last executing test programs: 9.237410214s ago: executing program 3 (id=1323): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_clone(0x2211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) readv(r2, &(0x7f0000001000)=[{&(0x7f0000000440)=""/61, 0x3d}], 0x1) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) sendmmsg$alg(r2, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='\n', 0x1}], 0x1, 0x0, 0x0, 0x400c000}], 0x1, 0x0) setpriority(0x1, 0x0, 0x1) ioctl$FBIOBLANK(r0, 0x4611, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x48002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0xc, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x240c0014) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r6}) r9 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8809020}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x54, 0x140f, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x300, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000000c0)=[0x3], &(0x7f00000005c0)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0x7}) 8.765222352s ago: executing program 3 (id=1328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9c010000100001022cbc7000009718ef000000ff020000000000000000000000004001ac9c7b71fa00000040000000000000000000ecdf000000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) 8.645988641s ago: executing program 3 (id=1330): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000019}) epoll_pwait(r1, &(0x7f0000001100)=[{}], 0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={r5, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r3, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0xc00c012) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) 8.475853689s ago: executing program 3 (id=1333): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000500)={[&(0x7f00000001c0)='\x00']}, 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1f4, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x710202, 0x0) read(r5, &(0x7f0000000040)=""/35, 0x23) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') (async) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') (async) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async) close(r3) (async) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000500)={[&(0x7f00000001c0)='\x00']}, 0x0) (async) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) (async) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1f4, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x710202, 0x0) (async) read(r5, &(0x7f0000000040)=""/35, 0x23) (async) 8.182246606s ago: executing program 4 (id=1334): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x20) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x1e}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000cc0)=[@nested_create_vm={0x12d, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x86b}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x67, 0x20, {0x3, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control32=0x4020, 0xfffffffffffff939, 0xb, 0x8}}, @out_dx={0x6a, 0x28, {0xd54a, 0x5, 0x7ff}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x80a0000, 0x2eaf}}, @wr_drn={0x68, 0x20, {0x1, 0x9f}}, @nested_vmresume={0x130, 0x18}, @code={0xa, 0x83, {"0f070fb2430066460f1ef64e0fc79b005800000faeb008000000c74424001a010000c744240274a00000ff2c248f6828866e5781c74424009661ffffc744240207000000c7442406000000000f011c2466b866008ed0c744240000000000c7442402b75e0000c7442406000000000f011c24"}}, @nested_amd_invlpga={0x17d, 0x20, {0x26000, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x12, 0x2}}, @set_irq_handler={0xc8, 0x20, {0xf9, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x400, 0x0, 0x196, 0x8}}, @in_dx={0x69, 0x20, {0xa98e, 0x5}}, @uexit={0x0, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x7f, 0x6f, 0x3e45, 0x100}}, @cpuid={0x64, 0x18, {0x6, 0x400}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2031, 0x5, 0x40, 0xc}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_syzos={0x136, 0x170, {0x0, 0x7, [@out_dx={0x6a, 0x28, {0x88ba, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x804, 0x1, 0x6, 0xfffffffffffffffe}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x497, 0x3, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0xfffffffffffffff9}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xc1, 0x9}}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xd9, 0x3, 0x1, 0x3}}]}}, @out_dx={0x6a, 0x28, {0x7384, 0x3, 0x1}}, @in_dx={0x69, 0x20, {0x43b4, 0x2}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2401, 0x1, 0x9, 0xc596}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x55b}) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000b00)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000180)={0xce, 0x0, r5}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) unshare(0x20000400) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fallocate(r8, 0x40, 0x400, 0xe9b4) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0x8001) ioctl$NS_GET_PARENT(r9, 0x8004b707, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) 7.926900123s ago: executing program 4 (id=1335): socket$inet6_udp(0xa, 0x2, 0x0) 7.891213773s ago: executing program 4 (id=1336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close(r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 7.810356593s ago: executing program 4 (id=1337): syz_emit_vhci(0x0, 0x7) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="17714da747db4668f66b852ba8b825ced6242db71004107367cf39e608510d19baa6713ee4dbf7b24edac9eb32bf1088405169ea9d5d6eb8eec78cca123e2d0bed19567f2916ca2ceb8ab2e6967164479492f795c958723a360bfbe0b8639b0f3619315bec97b1f3b75fd1adc2e60d0edbfe7f4f6ba40a9343adb68fdb142074fe995925f3f4710c90c2ad"], 0x0) 5.338246629s ago: executing program 3 (id=1345): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0) 4.843443701s ago: executing program 0 (id=1350): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0xc0442) (async) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000000), 0x90) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x800) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="f4", 0x1}], 0x1, 0x0, 0x0, 0x4008080}, 0x20044081) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xea, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x8c, &(0x7f0000000340)=ANY=[], 0x0) (async, rerun: 32) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0xe, 0x81, 0x0, 0x6, 0x6, 0x67, 0x0, 0x3, 0x6, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6}) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x5c, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x8}, {0x10, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_RATE={0x6, 0x5, {0x6, 0xa}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_CHAIN={0x8, 0xb, 0xb1c}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_RATE={0x6, 0x5, {0x4, 0x9d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008844}, 0x4040004) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x1ff, 0x1, 0x4, 0xfffff49d, 0x2, 0x9, 0x1c, 0xa}}) 4.674294065s ago: executing program 4 (id=1352): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000afff000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000cb1a0000e1000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000004c00000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.302641279s ago: executing program 4 (id=1355): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x20000000000000}) fcntl$lock(r1, 0x7, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select(0x40, &(0x7f0000000080)={0x8, 0x8000, 0x2, 0x10000000000007, 0x2, 0x7, 0x9, 0x103}, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x44035) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) preadv2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x2, 0x800003fd, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="27ee472c0f", 0x5}, {&(0x7f0000000180)="86526598a9c698461800b128cd6d18b6f31ef5e3f9c3144ae9003f32", 0x1c}, {&(0x7f00000001c0)}], 0x3) 4.149066779s ago: executing program 0 (id=1356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000018000001fefffffffbdbdf3ba800007e00000000000000000600150006000000100016800c000180080002002b5cbb00"], 0x34}}, 0x20000400) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRESHEX=r4, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}}, 0x20040854) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 3.526814465s ago: executing program 2 (id=1357): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.numa_stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRESHEX, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x8}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x10}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x16}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000400a20000000080a01010000000000000000020040090900010073797a30000000002c000000050a03000000000000000000027a30000000000900030073797a3200000000140000001100010000004000000000000700000a"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 3.408841558s ago: executing program 2 (id=1358): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@delchain={0x24, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x20}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRESDEC=r0, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x34041843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) splice(r11, 0x0, r12, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) recvmsg$can_raw(r11, &(0x7f0000001980)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/207, 0xcf}, {&(0x7f0000001700)=""/192, 0xc0}, {&(0x7f00000017c0)=""/62, 0x3e}, {&(0x7f0000001800)=""/195, 0xc3}], 0x5}, 0x100) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.158005055s ago: executing program 2 (id=1359): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES64=r0]) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f00000002c0)={0x8000, 0x4, 0x7}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x1f00000000000000) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000140)={0x2, 0xffffffff, 0x24d6}) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0xe, 0x8, 0x0, 0x4, 0x5}}, {0x4}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xfffffffffffffe43, 0x1, {0x6, 0x2, 0x6, 0x0, 0xb0, 0x100, 0x1ff, 0x2}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r10, 0x0) dup3(r5, r2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 2.398504s ago: executing program 1 (id=1361): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x32, 0x0, @thr={&(0x7f0000000540)="de4d710b4e34c16efe6e30dfd1c9918442940c9a4a4a7b06acbcd03469e46182a4e282aac76da1b4bd1ca3e8c36fc92591db113b05f38bbf2448d9db8b3d2bc5a499273155f0cfafdfe7a6415990fbd35ff92b299e47a9bb4a5d792655cc71ddb664cef217b76cba219c6b", &(0x7f00000005c0)="668d565bf5802dbe5425a0a0d548869bd5d35a4911ff55c7829fa0992046a575678da21b6c300138709ff8ae2145427a9e890f4a8f6deda943df1160a252915db57ed5924e3722f806aaebe2e3eb15cf1eb2b7a056ae30e726927d4a6879e2c761c1bf945c124becef8d9f28065feb0154457d236a3a16456e62dd7c9d7b1e1243767148ac2d69889c60c90f1cb85c3948e26ced663eba7ef20bb929935e131f84bc61f011e55887d3ded85ce2d2a3e084"}}, &(0x7f00000006c0)=0x0) pselect6(0x40, &(0x7f0000000780)={0x8000, 0xffffffffffffe1be, 0xc, 0x6, 0x3, 0x4, 0x8, 0xa}, &(0x7f00000007c0)={0x4, 0xb, 0x4, 0x5, 0x3, 0xbe07, 0x8000000000000000, 0x6}, &(0x7f0000000840)={0x40000000000000, 0x0, 0x2d7, 0x1, 0x3, 0x7, 0x44, 0x9}, &(0x7f0000000880), &(0x7f0000000900)={&(0x7f00000008c0)={[0x4]}, 0x8}) timer_settime(r3, 0x1, &(0x7f0000000700), &(0x7f0000000740)) r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000004c0), 0x8240, 0x0) fremovexattr(r4, &(0x7f0000000500)=@known='trusted.overlay.upper\x00') ptrace(0x10, r2) ptrace$ARCH_SET_GS(0x1e, r2, 0xfffffffffffffffe, 0x1002) r5 = gettid() r6 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @svalue=0x7}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}}, {0xd, '\x00', @st={0x4, [{0x3, @uvalue=0x4}, {0x0, @svalue=0x2}, {0x2, @svalue=0x6}, {0x0, @svalue=0x2}]}, 0x74}, {0x16, '\x00', @data, 0x2}, {0x9, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue}, {0x0, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x7}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000001}, {0x3, @svalue=0x4}, {0x1, @svalue=0x1}, {0x2, @uvalue=0x3ff}]}, 0x1b}, {0x1c, '\x00', @data=0x7fffffff, 0x7}, {0x2a, '\x00', @st={0x4, [{0x2, @uvalue=0xc}, {0x0, @svalue=0xffffffffffffffff}, {0x3, @svalue}, {0x1, @svalue=0x3ff}]}, 0x3}]}) tkill(r5, 0x16) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000040)={'syz0\x00', {0x8, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x7f, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x400004, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x1ff, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0xeb, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0x4, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0xd, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x86f8, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x2, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x5, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0xfffffffd, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0x2000000d, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x4, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x401, 0x3, 0xfffffff9, 0x401, 0x401, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x10000000, 0x0, 0x6, 0x5, 0x4, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) 2.20328461s ago: executing program 3 (id=1362): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) syz_usb_connect$midi(0x5, 0x3d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12f00f0300000020000102030109022b00010105880309040000010103200807240300f7000105b1266e9bf700"/61], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.007622135s ago: executing program 1 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x78, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}]}, {0x10, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.974826097s ago: executing program 0 (id=1364): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24ab}], 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [], [0x0, 0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x2e, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffff00, 0xff000000], [], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x4}}, @common=@dst={{0x48}, {0x7, 0x3, 0x0, [0x7, 0x5, 0xe, 0x10, 0x8, 0x7, 0x8001, 0x1, 0x7, 0xfff7, 0x8, 0x9, 0x32, 0xfc2f, 0xf801, 0x9], 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffd, 0x6}, {0x2, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x5, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xb8, 0x1a6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x2, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0xc, 0x400000000, 0x6, 0xf73b], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.916375151s ago: executing program 1 (id=1365): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000b0ff000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000cb1a0000e1000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000004c00000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.86741699s ago: executing program 2 (id=1366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x9d}]}) (async) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') (async) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) (async) tkill(r1, 0x12) (async) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f000048c000/0x4000)=nil, 0x4000, 0xd, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000004c0), 0x202, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000680)) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaa958, 0x54, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) splice(r6, 0x0, r6, 0x0, 0x2, 0x2) (async) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r7 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r7, 0xff7f0000, 0x10, 0x0) (async, rerun: 32) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) read$FUSE(r8, &(0x7f0000002440)={0x2020}, 0x2020) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000070000002800018008000700", @ANYRES32=0x0, @ANYBLOB="060001000a000000140004"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x90) 1.804482789s ago: executing program 1 (id=1367): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r1 = io_uring_setup(0xbbc, &(0x7f00000000c0)={0x0, 0xdf62, 0x2, 0x2, 0x210}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) fchmodat(r2, &(0x7f0000000140)='./file0\x00', 0x40) io_uring_enter(r3, 0x6da0, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r1, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000600)={@val={0x0, 0x1b}, @val={0x3, 0x1, 0x4, 0x0, 0x7, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "1516ee", 0x226, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x2e, 0x15, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x7}, @generic={0x1a, 0x99, "0950a4322e4611675c34085d2f10c943fa3de2076807ab6c7ab2e5f67785dd8ec1972d03b5577a0bb4557da97e8f92e5e12176c3fc805ee308d5c58b94967d07c3f9794964a865459f2eb9296114fb1f0fad464b64e7eb37cf7c770f0a6daa7e22434f11f644f01f920d4b0945f284e95474eacd2a9f0fa779b835ad756e1039072d9507aad3d58c735ea182854d349b1508b3512ff2a96c95"}, @ra={0x5, 0x2, 0x8}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5, 0x3270, 0x0], "17caad2bc29e62737424f76dbcae3fdefb04a872b1e106f94969bb8c0d254b654c8c3577e9d57fb9741b89cca77197df5a"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7], "11a62ba77afa683514e876fac6c60c33ff5ada4ab2dc807c606c068b91651b6b3c42de8fea205624b8a0c08abd10c0a018c376f7a918d5df40969cd1e4947419e4624aab85e2a22d10d9a7848675123802dd410c7168af576e42afedb1d9d73b9cbe73b0801686ae647228e77f587531bbc9aa1a2abe694bc80f9c9f1442971c799853a5f55fe633cd5b499574c5f8d8924555dedc58f4a9b488c2f4544370889eaf51eafaacc54de62593810bb67e7e07f85b2ca6a7dc0fa6841eeb4e0df7ff0e66e6075262ea4d77229ad3d76aa1092ba141913bb33c9d"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x2a, 0x1, 0x1, 0x0, 0x4, 0xc}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0xa, 0x2, 0x9, 0x1, 0x0, 0x2, 0x0, 0x7}, 0x2, {0x8147, 0xffff, 0x2, 0xf, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "927d1834b4babf747bcafef03f2a57d0ab38226df2bbff559c"}}}}}, 0x25c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'tunl0\x00', 0x0}) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto(r4, 0x0, 0x60, 0x468ed, &(0x7f00000004c0)=@nl=@unspec, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 1.67307709s ago: executing program 2 (id=1368): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x4b, 0x6}}}}}]}}]}}, 0x0) (async) syz_usb_connect$uac3(0x1, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffffff, 0x0, 0x200180, 0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x28, {0x28, 0x23, "1ba57fb007fe001607d695f268e84b9f2798b2974b1fc634f26cda6a71142117060800e26af9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.511340044s ago: executing program 2 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000922e329499ccdc3ec11775a2ce5f229312d0dfc837324d54b963f4edec0bdc6f964969", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x8001}}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="0fae04f00fc00266b9800000c00f326635000100000f30260f01df0f0e66b80500000066b9360000000f01d926659066b99c01000066b80a00000066ba000000000f30baf80c66b8b86f9f8666efbafc0cb84500efbaf80c66b80ab7378e66efbafc0cec", 0x64}], 0x1, 0x0, 0x0, 0x0) 1.50949611s ago: executing program 1 (id=1370): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$inet6(0xa, 0x800, 0x6f) bind$inet6(r4, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 774.993936ms ago: executing program 0 (id=1371): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_clone3(&(0x7f0000000340)={0x1180000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x8, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x7f, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x4, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x1ff, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0xfff, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0x4, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0xd, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x86f8, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x2, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x5, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x4, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x401, 0x3, 0xfffffff9, 0x401, 0x401, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x10000000, 0x0, 0x6, 0x5, 0x4, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) 705.246079ms ago: executing program 1 (id=1372): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r1, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000100)="48274bfc77", 0x5}], 0x1}}], 0x1, 0x20088085) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x8, 0x4800, 0x3e, &(0x7f0000000280)="e0b2b22abdbca518e7bd73f0818e2d9173c3734292fbf797ebdad8e7f8fbc33a1c8229a9a40f010553a143c991c55803d1f45008a3784e7f0a036c36da06"}], 0x1}) 474.927237ms ago: executing program 0 (id=1373): socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x20, 0x0, 0x4000}, 0x4000) 0s ago: executing program 0 (id=1374): syz_io_uring_setup(0x5f38, &(0x7f0000000240)={0x0, 0x2, 0x800, 0x3, 0x3}, 0x0, 0x0, 0x0) userfaultfd(0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="385c0000000000200000800e706e5f46b4269c3a9d002414e8bc0080dfff000000000000", @ANYRES32=r2, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, r2, 0x404, 0x28000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x600}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r4], 0x323001) inotify_init() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f"], 0xfdef) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYBLOB="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"], 0xa) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r10, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000000c0)=r10, 0x4) syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003a4a9e410240430cf5ac7010203010902430a040706707209046a590d7ef1af050d24020100040c003c7163333f0a240201080476065a070d240201510207033770e81df90a24020275c706000905021040000b0808072501040301800905060008009a0c7809050a1eff03af010909050d0c4000da402209050610200007050207250100060000090507024000060809072501000903000905061000021010000725010c062400072501000205000905020040000709020905021020000505e5090502002000020180f522f0868066d548088a360a435af8daff4f8aafdc866960423ed23d90c38403076f8aa7ab5f1db934043950191f8f03fd77b19facbdafdfedaa7b8b802718b13bf3ab54ba7f7738fa223398dcb40a0fbcf7749a701786a9ab468c6b4947f74f56f8651ab3df62565aaf41fac6272d9cf132c3daa4021fd7f194ae38c8ef70113c8387f2a955107e9c48b06df941164200164a30cbe05cff257601e7a2fabf78a7aa6bef29fe1c5db7c5d1f8636b0c649ab7c5e1eb38017845bc6d1b3833290c79cc8036c08b4ead55e9fbd899ac0e506e51fbeb8376f19f1e3c0f8e0ba47621a9ce166f994132f353e4bba766626e8c52208a66ac09050400000231160ac22113ef654760a487de0e3b616cf5acf1bbddd852bf533aa654325a47da4950cc1ae8e3776538e28f4c36aa75ca1dff639d6cff05d30a899332f515c9e0f9af757422b279fa3a54ae58f428f1c90d7b5a953255198446f152f970b9111076fb28767b6822b4543d865a484adfad64305b7c2d9ad56bae448e454258676ec0338d6824b4836cf6f8be59e211c3b9127d93f1f1b33a6a51b5aed4728f2c29bc56c2cd1c063c662b2797224604aa72b6099e0bcc6bd89178005ff75f1617c08935ec020725010825030009050e0700020100150904b6f8064ff95d0709050d00ff03090804310f598af0687afda0ffeb3c0a6d4f210103a916da17b93667c3069e3fde9939c5a32bf1516fb2a5bd4a61901bb77a78e0090507032000050c0209050d10ff0306060e0725010002020009050d080800093cff0725010c02060009058000ff036203080725010c0600000905080100040e0b050725010c030400522c484bd7193fea573993e3457da2979234b2975313454bac1d5db56961a830f5e8521ba35c6ff7591db7ebf818ded24583c9f980069a2daa039af1de18b6e24d31e0b000135a9c82c573333d980a539cb8090494050cff00000909050a082000020805d42307fa26a9f1759ea4126798c8dd6a1ffcbcea9bb7c934d06becd804fea5272ac88f2e0a5b585953f879c532dc49689144b45b91cd117b74772ec4e1c3a8d8330b9aef465af9385a6ab5f9b889fedb4a98a7c2a9bd42a198e1587286523c42dcaac3b02e56b21ce208a1423f31e93c9d2148f59e886b523c182931efac19f5f210b018f858bcb2452921695231b02efd4d2bb38ecd37c0524562eba13a2fe35256ce0543698eb752d79809e577af01c11df84ca383e2f0f977e0c03888d5f6dfbb7dab60d9b2b93c4b7ffbec23d29b6048ba61b10617b6ba4608b154e9612b4bf484fc27cc793ad4b85d030b5d8a30a5fef7e3e247b1ac87863f46850373713960168f37fc65a7f6341de1e27b288f387235086718e5d5437870bde354627b63c23b377b31db9256f54c868c1a705207f7df598d8af0ff1bb68c14c2a5c49f0612bb44a0e5be195b0084b104a90c4f4959bd7dc1256fb4e7c70acd10aa087097b6ce18034553f46a873e19c36cce1d57f4e7d3c8ee5f7f06d82d2b950fcab3d2bbe9deb309050c081000014007ddbbce7dbabe5d3dcce18384d529d58ebad629eac88f4740ee2d4009985ca646cc444dce9fe2e287c07df3dd0eb66cd9d84438faecdb4aa0f4f557169bcc2eb52f6eae09ce8b545d71471694ad9db5f2101e94de3128555d29157529bedcca286511aa2c8e206cf1889e644f5216f9dc68dc15a80a8eba64a7ee5ccdd07d88a420332cf2b8c3eccfed9f5356490ef0f77e9ecfeabcc1cb7783faca1df988b65794542cddd21fd80cbbfe5162944f826f12e698fe588a8bac2a53fdc5e8fdd0e45aee4d1e07c3c6b8ab62d1a56822baf00843f91c954fcd47cec72677ab090500110800f70e070725010c0ebc0b09050802ff0307090209050d0100045206060725010c07040009050d042000010e070905070040007f4608c72147c0cc2902b4a0c915dd6afe0840dbb21d19a5dc7f2d38b17923877ed4baddcc1c396c07d5ba8b70faf065e8ca2f31c68fc4a71b1a27c593e09f9deccb9b9aee691bdce7b720cf1d56047aeb89fbe65e74acdf874bc7e3eeeb8bd4fd62af08d8b20e2a36d220428e941253e4aff00617510bbc3b884979c7a363bd26a9fed1a34f7328eedb8a7b89863aa6b9774cf29793b47fe6079249547c24646f068ca37834973a32351e5361af6bbb6d2798fd0850b5692bcc627405a14b6341f825e75850b962263ae90b01729625e68f0fcf40b690c3c87c89cfaebb8684edd05e9545405fd4f8776e3802869b8d53f23d11308ea85292a9a7b26adfbcfe4fc78a1d46ad99e58f3847db0497a4b19d1df63f78dd5ea5e005d00fb36d69d3890a2d7be47d8ac87200f05bea62e75bd79e13f531875bed8395851bf722ea8a7c9394bb6e7d0fa2d0971c8b9b8557af349360e2823ec8a60d5c0f3fb6d9b87e4db99b869c2a783e6dfbe6e3faae60623eba5589d0e62b8b65f7add2fd0f0dda18c4689d59eee2e95e53c66aa21a66f31cbaf6b601012676e7d4a2841f358ab4753aa6c3e4c2908794c7f91bdeba009fc15e0b09050808ff030405ae0905020c40000f0a00c20ea3792d687ed5935221fe3e48f78981ab001150fd3ce158a96866f314941d1a4e11cfaa9a37f3d13f1ea337de0095626a66bef55578b371a15d90cc0209285d66c97c0b9c6b39a4f4768c02b8eb4f65c7525b0a6a1d53a252c4ada6b65855d98d07d5fe23cd177c5e9515834b53a5110b654f1b68f6d1232a39c9be4ea39bc5ebd0a0c1c6cb9acf458f0f1440e01cf14dc2dc04c39fd18134df9063edcf82874a1f6205908381cf047216851f582bf0d35d9d6b7ea93794fd866da7d3ad1c5b9109050701480007060109050e0c0004e23d8d5c05521bf63c7636b8343fbe1e837344e942edc3a326f9a84df5447fe48dc79d0c51300ae3124140bf3e82e10e5f5ac7a2c911eb3a15797bd96684cf36a2d02cd7019fcc9fcb02a729bf2ce106a61aab0b7ef90c7abd3bc6686d1b2d0905060c00040b04f80725010c8040000904e3bb01c6e46e001d0da3d5bae75c3fb81530e6f4544ec565870013147624fdf7f030842207240600011842052400e80e0d240f01000000000b0002000006241a07000e69241303c36144e4e89ed485f9a645e7737c768665b324087a4aa76d1cb2eb996982ccfbb933036ce35a6bb75d3b6621bc13c9b3508e26cf2610e538793dc1"], &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0}) kernel console output (not intermixed with test programs): p = 124996kB [ 313.828476][ T9434] 2097051 pages RAM [ 313.845307][ T9434] 0 pages HighMem/MovableOnly [ 313.865216][ T9434] 428203 pages reserved [ 313.879172][ T9434] 0 pages cma reserved [ 314.008495][ T5704] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 314.057193][ T5704] gspca_stk1135: reg_w 0x2 err -71 [ 314.088374][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.125995][ T5704] gspca_stk1135: Sensor write failed [ 314.169853][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.182120][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'. [ 314.208891][ T5704] gspca_stk1135: Sensor write failed [ 314.209006][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.209023][ T5704] gspca_stk1135: Sensor read failed [ 314.209081][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.209093][ T5704] gspca_stk1135: Sensor read failed [ 314.209103][ T5704] gspca_stk1135: Detected sensor type unknown (0x0) [ 314.209143][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.209154][ T5704] gspca_stk1135: Sensor read failed [ 314.209190][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.209201][ T5704] gspca_stk1135: Sensor read failed [ 314.209250][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.209262][ T5704] gspca_stk1135: Sensor write failed [ 314.209297][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 314.209308][ T5704] gspca_stk1135: Sensor write failed [ 314.209393][ T5704] stk1135 2-1:0.57: probe with driver stk1135 failed with error -71 [ 314.233901][ T5704] usb 2-1: USB disconnect, device number 77 [ 314.364449][ T5683] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 314.666114][ T5683] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 314.681035][ T5683] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 314.711029][ T5683] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 314.739601][ T5683] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 314.776203][ T5683] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.788176][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 314.799768][ T5683] usb 3-1: SerialNumber: syz [ 314.819951][ T5683] cdc_acm 3-1:1.0: invalid descriptor buffer length [ 314.828140][ T5683] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 314.836583][ T5683] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 314.845074][ T5683] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 315.020180][ T5683] usb 3-1: USB disconnect, device number 88 [ 315.027682][ T9480] input: syz0 as /devices/virtual/input/input30 [ 315.248396][ T9486] qrtr: Invalid version 0 [ 315.328682][ T9486] could not allocate digest TFM handle rmd128-generic [ 315.334261][ T9490] syzkaller1: entered promiscuous mode [ 315.349294][ T9490] syzkaller1: entered allmulticast mode [ 315.418575][ T9482] batadv_slave_1: entered promiscuous mode [ 315.425505][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 