81f88012c760875ca4a00"/249], 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r5, r6, 0x0, 0x1000000201002) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xf73f) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000240)=""/78, 0x0}) 2m30.533108272s ago: executing program 0 (id=4791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000002000050001000600000005000500000000000500040000000000140007800800114000000000050015000c8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) 2m30.315607884s ago: executing program 0 (id=4792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x20000000) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x8, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0x4, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0xd, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x8, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8cd, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000000)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) set_mempolicy(0x5, &(0x7f0000000d00)=0x4000000ff9, 0xf) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000d40)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000002471c0d0e0e1486a33aa98ff7d929f0000000008000500000a2c0000000c0a010100000000000000008a0000060900000073797a31000000000900012f166c77b9827f0073797a3100000000140000001100012091c1b900000000000100000ac0af268c9f3292829b"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.cpu/test\x00', 0x777) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f00000011c0)='10000', 0x5) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x1b3) (async) r8 = openat$vcs(0xffffffffffffff9c, 0x0, 0x880, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000001240)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000010000093619fdbf7003d4d90559dc7fa8a74d1742118aab32cee6ad64736f8ba5a67a52184f3ca2908a1ab5e87ae0397b95477518b03083123d07c6c763d4b9012ee965c592dd43d0f852e70e525c1c90d842d0a1dc27a335f7ea9448a38cac58337dcbb5cee5169a581252672c9e36300e68552931d9a10c24dc86077bceec5f0598812bfb05bc95477c6326cc2c30b01cf40a0a795e52bf10a8d68935fe4ca5a913206b07ad382ccc519c0ecfb20a3c38946e43a30c54f81e0fd3b87877bd081b62526eaf4941011cc09b8d05ba2a930a5ffc5b2f363bebc6f2c359bccf9c5453b34313f68a69ce774268f813aaff1b145d0c97ff4f6f45764a45362ddb8bdde39bf3f8858e86881bf4381f5b73e3314c0f66693ca95ebf1c4427385dd6758cb84716c7c3186175275dd1c75dd810b3c2383ca2fd19e100957bb7729623cfd1c227ea56eec9504f05606ae1ab681a3ea723c56729c0fa555fb21724c1efab8db9562bcf68f2208aecb4d3dbe1e16dbaeca720e73245ef0a12895bb288a0b1b50f4d6c626fe312123fa75a4fe30cae8c2b3a8fe20f2108f3486c219fb60180725e0c1c240d635ba2f9c6dab7b55a48b4f620106e15dad9bdf011379e10619c4d29cb5cc0d77b336f6b50f13fdf16b7301cd0c4380db3bb20fba195159ae9e57c19e7b1a4b84b30b25aaafede5c1d998f8d8bdcf256c811206466bfeb86d13bec8869d1c4888c51b940615e21194012a7eae19a088f28b9301813dd6218fbeb5a93af00cd20a83186bb93d2edd02a5f259c3ae9db3a1f05baae0fa417fae0ad5132468166589d4f281dee2299dbac9e4f2b470562e0afef6a1e00781ef0340befac3059ef64e9310e2a38b770f1418852cac0983d4a0424ff618a19473b6d8714253ebf7023d4e67924d871d6a2c22c570c74561c92e2f54f2a066ebe249c0ddd6590f022bf52f201562f6a73fbd2a268c52eade84bb0a9539d9e0f7e4451b27c32c1e5df533c6521c04278543c5691aaa57ee49eaa8887683be1587d0ebb75bcc89dfcbf3dba48f29d5ec86131db9a027023f22b030afa416b313434dca8c332a2adf6e4af8ef4dd81f0657f9d811d7470f6ad84d0dd846fc92429d698c6583e0a3d404951c039c5f0b3a0d32c438ef5aa8ffa2ff35c9408798efd9fbd6c8eb2d8ef4ee06593dd8cfd0707b7c2fa0bc1be3ede80a5b7e2c56253244065578a71eb2f4f9af177280b5e562fd382e37557ff02999688c3a84d424161155776ce40a9e1986b55bb894c5d3351772f4c21494c61e1bc8a14d57be4dc4b180a6293ee8ef6cb44d5e3320aaf94e81a163edaa4f13af819e3b9a851b37d543c63a7505bbee0fe06ea7c3b86087179e15fb20c9f1353b91825423687bb2c050104fe1ba0e801e15471bc9ac70f86314b79ad4790e758800be046bd916ebeee7e72c25df80e9c480f9e5ebdf41835e8e99f155db962b31c1cbf894ce4eeb99e85e129ce373fddc78500143cefb0ba6408fd4006750ede654dfd0ce1256785c93bcd01cfa8dd6c34b26b340eeea3786d49bd46fc0c3eb5e1a5b876c441e3bce28e990ed6942b9003571cf7713336c0743d9087ff65538537cec3aaa7301f3bb838df6e3e08f6ffdfba3eca4a53d1253f414fa69c6a7b83ccd27a6b66275bf15b4c67dcad538fcdc83a49c93cf36a077626c498b1cf258469abe4c55d400b27a3e85e222e76d55b1a5cf314b7c28a7aee557debfa2b2c572e381b0f7b9d1021c8a55ee6c631ddd2c3dced0bbb6b503cf2b7c3214528154e2e7437670bc4cd7e4455d7778abd21e77b4f6ed24803c0c932ea41152b2316ac8493b037a24b9217b43d3b4191808b48927f4924bb1d37670dcaec72d463b6246c620d877c78d1193762c4630cdf030b8da308460f7e843ff6fb1757043fdcdf8737bd65856a1fd7bd39e270899eba359a8134ad444632592c801fa673578ad914e43491673a6750971d03f8b60992a3ce899efd7097f3b00ed48c6e53e898f12fd316c2c2c3e2ceb4ecadde596559ca74226657e8632e63a92e3663ae5b926e5e7df22c9e9f468e57db8e4f1aacee652f5b230cd0bb962b0b26cbc38a1d897ee1a3209b520a13fb9035cc4c3c941cc4b283f3945bc8d06198e7f170300293cf8f5de1c277a047ab450d1a670fd41ee082f4676961ab59b5886a94b22c7be829f15ef907240b7114f59681a160ea0414b36f1ffbcdbabd0c0913ef47d0a4d43460b7b18fac66394c6802c8f823bc759778de2ea84e7c0f0254b1100c03f42793177df9c5d76e3d62ae69cd654f12cc24df25967b699da008b14c5f3039fc51d6425a1a819232ffd0ef0da9ddedb325425e14f8618127f4cb59846d0a6db4d807f1cb967022e82dbcfbcbd64c073144cda39b0725b1663c40086233a9ea982b3b702c993a99dc1000f2422d1d07c9eb95b56b75735fc55fcabbf8538da47e222633e2f5ca4cefe74e63da9509cc711d6929206d6aff332f433cefdc68b6b817d9973cef59bbb7ba3bbe00c49ed3cfd06bf9c9271eb5e1b7bdc21995dc363558788c67b9b4a96cd30d9dd69cc32901d70286f473b0d9be865f7a63827bdc9d41325cde6e8b98edec75b167faa579be77a8115db37ceb0ca33bf43b340e1038fa941bb0352a6d1bfa43683c389ab935db92d2764041c99837604cff8ee88865cf40c88f5d48c6fbb55435fc8de0c0c544e4459b8ec59ed9aa0d9bcb807e4193e781a46b9c74ea62313c2e1df769d970c065ab0a01a5fea71814b81322ea8be400dc0560f08c8fc14de989fae2cd4894ddb5cca4c9ed70dc354c8101e8a07482a30089fa0cdcadb715f6e7cfe109874721f0bfc2e0766230aff622e038e8e"], &(0x7f0000001a80)=0x1024) write(r7, &(0x7f0000001ac0)='1', 0x1) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, 0x0) (async) openat(r8, &(0x7f0000001b40)='./cgroup.cpu/test/cgroup.procs\x00', 0x480000, 0x181) 2m30.168221005s ago: executing program 0 (id=4793): set_mempolicy(0x3, &(0x7f0000000a40)=0xef, 0xd) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x300000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 2m29.360195257s ago: executing program 0 (id=4796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000001c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x3, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x802d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "b68ed34f131c03e57e518e4d"}}}}, 0xfdef) unshare(0x20040400) unshare(0x10040400) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r2, 0x20000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0xf80) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) 2m28.799030661s ago: executing program 32 (id=4796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000001c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x3, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x802d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "b68ed34f131c03e57e518e4d"}}}}, 0xfdef) unshare(0x20040400) unshare(0x10040400) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r2, 0x20000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0xf80) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) 7.151637265s ago: executing program 4 (id=5481): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0xfffffffb, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x3}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r2, &(0x7f0000001380)={0x2020}, 0x2020) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000033c0), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000003400)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x11cc, 0x42, 0xa09, 0x2, 0x0, {0x4, 0x1}, [@nested={0x4, 0x102}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=r1}, @nested={0xc, 0x8002, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @uid}]}, @nested={0x119f, 0xcb, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0xf6}, @generic="d0eb1c16f0607352d9628070370089", @generic="8c2c497642be41684d1fb75209aadc1a31f3a628e117a46100c7a35dcc0c8776d299df8f29d5b72e8b6bc04890ccbc0253c3cdd5a5da3854aaf46aaac52d8718633e6035663bf87e8eab2c5c61da7f21b8261bec5c4c33d87ccea913df42fed3f079697f8c32e9868e8a8b47e2317499488c9a291b28069987311893da4dc044ff516ca2595a4d4e13829a3be0499b81fe6bcde0d5c4cd0da1ee2edd162ca67e3e98a01c4597ebf6e31c76cf967f0ec91ef5558b4fb1de8f8cc8bd1ea48c7f7e90cbcf13cbf9f131", @generic="c88c55e42b463728e0ea00f78e29e32ec354adced2cfcb6a9cac2d97ebbd6a3de41ba2487ed3f3b5de91457d165baec4e8bd0307142aa4d8fa6a497f3e73094f40daf6ad676c17f1ef3c3b6ee9bc07e6a9c32ff235ddf50cf97651e2e8d1cf65a3e8e2e52f1ee6d590d26ea30e69f73c9c5c395ce93fff86ff9ab05b620e6bf3d21044c8d18247d98c4fdac80c8978def36356a1b17e20a8bb4c88a5c8529499d3da781f9b2760d06795ed5cd49e0674da98ccd35271a027f6304f06c3f0b5d7fdf5d43e1a0dd247aa8ed67655299ad7debd94843d6cd99ea5b3665b76a2bc56435736a82aa302d2211f2ed8e2bbe4019f7b33b47a8aa0a196472f23d9beb81fca7ceb830a84827e0836873660c40d642b54e77f2b60e8608f96f3875fa6696073929e9e26b0c35f7ecc618bd740f92167592f3a0cbb27414822265d188d9207bb38e79b7a113b7e38f1f4fc7a1d5533b9ad108485c3ed0b946d4a965a7d181a62a8e7214a8f7ee57c7ec628d27083eba3e49c7c155dd09927f5003aef817f00a98183d310b24f8168c13b9d6b32f98809c371b81babe4c749c45064a19d47050a3dda995ff2e76dc8739e9250a46cc68c7a035937408860970af3ba695b14d90dba27f5a90a9f2b93b678dfd380f3099acacb791852627c3c15399ca4dd41fe163ef2fac035eb684ad110c836f6c3757c5e4392f55d7b7ea1ca330d1be18ed57b09fabfe763112f2b218e12554d5801ac64a506ac111d0ab021ca628320090cb597f741da78affce32a6400294dd446779f381cddbf51e0a516b8586ef3b7c9b7e667f9590211b291f900b6e9e14bb1ac48b8662c46e04e4a31e2257e11e11dc00e913ccbbceccdf69464d9c03dacdc6e0f76baf116f91a92a916b1e53dad6707452c1b4f0813ae2b6d7216959e4667bdac8998feb58b49ebb141791174823a62ff70d825329dd30484323920a983f1c8392f107655ffe1e4195587641f0a0faf6f5f32781e16193305ae02236098b13547171034a8909ec54312dbed3f73c51adf939cfb602beecc17dd45251dbb35616cdfa379e1dda6b4d377d81aca8f9750f47edfb9552de2148e2708ac2255696d47dc4d30878b075f7b2852020b2455f780a3bf147e59c89887981f8b1ef7e7c9491c34aeb41754af4985daa3e6a4189ead4862bfdf9172ffd3ef9b1352f55744ea9ae184faa3a7f9c11cda75a201152d97cbc3eaafc5e985d26842ea8b750c72a88ebd9db31d7b64e91cc37f299e1f6e0cae9d6ab47578e7f434edf2df5e14c0367f39d7764a5bd052ca8aa428a502a0a54804aa3934c33be0adbc9766a83be77383f59c123e31404e1a8db739c4e699b05a7a9ff43a7c60aa4228f7e70badf34cec749049b73d0e34409e84a3604233b91a27c3842af96000e17d0de7c87c888b98ae48e02874b31d7b7fe36d22c6723c053e96604ea6195366c77d86911c11534eb52042b6c5ed07499064c0fc6323943d8557d0b31ebed75afbd2f514be20c3fabc1276fb95ddd1233dfdcd1c0e25bc43dc6a991d6225c012bbd1675b2077e2403dc03b5e333c33e00a7da22870603eaa82459529cfc888d37228cea4ad7ad39e77d407b9750a4f35eb62f3982aa469ea68354caf00a5c8ea4611547015bfa7298b5cbc941a8ea04ca3e0aaa815fb2730d93be829dc55d109b36cefd9514a580b754a8a887ef51d052ccd7884694a79b04fb188e034c6a527dacb631632f60f6a4b90990fcd25765c2866a44e12f220683b7da4f8e3aa814bd53cca0a1eefbd5218dc4ece16aaa27af2f290212a7bf963bde1e5b42cf9e6569c29665eeb00a24c7b94964233bf6fdacae78796408c7186c7d3365beacb9c096cf0fc7231aa3aa4712ee86f7961d1b2473b46bb2e9eb360f61c3e64c8acbb17495ab9037e7a055fbdbd473fd1359d982c8660feab15f5c2f993ee1e72c2643b8c2dd20b95b83c8cdb09d09d884af1dbd67d4c249c2d1d93b2f62dd051fca26ec1095adb6274c19e981d4da05f4a2ba38e2cb56c0ec30709e86bee2e94ee7e3c5ff6d601ec009509b4d4df90239d72ac7e566d0507e8161cf5240f730d515e60f0b84385f611d8364d02ce04451ee269a7046a83843fa5acd4000611f7c15a634f07c4b90f4972593fb1c700c935750ceffde1ccaac337c1fc51111209f6585f12589bcb099effeeffd01f16f57b14730ed6ed4df79b5a1ceb70cf12a2de0298d1b1f2358a8d78e617118b746a1e0b3a8d0f503ea5ebc56168f659e1d079424ec02e03c244b93662a8d644b218e5283bfab67d7f76ba8044f61d0ced59259b6515b3177c10fe64abe23c49b30b7a0bf4a04d29362e2af5c2e3abbcee5b60a4ecaecc920b445f27d9a528f2c3ae2220e06c8f2668001eb79d08313aafc61f5ce774f587d6e4f10345c924c9216bc8ce88b9021e46612baa184e49fdae59ab71e4d44cfa1a80da868ef0fdde857e5c8649c2e3506d2960fb416c99b2cfaa0d08287afc7480422b683009919521a0980dfd44f9afdab437794c9528daa3559a3e2978dfd6331703cfad0c87da8f0827fc842d8adc0415824e4ea088b153dc9aa3ee3f71ec20440705a6ad85809c37183a2afe76000527abf5b363bb096e1feb6ae076581a6f2d633edd3eb6c46f8c72f43441504f2e3e3d1df3438d8b71acfe3cc565611568801806fbd88c5f40adc9ff664c9d4a580882852c7e1898347ea88478e49cbf5be169cf67f1cc1b35502c13ec28f488c0aaf8bf1ef6e38cba706a3a693a2592a4e3067e745b50710be563b8896ed4f433ecd9b3fdd8b7423ce4cf045bb58c0eb3ff9eb786211ee686f94a874862217096489e6d39841ece2f8220cb48531dbeb2e1eafe935eba3a111ad5b19755306983434a35519bf7bf2a0f1ed46df41afb9bda4a402e2075b9fe41c847bd7fe6e5dd1c2d1fc5d21bfbe7e16687ec3d700fd315eeb99c516e8cf671bf034bf3a9f5715fe9b4daa7b497775e927b8931c2300f4f9a0435652abbd2a494f859de5825c53365243b2f4fc9ce66e5d2078ddc1c58cc3e2b1cc462a380edc0724a9b53ae0c03da35f26ca79e021eb061d1173fd2d5e580689c3d0a8d025389e2118835da6546a6cb375d4aaeebaf927bd41b2bb7cc7ae05a67f43b96a5a098a53420b7a5095e634a7492683ecb3180c8cd3d8551053250849639226b4eb6efc3a4a8dec23ddef4619b32de0d42e79e373615f42db4f67078136176e17c52a20037d77a86bfd1998806c59869013176bd258cdc074d74478fff7565192bf3dea78e7012615dc685628f781e2412a9b3ad1b097a0065b8a3bb10c3b0a0794468b04ad08ede3933112f2636033e36047ae87e476729379dc819be6b3dd637106c90bf83e09de546c8e69a5e40ce106de3bd7039b58b3cc9021230c209dfd1f5626aff916ae032db1b8ccca575b6801b90afb1bc8773f2140881e278ec44d61a58da60481745fa80db34cb574678aceebd6a596aa2a507c8858409ee22ba3b5ea4c7bc256b5af50a97d39ef47fad43a3dc5d0b9535202522655f2201f2a9ec9430e7156b88de5a87b77d03afd257eaf63a67a8416839a4a6ad5c53674d135d6ffb8a5f2a9eb5d7adb58e6ef7ee3152e78c0c3b5d6a1e69c54f0ee45737a44e64e9002bfa810ff326284468b7b8a1fdfaf73a5d1a7ec660fc7e0b84ae5ea51d5c31fc0f3c7911480426dc3f2f91e0239a0fb004688f40bf2431a58ee07015580cb5123daeb0eb6d81d219b5b52b67e656e4da84da7e7c772f86f70610173e10d8b4a03d561e93a769e8c7e54cbdf1c0387d4ea76fa13df62095b7de3b316b28401edba25bb1f8d3dcc9e329970f64a26996e20c2378279494851099f612181d40e61648b28f68d86dedc0b459b7f1202030ab549842c3273336b4980198009a031527f95e444223005758cccaa0f4c79cf602fe553d5dc4dbef53ba0d3cd4aa73d94cefde1bce804a71e4ba9e1638c3f0ead0a58be16a2fb7081d82aa8e93d1eb8dc12cf302737dcd0fc3a14d9503d5cf2db73eb14c864244abbe7e8a220657edbe9ce33cddbba4545d193e62bba18dbb936711046a2e07b87c393db6110e32c59b47877eee4e1259ac386a274a7146cfcadb9f1ab6fd5fb410d18f1acf565bc4fe724a973bdc43fd92166f25342ae8c386d0a9b757844b4b24f98b95ed373529e8c71f354ddb700750bbeee1796870a3299d220a85e9959cf5874e666d47740ef95666edc05d6d5d7a206fd9c5238500fe5750fd3dcb31da801d83be3989e6828a2f3dbf79749f43c002590db7191b2ab2c7e480d237572c823ad0b80e770f2077574a169a38de9f0fbbab0086e8c267de32b69283239606cf7bd2dd58519667b7a6f610e5d775c68ba6120257d136ae49985661132795e22d32c593f6819806b74322c690a60ef9c1af6d50e10cfd925567dd4b76816151b1b0808b7519108946f392afb941dbbd46eb312be763f5bfd1d6a4f19c581461689090a2cb99d62fd0f6d6202aa92487f9798847bccd5152ff5c8dc85d9bd8c10916c4ceca518719c0950d23c89f89712764281c7510d145d9ec2fae760dffa2acde9c5ef6d17525b5664cd3f5f26a68b6ab3d79ce539e59e87e30e56a388df45481308618d5fc3aa03bad6f90e5351aa2656a41affac164d1319edffc6f9434fa9e3d8b79e05a3a0655239679a613200fabd1e01db0e0a503847ac33d2ecc63afa8b2bd18a428a97d26e445fa5c9083c783d489ce7972c6130c3f38d40d0aab7b23a7ab02f1d54cd642f79ba43727ed3bf9fc6588bd1e8e08b69960245482fd4d7bbda9258b80d6de4546f919f7ccd3356b4e97c43809fb59eb7e741ae8f9e3dac995c0beb94e8280fecaa6641925242509de25a6a16904e60ea822a76ceed0467803ab4e14bb0fefe2986a8402f035da4778806f570d1b81d1997752d05805ab641b392aa8d56c8c606a1efd8866acdb1706e7d03ca14001548102d154a77b3a45c60dd029189ccc32156bc1ad351f0ac3a764b10099820a4af305f4dc305a132dfb5778e523a92bf066ebba6d77e5f0e880b6f4e98383d7295fa87f0f4209a75d123f2792bedafb69713a20ab8c47831e8277e09ea42700ce2422112c3611a14a420d13b5fcfcf550cbb9ac7450caaed4315fc41d1c8814bbc3cad2fb63a9280cb20adc98dd96e653cc339802f391b9f87c4491e8f25e0995d7ca1db0fd9b4e0848a7e85aa0c1a24ffc644b90af848aedccec92f568971ad760ddcdfafc5257ea9dd4a73ea8204808d538c9b566af7fb3c9e5b74ca61077cd2d0febe553a1e65bd2ee9a80e0530e148152b82e8d9ff1dd8f039c2067a7433051077611e9ce3d6bbad180a76b7136d775abacf5dca0f4c28d82da217c17f859fb7307996f3e36ce9171b5381a5917176dbba47d4e57be3c4a71674a2afc965b9fddf9ba0f24c48d477788690f39ea24fc549aea78f8b4e4d7e092c5eca7582b4edb73ae9fe0c9b3a59a4dddd94462ad3db5084646d9760b8cf107d419cd2e9430c82841a94a69eb60ab3f1e5722dd37513c70e51b7355faeccfbabc3de11a60160a626566a33a6bb695e8ba917085eedbd226ad34c41f229216205a21b3cde287d171563c2aa83298cfdd67413ed912720415f5e8374c53502591c6cdb1d6e169fa8c4bb3b32b3d5def7138238555bdc64706b7b9890d35f29627a37b3a3f8d899c3bb1126868869d4ebdeba2e8a60dd7b6219c360ed81b906073eaab527fdefa1d189ac62219f86ddc9696316cf991c37f75f7cf4a", @typed={0xb5, 0x9a, 0x0, 0x0, @binary="8ebf8cfd83f9bcda7575193db6b65c017a9c656066ea3cca7418b32aaa108e6b26cda94166b23e7bf1a70aaa62b8d96e971089a8cea9a47018569be65fe38f56b3319139a05a06716305d72a7e44be9580eb35a0269933e9a25494c3a22f4c3cdfd14cb3efc3d1673913627997384a8b9b37b5eeace9c2bde397338ce2913fa911ecff5cbfd50f6130a5cc1c571704999b3445c121eaffd9915dedfaef55f99cdc4400799f1143fe5e2cbd6f5cb304a315"}]}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 6.806647026s ago: executing program 4 (id=5484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@private=0xa010100, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3000000}, {0x2, 0x9, 0x80}}, [@tmpl={0x84, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6e}, {{@in=@multicast1, 0x4d4, 0x32}, 0x0, @in=@local, 0x5, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x13c}}, 0x80c4) 6.609623957s ago: executing program 4 (id=5487): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, r2, 0xa94000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0x80000001, 0xffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0xa6, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r9, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) r10 = syz_open_pts(r3, 0x721100) r11 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000440)={0x9, @pix={0x2, 0x0, 0x42474752, 0x0, 0x0, 0x1, 0x3, 0xfeedcafe, 0x0, 0x0, 0x1, 0x5}}) dup3(r10, r3, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4088040) 5.718150672s ago: executing program 5 (id=5490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000301010100000000000000000a0000000c001980080002000d0800003c0002802c000180140003"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000140)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 5.199898039s ago: executing program 5 (id=5492): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002580)={0x38, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="0011e30fe3509ec9d37d66340683"}, @nested={0x4, 0x8002}, @nested={0x8, 0x8003, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x38}}, 0x0) 5.031970246s ago: executing program 2 (id=5493): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0x1c, &(0x7f0000000fc0)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f0000001000)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000010c0)={r3, 0x3}, 0x8) 4.887749418s ago: executing program 5 (id=5495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x490, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x460, 0x2, [@TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xb, 0x200, 0x3, 0x8, 0x665, 0x4, 0x5, 0x34, 0x6, 0xa233, 0x62, 0xad, 0x3, 0x80000001, 0x5, 0x2, 0x6, 0xd906, 0x0, 0x8, 0x80000000, 0x1c7, 0x9, 0x7, 0xf, 0x7fffffff, 0x0, 0x515a, 0xa4, 0x2, 0x8, 0x8, 0x0, 0x100, 0x6, 0x78, 0x8000, 0x5, 0x5, 0x9, 0x2, 0x7, 0xa0, 0x4, 0x5, 0x8, 0x2, 0x7, 0x1000, 0xfff, 0x141, 0x9f, 0x1, 0x37ac, 0x3, 0x2, 0x5, 0x401, 0xe386, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x5, 0x2, 0x6, 0x9, 0x80, 0x60, 0x6ffd, 0x2, 0x5d33759a, 0x7, 0x2, 0x4, 0x7, 0x3, 0x3, 0xdcb, 0x401, 0x5, 0x3, 0xe, 0xfffffff8, 0x5, 0x9, 0x7f, 0x4, 0xd, 0x6, 0x0, 0x1, 0x3, 0x7000, 0x4, 0x7, 0x1, 0x9, 0x2, 0xc6e0340, 0x4, 0x401, 0x15, 0x101, 0x4, 0x7, 0x3ff, 0x398e, 0x2, 0x10, 0x7, 0x0, 0xc, 0x1588cdd2, 0x11be, 0xffff, 0x2ac, 0x5, 0x3, 0x3, 0xfd, 0x4, 0x4, 0x9, 0x0, 0x8, 0x6, 0x6, 0x9, 0x3553, 0x5, 0x9, 0x6, 0x8001, 0x1, 0xffff, 0x6, 0x0, 0x5, 0x40000000, 0x6, 0x4, 0x0, 0x5, 0x7, 0xe, 0x5cb7, 0x5, 0x11561d4e, 0x5, 0x5, 0xffffff80, 0x4, 0x2, 0x5, 0x3, 0xffffffff, 0x101, 0xef, 0x6, 0xa, 0x6d37, 0x7fffffff, 0x8000, 0x7fffffff, 0x80000001, 0xaba5, 0x1, 0x7, 0x5, 0xa3e0, 0x5f, 0x3, 0x9, 0x80000000, 0x1, 0x81, 0x9, 0x800, 0x0, 0x2ced, 0x10, 0x8001, 0x5, 0x7, 0x100, 0x1, 0x4, 0xe, 0xfffffff9, 0xffffffff, 0x2, 0x4, 0xb4, 0x9, 0x0, 0xdf3c, 0x4, 0x6, 0x4905, 0x3, 0x3ff, 0x3, 0xcace, 0x200, 0xc5c, 0xfffffff8, 0x9, 0x3, 0x3ff, 0x0, 0x100, 0x3, 0xb, 0x4b73, 0xfffffff9, 0xffff, 0x55d, 0xff, 0xc, 0xffffdfff, 0x4, 0xfffffff8, 0x4, 0x1, 0x4, 0xa, 0x55d0, 0x8, 0x2, 0x0, 0x307, 0x7fffffff, 0x3, 0x5c18, 0x2, 0x8, 0x2, 0xb, 0x5, 0x100, 0x6, 0xc, 0x8, 0x1000, 0x3, 0x2, 0x0, 0x800, 0x4, 0xa, 0xfff, 0x8000, 0x381]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2e}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x490}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xe) r1 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000600)={0x1, 0x3, 0x2, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x6c28c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7b) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bcb2a43c9bf84dade0acb18e63bc7c6763cf785ca6e2c1ba2d70d7c9ffb664cb94e71b2f59e046afcade085c5652a58fbfb7895820cccf156bfdb1bb515cb73b777ad9dc2f1e2f6cdd50a9e2571794d7a056b7f771", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xd, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0xe, 0xe, &(0x7f0000000a80)='\x00'/14, &(0x7f0000000ac0)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x8040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'bridge0\x00'}) syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./file0/file0\x00', 0x18001, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_open_dev$usbmon(&(0x7f0000000d00), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000d40)={0x3, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0203000210000000fbff0000000000000200080008000000660000000000000005000600000000000a000000000000000000000000000000000000000000000101000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000"], 0x80}, 0x1, 0x7}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) 4.255910247s ago: executing program 4 (id=5498): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000100)={0x0, 0x8690, 0x40, 0x6, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)=0xf3b, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000001c80)={0x2}, &(0x7f0000001cc0)=0x8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000001d00)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000001d40)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000001d80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000001dc0)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f0000000a00)='q', 0x5e0, 0x881, &(0x7f0000000a40)={0x11, 0x8100, r7, 0x1, 0x87, 0x6, @broadcast}, 0x14) io_uring_enter(r1, 0x6c7e, 0xa5a, 0x16, 0x0, 0xfffffffffffffda3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 3.968069073s ago: executing program 2 (id=5500): r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000020000000001602742420300"], 0x0) 3.904616009s ago: executing program 5 (id=5501): r0 = memfd_create(&(0x7f0000000540)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000580)="4fbbd1479f07edd315133cfaee3b43c23a0dd466b5222ff79d8f", 0x1a) sendfile(r0, r0, &(0x7f00000005c0), 0xffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x900) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, 0x0, 0x0, 0x4}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000007c0)='./file0\x00', 0x100000005) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) write$dsp(r2, &(0x7f0000000080)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000980)={r7, @broadcast, @local}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000180)=0x2) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f00000002c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000200)={0x1, 0x3, 0xffff5f11, 0xfffd, 0x6b78, 0xc, 0x40ff, 0x1fa, 0x4a, 0x28, 0xfffffff9, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = open_tree(r3, &(0x7f0000000480)='./file0\x00', 0x100) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000004c0)={r10, 0x0, 0xef8, 0x7, 0xe0, 0x4, [0x3, 0x15363e5b, 0x3, 0x401, 0x8f0, 0x4]}) 3.770842957s ago: executing program 2 (id=5502): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x7f, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000001780)={0x0, "7f7acb036ad32033e27c8a2de7608e32d0a00f79d7103e9558e81ef72464f27ceb521b96ede4b47bbcf13ea0ae57ec7becb27b8c429108adc2ae6ff315b1be23", {0x572, 0x6}}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000001980)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff9}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async, rerun: 64) recvmmsg(r2, &(0x7f0000002a00)=[{{&(0x7f0000000140)=@nl, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)}, 0x3}, {{&(0x7f0000000c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)=""/68, 0x44}, 0x3}, {{&(0x7f0000000e80)=@l2, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001140)=""/253, 0xfd}, 0x40}, {{&(0x7f0000001240)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/44, 0x2c}, {&(0x7f0000001300)=""/81, 0x51}], 0x2}, 0x1ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/106, 0x6a}}, {{&(0x7f0000001900)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000080)}, 0xe865}], 0x6, 0x40012002, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff50, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xe0d9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r4 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001840)) (async) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000001880)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000018c0)=0x1) (async, rerun: 32) syz_emit_ethernet(0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428e916293afffe880000000000000000000000008001ff0200000000000000000000000000018900907800000000fe8800000000000000000000000000011f02d462daf76d13b82ce3b95fcce69e43"], 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2, 0x40, 0xfffffff7, 0x9, 0x0, [{0x0, 0x3, 0x7, '\x00', 0x2}, {0xb7, 0x9, 0x5, '\x00', 0x9}, {0x2c, 0x0, 0x0, '\x00', 0x8}, {0x3, 0x5, 0xff, '\x00', 0x5}, {0x6c, 0x6, 0xc, '\x00', 0x3}, {0x5, 0x3, 0x1, '\x00', 0x1}, {0x88, 0x8, 0x1d, '\x00', 0x8}, {0x1, 0x70, 0xb, '\x00', 0xa2}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0x4, 0xd, 0x88, '\x00', 0x79}, {0xc, 0xd5, 0x3, '\x00', 0x1}, {0x2, 0x0, 0x1, '\x00', 0x7}, {0x80, 0x1, 0x9, '\x00', 0x1}, {0x81, 0x3, 0x8, '\x00', 0x2}, {0x3, 0xf7, 0x5, '\x00', 0xb}, {0xe, 0x2, 0x80, '\x00', 0x3}, {0x5, 0xd3, 0x15, '\x00', 0xa}, {0xff, 0x7f, 0x2c, '\x00', 0xa}, {0x2, 0x6, 0x1, '\x00', 0xe}, {0x9, 0x10, 0xce, '\x00', 0x5}, {0x8, 0xfc, 0x5, '\x00', 0x8}, {0x2, 0x14, 0xe, '\x00', 0xa}, {0xb, 0x1, 0x10, '\x00', 0x1}, {0x1, 0x3, 0x4, '\x00', 0xd}]}}) 3.530095846s ago: executing program 3 (id=5503): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) 3.373210367s ago: executing program 3 (id=5504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) 3.127264934s ago: executing program 1 (id=5506): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) 3.071189928s ago: executing program 3 (id=5507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = fanotify_init(0x2, 0x101000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fanotify_mark(r5, 0x1, 0x4800001e, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xc0202, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0x200}, {0x0, 0x20000}], 0x2) syz_fuse_handle_req(r7, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x30, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xbd, r4, r9}, {0xffff, 0x100, 0x100000001, 0x6, 0x4, 0xfffffffffffffffe, 0x100000001, 0x6}, {0x9, 0x6, 0x7, 0x4}, 0x1, 0x6e6bbc, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0xf, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0xb, 0x9, 0x0, 0x2}}, 0xe8) 2.962695473s ago: executing program 1 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000030101010000000000000000020000000c001980080002000d0800003c0002802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 2.707452253s ago: executing program 1 (id=5509): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f000000f40000000000000000", 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000100)={0x77359400}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 2.105431406s ago: executing program 3 (id=5510): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000001980)=[{0x1, 0x811, 0x0, 0x0}, {0x9, 0x5401, 0xc1, &(0x7f0000000680)="a4337d15c1662487935f3152ffd6d1f0e4401a2a990791b05f5522a52584b4acef31f52d61919fe3e76df4b8b1eaf6b5da9b96a1d8a326ca5795eac38b4166bce148e3c645243486649602b4bd920f7ce57dfdc76f6566f2661c858db3039dee80d8727e79481aed812f870cea584ef520be0201caf84624867cc18e67c37ca6537345c1400fdb2e0f7041389d736e0650d2e42a9daf7721f4c44ccb1ed3befc85209b69bb640fa3ac30f3d1a08d34913225b82daa766a58756c6ed54c77bf876d"}, {0x9, 0x0, 0x0, 0x0}], 0x3}) 1.939012126s ago: executing program 2 (id=5511): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000ffff"}}}}}}}, 0x0) 1.807263182s ago: executing program 2 (id=5512): syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r0 = syz_usb_connect$midi(0x6, 0x8a, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x36, 0xc0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xee, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x55, 0xe}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x23}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0xf1}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x1d, 0x7, 0xff, {0x12, 0x25, 0x1, 0xe, "b2b8f030da83abd993e945e4b4c0"}}}, {{0x9, 0x5, 0x0, 0xf, 0x20, 0x81, 0x0, 0x5e, {0x10, 0x25, 0x1, 0xc, "3ac666f4659c178c5a7ff023"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xe, 0x81, 0x6, {0x10, 0x25, 0x1, 0xc, "70bf8eae3eba40009ca495c1"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x5, 0x3, 0x20, 0xff}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xf, 0x67a}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000000)) 1.760765904s ago: executing program 5 (id=5513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1b00}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) 1.760311104s ago: executing program 4 (id=5514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000000840)=""/4085, 0x40000000}, 0x94) 1.67787777s ago: executing program 4 (id=5515): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r2) syz_open_dev$evdev(&(0x7f0000000340), 0x3e, 0x202444) r3 = syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x9e594254eba08ff8, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r3) 1.606610221s ago: executing program 5 (id=5516): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 1.565186454s ago: executing program 1 (id=5517): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) 1.300467417s ago: executing program 1 (id=5518): syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) 739.280167ms ago: executing program 3 (id=5519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) 523.045393ms ago: executing program 3 (id=5520): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 465.169754ms ago: executing program 2 (id=5521): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=5522): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) kernel console output (not intermixed with test programs): it: type=1326 audit(1791707159.215:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.5.5170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1186.785839][ T31] audit: type=1326 audit(1791707159.215:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.5.5170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52f4f5ea0e code=0x7ffc0000 [ 1186.786410][ T31] audit: type=1326 audit(1791707159.215:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.5.5170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52f4f9de6b code=0x7ffc0000 [ 1187.068943][T32255] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1187.069311][T32237] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1187.073176][T32237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.073213][T32237] usb 2-1: Product: syz [ 1187.073229][T32237] usb 2-1: Manufacturer: syz [ 1187.073244][T32237] usb 2-1: SerialNumber: syz [ 1187.119401][T32237] usb 2-1: config 0 descriptor?? [ 1187.224421][T32255] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1187.229128][T32255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1187.229272][T32255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.265936][T32255] usb 6-1: config 0 descriptor?? [ 1187.284310][T10474] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1187.338591][T32237] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1187.559690][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 1187.688822][T32235] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 1187.819241][T32235] usb 5-1: device descriptor read/64, error -71 [ 1188.058921][T32235] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1188.218745][T32235] usb 5-1: device descriptor read/64, error -71 [ 1188.331189][T32235] usb usb5-port1: attempt power cycle [ 1188.668995][T32235] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 1188.708523][T32235] usb 5-1: device descriptor read/8, error -71 [ 1188.994386][T32235] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 1189.015567][T32235] usb 5-1: device descriptor read/8, error -71 [ 1189.119991][T32235] usb usb5-port1: unable to enumerate USB device [ 1189.810043][T32237] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1189.830231][T32237] usb 2-1: USB disconnect, device number 56 [ 1190.115413][T32255] usbhid 6-1:0.0: can't add hid device: -71 [ 1190.115530][T32255] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1190.158359][T32255] usb 6-1: USB disconnect, device number 11 [ 1190.219219][T32247] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1190.244640][T10536] netlink: 'syz.5.5179': attribute type 8 has an invalid length. [ 1190.389455][T32247] usb 3-1: Using ep0 maxpacket: 32 [ 1190.390755][T32247] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1190.393502][T32247] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1190.393531][T32247] usb 3-1: config 0 has no interface number 0 [ 1190.393594][T32247] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1190.463961][T32247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.463994][T32247] usb 3-1: Product: syz [ 1190.464012][T32247] usb 3-1: Manufacturer: syz [ 1190.464028][T32247] usb 3-1: SerialNumber: syz [ 1190.482615][T32247] usb 3-1: config 0 descriptor?? [ 1190.629071][T32255] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1190.720753][T32247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1190.720780][T32247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1190.720795][T32247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1190.720978][T32247] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 1190.780443][T32255] usb 6-1: device descriptor read/64, error -71 [ 1191.018843][T32255] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1191.152038][T32255] usb 6-1: device descriptor read/64, error -71 [ 1191.190602][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5184'. [ 1191.208954][ T5699] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1191.262158][T32255] usb usb6-port1: attempt power cycle [ 1191.277799][T10568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.278173][T10568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.381741][ T5699] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1191.387481][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.387502][ T5699] usb 2-1: Product: syz [ 1191.387513][ T5699] usb 2-1: Manufacturer: syz [ 1191.387525][ T5699] usb 2-1: SerialNumber: syz [ 1191.429321][ T5699] usb 2-1: config 0 descriptor?? [ 1191.446882][ T5699] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1191.600394][T32255] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1191.619694][T32255] usb 6-1: device descriptor read/8, error -71 [ 1191.715020][T10556] fuse: Unknown parameter '0x0000000000000006' [ 1191.755740][T10556] macsec1: entered allmulticast mode [ 