315.434833][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.466544][ T9482] batadv_slave_1 (unregistering): left promiscuous mode [ 315.476803][ T9482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.513927][ T9491] netlink: 'syz.4.1077': attribute type 2 has an invalid length. [ 315.645651][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1081'. [ 315.665380][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1081'. [ 316.062507][ T9505] syz_tun: entered allmulticast mode [ 316.069144][ T9505] netlink: 'syz.3.1085': attribute type 7 has an invalid length. [ 316.078071][ T9505] netlink: 'syz.3.1085': attribute type 8 has an invalid length. [ 316.098418][ T9505] dvmrp6: entered allmulticast mode [ 316.174024][ T9504] syz_tun: left allmulticast mode [ 316.539548][ T9517] qrtr: Invalid version 0 [ 316.790314][ T9517] syzkaller1: entered promiscuous mode [ 316.842001][ T9517] syzkaller1: entered allmulticast mode [ 316.934415][ T9523] could not allocate digest TFM handle rmd128-generic [ 317.158716][ T9537] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 317.176414][ T9537] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1095'. [ 317.247965][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.254552][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.522347][ T5683] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 317.681911][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 317.695416][ T5683] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 317.705354][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.712118][ T5704] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 317.728774][ T5683] usb 3-1: config 0 descriptor?? [ 317.745865][ T5683] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 317.766605][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'. [ 317.876576][ T5704] usb 4-1: no configurations [ 317.881301][ T5704] usb 4-1: can't read configurations, error -22 [ 317.941923][ T29] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 317.996152][ T9556] syzkaller0: entered promiscuous mode [ 318.001756][ T9556] syzkaller0: entered allmulticast mode [ 318.011906][ T6195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.021361][ T6195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.030028][ T9556] tipc: Started in network mode [ 318.035775][ T9556] tipc: Node identity 6a7b5ba98fc3, cluster identity 4711 [ 318.036238][ T5704] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 318.049099][ T9556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.060112][ T9556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.068484][ T9556] tipc: Enabled bearer , priority 0 [ 318.077838][ T9555] tipc: Resetting bearer [ 318.107145][ T9555] tipc: Disabling bearer [ 318.122022][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 318.131244][ T29] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 318.141476][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.149662][ T29] usb 2-1: Product: syz [ 318.153924][ T29] usb 2-1: Manufacturer: syz [ 318.158551][ T29] usb 2-1: SerialNumber: syz [ 318.166347][ T29] usb 2-1: config 0 descriptor?? [ 318.192734][ T5704] usb 4-1: no configurations [ 318.197514][ T5704] usb 4-1: can't read configurations, error -22 [ 318.204820][ T5704] usb usb4-port1: attempt power cycle [ 318.491915][ T2176] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 318.541997][ T5704] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 318.563555][ T5704] usb 4-1: no configurations [ 318.568268][ T5704] usb 4-1: can't read configurations, error -22 [ 318.586292][ T29] gspca_main: se401-2.14.0 probing 047d:5003 [ 318.642075][ T2176] usb 1-1: Invalid ep0 maxpacket: 16 [ 318.701953][ T5704] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 318.723133][ T5704] usb 4-1: no configurations [ 318.727802][ T5704] usb 4-1: can't read configurations, error -22 [ 318.734958][ T5704] usb usb4-port1: unable to enumerate USB device [ 318.758789][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.768251][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.782075][ T2176] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 318.931961][ T2176] usb 1-1: Invalid ep0 maxpacket: 16 [ 318.940416][ T2176] usb usb1-port1: attempt power cycle [ 319.283558][ T2176] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 319.314655][ T2176] usb 1-1: Invalid ep0 maxpacket: 16 [ 319.336777][ T9565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.348842][ T9565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.360009][ T9565] bond0 (unregistering): Released all slaves [ 319.378218][ T29] gspca_se401: read req failed req 0x06 error -19 [ 319.394320][ T29] usb 2-1: USB disconnect, device number 78 [ 319.451996][ T2176] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 319.485127][ T2176] usb 1-1: Invalid ep0 maxpacket: 16 [ 319.490797][ T2176] usb usb1-port1: unable to enumerate USB device [ 319.586143][ T5683] gspca_vc032x: reg_r err -71 [ 319.591099][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.596802][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.602609][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.608090][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.613700][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.619386][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.625244][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.630713][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.636337][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.646220][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.651725][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.658413][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.669779][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.680158][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.685687][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.691227][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.696773][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.702400][ T5683] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.707771][ T5683] gspca_vc032x: Unknown sensor... [ 319.713204][ T5683] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 319.723652][ T5683] usb 3-1: USB disconnect, device number 89 [ 320.729520][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 321.004412][ T29] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 321.187514][ T29] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.219580][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.234055][ T9596] syzkaller0: entered promiscuous mode [ 321.239649][ T9596] syzkaller0: entered allmulticast mode [ 321.241743][ T29] usb 4-1: Product: syz [ 321.255130][ T29] usb 4-1: Manufacturer: syz [ 321.262834][ T29] usb 4-1: SerialNumber: syz [ 321.278307][ T9596] syzkaller0: tun_net_xmit 663 [ 321.284612][ T9596] syzkaller0: tun_net_xmit 663 [ 321.289463][ T9596] syzkaller0: tun_net_xmit 663 [ 321.294366][ T9596] syzkaller0: tun_net_xmit 663 [ 321.299224][ T9596] syzkaller0: tun_net_xmit 663 [ 321.304120][ T9596] syzkaller0: tun_net_xmit 663 [ 321.308948][ T9596] syzkaller0: tun_net_xmit 663 [ 321.313833][ T9596] syzkaller0: tun_net_xmit 663 [ 321.318663][ T9596] syzkaller0: tun_net_xmit 663 [ 321.323564][ T9596] syzkaller0: tun_net_xmit 663 [ 321.328423][ T9596] syzkaller0: tun_net_xmit 663 [ 321.333323][ T9596] syzkaller0: tun_net_xmit 663 [ 321.338148][ T9596] syzkaller0: tun_net_xmit 663 [ 321.343128][ T9596] syzkaller0: tun_net_xmit 663 [ 321.348011][ T9596] syzkaller0: tun_net_xmit 663 [ 321.352913][ T9596] syzkaller0: tun_net_xmit 663 [ 321.357757][ T9596] syzkaller0: tun_net_xmit 663 [ 321.362632][ T9596] syzkaller0: tun_net_xmit 663 [ 321.367471][ T9596] syzkaller0: tun_net_xmit 663 [ 321.372363][ T9596] syzkaller0: tun_net_xmit 663 [ 321.377202][ T9596] syzkaller0: tun_net_xmit 663 [ 321.383075][ T9596] syzkaller0: tun_net_xmit 663 [ 321.387917][ T9596] syzkaller0: tun_net_xmit 663 [ 321.392793][ T9596] syzkaller0: tun_net_xmit 663 [ 321.397619][ T9596] syzkaller0: tun_net_xmit 663 [ 321.402526][ T9596] syzkaller0: tun_net_xmit 663 [ 321.407490][ T9596] syzkaller0: tun_net_xmit 663 [ 321.412377][ T9596] syzkaller0: tun_net_xmit 663 [ 321.417202][ T9596] syzkaller0: tun_net_xmit 663 [ 321.420898][ T29] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 321.422054][ T9596] syzkaller0: tun_net_xmit 663 [ 321.435059][ T9596] syzkaller0: tun_net_xmit 663 [ 321.439885][ T9596] syzkaller0: tun_net_xmit 663 [ 321.444761][ T9596] syzkaller0: tun_net_xmit 663 [ 321.449591][ T9596] syzkaller0: tun_net_xmit 663 [ 321.454504][ T9596] syzkaller0: tun_net_xmit 663 [ 321.459372][ T9596] syzkaller0: tun_net_xmit 663 [ 321.464273][ T9596] syzkaller0: tun_net_xmit 663 [ 321.469120][ T9596] syzkaller0: tun_net_xmit 663 [ 321.474020][ T9596] syzkaller0: tun_net_xmit 663 [ 321.478841][ T9596] syzkaller0: tun_net_xmit 663 [ 321.483726][ T9596] syzkaller0: tun_net_xmit 663 [ 321.488556][ T9596] syzkaller0: tun_net_xmit 663 [ 321.493450][ T9596] syzkaller0: tun_net_xmit 663 [ 321.498283][ T9596] syzkaller0: tun_net_xmit 663 [ 321.503188][ T9596] syzkaller0: tun_net_xmit 663 [ 321.508028][ T9596] syzkaller0: tun_net_xmit 663 [ 321.514338][ T9596] syzkaller0: tun_net_xmit 663 [ 321.519168][ T9596] syzkaller0: tun_net_xmit 663 [ 321.525331][ T9596] syzkaller0: tun_net_xmit 663 [ 321.530154][ T9596] syzkaller0: tun_net_xmit 663 [ 321.535026][ T9596] syzkaller0: tun_net_xmit 663 [ 321.539844][ T9596] syzkaller0: tun_net_xmit 663 [ 321.544728][ T9596] syzkaller0: tun_net_xmit 663 [ 321.549584][ T9596] syzkaller0: tun_net_xmit 663 [ 321.554451][ T9596] syzkaller0: tun_net_xmit 663 [ 321.559256][ T9596] syzkaller0: tun_net_xmit 663 [ 321.564279][ T9596] syzkaller0: tun_net_xmit 663 [ 321.569144][ T9596] syzkaller0: tun_net_xmit 663 [ 321.574020][ T9596] syzkaller0: tun_net_xmit 663 [ 321.578841][ T9596] syzkaller0: tun_net_xmit 663 [ 321.583721][ T9596] syzkaller0: tun_net_xmit 663 [ 321.588561][ T9596] syzkaller0: tun_net_xmit 663 [ 321.593443][ T9596] syzkaller0: tun_net_xmit 663 [ 321.598298][ T9596] syzkaller0: tun_net_xmit 663 [ 321.603214][ T9596] syzkaller0: tun_net_xmit 663 [ 321.608026][ T9596] syzkaller0: tun_net_xmit 663 [ 321.612909][ T9596] syzkaller0: tun_net_xmit 663 [ 321.617745][ T9596] syzkaller0: tun_net_xmit 663 [ 321.622620][ T9596] syzkaller0: tun_net_xmit 663 [ 321.627444][ T9596] syzkaller0: tun_net_xmit 663 [ 321.632330][ T9596] syzkaller0: tun_net_xmit 663 [ 321.637142][ T9596] syzkaller0: tun_net_xmit 663 [ 321.642012][ T9596] syzkaller0: tun_net_xmit 663 [ 321.646827][ T9596] syzkaller0: tun_net_xmit 663 [ 321.651643][ T9596] syzkaller0: tun_net_xmit 663 [ 321.656527][ T9596] syzkaller0: tun_net_xmit 663 [ 321.661348][ T9596] syzkaller0: tun_net_xmit 663 [ 321.666234][ T9596] syzkaller0: tun_net_xmit 663 [ 321.670251][ T2176] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 321.671052][ T9596] syzkaller0: tun_net_xmit 663 [ 321.684933][ T9596] syzkaller0: tun_net_xmit 663 [ 321.689746][ T9596] syzkaller0: tun_net_xmit 663 [ 321.694613][ T9596] syzkaller0: tun_net_xmit 663 [ 321.699434][ T9596] syzkaller0: tun_net_xmit 663 [ 321.705597][ T9596] syzkaller0: tun_net_xmit 663 [ 321.710426][ T9596] syzkaller0: tun_net_xmit 663 [ 321.715297][ T9596] syzkaller0: tun_net_xmit 663 [ 321.720115][ T9596] syzkaller0: tun_net_xmit 663 [ 321.725000][ T9596] syzkaller0: tun_net_xmit 663 [ 321.729856][ T9596] syzkaller0: tun_net_xmit 663 [ 321.734732][ T9596] syzkaller0: tun_net_xmit 663 [ 321.739551][ T9596] syzkaller0: tun_net_xmit 663 [ 321.744438][ T9596] syzkaller0: tun_net_xmit 663 [ 321.749253][ T9596] syzkaller0: tun_net_xmit 663 [ 321.754137][ T9596] syzkaller0: tun_net_xmit 663 [ 321.758953][ T9596] syzkaller0: tun_net_xmit 663 [ 321.763815][ T9596] syzkaller0: tun_net_xmit 663 [ 321.768624][ T9596] syzkaller0: tun_net_xmit 663 [ 321.773507][ T9596] syzkaller0: tun_net_xmit 663 [ 321.778323][ T9596] syzkaller0: tun_net_xmit 663 [ 321.783184][ T9596] syzkaller0: tun_net_xmit 663 [ 321.788001][ T9596] syzkaller0: tun_net_xmit 663 [ 321.792889][ T9596] syzkaller0: tun_net_xmit 663 [ 321.797704][ T9596] syzkaller0: tun_net_xmit 663 [ 321.802573][ T9596] syzkaller0: tun_net_xmit 663 [ 321.807390][ T9596] syzkaller0: tun_net_xmit 663 [ 321.812268][ T9596] syzkaller0: tun_net_xmit 663 [ 321.817079][ T9596] syzkaller0: tun_net_xmit 663 [ 321.821937][ T9596] syzkaller0: tun_net_xmit 663 [ 321.826746][ T9596] syzkaller0: tun_net_xmit 97 [ 321.902162][ T9602] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 322.035579][ T5704] usb 4-1: USB disconnect, device number 79 [ 322.364211][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 322.375738][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 322.452082][ T5683] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 322.612922][ T5683] usb 2-1: no configurations [ 322.623507][ T5683] usb 2-1: can't read configurations, error -22 [ 322.772109][ T5683] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 322.925402][ T29] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 322.933244][ T2176] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 322.934197][ T5683] usb 2-1: no configurations [ 322.963254][ T5683] usb 2-1: can't read configurations, error -22 [ 322.973071][ T2176] ath9k_htc: Failed to initialize the device [ 322.985113][ T5683] usb usb2-port1: attempt power cycle [ 323.006646][ T5704] usb 4-1: ath9k_htc: USB layer deinitialized [ 323.151935][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 323.162384][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 323.186803][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 323.199759][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.210242][ T29] usb 3-1: Product: syz [ 323.214899][ T29] usb 3-1: Manufacturer: syz [ 323.219791][ T29] usb 3-1: SerialNumber: syz [ 323.230062][ T29] usb 3-1: config 0 descriptor?? [ 323.254248][ T29] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 323.266613][ T29] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 323.322031][ T5704] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 323.331979][ T5683] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 323.342812][ T9628] syzkaller0: entered promiscuous mode [ 323.350235][ T9628] syzkaller0: entered allmulticast mode [ 323.373385][ T5683] usb 2-1: no configurations [ 323.382537][ T5683] usb 2-1: can't read configurations, error -22 [ 323.491982][ T5704] usb 4-1: device descriptor read/64, error -71 [ 323.532003][ T5683] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 323.563234][ T5683] usb 2-1: no configurations [ 323.588732][ T5683] usb 2-1: can't read configurations, error -22 [ 323.602406][ T5683] usb usb2-port1: unable to enumerate USB device [ 323.755659][ T5704] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 323.864552][ T29] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 323.908202][ T5704] usb 4-1: device descriptor read/64, error -71 [ 324.042164][ T5704] usb usb4-port1: attempt power cycle [ 324.341718][ T29] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 324.351433][ T29] em28xx 3-1:0.0: board has no eeprom [ 324.400561][ T5704] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 324.441051][ T5704] usb 4-1: device descriptor read/8, error -71 [ 324.702071][ T5704] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 324.723842][ T29] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 324.736852][ T29] em28xx 3-1:0.0: dvb set to bulk mode. [ 324.760035][ T24] em28xx 3-1:0.0: Binding DVB extension [ 324.770729][ T5704] usb 4-1: device descriptor read/8, error -71 [ 324.912658][ T5704] usb usb4-port1: unable to enumerate USB device [ 326.020326][ T9620] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 326.042720][ T2176] usb 3-1: USB disconnect, device number 90 [ 326.052238][ T2176] em28xx 3-1:0.0: Disconnecting em28xx [ 326.181270][ T24] em28xx 3-1:0.0: Registering input extension [ 326.207263][ T2176] em28xx 3-1:0.0: Closing input extension [ 326.333329][ T2176] em28xx 3-1:0.0: Freeing device [ 327.604908][ T9651] syzkaller0: entered promiscuous mode [ 327.612180][ T9651] syzkaller0: entered allmulticast mode [ 327.781485][ T9662] qrtr: Invalid version 0 [ 327.890637][ T9664] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1135'. [ 327.933841][ T9662] syzkaller1: entered promiscuous mode [ 327.946561][ T9662] syzkaller1: entered allmulticast mode [ 328.100758][ T9666] could not allocate digest TFM handle rmd128-generic [ 328.126343][ T5683] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 328.307100][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 328.318237][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 328.355932][ T5683] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 328.377077][ T5683] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 328.388673][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.398692][ T2035] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 328.407368][ T5683] usb 1-1: Product: syz [ 328.414499][ T5683] usb 1-1: Manufacturer: syz [ 328.419273][ T5683] usb 1-1: SerialNumber: syz [ 328.575519][ T2035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.599824][ T2035] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.625154][ T2035] usb 2-1: config 1 has no interface number 0 [ 328.650289][ T2035] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.698828][ T2035] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 328.725553][ T2035] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 328.764650][ T2035] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 14239, setting to 64 [ 328.801735][ T2035] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.852817][ T2035] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.875971][ T2035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.905917][ T5683] usb 1-1: USB disconnect, device number 66 [ 328.918992][ T2035] usb 2-1: Product: syz [ 328.942210][ T2035] usb 2-1: Manufacturer: syz [ 328.958239][ T2035] usb 2-1: SerialNumber: syz [ 329.002361][ T9671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.232320][ T9671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.454414][ T9671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.693690][ T2176] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 329.732715][ T9686] ip6gre1: entered allmulticast mode [ 329.734216][ T9687] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 329.754903][ T6195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.809216][ T9687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1141'. [ 329.861978][ T2176] usb 1-1: Using ep0 maxpacket: 32 [ 329.867201][ T2176] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 329.867351][ T2176] usb 1-1: config 0 has no interface number 0 [ 329.869509][ T9671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.870150][ T2176] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 329.870182][ T2176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.870205][ T2176] usb 1-1: Product: syz [ 329.870222][ T2176] usb 1-1: Manufacturer: syz [ 329.870240][ T2176] usb 1-1: SerialNumber: syz [ 329.887096][ T2035] cdc_ncm 2-1:1.1: bind() failure [ 329.935266][ T2176] usb 1-1: config 0 descriptor?? [ 329.975208][ T2176] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 330.077184][ T9671] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 330.165710][ T9671] bond0: entered promiscuous mode [ 330.172265][ T9671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.242903][ T2176] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 330.265688][ T2176] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 330.290471][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.330505][ T9697] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 330.392297][ T9697] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 330.447723][ T9697] bond0: (slave ip6gre2): making interface the new active one [ 330.463366][ T9697] ip6gre2: entered promiscuous mode [ 330.474773][ T9697] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 330.573619][ T187] usb 2-1: USB disconnect, device number 83 [ 330.627289][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 330.628919][ T5683] usb 1-1: USB disconnect, device number 67 [ 330.709903][ T5683] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 330.759856][ T5683] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 330.792664][ T5683] quatech2 1-1:0.51: device disconnected [ 330.982672][ T9714] qrtr: Invalid version 0 [ 331.103379][ T9718] syzkaller1: entered promiscuous mode [ 331.130785][ T9718] syzkaller1: entered allmulticast mode [ 331.330079][ T9714] could not allocate digest TFM handle rmd128-generic [ 331.673151][ T24] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 331.719456][ T30] audit: type=1326 audit(1784690469.932:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 331.777028][ T9731] vivid-001: ================= START STATUS ================= [ 331.788541][ T30] audit: type=1326 audit(1784690469.962:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 331.803444][ T9731] vivid-001: RDS Tx I/O Mode: Controls [ 331.835785][ T9731] vivid-001: RDS Program ID: 32904 [ 331.847105][ T9731] vivid-001: RDS Program Type: 3 [ 331.874888][ T30] audit: type=1326 audit(1784690469.962:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 331.888203][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.917601][ T9731] vivid-001: RDS PS Name: VIVID-TX [ 331.950045][ T9731] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 331.984209][ T30] audit: type=1326 audit(1784690469.962:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 331.985416][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 332.016898][ T9731] vivid-001: RDS Stereo: true [ 332.024776][ T9731] vivid-001: RDS Artificial Head: false [ 332.030640][ T9731] vivid-001: RDS Compressed: false [ 332.036686][ T9731] vivid-001: RDS Dynamic PTY: false [ 332.056345][ T9731] vivid-001: RDS Traffic Announcement: false [ 332.063439][ T9731] vivid-001: RDS Traffic Program: true [ 332.069857][ T24] usb 2-1: config 8 has an invalid interface number: 43 but max is 1 [ 332.080355][ T24] usb 2-1: config 8 has an invalid interface number: 35 but max is 1 [ 332.112002][ T9731] vivid-001: RDS Music: true [ 332.119889][ T9731] vivid-001: ================== END STATUS ================== [ 332.129088][ T24] usb 2-1: config 8 has no interface number 0 [ 332.136075][ T24] usb 2-1: config 8 has no interface number 1 [ 332.159651][ T24] usb 2-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 332.195709][ T24] usb 2-1: config 8 interface 43 has no altsetting 0 [ 332.204023][ T30] audit: type=1326 audit(1784690469.962:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 332.219155][ T24] usb 2-1: config 8 interface 35 has no altsetting 0 [ 332.287653][ T24] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 332.314922][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.334171][ T24] usb 2-1: Product: syz [ 332.341527][ T30] audit: type=1326 audit(1784690469.962:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 332.346708][ T24] usb 2-1: Manufacturer: syz [ 332.371351][ T9740] loop9: detected capacity change from 0 to 7 [ 332.404184][ T9740] Dev loop9: unable to read RDB block 7 [ 332.419881][ T9740] loop9: unable to read partition table [ 332.430155][ T9740] loop9: partition table beyond EOD, truncated [ 332.438012][ T24] usb 2-1: SerialNumber: syz [ 332.440381][ T30] audit: type=1326 audit(1784690469.962:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 332.455725][ T9740] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 332.569673][ T30] audit: type=1326 audit(1784690469.962:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 332.681401][ T30] audit: type=1326 audit(1784690469.962:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 332.774486][ T30] audit: type=1326 audit(1784690469.962:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.2.1153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe369d9de99 code=0x7ffc0000 [ 332.881949][ T5704] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 332.951057][ T24] ums-alauda 2-1:8.43: USB Mass Storage device detected [ 332.997745][ T24] scsi host1: usb-storage 2-1:8.43 [ 333.042222][ T24] hub 2-1:8.35: Invalid hub with more than one config or interface [ 333.075147][ T5704] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 333.086418][ T24] hub 2-1:8.35: probe with driver hub failed with error -22 [ 333.100242][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.117636][ T24] ums-alauda 2-1:8.35: USB Mass Storage device detected [ 333.134018][ T5704] usb 3-1: Product: syz [ 333.147580][ T5704] usb 3-1: Manufacturer: syz [ 333.162965][ T5704] usb 3-1: SerialNumber: syz [ 333.236317][ T24] usb 2-1: USB disconnect, device number 84 [ 333.372268][ T187] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 333.544753][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 333.558484][ T187] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 333.572671][ T187] usb 1-1: config 2 has no interface number 0 [ 333.579494][ T187] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 333.596104][ T187] usb 1-1: config 2 interface 88 has no altsetting 0 [ 333.606646][ T187] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 333.623920][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 333.643335][ T187] usb 1-1: Product: syz [ 333.656718][ T187] usb 1-1: Manufacturer: syz [ 333.668392][ T187] usb 1-1: SerialNumber: syz [ 333.700678][ T9759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 333.727554][ T5704] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 333.739674][ T5704] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 333.812046][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.933778][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.966802][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.002998][ T9759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.198916][ T9783] loop2: detected capacity change from 0 to 7 [ 334.208188][ T9783] loop2: [ 334.211352][ T9783] loop2: partition table partially beyond EOD, truncated [ 334.581948][ T24] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 334.731922][ T24] usb 4-1: device descriptor read/64, error -71 [ 334.827411][ T9789] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 334.971958][ T24] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 335.104591][ T24] usb 4-1: device descriptor read/64, error -71 [ 335.165548][ T5711] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 335.167525][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 335.185942][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 335.210882][ T9799] batadv0: entered promiscuous mode [ 335.218505][ T24] usb usb4-port1: attempt power cycle [ 335.229344][ T9799] macsec2: entered promiscuous mode [ 335.236195][ T187] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 335.236231][ T187] asix 1-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 335.236495][ T187] asix 1-1:2.88: probe with driver asix failed with error -71 [ 335.257808][ T187] usb 1-1: USB disconnect, device number 68 [ 335.272643][ T9799] macsec2: entered allmulticast mode [ 335.281597][ T9799] batadv0: entered allmulticast mode [ 335.295531][ T9799] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 335.344557][ T5711] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.353589][ T5711] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 335.365502][ T5711] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.379219][ T5711] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 335.392005][ T5711] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 335.406517][ T5711] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.431997][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.443626][ T5711] usb 2-1: Product: syz [ 335.448526][ T5711] usb 2-1: Manufacturer: syz [ 335.465392][ T5711] cdc_wdm 2-1:1.0: skipping garbage [ 335.472333][ T5711] cdc_wdm 2-1:1.0: skipping garbage [ 335.504489][ T5711] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 335.515616][ T5711] cdc_wdm 2-1:1.0: Unknown control protocol [ 335.563288][ T24] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 335.582836][ T24] usb 4-1: device descriptor read/8, error -71 [ 335.780255][ T5704] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 335.794451][ T5704] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 335.808973][ T5704] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 335.821510][ T5704] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 335.831063][ T24] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 335.840290][ T5704] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 335.854175][ T5704] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 335.872020][ T24] usb 4-1: device descriptor read/8, error -71 [ 335.889115][ T5704] usb 3-1: USB disconnect, device number 91 [ 335.902522][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 335.982226][ T24] usb usb4-port1: unable to enumerate USB device [ 336.171945][ T187] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 336.302017][ T187] usb 1-1: device descriptor read/64, error -71 [ 336.407216][ T9808] syzkaller0: entered promiscuous mode [ 336.413220][ T9808] syzkaller0: entered allmulticast mode [ 336.552084][ T187] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 336.692029][ T187] usb 1-1: device descriptor read/64, error -71 [ 336.811105][ T187] usb usb1-port1: attempt power cycle [ 336.899793][ T5699] usb 2-1: USB disconnect, device number 85 [ 337.174116][ T187] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 337.202910][ T187] usb 1-1: device descriptor read/8, error -71 [ 337.442516][ T187] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 337.477563][ T187] usb 1-1: device descriptor read/8, error -71 [ 337.502067][ T5699] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 337.592258][ T187] usb usb1-port1: unable to enumerate USB device [ 337.662298][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 337.670203][ T5699] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 337.678710][ T5699] usb 2-1: config 0 has no interface number 0 [ 337.688175][ T5699] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 337.697912][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.706321][ T5699] usb 2-1: Product: syz [ 337.710705][ T5699] usb 2-1: Manufacturer: syz [ 337.716509][ T5699] usb 2-1: SerialNumber: syz [ 337.757617][ T5699] usb 2-1: config 0 descriptor?? [ 338.002081][ T5699] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 338.017650][ T5699] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 338.082617][ T5699] usb 2-1: USB disconnect, device number 86 [ 340.088689][ T9840] syzkaller0: entered promiscuous mode [ 340.123517][ T9840] syzkaller0: entered allmulticast mode [ 340.409864][ T9848] lo: Caught tx_queue_len zero misconfig [ 340.555606][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 340.590724][ T9854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1189'. [ 341.422622][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 341.562018][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.599388][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.618346][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.630857][ T24] usb 1-1: Product: syz [ 341.646546][ T24] usb 1-1: Manufacturer: syz [ 341.663487][ T24] usb 1-1: SerialNumber: syz [ 341.698431][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.741206][ T5704] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 341.961404][ T24] usb 1-1: USB disconnect, device number 73 [ 342.249433][ T9888] FAULT_INJECTION: forcing a failure. [ 342.249433][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 342.268536][ T9888] CPU: 0 UID: 0 PID: 9888 Comm: syz.2.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.268572][ T9888] Tainted: [L]=SOFTLOCKUP [ 342.268580][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 342.268593][ T9888] Call Trace: [ 342.268603][ T9888] [ 342.268612][ T9888] dump_stack_lvl+0xe8/0x150 [ 342.268651][ T9888] should_fail_ex+0x40c/0x560 [ 342.268683][ T9888] should_failslab+0xa8/0x100 [ 342.268716][ T9888] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 342.268742][ T9888] ? skb_clone+0x212/0x3a0 [ 342.268763][ T9888] ? skb_clone+0x212/0x3a0 [ 342.268801][ T9888] skb_clone+0x212/0x3a0 [ 342.268829][ T9888] __netlink_deliver_tap+0x413/0x860 [ 342.268865][ T9888] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.268889][ T9888] netlink_deliver_tap+0x19c/0x1b0 [ 342.268914][ T9888] __netlink_sendskb+0x47/0x90 [ 342.268948][ T9888] netlink_dump+0xa8c/0xee0 [ 342.268989][ T9888] ? __pfx_netlink_dump+0x10/0x10 [ 342.269025][ T9888] ? netlink_recvmsg+0x5bf/0xa50 [ 342.269047][ T9888] ? kmem_cache_free+0x182/0x650 [ 342.269083][ T9888] netlink_recvmsg+0x683/0xa50 [ 342.269118][ T9888] ? __pfx_netlink_recvmsg+0x10/0x10 [ 342.269149][ T9888] ? aa_sock_msg_perm+0xf1/0x1b0 [ 342.269173][ T9888] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 342.269195][ T9888] ? security_socket_recvmsg+0x7e/0x2c0 [ 342.269221][ T9888] ? __pfx_netlink_recvmsg+0x10/0x10 [ 342.269245][ T9888] sock_recvmsg+0x196/0x1e0 [ 342.269276][ T9888] __sys_recvfrom+0x231/0x3a0 [ 342.269315][ T9888] ? __pfx___sys_recvfrom+0x10/0x10 [ 342.269373][ T9888] ? rcu_is_watching+0x15/0xb0 [ 342.269414][ T9888] __x64_sys_recvfrom+0xde/0x100 [ 342.269447][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.269471][ T9888] do_syscall_64+0x174/0x580 [ 342.269493][ T9888] ? trace_irq_disable+0x3b/0x140 [ 342.269521][ T9888] ? clear_bhb_loop+0x40/0x90 [ 342.269548][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.269570][ T9888] RIP: 0033:0x7fe369d5e6ce [ 342.269591][ T9888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 342.269610][ T9888] RSP: 002b:00007fe36ac78e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 342.269634][ T9888] RAX: ffffffffffffffda RBX: 00007fe36ac7a6c0 RCX: 00007fe369d5e6ce [ 342.269651][ T9888] RDX: 0000000000001000 RSI: 00007fe36ac79000 RDI: 0000000000000003 [ 342.269667][ T9888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.269680][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 342.269694][ T9888] R13: 00007fe36ac78f58 R14: 00007fe36ac79000 R15: 0000000000000000 [ 342.269729][ T9888] [ 342.651681][ T9897] batadv1: entered promiscuous mode [ 342.662084][ T9897] batadv1: entered allmulticast mode [ 342.671442][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 342.740248][ T9900] netlink: 1064 bytes leftover after parsing attributes in process `syz.1.1199'. [ 342.797546][ T9898] syz_tun: entered promiscuous mode [ 342.803627][ T9898] macvtap2: entered promiscuous mode [ 342.809349][ T9898] macvtap2: entered allmulticast mode [ 342.815597][ T9898] syz_tun: entered allmulticast mode [ 342.834057][ T9899] lo: entered promiscuous mode [ 342.850044][ T5704] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 342.853413][ T9899] tunl0: entered promiscuous mode [ 342.863779][ T9899] gre0: entered promiscuous mode [ 342.867221][ T5704] ath9k_htc: Failed to initialize the device [ 342.902432][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 342.919566][ T9899] gretap0: entered promiscuous mode [ 342.944292][ T9899] erspan0: entered promiscuous mode [ 342.952243][ T9899] ip_vti0: entered promiscuous mode [ 342.963350][ T9899] ip6_vti0: entered promiscuous mode [ 342.986781][ T9899] sit0: entered promiscuous mode [ 343.001505][ T9899] ip6tnl0: entered promiscuous mode [ 343.020952][ T9899] ip6gre0: entered promiscuous mode [ 343.039425][ T9899] ip6gretap0: entered promiscuous mode [ 343.054811][ T9899] vcan0: entered promiscuous mode [ 343.073093][ T9899] bond0: entered promiscuous mode [ 343.079449][ T9899] bond_slave_0: entered promiscuous mode [ 343.087269][ T9899] bond_slave_1: entered promiscuous mode [ 343.098172][ T9899] team0: entered promiscuous mode [ 343.103870][ T9899] team_slave_0: entered promiscuous mode [ 343.109810][ T9899] team_slave_1: entered promiscuous mode [ 343.150430][ T9899] dummy0: entered promiscuous mode [ 343.168009][ T9899] nlmon0: entered promiscuous mode [ 343.176678][ T9899] batadv0: entered promiscuous mode [ 343.179712][ T9899] vxcan0: entered promiscuous mode [ 343.180858][ T9899] vxcan1: entered promiscuous mode [ 343.182391][ T9899] veth0: entered promiscuous mode [ 343.185662][ T9899] veth1: entered promiscuous mode [ 343.204489][ T9899] wg0: entered promiscuous mode [ 343.215569][ T9899] wg1: entered promiscuous mode [ 343.217919][ T9899] wg2: entered promiscuous mode [ 343.220191][ T9899] veth0_to_bridge: entered promiscuous mode [ 343.227155][ T9899] bridge_slave_0: entered promiscuous mode [ 343.229613][ T9899] veth1_to_bridge: entered promiscuous mode [ 343.236053][ T9899] bridge_slave_1: entered promiscuous mode [ 343.238196][ T9899] veth0_to_bond: entered promiscuous mode [ 343.242851][ T9899] veth1_to_bond: entered promiscuous mode [ 343.247693][ T9899] veth0_to_team: entered promiscuous mode [ 343.261037][ T9899] veth1_to_team: entered promiscuous mode [ 343.269840][ T9899] veth0_to_batadv: entered promiscuous mode [ 343.279974][ T9899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.280039][ T9899] batadv_slave_0: entered promiscuous mode [ 343.283100][ T9899] veth1_to_batadv: entered promiscuous mode [ 343.287283][ T9899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.287343][ T9899] batadv_slave_1: entered promiscuous mode [ 343.296944][ T9899] xfrm0: entered promiscuous mode [ 343.306544][ T9899] veth0_to_hsr: entered promiscuous mode [ 343.320676][ T9899] veth1_to_hsr: entered promiscuous mode [ 343.326340][ T9899] hsr0: entered promiscuous mode [ 343.331630][ T9899] veth1_virt_wifi: entered promiscuous mode [ 343.452920][ T9899] veth0_virt_wifi: entered promiscuous mode [ 343.459166][ T9899] virt_wifi0: entered promiscuous mode [ 343.469365][ T9899] vlan0: entered promiscuous mode [ 343.482524][ T9899] vlan1: entered promiscuous mode [ 343.483769][ T9899] macvlan0: entered promiscuous mode [ 343.511585][ T9899] macvlan1: entered promiscuous mode [ 343.520209][ T9899] ipvlan0: entered promiscuous mode [ 343.525969][ T9899] ipvlan1: entered promiscuous mode [ 343.541493][ T9899] macvtap0: entered promiscuous mode [ 343.550394][ T9899] macsec0: entered promiscuous mode [ 343.561063][ T9899] geneve0: entered promiscuous mode [ 343.576948][ T9899] geneve1: entered promiscuous mode [ 343.587514][ T9899] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 343.598834][ T9899] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 343.610863][ T9899] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 343.627071][ T9899] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 343.637282][ T9899] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 343.650647][ T9899] bridge0: left allmulticast mode [ 343.657150][ T9899] macvtap1: left allmulticast mode [ 343.663283][ T9899] vlan2: entered promiscuous mode [ 343.670697][ T9899] macvlan2: entered promiscuous mode [ 343.680144][ T9899] macvlan3: entered promiscuous mode [ 343.687244][ T9899] syz_tun: left allmulticast mode [ 343.693737][ T9899] macvtap2: left allmulticast mode [ 343.702650][ T9899] ip6gre1: entered promiscuous mode [ 343.707976][ T9899] ip6gre1: left allmulticast mode [ 343.740539][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.764999][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.785865][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.795501][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.232057][ T5704] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 344.401887][ T5683] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 344.402094][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 344.423486][ T9944] netlink: 'syz.4.1213': attribute type 4 has an invalid length. [ 344.426649][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.442117][ T9944] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1213'. [ 344.451535][ T5704] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 344.465742][ T9944] warn_alloc: 1 callbacks suppressed [ 344.465761][ T9944] syz.4.1213: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 344.471344][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.489976][ T9944] ,cpuset=/,mems_allowed=0-1 [ 344.498031][ T9944] CPU: 0 UID: 0 PID: 9944 Comm: syz.4.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.498064][ T9944] Tainted: [L]=SOFTLOCKUP [ 344.498072][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 344.498092][ T9944] Call Trace: [ 344.498101][ T9944] [ 344.498110][ T9944] dump_stack_lvl+0xe8/0x150 [ 344.498148][ T9944] warn_alloc+0x24c/0x270 [ 344.498188][ T9944] ? stack_depot_save_flags+0x33/0x800 [ 344.498229][ T9944] ? __pfx_warn_alloc+0x10/0x10 [ 344.498260][ T9944] ? kasan_save_track+0x3e/0x80 [ 344.498287][ T9944] ? __kasan_kmalloc+0x93/0xb0 [ 344.498318][ T9944] ? xsk_setsockopt+0x52a/0x960 [ 344.498348][ T9944] ? do_sock_setsockopt+0x17c/0x1b0 [ 344.498382][ T9944] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 344.498415][ T9944] ? do_syscall_64+0x174/0x580 [ 344.498437][ T9944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.498471][ T9944] __vmalloc_node_range_noprof+0x12c/0x1730 [ 344.498527][ T9944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.498558][ T9944] ? __kasan_kmalloc+0x93/0xb0 [ 344.498590][ T9944] ? __kmalloc_cache_noprof+0x32d/0x660 [ 344.498618][ T9944] ? __kmalloc_cache_noprof+0x150/0x660 [ 344.498650][ T9944] vmalloc_user_noprof+0xad/0xe0 [ 344.498678][ T9944] ? xskq_create+0xbf/0x170 [ 344.498713][ T9944] xskq_create+0xbf/0x170 [ 344.498749][ T9944] xsk_init_queue+0x8a/0xe0 [ 344.498786][ T9944] xsk_setsockopt+0x52a/0x960 [ 344.498816][ T9944] ? __fget_files+0x2a/0x420 [ 344.498847][ T9944] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.498879][ T9944] ? __pfx_aa_sk_perm+0x10/0x10 [ 344.498918][ T9944] ? aa_sock_opt_perm+0xff/0x1a0 [ 344.498945][ T9944] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 344.498968][ T9944] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.499001][ T9944] do_sock_setsockopt+0x17c/0x1b0 [ 344.499043][ T9944] __x64_sys_setsockopt+0x13d/0x1b0 [ 344.499082][ T9944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.499107][ T9944] do_syscall_64+0x174/0x580 [ 344.499129][ T9944] ? trace_irq_disable+0x3b/0x140 [ 344.499166][ T9944] ? clear_bhb_loop+0x40/0x90 [ 344.499196][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.499220][ T9944] RIP: 0033:0x7f69dc19de99 [ 344.499242][ T9944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.499262][ T9944] RSP: 002b:00007f69dcfac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.499286][ T9944] RAX: ffffffffffffffda RBX: 00007f69dc425fa0 RCX: 00007f69dc19de99 [ 344.499304][ T9944] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 344.499319][ T9944] RBP: 00007f69dc233eaf R08: 0000000000000029 R09: 0000000000000000 [ 344.499333][ T9944] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.499349][ T9944] R13: 00007f69dc426038 R14: 00007f69dc425fa0 R15: 00007f69dc54fa48 [ 344.499383][ T9944] [ 344.501449][ T9944] Mem-Info: [ 344.567470][ T5711] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 344.580198][ T9944] active_anon:6784 inactive_anon:101 isolated_anon:8 [ 344.580198][ T9944] active_file:0 inactive_file:58307 isolated_file:13 [ 344.580198][ T9944] unevictable:768 dirty:232 writeback:0 [ 344.580198][ T9944] slab_reclaimable:10688 slab_unreclaimable:98824 [ 344.580198][ T9944] mapped:31558 shmem:1345 pagetables:1392 [ 344.580198][ T9944] sec_pagetables:0 bounce:0 [ 344.580198][ T9944] kernel_misc_reclaimable:0 [ 344.580198][ T9944] free:1301905 free_pcp:9003 free_cma:0 [ 344.627579][ T5704] usb 4-1: config 0 descriptor?? [ 344.630385][ T9944] Node 0 active_anon:27136kB inactive_anon:404kB active_file:0kB inactive_file:233016kB unevictable:1536kB isolated(anon):32kB isolated(file):52kB mapped:126232kB dirty:924kB writeback:0kB shmem:3844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13076kB pagetables:5440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.683396][ T5704] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 344.689766][ T5683] usb 1-1: config 0 has no interfaces? [ 344.689850][ T5683] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.783691][ T9944] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.883641][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.967627][ T5683] usb 1-1: config 0 descriptor?? [ 344.969515][ T5711] usb 3-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 344.992935][ T5711] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.007788][ T5711] usb 3-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 345.031841][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.058192][ T9944] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.102685][ T9944] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 345.108738][ T9944] Node 0 DMA32 free:1249988kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30020kB