1191.755763][T10556] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1191.755803][T10556] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1191.756848][T10556] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1191.795782][T10556] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1191.824677][ T5699] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1191.824694][ T5699] sq905c 2-1:0.0: Get version command failed [ 1191.824748][ T5699] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1191.850156][ T5699] usb 2-1: USB disconnect, device number 57 [ 1191.880311][T32255] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1191.909920][T32255] usb 6-1: device descriptor read/8, error -71 [ 1191.937348][T32253] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1192.029536][T32255] usb usb6-port1: unable to enumerate USB device [ 1192.171720][ T31] kauditd_printk_skb: 236 callbacks suppressed [ 1192.171735][ T31] audit: type=1326 audit(1791707164.605:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.171802][ T31] audit: type=1326 audit(1791707164.605:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.210374][ T31] audit: type=1326 audit(1791707164.645:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f39e799d047 code=0x7ffc0000 [ 1192.210774][ T31] audit: type=1326 audit(1791707164.645:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.210949][ T31] audit: type=1326 audit(1791707164.645:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.260575][ T31] audit: type=1326 audit(1791707164.695:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.260911][ T31] audit: type=1326 audit(1791707164.695:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.261086][ T31] audit: type=1326 audit(1791707164.695:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.375701][ T31] audit: type=1326 audit(1791707164.795:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.382894][ T31] audit: type=1326 audit(1791707164.795:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10593 comm="syz.1.5186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x7ffc0000 [ 1192.981481][ T5699] usb 3-1: USB disconnect, device number 76 [ 1193.981355][T10660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5194'. [ 1195.204370][T10688] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1195.204425][T10688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.263890][T10690] syzkaller0: entered promiscuous mode [ 1195.263910][T10690] syzkaller0: entered allmulticast mode [ 1195.649129][T32255] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1195.818861][T32255] usb 3-1: Using ep0 maxpacket: 32 [ 1195.824206][T32255] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1195.835597][T32255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.850964][T32255] usb 3-1: config 0 descriptor?? [ 1196.080672][T32255] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1196.102473][T32255] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1196.103669][T32255] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1196.103725][T32255] usb 3-1: media controller created [ 1196.179696][T32255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.508540][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.509220][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.556702][T32255] az6027: usb out operation failed. (-71) [ 1196.556726][T32255] stb0899_attach: Driver disabled by Kconfig [ 1196.556740][T32255] az6027: no front-end attached [ 1196.556740][T32255] [ 1196.557131][T32255] az6027: usb out operation failed. (-71) [ 1196.557148][T32255] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1196.609652][T32255] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input104 [ 1196.636663][T32255] dvb-usb: schedule remote query interval to 400 msecs. [ 1196.636691][T32255] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1196.684193][T32255] usb 3-1: USB disconnect, device number 77 [ 1196.876389][T32255] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1196.949373][T32235] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1197.068834][ T5699] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1197.103628][T32235] usb 5-1: not running at top speed; connect to a high speed hub [ 1197.103665][T32235] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 1197.104658][T32235] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 1197.104685][T32235] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.104706][T32235] usb 5-1: config 1 has no interface number 0 [ 1197.104746][T32235] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 1197.104778][T32235] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1197.104803][T32235] usb 5-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1197.104831][T32235] usb 5-1: config 1 interface 167 has no altsetting 0 [ 1197.107068][T32235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.107094][T32235] usb 5-1: Product: syz [ 1197.107121][T32235] usb 5-1: Manufacturer: syz [ 1197.107137][T32235] usb 5-1: SerialNumber: syz [ 1197.209239][ T5699] usb 2-1: device descriptor read/64, error -71 [ 1197.449118][ T5699] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1197.457297][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1197.457327][ T31] audit: type=1326 audit(1791707169.885:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.457380][ T31] audit: type=1326 audit(1791707169.885:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.463413][ T31] audit: type=1326 audit(1791707169.895:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.466785][ T31] audit: type=1326 audit(1791707169.895:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.466925][ T31] audit: type=1326 audit(1791707169.895:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.469234][ T31] audit: type=1326 audit(1791707169.895:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.581583][ T5699] usb 2-1: device descriptor read/64, error -71 [ 1197.602142][ T31] audit: type=1326 audit(1791707170.035:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.610284][ T31] audit: type=1326 audit(1791707170.035:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.644774][ T31] audit: type=1326 audit(1791707170.075:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.644935][ T31] audit: type=1326 audit(1791707170.075:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.4.5208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305ef9e1d9 code=0x7ffc0000 [ 1197.690696][ T5699] usb usb2-port1: attempt power cycle [ 1197.869820][T32235] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 1197.869886][T32235] em28xx 5-1:1.167: Device initialization failed. [ 1197.869904][T32235] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 1197.878298][T32235] usb 5-1: USB disconnect, device number 104 [ 1198.048832][ T5699] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1198.069686][ T5699] usb 2-1: device descriptor read/8, error -71 [ 1198.308765][ T5699] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1198.329154][T32255] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1198.330384][ T5699] usb 2-1: device descriptor read/8, error -71 [ 1198.439784][ T5699] usb usb2-port1: unable to enumerate USB device [ 1198.479160][T32255] usb 3-1: Using ep0 maxpacket: 16 [ 1198.479981][T32255] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1198.481668][T32255] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1198.481699][T32255] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1198.481727][T32255] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1198.481755][T32255] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1198.481784][T32255] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1198.484499][T32255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.484527][T32255] usb 3-1: Product: syz [ 1198.484544][T32255] usb 3-1: Manufacturer: syz [ 1198.484560][T32255] usb 3-1: SerialNumber: syz [ 1198.493738][T32255] usb 3-1: config 0 descriptor?? [ 1198.503856][T10765] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1198.649926][T10795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5215'. [ 1198.774488][T10779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1198.794853][T32255] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input105 [ 1198.998428][T10779] fuse: Bad value for 'fd' [ 1199.029703][T10779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.030227][T10779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.959605][T32255] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1200.117099][T32255] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1200.119450][T32255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1200.119522][T32255] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1200.119593][T32255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1200.119655][T32255] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1200.184858][T32255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.184892][T32255] usb 2-1: Product: syz [ 1200.184904][T32255] usb 2-1: Manufacturer: syz [ 1200.184915][T32255] usb 2-1: SerialNumber: syz [ 1200.216225][T32255] usb 2-1: config 0 descriptor?? [ 1200.227472][T32255] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1200.416518][T32255] usb 3-1: USB disconnect, device number 78 [ 1200.562486][T10868] syzkaller0: tun_chr_ioctl cmd 1074310762 [ 1200.724507][T10898] FAULT_INJECTION: forcing a failure. [ 1200.724507][T10898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.724538][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.2.5227 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.724563][T10898] Tainted: [L]=SOFTLOCKUP [ 1200.724569][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1200.724580][T10898] Call Trace: [ 1200.724586][T10898] [ 1200.724594][T10898] dump_stack_lvl+0xe8/0x150 [ 1200.724624][T10898] should_fail_ex+0x410/0x560 [ 1200.724652][T10898] _copy_to_iter+0x1e4/0x1810 [ 1200.724681][T10898] ? __asan_memset+0x22/0x50 [ 1200.724704][T10898] ? __pfx__copy_to_iter+0x10/0x10 [ 1200.724740][T10898] ? crng_make_state+0xb6/0x600 [ 1200.724761][T10898] get_random_bytes_user+0x1d0/0x3d0 [ 1200.724782][T10898] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1200.724810][T10898] ? bpf_lsm_file_permission+0x9/0x20 [ 1200.724826][T10898] ? security_file_permission+0x75/0x260 [ 1200.724865][T10898] vfs_read+0x595/0xa80 [ 1200.724888][T10898] ? __pfx_vfs_read+0x10/0x10 [ 1200.724912][T10898] ? __fget_files+0x2a/0x420 [ 1200.724934][T10898] ksys_read+0x150/0x270 [ 1200.724952][T10898] ? __pfx_ksys_read+0x10/0x10 [ 1200.724978][T10898] do_syscall_64+0x166/0x520 [ 1200.724997][T10898] ? trace_irq_disable+0x3b/0x140 [ 1200.725015][T10898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.725032][T10898] ? clear_bhb_loop+0x70/0xc0 [ 1200.725052][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.725068][T10898] RIP: 0033:0x7f50aa19e1d9 [ 1200.725084][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.725101][T10898] RSP: 002b:00007f50ab0fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1200.725119][T10898] RAX: ffffffffffffffda RBX: 00007f50aa425fa0 RCX: 00007f50aa19e1d9 [ 1200.725131][T10898] RDX: 0000000000002002 RSI: 0000200000000040 RDI: 0000000000000003 [ 1200.725142][T10898] RBP: 00007f50ab0fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.725152][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1200.725163][T10898] R13: 00007f50aa426038 R14: 00007f50aa425fa0 R15: 00007f50aa54fa48 [ 1200.725187][T10898] [ 1200.810224][ T5699] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1200.941265][ T5699] usb 5-1: device descriptor read/64, error -71 [ 1201.092942][T11611] syzkaller0: tun_net_xmit 76 [ 1201.093167][T11611] syzkaller0: tun_net_xmit 48 [ 1201.120597][T32255] syzkaller0: tun_net_xmit 76 [ 1201.179024][ T5699] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1201.309023][ T5699] usb 5-1: device descriptor read/64, error -71 [ 1201.419579][ T5699] usb usb5-port1: attempt power cycle [ 1201.719494][T32255] syzkaller0: tun_net_xmit 76 [ 1201.758957][ T5699] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1201.781025][ T5699] usb 5-1: device descriptor read/8, error -71 [ 1201.960230][T32255] syzkaller0: tun_net_xmit 76 [ 1202.020884][ T5699] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1202.042599][ T5699] usb 5-1: device descriptor read/8, error -71 [ 1202.151448][ T5699] usb usb5-port1: unable to enumerate USB device [ 1202.658495][T10964] loop3: detected capacity change from 0 to 7 [ 1202.686729][T10964] Dev loop3: unable to read RDB block 7 [ 1202.686785][T10964] loop3: unable to read partition table [ 1202.687029][T10964] loop3: partition table beyond EOD, truncated [ 1202.687072][T10964] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1202.728242][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 1202.728261][ T31] audit: type=1326 audit(1791707175.155:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.733522][ T31] audit: type=1326 audit(1791707175.165:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.737721][ T31] audit: type=1326 audit(1791707175.165:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.743343][ T31] audit: type=1326 audit(1791707175.175:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.833586][ T31] audit: type=1326 audit(1791707175.175:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.833747][ T31] audit: type=1326 audit(1791707175.255:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.833867][ T31] audit: type=1326 audit(1791707175.255:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.833972][ T31] audit: type=1326 audit(1791707175.255:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.846926][ T31] audit: type=1326 audit(1791707175.275:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.847068][ T31] audit: type=1326 audit(1791707175.275:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.5.5240" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4f9e1d9 code=0x7ffc0000 [ 1202.998023][T32255] usb 2-1: USB disconnect, device number 62 [ 1203.470852][T32255] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1203.593969][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5244'. [ 1203.614399][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.616781][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.630355][T32255] usb 2-1: Using ep0 maxpacket: 32 [ 1203.633602][T32255] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1203.636233][T32255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.636282][T32255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.636322][T32255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.687358][T32255] usb 2-1: config 0 descriptor?? [ 1203.707835][T32255] hub 2-1:0.0: USB hub found [ 1203.845243][T32237] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1203.890495][T32255] hub 2-1:0.0: 26 ports detected [ 1203.890953][T32255] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1203.963581][T11017] FAULT_INJECTION: forcing a failure. [ 1203.963581][T11017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.963646][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.5.5248 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.963676][T11017] Tainted: [L]=SOFTLOCKUP [ 1203.963685][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1203.963698][T11017] Call Trace: [ 1203.963708][T11017] [ 1203.963719][T11017] dump_stack_lvl+0xe8/0x150 [ 1203.963760][T11017] should_fail_ex+0x410/0x560 [ 1203.963797][T11017] _copy_to_user+0x31/0xb0 [ 1203.963822][T11017] simple_read_from_buffer+0xe1/0x170 [ 1203.963863][T11017] proc_fail_nth_read+0x1bb/0x230 [ 1203.963889][T11017] ? common_file_perm+0x20e/0x2b0 [ 1203.963930][T11017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1203.963979][T11017] ? rw_verify_area+0x24a/0x4c0 [ 1203.964005][T11017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1203.964033][T11017] vfs_read+0x213/0xa80 [ 1203.964062][T11017] ? __pfx___mutex_lock+0x10/0x10 [ 1203.964091][T11017] ? __pfx_vfs_read+0x10/0x10 [ 1203.964116][T11017] ? __fget_files+0x2a/0x420 [ 1203.964143][T11017] ? __fget_files+0x3a2/0x420 [ 1203.964160][T11017] ? __fget_files+0x2a/0x420 [ 1203.964185][T11017] ksys_read+0x150/0x270 [ 1203.964208][T11017] ? __pfx_ksys_read+0x10/0x10 [ 1203.964225][T11017] ? fput+0xa0/0xd0 [ 1203.964260][T11017] do_syscall_64+0x166/0x520 [ 1203.964281][T11017] ? trace_irq_disable+0x3b/0x140 [ 1203.964302][T11017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.964321][T11017] ? clear_bhb_loop+0x70/0xc0 [ 1203.964344][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.964362][T11017] RIP: 0033:0x7f52f4f5ea0e [ 1203.964380][T11017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1203.964397][T11017] RSP: 002b:00007f52f5ea0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1203.964418][T11017] RAX: ffffffffffffffda RBX: 00007f52f5ea16c0 RCX: 00007f52f4f5ea0e [ 1203.964433][T11017] RDX: 000000000000000f RSI: 00007f52f5ea10a0 RDI: 0000000000000004 [ 1203.964445][T11017] RBP: 00007f52f5ea1090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.964457][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.964468][T11017] R13: 00007f52f5226038 R14: 00007f52f5225fa0 R15: 00007f52f534fa48 [ 1203.964499][T11017] [ 1203.981911][T32237] usb 3-1: device descriptor read/64, error -71 [ 1204.108410][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.133164][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.232819][T32255] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1204.283935][T32255] usbhid 2-1:0.0: can't add hid device: -71 [ 1204.284229][T32255] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1204.318812][T32237] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1204.350332][T32255] usb 2-1: USB disconnect, device number 63 [ 1204.490784][T32237] usb 3-1: device descriptor read/64, error -71 [ 1204.609153][T32237] usb usb3-port1: attempt power cycle [ 1204.708981][ T1221] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1204.919498][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 1204.920265][ T1221] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1204.924788][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1204.924834][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.984818][ T1221] usb 6-1: config 0 descriptor?? [ 1204.987325][T11031] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1204.989104][T32237] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1205.019388][T32237] usb 3-1: device descriptor read/8, error -71 [ 1205.220362][T11031] fuse: Unknown parameter 'euid>00000000000000000000' [ 1205.278797][T32237] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1205.309815][T32237] usb 3-1: device descriptor read/8, error -71 [ 1205.419176][T32237] usb usb3-port1: unable to enumerate USB device [ 1205.735768][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.736755][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.737848][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5249'. [ 1206.064712][T32237] hid_parser_main: 30 callbacks suppressed [ 1206.064736][T32237] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1206.097173][T32237] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1206.755692][T11057] netlink: 'syz.1.5251': attribute type 3 has an invalid length. [ 1206.755718][T11057] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1206.756608][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1207.140038][T32237] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1207.318131][T32237] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1207.345170][T32237] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1207.345225][T32237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1207.390424][T32237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.390453][T32237] usb 3-1: Product: syz [ 1207.390468][T32237] usb 3-1: Manufacturer: syz [ 1207.390507][T32237] usb 3-1: SerialNumber: syz [ 1207.393916][T32237] usb 3-1: config 0 descriptor?? [ 1207.617673][T32237] powermate: unknown product id 0240 [ 1207.631303][T32237] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input106 [ 1207.636333][ C1] powermate: config urb returned -71 [ 1207.636530][ C1] powermate: config urb returned -71 [ 1207.636737][ C1] powermate: config urb returned -71 [ 1207.636925][ C1] powermate: config urb returned -71 [ 1207.708356][T32237] usb 3-1: USB disconnect, device number 83 [ 1207.708463][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1209.287149][ T1221] usbhid 6-1:0.0: can't add hid device: -71 [ 1209.287273][ T1221] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1209.311776][ T1221] usb 6-1: USB disconnect, device number 16 [ 1209.461468][T11123] vlan0: entered promiscuous mode [ 1209.476493][T11123] team0: Port device vlan0 added [ 1209.654585][T11132] fuse: Bad value for 'user_id' [ 1209.654607][T11132] fuse: Bad value for 'user_id' [ 1209.740341][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1209.740360][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1209.793922][T11174] netlink: 'syz.4.5260': attribute type 4 has an invalid length. [ 1209.793940][T11174] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1209.947847][T11178] syzkaller0: entered promiscuous mode [ 1209.947872][T11178] syzkaller0: entered allmulticast mode [ 1210.044762][T11178] tipc: Enabled bearer , priority 0 [ 1210.045320][T11185] program syz.5.5267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1210.065726][T11177] tipc: Resetting bearer [ 1210.126793][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5268'. [ 1210.126822][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5268'. [ 1210.126899][T11188] FAULT_INJECTION: forcing a failure. [ 1210.126899][T11188] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.126934][T11188] CPU: 0 UID: 0 PID: 11188 Comm: syz.4.5268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1210.126968][T11188] Tainted: [L]=SOFTLOCKUP [ 1210.126979][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1210.126994][T11188] Call Trace: [ 1210.127006][T11188] [ 1210.127017][T11188] dump_stack_lvl+0xe8/0x150 [ 1210.127061][T11188] should_fail_ex+0x410/0x560 [ 1210.127104][T11188] should_failslab+0xa8/0x100 [ 1210.127146][T11188] ? skb_clone+0x212/0x3a0 [ 1210.127176][T11188] kmem_cache_alloc_noprof+0xa1/0x600 [ 1210.127208][T11188] ? skb_clone+0x212/0x3a0 [ 1210.127243][T11188] skb_clone+0x212/0x3a0 [ 1210.127277][T11188] __netlink_deliver_tap+0x413/0x860 [ 1210.127330][T11188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1210.127365][T11188] netlink_deliver_tap+0x19c/0x1b0 [ 1210.127400][T11188] netlink_sendskb+0x68/0x140 [ 1210.127432][T11188] netlink_rcv_skb+0x2a4/0x4a0 [ 1210.127465][T11188] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1210.127593][T11188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1210.127640][T11188] ? bpf_lsm_capable+0x9/0x20 [ 1210.127667][T11188] ? security_capable+0x7e/0x2c0 [ 1210.127722][T11188] nfnetlink_rcv+0x2b9/0x28c0 [ 1210.127756][T11188] ? __dev_queue_xmit+0x29b/0x3920 [ 1210.127793][T11188] ? __local_bh_enable_ip+0xd6/0x140 [ 1210.127829][T11188] ? lockdep_hardirqs_on+0x7b/0x110 [ 1210.127857][T11188] ? __dev_queue_xmit+0x29b/0x3920 [ 1210.127886][T11188] ? __local_bh_enable_ip+0xd6/0x140 [ 1210.127920][T11188] ? __dev_queue_xmit+0x29b/0x3920 [ 1210.127948][T11188] ? __dev_queue_xmit+0x1efb/0x3920 [ 1210.127977][T11188] ? do_syscall_64+0x166/0x520 [ 1210.128008][T11188] ? __dev_queue_xmit+0x29b/0x3920 [ 1210.128046][T11188] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1210.128080][T11188] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1210.128119][T11188] ? ref_tracker_free+0x689/0x830 [ 1210.128160][T11188] ? __pfx_ref_tracker_free+0x10/0x10 [ 1210.128206][T11188] ? __skb_clone+0x449/0x6c0 [ 1210.128242][T11188] ? skb_clone+0x246/0x3a0 [ 1210.128276][T11188] ? __netlink_deliver_tap+0x811/0x860 [ 1210.128308][T11188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1210.128348][T11188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1210.128380][T11188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1210.128419][T11188] netlink_unicast+0x7bd/0x940 [ 1210.128462][T11188] netlink_sendmsg+0x813/0xb40 [ 1210.128507][T11188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.128549][T11188] ? apparmor_socket_sendmsg+0x98/0x360 [ 1210.128588][T11188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.128620][T11188] sock_sendmsg_nosec+0x13a/0x180 [ 1210.128658][T11188] ____sys_sendmsg+0x54e/0x850 [ 1210.128693][T11188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1210.128741][T11188] ? import_iovec+0x73/0xa0 [ 1210.128785][T11188] ___sys_sendmsg+0x2a5/0x360 [ 1210.128813][T11188] ? __lock_acquire+0x747/0x2de0 [ 1210.128848][T11188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1210.128921][T11188] ? __fget_files+0x2a/0x420 [ 1210.128945][T11188] ? __fget_files+0x3a2/0x420 [ 1210.128982][T11188] __x64_sys_sendmsg+0x1b1/0x290 [ 1210.129015][T11188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1210.129071][T11188] do_syscall_64+0x166/0x520 [ 1210.129108][T11188] ? trace_irq_disable+0x3b/0x140 [ 1210.129137][T11188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.129165][T11188] ? clear_bhb_loop+0x70/0xc0 [ 1210.129196][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.129223][T11188] RIP: 0033:0x7f305ef9e1d9 [ 1210.129248][T11188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.129270][T11188] RSP: 002b:00007f305d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1210.129298][T11188] RAX: ffffffffffffffda RBX: 00007f305f225fa0 RCX: 00007f305ef9e1d9 [ 1210.129318][T11188] RDX: 0000000000044080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1210.129335][T11188] RBP: 00007f305d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.129353][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.129369][T11188] R13: 00007f305f226038 R14: 00007f305f225fa0 R15: 00007f305f34fa48 [ 1210.129411][T11188] [ 1210.250691][T11177] tipc: Disabling bearer [ 1210.550228][T11176] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1210.775127][T11203] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5269'. [ 1210.776811][T11203] netlink: 'syz.4.5269': attribute type 1 has an invalid length. [ 1211.059603][T11226] netlink: 'syz.5.5274': attribute type 9 has an invalid length. [ 1211.089492][T32247] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1211.241448][T32247] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 1211.242490][T32247] usb 3-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 1211.242547][T32247] usb 3-1: too many endpoints for config 1 interface 1 altsetting 65: 86, using maximum allowed: 30 [ 1211.242575][T32247] usb 3-1: config 1 interface 1 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 1211.242597][T32247] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1211.242622][T32247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.548133][T11211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.548507][T11211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.570858][T32247] usb 3-1: selecting invalid altsetting 0 [ 1211.781352][T32247] usb 3-1: string descriptor 0 read error: -71 [ 1211.825447][T32247] usb 3-1: USB disconnect, device number 84 [ 1211.995251][T11285] netlink: 'syz.5.5280': attribute type 164 has an invalid length. [ 1212.030670][T11287] netlink: 'syz.5.5280': attribute type 164 has an invalid length. [ 1212.169107][ T5699] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1212.322513][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 1212.323403][ T5699] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1212.326475][ T5699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.356527][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.356547][ T5699] usb 2-1: Product: syz [ 1212.356559][ T5699] usb 2-1: Manufacturer: syz [ 1212.356570][ T5699] usb 2-1: SerialNumber: syz [ 1212.368037][ T5699] usb 2-1: config 0 descriptor?? [ 1212.397110][ T5699] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1212.596214][ T5692] usb 2-1: USB disconnect, device number 64 [ 1212.991923][ T5699] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1213.128980][ T5699] usb 6-1: device descriptor read/64, error -71 [ 1213.369102][ T5699] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1213.502032][ T5699] usb 6-1: device descriptor read/64, error -71 [ 1213.610409][ T5699] usb usb6-port1: attempt power cycle [ 1213.971295][ T5699] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1213.989368][ T5699] usb 6-1: device descriptor read/8, error -71 [ 1214.175484][T11332] FAULT_INJECTION: forcing a failure. [ 1214.175484][T11332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.175523][T11332] CPU: 1 UID: 0 PID: 11332 Comm: syz.2.5289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.175554][T11332] Tainted: [L]=SOFTLOCKUP [ 1214.175563][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1214.175577][T11332] Call Trace: [ 1214.175586][T11332] [ 1214.175596][T11332] dump_stack_lvl+0xe8/0x150 [ 1214.175635][T11332] should_fail_ex+0x410/0x560 [ 1214.175675][T11332] _copy_to_iter+0x1e4/0x1810 [ 1214.175702][T11332] ? __asan_memset+0x22/0x50 [ 1214.175725][T11332] ? __pfx__copy_to_iter+0x10/0x10 [ 1214.175754][T11332] ? crng_make_state+0xb6/0x600 [ 1214.175773][T11332] get_random_bytes_user+0x1d0/0x3d0 [ 1214.175794][T11332] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1214.175822][T11332] ? bpf_lsm_file_permission+0x9/0x20 [ 1214.175836][T11332] ? security_file_permission+0x75/0x260 [ 1214.175867][T11332] vfs_read+0x595/0xa80 [ 1214.175889][T11332] ? __pfx_vfs_read+0x10/0x10 [ 1214.175912][T11332] ? __fget_files+0x2a/0x420 [ 1214.175933][T11332] ksys_read+0x150/0x270 [ 1214.175950][T11332] ? __pfx_ksys_read+0x10/0x10 [ 1214.175974][T11332] do_syscall_64+0x166/0x520 [ 1214.175992][T11332] ? trace_irq_disable+0x3b/0x140 [ 1214.176010][T11332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.176026][T11332] ? clear_bhb_loop+0x70/0xc0 [ 1214.176066][T11332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.176083][T11332] RIP: 0033:0x7f50aa19e1d9 [ 1214.176098][T11332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.176113][T11332] RSP: 002b:00007f50ab0fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1214.176131][T11332] RAX: ffffffffffffffda RBX: 00007f50aa425fa0 RCX: 00007f50aa19e1d9 [ 1214.176143][T11332] RDX: 0000000000002002 RSI: 0000200000000040 RDI: 0000000000000003 [ 1214.176154][T11332] RBP: 00007f50ab0fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.176164][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.176174][T11332] R13: 00007f50aa426038 R14: 00007f50aa425fa0 R15: 00007f50aa54fa48 [ 1214.176199][T11332] [ 1214.229022][ T5699] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1214.250824][ T5699] usb 6-1: device descriptor read/8, error -71 [ 1214.361180][ T5699] usb usb6-port1: unable to enumerate USB device [ 1214.908969][T11346] FAULT_INJECTION: forcing a failure. [ 1214.908969][T11346] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.909007][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.1.5295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.909037][T11346] Tainted: [L]=SOFTLOCKUP [ 1214.909046][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1214.909059][T11346] Call Trace: [ 1214.909069][T11346] [ 1214.909079][T11346] dump_stack_lvl+0xe8/0x150 [ 1214.909117][T11346] should_fail_ex+0x410/0x560 [ 1214.909171][T11346] should_failslab+0xa8/0x100 [ 1214.909206][T11346] __kmalloc_noprof+0xfe/0x720 [ 1214.909240][T11346] ? rcu_is_watching+0x16/0xb0 [ 1214.909271][T11346] ? tomoyo_realpath_from_path+0xef/0x640 [ 1214.909293][T11346] ? tomoyo_realpath_from_path+0xef/0x640 [ 1214.909325][T11346] tomoyo_realpath_from_path+0xef/0x640 [ 1214.909359][T11346] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1214.909392][T11346] tomoyo_path_number_perm+0x246/0x5f0 [ 1214.909427][T11346] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1214.909458][T11346] ? __lock_acquire+0x747/0x2de0 [ 1214.909499][T11346] ? hook_file_ioctl+0x1f2/0x600 [ 1214.909555][T11346] ? __fget_files+0x2a/0x420 [ 1214.909580][T11346] ? __fget_files+0x2a/0x420 [ 1214.909600][T11346] ? __fget_files+0x3a2/0x420 [ 1214.909620][T11346] ? __fget_files+0x2a/0x420 [ 1214.909647][T11346] security_file_ioctl+0xc3/0x2a0 [ 1214.909680][T11346] __se_sys_ioctl+0x47/0x170 [ 1214.909712][T11346] do_syscall_64+0x166/0x520 [ 1214.909737][T11346] ? trace_irq_disable+0x3b/0x140 [ 1214.909763][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.909787][T11346] ? clear_bhb_loop+0x70/0xc0 [ 1214.909815][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.909838][T11346] RIP: 0033:0x7f39e799e1d9 [ 1214.909860][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.909880][T11346] RSP: 002b:00007f39e87f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1214.909905][T11346] RAX: ffffffffffffffda RBX: 00007f39e7c25fa0 RCX: 00007f39e799e1d9 [ 1214.909922][T11346] RDX: 0000200000000080 RSI: 00000000c040565e RDI: 0000000000000003 [ 1214.909938][T11346] RBP: 00007f39e87f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.909953][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.909968][T11346] R13: 00007f39e7c26038 R14: 00007f39e7c25fa0 R15: 00007f39e7d4fa48 [ 1214.910004][T11346] [ 1214.910015][T11346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1215.319169][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5298'. [ 1215.319196][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5298'. [ 1215.354992][ T4936] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 1215.455813][T11355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1215.456958][T11356] bond0: left promiscuous mode [ 1215.456975][T11356] bond0: left allmulticast mode [ 1215.516036][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.533856][T11356] bond4: (slave bond0): Enslaving as an active interface with a down link [ 1215.765341][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1215.765363][ T31] audit: type=1326 audit(1791707188.195:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.1.5300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39e799e1d9 code=0x0 [ 1216.188807][T32235] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1216.371026][T32235] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1216.372207][T32235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.372259][T32235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.378297][T32235] usb 5-1: config 0 descriptor?? [ 1216.421251][T32235] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1216.604484][T11423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.625572][T32235] pwc: send_video_command error -71 [ 1216.625591][T32235] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1216.625693][T32235] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1216.651823][T32235] usb 5-1: USB disconnect, device number 109 [ 1216.948927][T32253] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1217.101655][T32253] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1217.103116][T32253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.107455][T32253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.107482][T32253] usb 3-1: Product: syz [ 1217.107499][T32253] usb 3-1: Manufacturer: syz [ 1217.107515][T32253] usb 3-1: SerialNumber: syz [ 1217.167616][T32253] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1217.194263][T32253] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1217.376972][ T4936] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1217.426605][T32253] usb 3-1: USB disconnect, device number 85 [ 1217.481799][T11464] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5308'. [ 1217.498778][T32235] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1217.649502][T32235] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1217.655495][T32235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.655528][T32235] usb 2-1: Product: syz [ 1217.655547][T32235] usb 2-1: Manufacturer: syz [ 1217.655566][T32235] usb 2-1: SerialNumber: syz [ 1217.701577][T32235] usb 2-1: config 0 descriptor?? [ 1217.717751][T32235] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1217.786903][ T31] audit: type=1326 audit(1791707190.215:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.787135][ T31] audit: type=1326 