inactive_anon:404kB active_file:0kB inactive_file:233056kB unevictable:1536kB writepending:944kB zspages:0kB present:3129332kB managed:2548672kB mlocked:0kB bounce:0kB free_pcp:37424kB local_pcp:20056kB free_cma:0kB [ 345.144514][ T5711] usb 3-1: config 0 descriptor?? [ 345.202152][ T9944] lowmem_reserve[]: 0 0 0 0 0 [ 345.213328][ T5683] usb 1-1: USB disconnect, device number 74 [ 345.214072][ T9944] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.308549][ T9944] lowmem_reserve[]: 0 0 0 0 0 [ 345.320222][ T9944] Node 1 Normal free:3942724kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.354664][ T9944] lowmem_reserve[]: 0 0 0 0 0 [ 345.359541][ T9944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.373192][ T9944] Node 0 DMA32: 1580*4kB (UME) 1375*8kB (UME) 870*16kB (UME) 414*32kB (UME) 259*64kB (UME) 197*128kB (UME) 123*256kB (ME) 47*512kB (ME) 26*1024kB (UM) 22*2048kB (UME) 253*4096kB (UM) = 1249800kB [ 345.403023][ T5711] usb 3-1: string descriptor 0 read error: -71 [ 345.425113][ T5711] usb 3-1: USB disconnect, device number 92 [ 345.439992][ T9944] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.478540][ T9944] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942724kB [ 345.531092][ T9944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.541075][ T9944] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 345.550541][ T9944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.562239][ T9944] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.573497][ T9944] 61483 total pagecache pages [ 345.578378][ T9944] 244 pages in swap cache [ 345.584518][ T9944] Free swap = 124012kB [ 345.588829][ T9944] Total swap = 124996kB [ 345.593981][ T9944] 2097051 pages RAM [ 345.598055][ T9944] 0 pages HighMem/MovableOnly [ 345.605198][ T9944] 428203 pages reserved [ 345.610121][ T9944] 0 pages cma reserved [ 345.615349][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1208'. [ 345.635504][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1208'. [ 345.656706][ T9926] geneve0: entered promiscuous mode [ 345.746041][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.767006][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.890354][ T5704] gspca_vc032x: reg_w err -71 [ 345.897422][ T5704] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 345.937745][ T5704] usb 4-1: USB disconnect, device number 88 [ 346.004331][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 346.099988][ T9963] vivid-004: disconnect [ 346.105570][ T9961] vivid-004: reconnect [ 346.383962][ T9966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.461951][ T5683] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 346.647424][ T5683] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 346.673359][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.698563][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.741284][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.773343][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.803478][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.817864][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.828777][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.843438][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.882957][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.928197][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.952547][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.988337][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.090690][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.102018][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.134187][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.141926][ T5704] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 347.156567][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.195616][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.224013][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.245715][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.280252][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.299231][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.324794][ T5683] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.343794][ T5683] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.358516][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.394148][ T5704] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 347.410608][ T5683] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 347.413716][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.446688][ T5683] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 347.465267][ T5683] usb 3-1: Product: syz [ 347.465273][ T5704] usb 4-1: Product: syz [ 347.480659][ T5683] usb 3-1: Manufacturer: syz [ 347.492841][ T5683] usb 3-1: SerialNumber: syz [ 347.500057][ T5704] usb 4-1: Manufacturer: syz [ 347.527275][ T5683] usb 3-1: config 0 descriptor?? [ 347.534650][ T5704] usb 4-1: SerialNumber: syz [ 347.570347][ T5683] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 347.839662][ T5704] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 347.886151][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 347.916763][ T5683] usb 3-1: USB disconnect, device number 93 [ 347.923685][ T9984] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 347.940848][ T5704] usb 4-1: USB disconnect, device number 89 [ 347.950425][ T5683] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 348.477788][ T9982] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1223'. [ 348.616203][ T5683] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 348.754034][ T187] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 348.782151][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 348.794715][ T5683] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 348.804981][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.832379][ T5683] usb 1-1: Product: syz [ 348.839027][ T5683] usb 1-1: Manufacturer: syz [ 348.850746][ T5683] usb 1-1: SerialNumber: syz [ 348.877600][ T5683] usb 1-1: config 0 descriptor?? [ 348.904392][ T5683] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 348.911887][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 348.933466][ T187] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.945413][ T187] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 348.959989][ T187] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 348.978093][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.000445][ T187] usb 4-1: Product: syz [ 349.012323][ T187] usb 4-1: Manufacturer: syz [ 349.026308][ T187] usb 4-1: SerialNumber: syz [ 349.110209][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.129870][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.156781][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 349.207966][ T5683] gspca_sn9c2028: read1 error -71 [ 349.235566][ T5683] gspca_sn9c2028: read1 error -71 [ 349.248239][ T5683] gspca_sn9c2028: read1 error -71 [ 349.260147][ T5683] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 349.283970][ T5683] usb 1-1: USB disconnect, device number 75 [ 349.457419][T10005] binfmt_misc: register: failed to install interpreter file ./file0 [ 349.527427][ T187] usb 4-1: Limiting number of CPorts to U8_MAX [ 349.607286][ T187] usb 4-1: Not enough endpoints found in device, aborting! [ 350.142594][ T5683] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 350.304162][ T5683] usb 1-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 350.333356][ T5683] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.360121][ T5683] usb 1-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 350.384731][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.400151][T10013] nftables ruleset with unbound set [ 350.414742][ T5683] usb 1-1: config 0 descriptor?? [ 350.462299][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 350.623478][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 350.633758][ T24] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 350.636089][T10015] syzkaller0: entered promiscuous mode [ 350.647110][ T24] usb 3-1: config 0 has no interface number 0 [ 350.656585][T10015] syzkaller0: entered allmulticast mode [ 350.662658][ T24] usb 3-1: config 0 interface 246 has no altsetting 0 [ 350.675424][ T5683] usb 1-1: string descriptor 0 read error: -71 [ 350.681006][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 350.694183][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.705827][ T24] usb 3-1: Product: syz [ 350.710147][ T24] usb 3-1: Manufacturer: syz [ 350.716502][ T5683] usb 1-1: USB disconnect, device number 76 [ 350.716997][ T24] usb 3-1: SerialNumber: syz [ 350.756475][ T24] usb 3-1: config 0 descriptor?? [ 351.223721][ T24] usb 3-1: USB disconnect, device number 94 [ 351.555906][ T5683] usb 4-1: USB disconnect, device number 90 [ 351.752899][ T5699] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 351.809859][T10036] FAULT_INJECTION: forcing a failure. [ 351.809859][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 351.826061][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.2.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.826096][T10036] Tainted: [L]=SOFTLOCKUP [ 351.826104][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 351.826117][T10036] Call Trace: [ 351.826200][T10036] [ 351.826275][T10036] dump_stack_lvl+0xe8/0x150 [ 351.826438][T10036] should_fail_ex+0x40c/0x560 [ 351.826571][T10036] should_failslab+0xa8/0x100 [ 351.826629][T10036] __kmalloc_noprof+0xfe/0x720 [ 351.826658][T10036] ? trace_kmem_cache_alloc+0x29/0xe0 [ 351.826713][T10036] ? security_sk_alloc+0x52/0x360 [ 351.826789][T10036] ? security_sk_alloc+0x52/0x360 [ 351.826820][T10036] security_sk_alloc+0x52/0x360 [ 351.826847][T10036] sk_prot_alloc+0x101/0x210 [ 351.826953][T10036] sk_alloc+0x3a/0x390 [ 351.827029][T10036] inet6_create+0x81a/0x1270 [ 351.827107][T10036] ? inet6_create+0x80/0x1270 [ 351.827131][T10036] __sock_create+0x4b3/0x9d0 [ 351.827212][T10036] mptcp_subflow_create_socket+0xfd/0x810 [ 351.827298][T10036] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 351.827327][T10036] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.827370][T10036] ? lock_sock_nested+0x6a/0x100 [ 351.827399][T10036] __mptcp_nmpc_sk+0x155/0x770 [ 351.827447][T10036] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 351.827471][T10036] ? mptcp_getsockopt+0x102d/0x1ed0 [ 351.827523][T10036] ? __local_bh_enable_ip+0xd0/0x130 [ 351.827564][T10036] mptcp_getsockopt+0x106b/0x1ed0 [ 351.827601][T10036] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 351.827627][T10036] ? filemap_map_pages+0x1d8/0x2090 [ 351.827673][T10036] ? filemap_map_pages+0x1ccc/0x2090 [ 351.827712][T10036] ? __lock_acquire+0x683/0x2cf0 [ 351.827746][T10036] ? __pfx_filemap_map_pages+0x10/0x10 [ 351.827772][T10036] ? __css_rstat_updated+0x235/0x540 [ 351.827817][T10036] ? __pfx___css_rstat_updated+0x10/0x10 [ 351.827851][T10036] ? count_memcg_event_mm+0x21/0x260 [ 351.827883][T10036] ? count_memcg_event_mm+0x21/0x260 [ 351.827903][T10036] ? count_memcg_event_mm+0x21/0x260 [ 351.827928][T10036] ? handle_mm_fault+0x2f33/0x3080 [ 351.827961][T10036] ? handle_mm_fault+0xec/0x3080 [ 351.827998][T10036] ? __pfx_handle_mm_fault+0x10/0x10 [ 351.828019][T10036] ? rcu_is_watching+0x15/0xb0 [ 351.828056][T10036] ? __up_read+0x29c/0x930 [ 351.828081][T10036] ? __pfx___up_read+0x10/0x10 [ 351.828103][T10036] ? do_user_addr_fault+0xb8e/0x1340 [ 351.828144][T10036] ? do_user_addr_fault+0xc4a/0x1340 [ 351.828178][T10036] ? irqentry_exit+0x218/0x8f0 [ 351.828254][T10036] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.828273][T10036] ? irqentry_exit+0x218/0x8f0 [ 351.828291][T10036] ? trace_irq_disable+0x3b/0x140 [ 351.828339][T10036] ? rep_movs_alternative+0xf/0xa0 [ 351.828387][T10036] ? sock_common_getsockopt+0x2d/0xb0 [ 351.828414][T10036] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 351.828440][T10036] do_sock_getsockopt+0x51d/0x7e0 [ 351.828466][T10036] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 351.828514][T10036] ? __fget_files+0x3a2/0x420 [ 351.828554][T10036] ? __fget_files+0x2a/0x420 [ 351.828586][T10036] __x64_sys_getsockopt+0x1a4/0x240 [ 351.828612][T10036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.828654][T10036] do_syscall_64+0x174/0x580 [ 351.828673][T10036] ? trace_irq_disable+0x3b/0x140 [ 351.828697][T10036] ? clear_bhb_loop+0x40/0x90 [ 351.828721][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.828742][T10036] RIP: 0033:0x7fe369d9de99 [ 351.828796][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.828814][T10036] RSP: 002b:00007fe36ac7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 351.828868][T10036] RAX: ffffffffffffffda RBX: 00007fe36a025fa0 RCX: 00007fe369d9de99 [ 351.828883][T10036] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000004 [ 351.828895][T10036] RBP: 00007fe36ac7a090 R08: 0000200000000000 R09: 0000000000000000 [ 351.828908][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.828919][T10036] R13: 00007fe36a026038 R14: 00007fe36a025fa0 R15: 00007fe36a14fa48 [ 351.828951][T10036] [ 352.247919][ T5699] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 352.267760][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.276905][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.294371][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.303175][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.312463][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.341549][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.352191][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.361473][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.373517][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.381583][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.391594][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.404010][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.412851][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.422559][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.446798][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.467089][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.477761][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.493888][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.514077][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.523720][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.535333][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.543894][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.556235][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.569285][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.579787][ T5699] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 352.589285][ T5699] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 352.598025][ T5699] usb 1-1: Product: syz [ 352.602498][ T5699] usb 1-1: Manufacturer: syz [ 352.607205][ T5699] usb 1-1: SerialNumber: syz [ 352.620980][ T5699] usb 1-1: config 0 descriptor?? [ 352.633933][ T5699] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 352.797501][T10042] fuse: Bad value for 'group_id' [ 352.802845][T10042] fuse: Bad value for 'group_id' [ 352.979171][ T24] usb 1-1: USB disconnect, device number 77 [ 352.994489][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 353.006253][T10046] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 353.015042][ T24] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 354.266614][ T5711] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 354.463971][ T5711] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 354.472467][ T5711] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 354.482789][ T5711] usb 1-1: config 0 has no interface number 0 [ 354.488953][ T5711] usb 1-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 354.502218][ T5711] usb 1-1: config 0 interface 66 has no altsetting 0 [ 354.508993][ T5711] usb 1-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 354.518543][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.539049][ T5711] usb 1-1: config 0 descriptor?? [ 354.785275][ T5711] usb 1-1: string descriptor 0 read error: -71 [ 354.822364][ T5711] usb 1-1: USB disconnect, device number 78 [ 354.965136][T10043] syz_tun: entered allmulticast mode [ 354.980123][T10043] syz_tun: left allmulticast mode [ 355.083451][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 355.139464][T10061] loop9: detected capacity change from 0 to 7 [ 355.167175][T10061] Dev loop9: unable to read RDB block 7 [ 355.189934][T10061] loop9: unable to read partition table [ 355.206858][T10061] loop9: partition table beyond EOD, truncated [ 355.219592][T10061] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.444421][T10072] bridge0: port 3(macvlan2) entered blocking state [ 355.480932][T10072] bridge0: port 3(macvlan2) entered disabled state [ 355.498962][T10072] macvlan2: entered allmulticast mode [ 355.506199][T10072] ip6gretap0: entered allmulticast mode [ 355.517852][T10072] macvlan2: entered promiscuous mode [ 355.532825][T10072] bridge0: port 3(macvlan2) entered blocking state [ 355.539586][T10072] bridge0: port 3(macvlan2) entered forwarding state [ 355.832115][ T5699] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 355.982012][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 355.984168][ T5699] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 356.013967][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.024075][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.037303][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.045993][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.056044][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.071738][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.080490][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.089716][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.101196][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.109208][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.118662][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.129920][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.138706][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.148453][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.159720][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.166526][ T24] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 356.169364][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.184196][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.195202][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.205966][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.211072][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 356.218025][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.231157][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.241990][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.242072][ T24] usb 3-1: Product: syz [ 356.242089][ T24] usb 3-1: Manufacturer: syz [ 356.242105][ T24] usb 3-1: SerialNumber: syz [ 356.265463][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.273649][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.284037][ T5699] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.295370][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.298774][T10096] syzkaller0: entered promiscuous mode [ 356.308686][ T5699] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 356.317946][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input33 [ 356.323380][T10096] syzkaller0: entered allmulticast mode [ 356.333090][ T5699] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 356.333121][ T5699] usb 1-1: Product: syz [ 356.333139][ T5699] usb 1-1: Manufacturer: syz [ 356.333156][ T5699] usb 1-1: SerialNumber: syz [ 356.383146][ T5699] usb 1-1: config 0 descriptor?? [ 356.401258][ T5699] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 356.495118][T10099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 356.495193][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 356.495209][ T30] audit: type=1326 audit(1784690494.712:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.2.1257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe369d9de99 code=0x0 [ 356.603431][ T4977] bcm5974 3-1:1.0: could not read from device [ 356.625086][ T24] bcm5974 3-1:1.0: could not read from device [ 356.646673][ T4977] bcm5974 3-1:1.0: could not read from device [ 356.661122][ T4977] bcm5974 3-1:1.0: could not read from device [ 356.685656][ T24] input: failed to attach handler mousedev to device input33, error: -5 [ 356.714267][ T4977] bcm5974 3-1:1.0: could not read from device [ 356.724568][ T24] usb 3-1: USB disconnect, device number 95 [ 356.731758][ T4977] bcm5974 3-1:1.0: could not read from device [ 356.766959][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 356.775344][ T5699] usb 1-1: USB disconnect, device number 79 [ 356.785352][T10104] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 356.800570][ T5699] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 356.857043][T10107] loop9: detected capacity change from 0 to 7 [ 356.887176][T10107] Dev loop9: unable to read RDB block 7 [ 356.893473][T10107] loop9: unable to read partition table [ 356.899579][T10107] loop9: partition table beyond EOD, truncated [ 356.916691][T10107] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.312100][ T5699] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 357.464568][ T5699] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 357.473164][ T5699] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 357.490481][ T5699] usb 2-1: config 0 has no interface number 0 [ 357.497993][ T5699] usb 2-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 357.511668][ T5699] usb 2-1: config 0 interface 66 has no altsetting 0 [ 357.518747][ T5699] usb 2-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 357.528494][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.553072][ T5699] usb 2-1: config 0 descriptor?? [ 357.806331][ T5699] usb 2-1: string descriptor 0 read error: -71 [ 357.844233][ T5699] usb 2-1: USB disconnect, device number 88 [ 359.008635][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 359.090875][T10142] netlink: 1064 bytes leftover after parsing attributes in process `syz.4.1272'. [ 359.212409][ T187] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 359.389096][ T187] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 359.420511][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.429911][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.441301][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.450079][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.459754][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.471558][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.480198][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.494202][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.506757][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.515263][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.524702][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.535952][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.544354][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.553567][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.553598][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 359.587237][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.616876][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.626909][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.638340][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.646318][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.655600][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.666846][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.675242][ T187] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.684726][ T187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.696275][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.705362][ T187] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 359.714769][ T187] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 359.723339][ T187] usb 3-1: Product: syz [ 359.727614][ T187] usb 3-1: Manufacturer: syz [ 359.735082][ T187] usb 3-1: SerialNumber: syz [ 359.744327][ T187] usb 3-1: config 0 descriptor?? [ 359.760273][ T187] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 359.773509][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 359.780701][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 359.790071][ T24] usb 2-1: config 0 has no interface number 0 [ 359.827219][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 359.836848][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.853880][ T24] usb 2-1: Product: syz [ 359.858939][ T24] usb 2-1: Manufacturer: syz [ 359.864163][ T24] usb 2-1: SerialNumber: syz [ 359.882164][ T24] usb 2-1: config 0 descriptor?? [ 360.099483][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 360.107331][ T187] usb 3-1: USB disconnect, device number 96 [ 360.121586][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 360.132758][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 360.142225][T10145] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 360.164995][ T187] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 360.295013][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 360.306706][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 360.834977][ T5699] usb 2-1: USB disconnect, device number 89 [ 360.897303][T10151] qrtr: Invalid version 0 [ 360.926454][T10141] macvtap2: entered promiscuous mode [ 360.933478][T10141] macvtap2: entered allmulticast mode [ 361.063837][T10154] syzkaller1: entered promiscuous mode [ 361.124996][T10154] syzkaller1: entered allmulticast mode [ 361.164348][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1278'. [ 361.223774][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 361.239420][T10151] could not allocate digest TFM handle rmd128-generic [ 361.255782][T10156] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1277'. [ 361.311552][T10156] geneve2: entered promiscuous mode [ 361.331611][T10156] geneve2: entered allmulticast mode [ 361.490560][ T1119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.519091][ T1119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.540634][ T1119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.578233][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.650720][T10180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.144764][ T30] audit: type=1326 audit(1784690500.352:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.1281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69dc19de99 code=0x0 [ 362.551925][ T5704] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 362.577982][T10196] syzkaller0: entered promiscuous mode [ 362.590239][T10196] syzkaller0: entered allmulticast mode [ 362.641924][ T24] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 362.725276][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.754521][ T5704] usb 4-1: config 0 has no interfaces? [ 362.771086][ T5704] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 362.802666][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.824551][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 362.847496][ T5704] usb 4-1: config 0 descriptor?? [ 362.856878][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.868266][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.894369][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.910882][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.957617][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.975937][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.005611][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.021999][ T187] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 363.034718][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.045849][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.066566][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.076349][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.092056][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.102113][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.109955][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.144295][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.174117][ T30] audit: type=1326 audit(1784690501.382:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.3.