audit(1791707190.215:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.787547][ T31] audit: type=1326 audit(1791707190.215:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.787763][ T31] audit: type=1326 audit(1791707190.215:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.787971][ T31] audit: type=1326 audit(1791707190.215:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.791857][ T31] audit: type=1326 audit(1791707190.215:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.892848][ T31] audit: type=1326 audit(1791707190.325:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.893107][ T31] audit: type=1326 audit(1791707190.325:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1217.918277][ T31] audit: type=1326 audit(1791707190.345:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.3.5313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1218.200534][T11446] macsec1: entered allmulticast mode [ 1218.200569][T11446] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1218.200622][T11446] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1218.207146][T11446] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1218.230658][T32235] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1218.230681][T32235] sq905c 2-1:0.0: Get version command failed [ 1218.230759][T32235] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1218.267446][T11446] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1218.327311][T32253] usb 2-1: USB disconnect, device number 65 [ 1218.342261][T32247] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1218.549971][T11496] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1218.598354][T11501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5317'. [ 1218.796208][T11511] tipc: Enabling of bearer rejected, failed to enable media [ 1218.814183][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1218.882914][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5321'. [ 1218.920034][T32253] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1218.961889][T11521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.072856][T32253] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1219.076812][T32253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.076863][T32253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1219.076894][T32253] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1219.076940][T32253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.123640][T32253] usb 5-1: config 0 descriptor?? [ 1219.331989][T32247] usb 5-1: USB disconnect, device number 110 [ 1219.510464][T11565] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1219.510503][T11565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.667794][T11575] FAULT_INJECTION: forcing a failure. [ 1219.667794][T11575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.667833][T11575] CPU: 0 UID: 0 PID: 11575 Comm: syz.1.5332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.667864][T11575] Tainted: [L]=SOFTLOCKUP [ 1219.667873][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1219.667886][T11575] Call Trace: [ 1219.667896][T11575] [ 1219.667907][T11575] dump_stack_lvl+0xe8/0x150 [ 1219.667947][T11575] should_fail_ex+0x410/0x560 [ 1219.667986][T11575] _copy_to_user+0x31/0xb0 [ 1219.668011][T11575] bpf_verifier_vlog+0x496/0x900 [ 1219.668050][T11575] bpf_verifier_log_write+0x11d/0x1a0 [ 1219.668078][T11575] ? __might_fault+0xaf/0x130 [ 1219.668114][T11575] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1219.668148][T11575] ? bpf_vlog_reset+0x2aa/0x340 [ 1219.668176][T11575] bpf_compute_subprog_arg_access+0xfdd/0x14d0 [ 1219.668238][T11575] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1219.668277][T11575] ? __kvmalloc_node_noprof+0x345/0x820 [ 1219.668306][T11575] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1219.668335][T11575] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1219.668376][T11575] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1219.668428][T11575] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1219.668470][T11575] bpf_check+0x2744/0x2ef0 [ 1219.668518][T11575] ? __pfx_bpf_check+0x10/0x10 [ 1219.668549][T11575] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1219.668588][T11575] bpf_prog_load+0x14d6/0x1c20 [ 1219.668630][T11575] ? __pfx_bpf_prog_load+0x10/0x10 [ 1219.668695][T11575] __sys_bpf+0xd0d/0xd90 [ 1219.668734][T11575] ? __pfx___sys_bpf+0x10/0x10 [ 1219.668775][T11575] ? __fget_files+0x2a/0x420 [ 1219.668816][T11575] ? ksys_write+0x242/0x270 [ 1219.668843][T11575] ? __pfx_ksys_write+0x10/0x10 [ 1219.668874][T11575] __x64_sys_bpf+0xba/0xd0 [ 1219.668903][T11575] do_syscall_64+0x166/0x520 [ 1219.668929][T11575] ? trace_irq_disable+0x3b/0x140 [ 1219.668955][T11575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.668979][T11575] ? clear_bhb_loop+0x70/0xc0 [ 1219.669008][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.669031][T11575] RIP: 0033:0x7f39e799e1d9 [ 1219.669053][T11575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.669073][T11575] RSP: 002b:00007f39e87f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1219.669099][T11575] RAX: ffffffffffffffda RBX: 00007f39e7c25fa0 RCX: 00007f39e799e1d9 [ 1219.669117][T11575] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 1219.669133][T11575] RBP: 00007f39e87f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.669148][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.669162][T11575] R13: 00007f39e7c26038 R14: 00007f39e7c25fa0 R15: 00007f39e7d4fa48 [ 1219.669200][T11575] [ 1220.498878][T32235] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1220.660475][T32235] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1220.665686][T32235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.665717][T32235] usb 2-1: Product: syz [ 1220.665740][T32235] usb 2-1: Manufacturer: syz [ 1220.665790][T32235] usb 2-1: SerialNumber: syz [ 1220.687247][T32235] usb 2-1: config 0 descriptor?? [ 1220.725197][T32235] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1220.839311][ T1221] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1221.005972][ T1221] usb 5-1: Using ep0 maxpacket: 8 [ 1221.006899][ T1221] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1221.026629][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.026656][ T1221] usb 5-1: Product: syz [ 1221.026673][ T1221] usb 5-1: Manufacturer: syz [ 1221.026688][ T1221] usb 5-1: SerialNumber: syz [ 1221.038405][T11589] macsec1: entered allmulticast mode [ 1221.038490][T11589] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1221.053617][T11589] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1221.077840][ T1221] usb 5-1: config 0 descriptor?? [ 1221.094229][T11589] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1221.096844][ T1221] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1221.119384][T32235] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1221.119407][T32235] sq905c 2-1:0.0: Get version command failed [ 1221.119511][T32235] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1221.128463][T32235] usb 2-1: USB disconnect, device number 66 [ 1221.128553][T11589] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1221.293497][ T5699] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1221.409720][T32247] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1221.570772][T32247] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1221.572178][T32247] usb 4-1: config 19 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1221.572213][T32247] usb 4-1: config 19 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1221.577169][T32247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.577198][T32247] usb 4-1: Product: syz [ 1221.577215][T32247] usb 4-1: Manufacturer: syz [ 1221.577232][T32247] usb 4-1: SerialNumber: syz [ 1221.831826][T32247] powermate: unknown product id 0240 [ 1221.863057][T32247] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:19.0/input/input108 [ 1221.931645][ C0] powermate: config urb returned -71 [ 1221.931808][ C0] powermate: config urb returned -71 [ 1221.932011][ C0] powermate: config urb returned -71 [ 1221.932239][ C0] powermate: config urb returned -71 [ 1221.990973][T32247] usb 4-1: USB disconnect, device number 73 [ 1221.991071][ C0] powermate 4-1:19.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1222.098719][ T1221] gspca_sonixj: i2c_w8 err -110 [ 1222.139287][ T1221] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1222.143216][ T1221] usb 5-1: USB disconnect, device number 111 [ 1222.347629][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5348'. [ 1222.347661][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 1222.576961][T11707] batadv_slave_1: entered promiscuous mode [ 1222.858410][T11719] loop3: detected capacity change from 0 to 7 [ 1222.873643][T11719] Dev loop3: unable to read RDB block 7 [ 1222.873676][T11719] loop3: unable to read partition table [ 1222.873900][T11719] loop3: partition table beyond EOD, truncated [ 1222.874946][T11719] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1222.949254][T32253] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1223.100029][T32253] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1223.100516][T32253] usb 2-1: config 0 has no interfaces? [ 1223.123739][T32253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.123760][T32253] usb 2-1: Product: syz [ 1223.123772][T32253] usb 2-1: Manufacturer: syz [ 1223.123783][T32253] usb 2-1: SerialNumber: syz [ 1223.132009][T32253] usb 2-1: config 0 descriptor?? [ 1223.390588][T32253] usb 2-1: USB disconnect, device number 67 [ 1223.512325][T11747] netlink: 'syz.4.5355': attribute type 1 has an invalid length. [ 1223.512370][T11746] syzkaller0: entered promiscuous mode [ 1223.512388][T11746] syzkaller0: entered allmulticast mode [ 1223.546292][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.671334][T11747] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1223.672600][ T1922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.702969][T11751] bond5: (slave veth0_to_bond): making interface the new active one [ 1223.704409][T11751] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1223.755656][T11787] FAULT_INJECTION: forcing a failure. [ 1223.755656][T11787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1223.755708][T11787] CPU: 0 UID: 0 PID: 11787 Comm: syz.3.5356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1223.755739][T11787] Tainted: [L]=SOFTLOCKUP [ 1223.755748][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1223.755762][T11787] Call Trace: [ 1223.755772][T11787] [ 1223.755782][T11787] dump_stack_lvl+0xe8/0x150 [ 1223.755822][T11787] should_fail_ex+0x410/0x560 [ 1223.755860][T11787] prepare_alloc_pages+0x223/0x600 [ 1223.755897][T11787] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1223.755932][T11787] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1223.755966][T11787] ? __pfx_policy_nodemask+0x10/0x10 [ 1223.756002][T11787] ? lock_acquire+0x115/0x350 [ 1223.756035][T11787] alloc_pages_mpol+0x21e/0x390 [ 1223.756075][T11787] folio_alloc_mpol_noprof+0x39/0x160 [ 1223.756111][T11787] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1223.756149][T11787] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1223.756194][T11787] do_wp_page+0x117d/0x4b80 [ 1223.756248][T11787] ? __pfx_do_wp_page+0x10/0x10 [ 1223.756280][T11787] ? do_raw_spin_lock+0x12b/0x2f0 [ 1223.756317][T11787] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1223.756363][T11787] handle_mm_fault+0x15d7/0x3750 [ 1223.756411][T11787] ? handle_mm_fault+0xf1/0x3750 [ 1223.756458][T11787] ? __pfx_handle_mm_fault+0x10/0x10 [ 1223.756507][T11787] ? __pfx___up_read+0x10/0x10 [ 1223.756544][T11787] ? lock_mm_and_find_vma+0xa7/0x340 [ 1223.756575][T11787] do_user_addr_fault+0x746/0x1340 [ 1223.756618][T11787] exc_page_fault+0x6a/0xc0 [ 1223.756647][T11787] asm_exc_page_fault+0x26/0x30 [ 1223.756669][T11787] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1223.756713][T11787] Code: 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 68 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1223.756732][T11787] RSP: 0018:ffffc900040cfab0 EFLAGS: 00050206 [ 1223.756753][T11787] RAX: ffffffff84e0b201 RBX: 0000000000160003 RCX: 0000000000130303 [ 1223.756770][T11787] RDX: 0000000000000000 RSI: ffff88808a82fd00 RDI: 0000200000033000 [ 1223.756786][T11787] RBP: ffff88807f8f5000 R08: 0000000000000002 R09: 0000000000000003 [ 1223.756801][T11787] R10: dffffc0000000000 R11: ffffed101152c000 R12: 0000200000163303 [ 1223.756818][T11787] R13: 00007ffffffff000 R14: ffff88808a800000 R15: 0000200000003300 [ 1223.756845][T11787] ? _copy_from_user+0x31/0xb0 [ 1223.756874][T11787] _copy_to_user+0x8a/0xb0 [ 1223.756899][T11787] __rhtab_map_lookup_and_delete_batch+0xa1f/0xca0 [ 1223.756952][T11787] ? __pfx_rhtab_map_lookup_batch+0x10/0x10 [ 1223.756979][T11787] bpf_map_do_batch+0x27f/0x630 [ 1223.757010][T11787] ? bpf_lsm_bpf+0x9/0x20 [ 1223.757032][T11787] ? security_bpf+0x7e/0x2d0 [ 1223.757066][T11787] __sys_bpf+0xa9f/0xd90 [ 1223.757104][T11787] ? __pfx___sys_bpf+0x10/0x10 [ 1223.757145][T11787] ? __fget_files+0x2a/0x420 [ 1223.757186][T11787] ? ksys_write+0x242/0x270 [ 1223.757216][T11787] ? __pfx_ksys_write+0x10/0x10 [ 1223.757247][T11787] __x64_sys_bpf+0xba/0xd0 [ 1223.757277][T11787] do_syscall_64+0x166/0x520 [ 1223.757302][T11787] ? trace_irq_disable+0x3b/0x140 [ 1223.757328][T11787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.757353][T11787] ? clear_bhb_loop+0x70/0xc0 [ 1223.757394][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.757416][T11787] RIP: 0033:0x7f342c99e1d9 [ 1223.757437][T11787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.757455][T11787] RSP: 002b:00007f342d874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1223.757478][T11787] RAX: ffffffffffffffda RBX: 00007f342cc26090 RCX: 00007f342c99e1d9 [ 1223.757495][T11787] RDX: 0000000000000038 RSI: 00002000000031c0 RDI: 0000000000000018 [ 1223.757511][T11787] RBP: 00007f342d874090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.757525][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.757539][T11787] R13: 00007f342cc26128 R14: 00007f342cc26090 R15: 00007f342cd4fa48 [ 1223.757576][T11787] [ 1224.194117][T11772] bond5: entered promiscuous mode [ 1224.194153][T11772] veth0_to_bond: entered promiscuous mode [ 1224.194389][T11772] bond5: entered allmulticast mode [ 1224.194407][T11772] veth0_to_bond: entered allmulticast mode [ 1224.255986][T11747] macvlan3: entered promiscuous mode [ 1224.256015][T11747] macvlan3: entered allmulticast mode [ 1224.279433][T11747] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1224.285515][T11747] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1224.497775][T11801] netlink: 'syz.1.5360': attribute type 12 has an invalid length. [ 1224.643631][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5357'. [ 1224.643657][T11823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5357'. [ 1224.796250][ T5699] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1224.893917][T11831] netlink: 'syz.1.5363': attribute type 1 has an invalid length. [ 1224.985057][ T5699] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1225.009512][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.009546][ T5699] usb 4-1: Product: syz [ 1225.009563][ T5699] usb 4-1: Manufacturer: syz [ 1225.009580][ T5699] usb 4-1: SerialNumber: syz [ 1225.015617][ T5699] usb 4-1: config 0 descriptor?? [ 1225.051979][ T5699] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1225.372238][T11803] macsec1: entered allmulticast mode [ 1225.372272][T11803] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1225.372913][T11803] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1225.375332][T11803] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1225.458289][ T5699] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1225.458312][ T5699] sq905c 4-1:0.0: Get version command failed [ 1225.458387][ T5699] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1225.505068][ T5699] usb 4-1: USB disconnect, device number 74 [ 1225.865906][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1225.865934][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1225.958401][T11876] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1226.168815][ T1221] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1226.299116][ T1221] usb 2-1: device descriptor read/64, error -71 [ 1226.319681][T32255] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1226.471491][T32255] usb 5-1: Using ep0 maxpacket: 32 [ 1226.472382][T32255] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1226.473863][T32255] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.473899][T32255] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.475637][T32255] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1226.475670][T32255] usb 5-1: Product: syz [ 1226.475726][T32255] usb 5-1: Manufacturer: syz [ 1226.538925][ T1221] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1226.546460][T32255] hub 5-1:4.0: USB hub found [ 1226.668893][ T1221] usb 2-1: device descriptor read/64, error -71 [ 1226.763122][T32255] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 1226.779066][ T1221] usb usb2-port1: attempt power cycle [ 1226.800101][T32255] usb 5-1: USB disconnect, device number 112 [ 1226.906558][T11938] FAULT_INJECTION: forcing a failure. [ 1226.906558][T11938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.906618][T11938] CPU: 0 UID: 0 PID: 11938 Comm: syz.3.5385 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.906641][T11938] Tainted: [L]=SOFTLOCKUP [ 1226.906647][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1226.906657][T11938] Call Trace: [ 1226.906667][T11938] [ 1226.906675][T11938] dump_stack_lvl+0xe8/0x150 [ 1226.906705][T11938] should_fail_ex+0x410/0x560 [ 1226.906734][T11938] _copy_to_user+0x31/0xb0 [ 1226.906751][T11938] simple_read_from_buffer+0xe1/0x170 [ 1226.906782][T11938] proc_fail_nth_read+0x1bb/0x230 [ 1226.906802][T11938] ? common_file_perm+0x20e/0x2b0 [ 1226.906829][T11938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.906851][T11938] ? rw_verify_area+0x24a/0x4c0 [ 1226.906869][T11938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.906891][T11938] vfs_read+0x213/0xa80 [ 1226.906912][T11938] ? __pfx___mutex_lock+0x10/0x10 [ 1226.906939][T11938] ? __pfx_vfs_read+0x10/0x10 [ 1226.906958][T11938] ? __fget_files+0x2a/0x420 [ 1226.906976][T11938] ? __fget_files+0x3a2/0x420 [ 1226.906991][T11938] ? __fget_files+0x2a/0x420 [ 1226.907012][T11938] ksys_read+0x150/0x270 [ 1226.907032][T11938] ? __pfx_ksys_read+0x10/0x10 [ 1226.907052][T11938] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1226.907081][T11938] do_syscall_64+0x166/0x520 [ 1226.907099][T11938] ? trace_irq_disable+0x3b/0x140 [ 1226.907118][T11938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.907135][T11938] ? clear_bhb_loop+0x70/0xc0 [ 1226.907155][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.907171][T11938] RIP: 0033:0x7f342c95ea0e [ 1226.907187][T11938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1226.907202][T11938] RSP: 002b:00007f342d894fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1226.907219][T11938] RAX: ffffffffffffffda RBX: 00007f342d8956c0 RCX: 00007f342c95ea0e [ 1226.907231][T11938] RDX: 000000000000000f RSI: 00007f342d8950a0 RDI: 0000000000000003 [ 1226.907242][T11938] RBP: 00007f342d895090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.907252][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.907262][T11938] R13: 00007f342cc26038 R14: 00007f342cc25fa0 R15: 00007f342cd4fa48 [ 1226.907287][T11938] [ 1227.189056][ T1221] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1227.209364][ T1221] usb 2-1: device descriptor read/8, error -71 [ 1227.350377][T32247] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1227.448989][ T1221] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1227.469437][ T1221] usb 2-1: device descriptor read/8, error -71 [ 1227.499836][T32247] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1227.500866][T32247] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1227.500900][T32247] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.502581][T32247] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1227.502614][T32247] usb 5-1: Product: syz [ 1227.502627][T32247] usb 5-1: Manufacturer: syz [ 1227.552238][T32247] hub 5-1:4.0: USB hub found [ 1227.555374][T32255] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1227.581171][ T1221] usb usb2-port1: unable to enumerate USB device [ 1227.715036][T32247] hub 5-1:4.0: 1 port detected [ 1227.723859][T32255] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1227.738388][T32255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.738417][T32255] usb 4-1: Product: syz [ 1227.738435][T32255] usb 4-1: Manufacturer: syz [ 1227.738451][T32255] usb 4-1: SerialNumber: syz [ 1227.770678][T32255] usb 4-1: config 0 descriptor?? [ 1227.775856][T32255] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1228.062128][T11946] macsec1: entered allmulticast mode [ 1228.062153][T11946] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1228.063111][T11946] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1228.091861][T11946] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1228.126008][T32255] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1228.126026][T32255] sq905c 4-1:0.0: Get version command failed [ 1228.126104][T32255] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1228.168271][T32255] usb 4-1: USB disconnect, device number 75 [ 1228.171441][T32253] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1228.209770][T32247] hub 5-1:4.0: set hub depth failed [ 1228.228352][T32247] usb 5-1: USB disconnect, device number 113 [ 1228.331585][T32253] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1228.333955][T32253] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.334008][T32253] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.334036][T32253] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1228.334073][T32253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.392954][T32253] usb 6-1: config 0 descriptor?? [ 1229.046817][ T1221] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1229.209645][ T1221] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1229.211050][ T1221] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1229.211078][ T1221] usb 5-1: config 0 has no interface number 0 [ 1229.211121][ T1221] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1229.211150][ T1221] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1229.214038][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.214066][ T1221] usb 5-1: Product: syz [ 1229.214082][ T1221] usb 5-1: Manufacturer: syz [ 1229.214098][ T1221] usb 5-1: SerialNumber: syz [ 1229.291550][ T1221] usb 5-1: config 0 descriptor?? [ 1229.292508][T12002] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1229.294991][ T1221] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1229.323737][ T1221] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1229.710108][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.710684][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.717027][T12002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.749580][T12002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.751081][ T5699] usb 5-1: USB disconnect, device number 114 [ 1229.787440][ T5699] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1229.811625][ T5699] cyberjack 5-1:0.69: device disconnected [ 1229.839362][T32255] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1229.990404][T32255] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1229.996521][T32255] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1229.996551][T32255] usb 2-1: Product: syz [ 1230.026615][T32255] usb 2-1: config 0 descriptor?? [ 1230.044783][T32255] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1230.046608][T32255] usb 2-1: Detected FT232H [ 1230.229483][T32255] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1230.232003][T32255] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 1230.235275][T32255] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1230.433193][T32255] usb 2-1: USB disconnect, device number 72 [ 1230.481674][T32255] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1230.503381][T32255] ftdi_sio 2-1:0.0: device disconnected [ 1230.611067][ T4936] Bluetooth: hci0: command 0x0406 tx timeout [ 1230.996956][T32253] usbhid 6-1:0.0: can't add hid device: -71 [ 1230.997073][T32253] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1231.052254][T32253] usb 6-1: USB disconnect, device number 21 [ 1231.201330][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1231.201350][ T31] audit: type=1326 audit(1791707203.635:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.201410][ T31] audit: type=1326 audit(1791707203.635:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.205426][ T31] audit: type=1326 audit(1791707203.635:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.205622][ T31] audit: type=1326 audit(1791707203.635:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.206837][ T31] audit: type=1326 audit(1791707203.635:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.236165][ T31] audit: type=1326 audit(1791707203.665:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.337125][ T31] audit: type=1326 audit(1791707203.765:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.344887][ T31] audit: type=1326 audit(1791707203.775:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.451312][ T31] audit: type=1326 audit(1791707203.885:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.451375][ T31] audit: type=1326 audit(1791707203.885:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.3.5402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342c99e1d9 code=0x7ffc0000 [ 1231.894182][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5405'. [ 1232.158974][ T1221] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1232.319429][ T1221] usb 6-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 1232.320668][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1232.320702][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1232.320746][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.378343][ T1221] usb 6-1: config 0 descriptor?? [ 1232.384818][T12114] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1232.638330][ T1221] usb 6-1: USB disconnect, device number 22 [ 1233.537293][T12165] input: syz1 as /devices/virtual/input/input109 [ 1234.438728][T32237] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1234.458471][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1234.480694][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1234.480714][T12207] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1234.510367][ T5699] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1234.589868][T32237] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1234.590474][T32237] usb 4-1: config 0 has no interfaces? [ 1234.590509][T32237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.593736][T32237] usb 4-1: config 0 descriptor?? [ 1234.660445][ T5699] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1234.663249][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.663285][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1234.663302][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1234.663319][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.663350][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.018123][T12217] FAULT_INJECTION: forcing a failure. [ 1235.018123][T12217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1235.018156][T12217] CPU: 1 UID: 0 PID: 12217 Comm: syz.4.5419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.018179][T12217] Tainted: [L]=SOFTLOCKUP [ 1235.018185][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1235.018196][T12217] Call Trace: [ 1235.018203][T12217] [ 1235.018211][T12217] dump_stack_lvl+0xe8/0x150 [ 1235.018253][T12217] should_fail_ex+0x410/0x560 [ 1235.018284][T12217] prepare_alloc_pages+0x223/0x600 [ 1235.018310][T12217] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1235.018333][T12217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1235.018358][T12217] ? __pfx_policy_nodemask+0x10/0x10 [ 1235.018381][T12217] ? lock_acquire+0x115/0x350 [ 1235.018405][T12217] alloc_pages_mpol+0x21e/0x390 [ 1235.018432][T12217] folio_alloc_mpol_noprof+0x39/0x160 [ 1235.018457][T12217] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1235.018483][T12217] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1235.018520][T12217] do_wp_page+0x117d/0x4b80 [ 1235.018557][T12217] ? __pfx_do_wp_page+0x10/0x10 [ 1235.018579][T12217] ? do_raw_spin_lock+0x12b/0x2f0 [ 1235.018626][T12217] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1235.018668][T12217] handle_mm_fault+0x15d7/0x3750 [ 1235.018713][T12217] ? handle_mm_fault+0xf1/0x3750 [ 1235.018757][T12217] ? __pfx_handle_mm_fault+0x10/0x10 [ 1235.018803][T12217] ? __pfx___up_read+0x10/0x10 [ 1235.018838][T12217] ? lock_mm_and_find_vma+0xa7/0x340 [ 1235.018866][T12217] do_user_addr_fault+0x746/0x1340 [ 1235.018906][T12217] exc_page_fault+0x6a/0xc0 [ 1235.018933][T12217] asm_exc_page_fault+0x26/0x30 [ 1235.018955][T12217] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1235.018987][T12217] Code: 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 68 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1235.019007][T12217] RSP: 0018:ffffc90004cb7ab0 EFLAGS: 00050206 [ 1235.019027][T12217] RAX: ffffffff84e0b201 RBX: 0000000000160003 RCX: 000000000012f303 [ 1235.019042][T12217] RDX: 0000000000000000 RSI: ffff888089230d00 RDI: 0000200000034000 [ 1235.019058][T12217] RBP: ffff88807ae49800 R08: 0000000000000002 R09: 0000000000000003 [ 1235.019073][T12217] R10: dffffc0000000000 R11: ffffed101126c000 R12: 0000200000163303 [ 1235.019089][T12217] R13: 00007ffffffff000 R14: ffff888089200000 R15: 0000200000003300 [ 1235.019113][T12217] ? _copy_from_user+0x31/0xb0 [ 1235.019141][T12217] _copy_to_user+0x8a/0xb0 [ 1235.019165][T12217] __rhtab_map_lookup_and_delete_batch+0xa1f/0xca0 [ 1235.019215][T12217] ? __pfx_rhtab_map_lookup_batch+0x10/0x10 [ 1235.019241][T12217] bpf_map_do_batch+0x27f/0x630 [ 1235.019270][T12217] ? bpf_lsm_bpf+0x9/0x20 [ 1235.019290][T12217] ? security_bpf+0x7e/0x2d0 [ 1235.019321][T12217] __sys_bpf+0xa9f/0xd90 [ 1235.019356][T12217] ? __pfx___sys_bpf+0x10/0x10 [ 1235.019395][T12217] ? __fget_files+0x2a/0x420 [ 1235.019434][T12217] ? ksys_write+0x242/0x270 [ 1235.019460][T12217] ? __pfx_ksys_write+0x10/0x10 [ 1235.019489][T12217] __x64_sys_bpf+0xba/0xd0 [ 1235.019530][T12217] do_syscall_64+0x166/0x520 [ 1235.019551][T12217] ? trace_irq_disable+0x3b/0x140 [ 1235.019569][T12217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.019585][T12217] ? clear_bhb_loop+0x70/0xc0 [ 1235.019605][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.019621][T12217] RIP: 0033:0x7f305ef9e1d9 [ 1235.019635][T12217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.019649][T12217] RSP: 002b:00007f305d1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1235.019665][T12217] RAX: ffffffffffffffda RBX: 00007f305f226090 RCX: 00007f305ef9e1d9 [ 1235.019677][T12217] RDX: 0000000000000038 RSI: 00002000000031c0 RDI: 0000000000000018 [ 1235.019688][T12217] RBP: 00007f305d1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.019698][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1235.019707][T12217] R13: 00007f305f226128 R14: 00007f305f226090 R15: 00007f305f34fa48 [ 1235.019732][T12217] [ 1235.457131][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1235.457150][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1235.480747][ T5699] gud 2-1:1.0: Failed to add properties (error=-71) [ 1235.480771][ T5699] gud 2-1:1.0: probe with driver gud failed with error -71 [ 1235.542501][ T5699] usb 2-1: USB disconnect, device number 73 [ 1235.637873][T12232] netlink: 'syz.2.5420': attribute type 1 has an invalid length. [ 1235.744736][T12232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.802820][T12257] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1235.820550][T12232] bond0: entered promiscuous mode [ 1235.820576][T12232] bond0: entered allmulticast mode [ 1235.881407][T12257] macvlan4: entered promiscuous mode [ 1235.881427][T12257] macvlan4: entered allmulticast mode [ 1235.887963][T12257] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1236.304666][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.307403][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.520657][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.522032][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.760775][T12301] netlink: 'syz.2.5430': attribute type 4 has an invalid length. [ 1237.419632][T32253] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1237.570117][T32253] usb 3-1: New USB device found, idVendor=150a, idProduct=1201, bcdDevice= 0.00 [ 1237.571093][T32253] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 1237.571153][T32253] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1237.571183][T32253] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1237.571223][T32253] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1237.571247][T32253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.575006][T32253] usb 3-1: config 0 descriptor?? [ 1237.671770][T32237] usb 4-1: USB disconnect, device number 76 [ 1237.740591][ T5699] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1237.756614][ T1221] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1237.769547][T32255] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1237.889314][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 1237.890034][ T5699] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1237.890929][ T5699] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1237.890949][ T5699] usb 5-1: config 2 has no interface number 0 [ 1237.890979][ T5699] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1237.892738][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.892756][ T5699] usb 5-1: Product: syz [ 1237.892768][ T5699] usb 5-1: Manufacturer: syz [ 1237.892786][ T5699] usb 5-1: SerialNumber: syz [ 1237.931398][T32255] usb 2-1: New USB device found, idVendor=13d3, idProduct=3202, bcdDevice=ec.02 [ 1237.948295][ T1221] usb 6-1: Using ep0 maxpacket: 32 [ 1237.974522][T32255] usb 2-1: config 252 has an invalid interface number: 85 but max is 0 [ 1237.974553][T32255] usb 2-1: config 252 has no interface number 0 [ 1237.974585][T32255] usb 2-1: config 252 interface 85 has no altsetting 0 [ 1237.977424][ T1221] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1238.009890][ T1221] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1238.009920][ T1221] usb 6-1: config 0 has no interface number 0 [ 1238.021411][T32255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.021546][T32255] usb 2-1: Product: syz [ 1238.021589][T32255] usb 2-1: Manufacturer: syz [ 1238.021633][T32255] usb 2-1: SerialNumber: syz [ 1238.032702][T32237] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1238.057668][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.057697][ T1221] usb 6-1: Product: syz [ 1238.057713][ T1221] usb 6-1: Manufacturer: syz [ 1238.057730][ T1221] usb 6-1: SerialNumber: syz [ 1238.085790][ T1221] usb 6-1: config 0 descriptor?? [ 1238.086101][T32253] tivo_slide 0003:150A:1201.003D: ignoring exceeding usage max [ 1238.146348][T32253] tivo_slide 0003:150A:1201.003D: hidraw0: USB HID v0.11 Joystick [HID 150a:1201] on usb-dummy_hcd.2-1/input0 [ 1238.178861][T32237] usb 4-1: Using ep0 maxpacket: 32 [ 1238.180468][T32237] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1238.180536][T32237] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1238.181872][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.181898][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.183382][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.183408][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.185072][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.185097][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.186436][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.186462][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.187771][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.187796][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.251654][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.251683][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.306005][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.306063][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.312637][T32253] usb 3-1: USB disconnect, device number 86 [ 1238.316899][T32237] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1238.316952][T32237] usb 4-1: config 0 has no interface number 0 [ 1238.355775][T32237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.355807][T32237] usb 4-1: Product: syz [ 1238.355824][T32237] usb 4-1: Manufacturer: syz [ 1238.355841][T32237] usb 4-1: SerialNumber: syz [ 1238.390292][ T5699] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1238.393869][T32237] usb 4-1: config 0 descriptor?? [ 1238.414889][T32237] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 1238.446281][T32255] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1238.446348][T32255] dvb-usb: bulk message failed: -22 (3/0) [ 1238.466787][ T5699] usb 5-1: USB disconnect, device number 115 [ 1238.500363][T32255] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1238.503946][T32255] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1238.504008][T32255] usb 2-1: media controller created [ 1238.553913][T12351] fido_id[12351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1238.573725][ T1221] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1238.573756][ T1221] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1238.597618][T32255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1238.625911][T32237] etas_es58x 4-1:0.2: could not retrieve the product info string [ 1238.662041][T32255] dvb-usb: bulk message failed: -22 (6/0) [ 1238.662135][T32255] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1238.686947][T32255] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input111 [ 1238.704753][T32255] dvb-usb: schedule remote query interval to 150 msecs. [ 1238.704809][T32255] dvb-usb: bulk message failed: -22 (3/0) [ 1238.725139][T32255] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1238.736425][T32255] usb 2-1: USB disconnect, device number 74 [ 1238.765429][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.765480][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.875973][T32255] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1239.389296][T32255] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1239.410590][ T5692] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1239.412479][ T5699] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1239.513247][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 1239.513486][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1239.513520][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1239.513843][ T5280] etas_es58x 4-1:0.2 can1: bit-timing not yet defined [ 1239.561256][T32255] usb 3-1: Using ep0 maxpacket: 32 [ 1239.562009][T32255] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1239.563337][T32255] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1239.563377][T32255] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1239.563399][T32255] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1239.563470][T32255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1239.563487][T32255] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1239.563522][T32255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1239.563545][T32255] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1239.563569][T32255] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1239.563633][T32255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.567218][T32255] usb 3-1: config 0 descriptor?? [ 1239.570708][ T5692] usb 5-1: Using ep0 maxpacket: 8 [ 1239.573152][ T5692] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1239.581924][ T5692] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.582010][ T5692] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1239.582169][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.582281][ T5692] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1239.582352][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1239.582487][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1239.582571][ T5692] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1239.582703][ T5692] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1239.584628][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 1239.593348][ T5692] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.593385][ T5692] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1239.593426][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.593455][ T5692] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1239.593506][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1239.593540][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1239.593569][ T5692] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1239.593597][ T5692] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1239.618827][ T5692] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.618982][ T5692] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1239.619176][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.619303][ T5692] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1239.619367][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1239.619494][ T5692] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1239.619585][ T5692] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1239.619711][ T5692] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1239.624922][ T5699] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1239.670503][ T5692] usb 5-1: string descriptor 0 read error: -22 [ 1239.671034][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.790121][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1239.790213][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.041994][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.042579][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.066443][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.077887][ T5699] usb 2-1: config 0 descriptor?? [ 1240.085648][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.136907][T32255] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 87 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1240.165298][T32255] usb 3-1: USB disconnect, device number 87 [ 1240.165632][ T5692] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1240.193192][T32255] usblp0: removed [ 1240.306780][ T5699] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1240.325492][T32253] usb 5-1: USB disconnect, device number 116 [ 1240.429705][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.429867][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.429925][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.429984][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.430039][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.430120][ C0] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 1240.433012][T32237] usb 4-1: USB disconnect, device number 77 [ 1240.433631][ T5280] etas_es58x 4-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 1240.462944][T32237] etas_es58x 4-1:0.2: Disconnecting syz syz [ 1240.651097][T32255] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1240.820151][T32255] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1240.821500][T32255] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1240.821529][T32255] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1240.821602][T32255] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1240.824406][T32255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.824435][T32255] usb 3-1: Product: syz [ 1240.824453][T32255] usb 3-1: Manufacturer: syz [ 1240.824496][T32255] usb 3-1: SerialNumber: syz [ 1240.894988][T32255] usb 3-1: config 0 descriptor?? [ 1240.909781][T32255] hub 3-1:0.0: bad descriptor, ignoring hub [ 1240.909836][T32255] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1240.941829][ T5692] usb 2-1: USB disconnect, device number 75 [ 1241.105668][T32255] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1241.130946][T32255] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1241.131855][T32255] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1241.131914][T32255] usb 3-1: media controller created [ 1241.177770][T32255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.293145][T32255] DVB: Unable to find symbol dib7000p_attach() [ 1241.293164][T32255] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1241.320647][T32247] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1241.419346][T32255] rc_core: IR keymap rc-dib0700-rc5 not found [ 1241.419367][T32255] Registered IR keymap rc-empty [ 1241.419666][T32255] dvb-usb: could not initialize remote control. [ 1241.419678][T32255] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1241.424223][T32255] usb 3-1: USB disconnect, device number 88 [ 1241.479547][T32237] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1241.480096][T32247] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1241.481360][T32247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1241.481415][T32247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.516639][T32247] usb 4-1: config 0 descriptor?? [ 1241.526522][T12502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1241.582402][T32255] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1241.641121][T32237] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1241.642511][T32237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1241.642550][T32237] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.642626][T32237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.672231][T32237] usb 5-1: config 0 descriptor?? [ 1241.890347][ T1221] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 1241.890675][ T1221] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1241.926939][ T1221] usb 6-1: USB disconnect, device number 23 [ 1241.950102][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950141][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950170][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950200][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950228][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950256][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950284][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950312][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950340][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.950368][T32247] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 1241.952652][T32247] hid-picolcd 0003:04D8:C002.003E: unexpected long global item [ 1241.953418][T32247] hid-picolcd 0003:04D8:C002.003E: device report parse failed [ 1241.953526][T32247] hid-picolcd 0003:04D8:C002.003E: probe with driver hid-picolcd failed with error -22 [ 1242.152885][T32247] usb 4-1: USB disconnect, device number 78 [ 1242.219791][T32237] kovaplus 0003:1E7D:2D50.003F: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 1242.574521][T32237] kovaplus 0003:1E7D:2D50.003F: couldn't init struct kovaplus_device [ 1242.574580][T32237] kovaplus 0003:1E7D:2D50.003F: couldn't install mouse [ 1242.620522][T32237] kovaplus 0003:1E7D:2D50.003F: probe with driver kovaplus failed with error -71 [ 1242.636519][T32237] usb 5-1: USB disconnect, device number 117 [ 1242.739524][T32255] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1242.839750][T32247] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1242.889555][T32255] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1242.890677][T32255] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.890711][T32255] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1242.890742][T32255] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1242.890767][T32255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.893389][T32255] usb 2-1: config 0 descriptor?? [ 1242.979478][ T5699] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1243.030029][T32247] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1243.031419][T32247] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1243.034158][T32247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.034186][T32247] usb 6-1: Product: syz [ 1243.034229][T32247] usb 6-1: Manufacturer: syz [ 1243.034247][T32247] usb 6-1: SerialNumber: syz [ 1243.154095][T12609] netlink: 'syz.2.5448': attribute type 1 has an invalid length. [ 1243.168258][ T5699] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1243.169528][ T5699] usb 4-1: config 0 has no interfaces? [ 1243.192033][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.192061][ T5699] usb 4-1: Product: syz [ 1243.192131][ T5699] usb 4-1: Manufacturer: syz [ 1243.192150][ T5699] usb 4-1: SerialNumber: syz [ 1243.226535][ T5699] usb 4-1: config 0 descriptor?? [ 1243.304510][ T5699] usb 6-1: USB disconnect, device number 24 [ 1243.529405][T32253] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1243.679390][T32253] usb 5-1: Using ep0 maxpacket: 8 [ 1243.680082][T32253] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1243.681377][T32253] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1243.681400][T32253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1243.683956][T32253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.683982][T32253] usb 5-1: Product: syz [ 1243.684000][T32253] usb 5-1: Manufacturer: syz [ 1243.684011][T32253] usb 5-1: SerialNumber: syz [ 1243.687270][T32253] usb 5-1: config 0 descriptor?? [ 1243.829409][T32253] rc_core: IR keymap rc-streamzap not found [ 1243.829427][T32253] Registered IR keymap rc-empty [ 1243.831074][T32253] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1243.834995][T32253] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input113 [ 1243.930863][T32237] usb 5-1: USB disconnect, device number 118 [ 1245.486459][T32255] usbhid 2-1:0.0: can't add hid device: -71 [ 1245.486541][T32255] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1245.512021][T32255] usb 2-1: USB disconnect, device number 76 [ 1245.650150][T12691] FAULT_INJECTION: forcing a failure. [ 1245.650150][T12691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.650179][T12691] CPU: 0 UID: 0 PID: 12691 Comm: syz.1.5459 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.650208][T12691] Tainted: [L]=SOFTLOCKUP [ 1245.650214][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1245.650224][T12691] Call Trace: [ 1245.650231][T12691] [ 1245.650257][T12691] dump_stack_lvl+0xe8/0x150 [ 1245.650297][T12691] should_fail_ex+0x410/0x560 [ 1245.650336][T12691] _copy_from_user+0x2d/0xb0 [ 1245.650360][T12691] video_usercopy+0x359/0x1430 [ 1245.650396][T12691] ? hook_file_ioctl+0x1f2/0x600 [ 1245.650429][T12691] ? __pfx___video_do_ioctl+0x10/0x10 [ 1245.650452][T12691] ? __pfx_video_usercopy+0x10/0x10 [ 1245.650481][T12691] ? __fget_files+0x2a/0x420 [ 1245.650499][T12691] ? __fget_files+0x2a/0x420 [ 1245.650513][T12691] ? __fget_files+0x3a2/0x420 [ 1245.650552][T12691] v4l2_ioctl+0x18d/0x1e0 [ 1245.650580][T12691] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1245.650607][T12691] __se_sys_ioctl+0xfc/0x170 [ 1245.650640][T12691] do_syscall_64+0x166/0x520 [ 1245.650661][T12691] ? trace_irq_disable+0x3b/0x140 [ 1245.650680][T12691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.650697][T12691] ? clear_bhb_loop+0x70/0xc0 [ 1245.650717][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.650734][T12691] RIP: 0033:0x7f39e799e1d9 [ 1245.650749][T12691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.650766][T12691] RSP: 002b:00007f39e87f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.650784][T12691] RAX: ffffffffffffffda RBX: 00007f39e7c25fa0 RCX: 00007f39e799e1d9 [ 1245.650796][T12691] RDX: 0000200000000080 RSI: 00000000c040565e RDI: 0000000000000003 [ 1245.650807][T12691] RBP: 00007f39e87f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.650818][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.650828][T12691] R13: 00007f39e7c26038 R14: 00007f39e7c25fa0 R15: 00007f39e7d4fa48 [ 1245.650853][T12691] [ 1245.927702][ T1221] usb 4-1: USB disconnect, device number 79 [ 1246.308805][T32237] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1246.459921][T32237] usb 5-1: Using ep0 maxpacket: 32 [ 1246.462496][T32237] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1246.464585][T32237] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1246.502283][T32237] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1246.502304][T32237] usb 5-1: Product: syz [ 1246.502315][T32237] usb 5-1: Manufacturer: syz [ 1246.502327][T32237] usb 5-1: SerialNumber: syz [ 1246.533180][T32237] usb 5-1: config 0 descriptor?? [ 1246.534453][T12705] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1246.561008][T32237] hub 5-1:0.0: bad descriptor, ignoring hub [ 1246.561042][T32237] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1246.615355][T12725] netlink: 'syz.2.5466': attribute type 10 has an invalid length. [ 1246.615384][T12725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1246.615406][T12725] batadv0: entered allmulticast mode [ 1246.617031][T12725] bridge0: port 1(batadv0) entered blocking state [ 1246.618252][T12725] bridge0: port 1(batadv0) entered disabled state [ 1246.639272][T12725] batadv0: entered promiscuous mode [ 1246.759629][T27851] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1246.759645][T27851] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1247.207611][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5465'. [ 1247.660870][T32237] usb 5-1: USB disconnect, device number 119 [ 1248.251884][T12777] netlink: 'syz.1.5480': attribute type 12 has an invalid length. [ 1248.561614][T12790] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1248.561654][T12790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1248.632995][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5483'. [ 1248.780748][T32237] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1248.940198][T32237] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1248.944215][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5486'. [ 1248.944258][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5486'. [ 1248.944867][T32237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.944891][T32237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.944919][T32237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.960566][T32237] usb 4-1: config 0 descriptor?? [ 1249.062787][T12811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5488'. [ 1249.406795][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5489'. [ 1249.406830][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5489'. [ 1249.929014][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5490'. [ 1249.929036][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5490'. [ 1250.634515][T12827] ip_tables: iptables: counters copy to user failed while replacing table [ 1251.499642][T32255] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1251.660576][T32255] usb 5-1: Using ep0 maxpacket: 32 [ 1251.662234][T32255] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1251.665429][T32255] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1251.665457][T32255] usb 5-1: config 0 has no interface number 0 [ 1251.665503][T32255] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1251.712405][T32255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.712437][T32255] usb 5-1: Product: syz [ 1251.712454][T32255] usb 5-1: Manufacturer: syz [ 1251.712471][T32255] usb 5-1: SerialNumber: syz [ 1251.715883][T32255] usb 5-1: config 0 descriptor?? [ 1251.754421][T12844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1251.898464][T32237] usbhid 4-1:0.0: can't add hid device: -71 [ 1251.912162][T32237] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1251.958772][T32237] usb 4-1: USB disconnect, device number 80 [ 1251.986511][T12844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1252.068867][ T5683] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1252.219434][ T5683] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1252.224504][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.224532][ T5683] usb 6-1: Product: syz [ 1252.224550][ T5683] usb 6-1: Manufacturer: syz [ 1252.224567][ T5683] usb 6-1: SerialNumber: syz [ 1252.250374][ T5683] usb 6-1: config 0 descriptor?? [ 1252.276040][ T5683] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1252.566481][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1252.566534][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1252.590576][ T5699] syz_tun: tun_net_xmit 110 [ 1252.614887][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.643182][ T5683] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1252.643207][ T5683] sq905c 6-1:0.0: Get version command failed [ 1252.643283][ T5683] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 1252.646350][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.687232][ T5683] usb 6-1: USB disconnect, device number 25 [ 1252.771800][T12891] bridge0: port 1(batadv0) entered blocking state [ 1252.774205][T12891] bridge0: port 1(batadv0) entered forwarding state [ 1252.774719][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.913125][T12891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1252.913156][T12891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1252.930481][T12891] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1252.989818][ T5683] syz_tun: tun_net_xmit 110 [ 1253.008389][T12893] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1253.054063][T12858] macsec1: entered allmulticast mode [ 1253.054086][T12858] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1253.054173][T12858] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1253.058117][T12858] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1253.073059][T12858] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1253.113055][T32253] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1253.160843][T32255] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1253.161079][T32255] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1253.192884][T32255] usb 5-1: USB disconnect, device number 120 [ 1253.250939][ T50] syz_tun: tun_net_xmit 110 [ 1253.279805][T32253] syz_tun: tun_net_xmit 110 [ 1253.331079][T32253] syz_tun: tun_net_xmit 110 [ 1253.669886][ T1221] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1253.819616][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 1253.825108][ T1221] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1253.842660][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.842689][ T1221] usb 4-1: Product: syz [ 1253.842705][ T1221] usb 4-1: Manufacturer: syz [ 1253.842722][ T1221] usb 4-1: SerialNumber: syz [ 1253.867400][ T1221] usb 4-1: config 0 descriptor?? [ 1253.894860][ T1221] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1253.894907][ T1221] pctv452e: pctv452e_power_ctrl: 1 [ 1253.894907][ T1221] [ 1253.894954][ T1221] usb 4-1: selecting invalid altsetting 3 [ 1253.894970][ T1221] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1253.894970][ T1221] [ 1253.894988][ T1221] dvb-usb: bulk message failed: -22 (5/0) [ 1253.899626][ T5699] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1253.949930][ T1221] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1253.951865][ T1221] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1253.953719][ T1221] usb 4-1: media controller created [ 1253.953770][ T1221] dvb-usb: bulk message failed: -22 (8/0) [ 1253.953786][ T1221] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1253.953838][ T1221] dvb-usb: MAC address reading failed. [ 1254.037629][ T1221] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1254.070270][ T5699] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1254.071345][ T5699] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1254.071373][ T5699] usb 3-1: config 0 has no interface number 0 [ 1254.071414][ T5699] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1254.073701][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.073730][ T5699] usb 3-1: Product: syz [ 1254.073746][ T5699] usb 3-1: Manufacturer: syz [ 1254.073763][ T5699] usb 3-1: SerialNumber: syz [ 1254.076878][ T5699] usb 3-1: config 0 descriptor?? [ 1254.166152][ T5699] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1254.245251][ T1221] DVB: Unable to find symbol stb0899_attach() [ 1254.245271][ T1221] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1254.280937][T32247] syz_tun: tun_net_xmit 90 [ 1254.319433][T32253] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1254.321697][ T5699] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1254.328851][ T1221] rc_core: IR keymap rc-tt-1500 not found [ 1254.328889][ T1221] Registered IR keymap rc-empty [ 1254.334100][ T1221] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1254.350371][ T1221] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input114 [ 1254.379652][ T1221] dvb-usb: schedule remote query interval to 100 msecs. [ 1254.379727][ T1221] pctv452e: pctv452e_power_ctrl: 0 [ 1254.379727][ T1221] [ 1254.379761][ T1221] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1254.414736][ T1221] usb 4-1: USB disconnect, device number 81 [ 1254.430185][T32237] usb 3-1: USB disconnect, device number 89 [ 1254.462203][T32237] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1254.476388][T32255] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1254.485429][T32253] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 1254.497128][ T5699] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1254.508222][T32253] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.508256][T32253] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.508287][T32253] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1254.508326][T32253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.534477][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.567429][T32253] usb 6-1: config 0 descriptor?? [ 1254.604590][ T5699] usb 5-1: config 0 descriptor?? [ 1254.640868][ T5699] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1254.641978][T32255] usb 2-1: Using ep0 maxpacket: 32 [ 1254.643509][T32255] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1254.644893][T32255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.686611][ T1221] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1254.688046][T32255] usb 2-1: config 0 descriptor?? [ 1254.821650][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.837659][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.912293][T32255] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1254.940434][T32255] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1254.940466][T32255] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1255.022766][T32253] saitek 0003:06A3:0CD0.0040: hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.5-1/input0 [ 1255.070147][ T5699] gspca_cpia1: usb_control_msg 03, error -32 [ 1255.223043][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1255.223073][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1255.283094][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.286017][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.583154][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5522'. [ 1255.611076][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 1255.623087][ C1] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 1255.631612][ C1] CPU: 1 UID: 0 PID: 13034 Comm: syz.1.5522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.642594][ C1] Tainted: [L]=SOFTLOCKUP [ 1255.646953][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1255.657025][ C1] RIP: 0010:saitek_event+0x51/0x2b0 [ 1255.662375][ C1] Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4d 5a 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 5a 1b f9 49 8b 06 48 89 04 24 [ 1255.682106][ C1] RSP: 0018:ffffc90000a18830 EFLAGS: 00010006 [ 1255.688214][ C1] RAX: 0000000000000003 RBX: ffff88803250e788 RCX: 0000000000040000 [ 1255.696214][ C1] RDX: ffffc90002292000 RSI: 000000000000004a RDI: 000000000000004b [ 1255.704207][ C1] RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000 [ 1255.712200][ C1] R10: ffff88803250e7a8 R11: ffffffff891d95c0 R12: ffffffff910c0c68 [ 1255.720201][ C1] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88803ee88000 [ 1255.728212][ C1] FS: 00007f39e87f96c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1255.737172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1255.743776][ C1] CR2: 00002000000013c0 CR3: 0000000063968000 CR4: 00000000003526f0 [ 1255.751795][ C1] Call Trace: [ 1255.755097][ C1] [ 1255.757959][ C1] ? hid_process_event+0x18f/0x620 [ 1255.763244][ C1] hid_process_event+0x436/0x620 [ 1255.768221][ C1] ? hidraw_report_event+0x37e/0x3a0 [ 1255.773542][ C1] ? __pfx_saitek_event+0x10/0x10 [ 1255.778601][ C1] hid_report_raw_event+0xf6a/0x1900 [ 1255.783939][ C1] __hid_input_report+0x454/0x580 [ 1255.789009][ C1] ? __pfx_saitek_raw_event+0x10/0x10 [ 1255.794433][ C1] hid_ctrl+0x204/0x580 [ 1255.798719][ C1] ? usb_anchor_suspend_wakeups+0x3b/0x50 [ 1255.804523][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 1255.809932][ C1] dummy_timer+0xa91/0x4cc0 [ 1255.814583][ C1] ? update_se+0x90/0x1080 [ 1255.819075][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1255.824061][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1255.829920][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1255.834888][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1255.840140][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1255.845279][ C1] handle_softirqs+0x226/0x860 [ 1255.850084][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1255.854890][ C1] __irq_exit_rcu+0xcb/0x220 [ 1255.859528][ C1] irq_exit_rcu+0x9/0x30 [ 1255.863808][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1255.869572][ C1] [ 1255.872562][ C1] [ 1255.875524][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1255.881534][ C1] RIP: 0010:_raw_read_unlock_irqrestore+0x47/0x80 [ 1255.887983][ C1] Code: f7 e8 9d 8f b8 f5 f7 c3 00 02 00 00 74 05 e8 80 da e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c4 88 a9 f5 65 48 8b 05 7c 8b aa 08 48 85 c0 74 18 5b 41 5e e9 [ 1255.907630][ C1] RSP: 0018:ffffc9000415ea20 EFLAGS: 00000206 [ 1255.913736][ C1] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000001 [ 1255.921740][ C1] RDX: 0000000000000006 RSI: ffffffff8e4696a9 RDI: 0000000000000001 [ 1255.929784][ C1] RBP: 0000000000000000 R08: ffffffff917a727f R09: 1ffffffff22f4e4f [ 1255.937783][ C1] R10: dffffc0000000000 R11: fffffbfff22f4e50 R12: dffffc0000000000 [ 1255.945781][ C1] R13: ffff88802ccb5000 R14: ffffffff912c43a0 R15: 0000000000000001 [ 1255.953791][ C1] netlink_broadcast_filtered+0xa8/0xea0 [ 1255.959464][ C1] ? __alloc_skb+0x27a/0x7a0 [ 1255.964099][ C1] ? make_kgid+0x1d1/0x6a0 [ 1255.968674][ C1] ? __asan_memcpy+0x40/0x70 [ 1255.973325][ C1] netlink_broadcast+0x37/0x50 [ 1255.978128][ C1] kobject_uevent_net_broadcast+0x4bc/0x560 [ 1255.984131][ C1] kobject_uevent_env+0x566/0x9e0 [ 1255.989196][ C1] netdev_queue_update_kobjects+0x33a/0x6b0 [ 1255.995214][ C1] netdev_register_kobject+0x277/0x350 [ 1256.000731][ C1] register_netdevice+0x1433/0x1eb0 [ 1256.006003][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 1256.011580][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1256.016381][ C1] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1256.021964][ C1] ? register_vlan_dev+0x34f/0x850 [ 1256.027119][ C1] register_vlan_dev+0x3a0/0x850 [ 1256.032101][ C1] vlan_newlink+0x4b2/0x610 [ 1256.036633][ C1] ? __pfx_vlan_newlink+0x10/0x10 [ 1256.041681][ C1] rtnl_newlink_create+0x305/0x7b0 [ 1256.046821][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1256.052487][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1256.057547][ C1] ? ns_capable+0x89/0xe0 [ 1256.061914][ C1] rtnl_newlink+0x166d/0x1c30 [ 1256.066619][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1256.071670][ C1] ? do_syscall_64+0x166/0x520 [ 1256.076479][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.082631][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1256.087943][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1256.093166][ C1] ? nlmon_xmit+0xb0/0x100 [ 1256.097646][ C1] ? kmem_cache_free+0x182/0x650 [ 1256.102618][ C1] ? __lock_acquire+0x747/0x2de0 [ 1256.107610][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 1256.112926][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1256.118158][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 1256.123301][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 1256.128646][ C1] ? lock_acquire+0x115/0x350 [ 1256.133353][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1256.138399][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 1256.143460][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1256.148598][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1256.154101][ C1] ? ref_tracker_free+0x689/0x830 [ 1256.159163][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1256.164574][ C1] netlink_rcv_skb+0x226/0x4a0 [ 1256.169371][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1256.174881][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1256.180218][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1256.185456][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1256.190696][ C1] netlink_unicast+0x7bd/0x940 [ 1256.195507][ C1] netlink_sendmsg+0x813/0xb40 [ 1256.200310][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.205636][ C1] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1256.211328][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.216648][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 1256.221728][ C1] ____sys_sendmsg+0x54e/0x850 [ 1256.226530][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.231875][ C1] ? import_iovec+0x73/0xa0 [ 1256.236417][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1256.241121][ C1] ? __lock_acquire+0x747/0x2de0 [ 1256.246086][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.251314][ C1] ? futex_wait+0x2a2/0x390 [ 1256.255860][ C1] ? __fget_files+0x2a/0x420 [ 1256.260473][ C1] ? __fget_files+0x3a2/0x420 [ 1256.265181][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 1256.270155][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1256.275676][ C1] do_syscall_64+0x166/0x520 [ 1256.280361][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.286473][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1256.291206][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.297125][ C1] RIP: 0033:0x7f39e799e1d9 [ 1256.301574][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.321204][ C1] RSP: 002b:00007f39e87f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.329653][ C1] RAX: ffffffffffffffda RBX: 00007f39e7c25fa0 RCX: 00007f39e799e1d9 [ 1256.337662][ C1] RDX: 0000000020000808 RSI: 0000200000000280 RDI: 000000000000000c [ 1256.345663][ C1] RBP: 00007f39e7a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1256.353666][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.361660][ C1] R13: 00007f39e7c26038 R14: 00007f39e7c25fa0 R15: 00007f39e7d4fa48 [ 1256.369694][ C1] [ 1256.372772][ C1] Modules linked in: [ 1256.376701][ C1] ---[ end trace 0000000000000000 ]--- [ 1256.382176][ C1] RIP: 0010:saitek_event+0x51/0x2b0 [ 1256.382216][ C1] Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4d 5a 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 5a 1b f9 49 8b 06 48 89 04 24 [ 1256.382235][ C1] RSP: 0018:ffffc90000a18830 EFLAGS: 00010006 [ 1256.382253][ C1] RAX: 0000000000000003 RBX: ffff88803250e788 RCX: 0000000000040000 [ 1256.382267][ C1] RDX: ffffc90002292000 RSI: 000000000000004a RDI: 000000000000004b [ 1256.382280][ C1] RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000 [ 1256.382293][ C1] R10: ffff88803250e7a8 R11: ffffffff891d95c0 R12: ffffffff910c0c68 [ 1256.382308][ C1] R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88803ee88000 [ 1256.382322][ C1] FS: 00007f39e87f96c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1256.382346][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1256.382359][ C1] CR2: 00002000000013c0 CR3: 0000000063968000 CR4: 00000000003526f0 [ 1256.382387][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1256.484748][ C1] Kernel Offset: disabled [ 1256.489108][ C1] Rebooting in 86400 seconds..