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3994d9de99 code=0x0 [ 363.175025][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.245003][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.276314][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.282257][ T187] usb 1-1: Using ep0 maxpacket: 8 [ 363.287366][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.302890][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.305307][ T187] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.315954][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.359654][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.372613][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.396056][ T187] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 363.412667][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.425000][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.441183][ T187] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 363.441546][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.501973][ T187] usb 1-1: config 4 has no interface number 0 [ 363.508146][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 363.508179][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 363.546813][ T24] usb 3-1: Product: syz [ 363.553101][ T24] usb 3-1: Manufacturer: syz [ 363.570674][ T24] usb 3-1: SerialNumber: syz [ 363.589883][ T24] usb 3-1: config 0 descriptor?? [ 363.604351][ T24] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 363.630754][ T187] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 363.665812][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.706095][ T187] usb 1-1: Product: syz [ 363.734292][ T187] usb 1-1: Manufacturer: syz [ 363.750922][ T187] usb 1-1: SerialNumber: syz [ 363.950982][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 363.954966][ T5699] usb 3-1: USB disconnect, device number 97 [ 363.958807][T10201] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 364.004657][T10204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1290'. [ 364.043239][ T5699] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 364.272829][ T187] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 364.280746][ T187] uvcvideo 1-1:4.147: No valid video chain found. [ 364.293521][ T187] usb 1-1: USB disconnect, device number 80 [ 365.265825][T10220] loop6: detected capacity change from 0 to 2640 [ 365.278529][ T7481] buffer_io_error: 48 callbacks suppressed [ 365.278549][ T7481] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.295085][ T7481] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.304067][ T7481] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.323239][ T187] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 365.341511][T10220] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.362098][ T24] usb 4-1: USB disconnect, device number 91 [ 365.369882][ T7481] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.388800][T10220] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.425540][ T7481] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.465861][T10220] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.498463][T10220] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.506691][T10220] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.508653][ T187] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.517690][T10220] ldm_validate_partition_table(): Disk read failed. [ 365.542715][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.556640][T10220] Dev loop6: unable to read RDB block 0 [ 365.563026][T10220] loop6: unable to read partition table [ 365.569314][T10220] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 365.604089][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 365.645624][ T187] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 365.654943][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.675800][ T187] usb 1-1: Product: syz [ 365.680208][ T187] usb 1-1: Manufacturer: syz [ 365.685165][ T187] usb 1-1: SerialNumber: syz [ 365.705108][ T187] usb 1-1: config 0 descriptor?? [ 365.715899][T10218] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 365.813059][ T187] rc_core: IR keymap rc-streamzap not found [ 365.834576][ T187] Registered IR keymap rc-empty [ 365.848946][ T187] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 365.872013][ T5699] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 365.880538][ T187] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 366.044333][ T5699] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 366.069188][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 366.136625][ T5699] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 366.178286][ T5699] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 366.188736][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.197653][ T5699] usb 4-1: Product: syz [ 366.202500][ T5699] usb 4-1: Manufacturer: syz [ 366.207257][ T5699] usb 4-1: SerialNumber: syz [ 366.233652][ T5699] usb 4-1: config 0 descriptor?? [ 366.240055][T10223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.253307][T10223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.289391][ T5699] usb 4-1: ucan: probing device on interface #0 [ 366.469371][ T5699] usb 4-1: ucan: could not read protocol version, ret=128 [ 366.501091][ T5699] usb 4-1: ucan: probe failed; try to update the device firmware [ 366.672190][ T5704] usb 4-1: USB disconnect, device number 92 [ 367.926977][ T5704] usb 1-1: USB disconnect, device number 81 [ 368.332129][ T187] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 368.428346][T10254] qrtr: Invalid version 0 [ 368.469190][ T5689] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 368.498616][ T187] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 368.517949][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.519981][ T5689] usb 5-1: USB disconnect, device number 55 [ 368.568604][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.596972][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.617588][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.629436][T10260] syzkaller1: entered promiscuous mode [ 368.644240][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.655551][T10260] syzkaller1: entered allmulticast mode [ 368.682181][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.703823][T10262] loop5: detected capacity change from 0 to 7 [ 368.721427][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.731146][T10262] Dev loop5: unable to read RDB block 7 [ 368.736990][T10262] loop5: unable to read partition table [ 368.743847][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.759225][T10262] loop5: partition table beyond EOD, truncated [ 368.765591][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.774909][T10262] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 368.787098][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.801270][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.820578][T10254] could not allocate digest TFM handle rmd128-generic [ 368.833595][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.859359][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.871885][ T5699] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 368.897874][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.933547][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.952186][ T5689] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 368.961051][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.971951][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.984035][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.992229][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.001616][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.013718][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.021611][ T187] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.031096][ T187] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.046955][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.057712][ T187] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 369.068390][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 369.075310][ T187] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 369.085348][ T187] usb 2-1: Product: syz [ 369.089860][ T187] usb 2-1: Manufacturer: syz [ 369.093898][ T5689] usb 5-1: device descriptor read/64, error -71 [ 369.100954][ T187] usb 2-1: SerialNumber: syz [ 369.107909][ T5699] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 369.117199][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.130877][ T187] usb 2-1: config 0 descriptor?? [ 369.137622][ T5699] usb 4-1: Product: syz [ 369.147987][ T5699] usb 4-1: Manufacturer: syz [ 369.163447][ T187] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 369.180992][ T5699] usb 4-1: SerialNumber: syz [ 369.195463][ T5699] usb 4-1: config 0 descriptor?? [ 369.241937][ T5699] gspca_main: spca508-2.14.0 probing 041e:4018 [ 369.260165][T10270] input: syz0 as /devices/virtual/input/input35 [ 369.277504][T10269] syzkaller1: entered promiscuous mode [ 369.289107][T10269] syzkaller1: entered allmulticast mode [ 369.344152][ T5689] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 369.411378][ T5699] gspca_spca508: reg_read err -32 [ 369.417700][ T5699] gspca_spca508: reg_read err -32 [ 369.424178][ T5699] gspca_spca508: reg_read err -32 [ 369.445065][T10259] syzkaller0: entered promiscuous mode [ 369.450968][T10259] syzkaller0: entered allmulticast mode [ 369.460253][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 369.468902][T10275] FAULT_INJECTION: forcing a failure. [ 369.468902][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.483428][ T187] usb 2-1: USB disconnect, device number 90 [ 369.493552][ T5689] usb 5-1: device descriptor read/64, error -71 [ 369.504049][ T5699] gspca_spca508: reg_read err -32 [ 369.509682][T10275] CPU: 0 UID: 0 PID: 10275 Comm: syz.1.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.509715][T10275] Tainted: [L]=SOFTLOCKUP [ 369.509722][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 369.509744][T10275] Call Trace: [ 369.509753][T10275] [ 369.509762][T10275] dump_stack_lvl+0xe8/0x150 [ 369.509800][T10275] should_fail_ex+0x40c/0x560 [ 369.509833][T10275] _copy_from_user+0x2d/0xb0 [ 369.509973][T10275] yurex_write+0x20e/0xbb0 [ 369.510115][T10275] ? __pfx_yurex_write+0x10/0x10 [ 369.510154][T10275] ? __pfx_autoremove_wake_function+0x10/0x10 [ 369.510187][T10275] ? bpf_lsm_file_permission+0x9/0x20 [ 369.510222][T10275] ? security_file_permission+0x75/0x260 [ 369.510286][T10275] ? rw_verify_area+0x203/0x4c0 [ 369.510321][T10275] ? __pfx_yurex_write+0x10/0x10 [ 369.510353][T10275] vfs_write+0x296/0xba0 [ 369.510395][T10275] ? __pfx_vfs_write+0x10/0x10 [ 369.510430][T10275] ? __fget_files+0x2a/0x420 [ 369.510462][T10275] ? __fget_files+0x2a/0x420 [ 369.510490][T10275] ? __fget_files+0x3a2/0x420 [ 369.510518][T10275] ? __fget_files+0x2a/0x420 [ 369.510556][T10275] ksys_write+0x150/0x270 [ 369.510593][T10275] ? __pfx_ksys_write+0x10/0x10 [ 369.510636][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.510661][T10275] do_syscall_64+0x174/0x580 [ 369.510683][T10275] ? trace_irq_disable+0x3b/0x140 [ 369.510711][T10275] ? clear_bhb_loop+0x40/0x90 [ 369.510739][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.510762][T10275] RIP: 0033:0x7fbb8d59de99 [ 369.510784][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.510803][T10275] RSP: 002b:00007fbb8e4e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.510827][T10275] RAX: ffffffffffffffda RBX: 00007fbb8d826090 RCX: 00007fbb8d59de99 [ 369.510844][T10275] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 369.510858][T10275] RBP: 00007fbb8e4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 369.510872][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.510886][T10275] R13: 00007fbb8d826128 R14: 00007fbb8d826090 R15: 00007fbb8d94fa48 [ 369.510921][T10275] [ 369.733790][ T5689] usb usb5-port1: attempt power cycle [ 369.781423][ T5699] gspca_spca508: reg_read err -32 [ 369.796093][ T187] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 369.810979][T10279] loop5: detected capacity change from 0 to 7 [ 369.829640][T10279] Dev loop5: unable to read RDB block 7 [ 369.840404][T10279] loop5: unable to read partition table [ 369.857347][T10279] loop5: partition table beyond EOD, truncated [ 369.876643][T10279] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 370.081912][ T5689] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 370.102655][ T5689] usb 5-1: device descriptor read/8, error -71 [ 370.292036][ T5699] gspca_spca508: reg write: error -110 [ 370.297736][ T5699] spca508 4-1:0.0: probe with driver spca508 failed with error -110 [ 370.331979][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 370.342136][ T5689] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 370.362930][ T187] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 370.368540][ T5689] usb 5-1: device descriptor read/8, error -71 [ 370.481901][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 370.487437][ T5689] usb usb5-port1: unable to enumerate USB device [ 370.497675][ T24] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 370.507343][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.515723][ T24] usb 1-1: Product: syz [ 370.519974][ T24] usb 1-1: Manufacturer: syz [ 370.525757][ T24] usb 1-1: SerialNumber: syz [ 370.531245][ T187] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 370.539604][ T24] usb 1-1: config 0 descriptor?? [ 370.561926][ T187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.576719][ T187] usb 3-1: config 0 has no interface number 0 [ 370.585750][ T187] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 370.596986][ T187] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 370.607208][ T187] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.626181][ T187] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 370.635691][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.643830][ T187] usb 3-1: Product: syz [ 370.648064][ T187] usb 3-1: Manufacturer: syz [ 370.653170][ T187] usb 3-1: SerialNumber: syz [ 370.663458][ T187] usb 3-1: config 0 descriptor?? [ 370.922451][ T5689] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 370.952231][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 370.959657][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 370.967147][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 370.976893][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 371.095072][ T5689] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.108275][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 371.119689][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 371.135551][ T5689] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 371.147236][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.155417][ T5689] usb 2-1: Product: syz [ 371.159806][ T5689] usb 2-1: Manufacturer: syz [ 371.164532][ T5689] usb 2-1: SerialNumber: syz [ 371.172755][ T5689] usb 2-1: config 0 descriptor?? [ 371.179828][T10291] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 371.244141][ T5689] rc_core: IR keymap rc-streamzap not found [ 371.250235][ T5689] Registered IR keymap rc-empty [ 371.256477][ T5689] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 371.270035][ T5689] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 371.414413][ T5699] usb 2-1: USB disconnect, device number 91 [ 371.441984][ T187] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 371.507032][ T5689] usb 3-1: USB disconnect, device number 98 [ 371.614343][ T5704] usb 4-1: USB disconnect, device number 93 [ 371.627878][ T187] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 371.667955][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.702544][ T187] usb 5-1: Product: syz [ 371.712544][ T187] usb 5-1: Manufacturer: syz [ 371.720832][ T187] usb 5-1: SerialNumber: syz [ 371.785202][ T24] gspca_se401: read req failed req 0x06 error -19 [ 371.805900][ T24] usb 1-1: USB disconnect, device number 82 [ 371.815530][T10307] input: syz0 as /devices/virtual/input/input38 [ 371.946195][ T187] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 371.946269][ T187] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 371.946294][ T187] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 371.957833][ T187] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 372.005996][ T187] usb 5-1: USB disconnect, device number 60 [ 372.354660][ T30] audit: type=1326 audit(1784690510.572:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10326 comm="syz.0.1331" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5b9b9de99 code=0x0 [ 372.406875][T10325] vlan2: entered promiscuous mode [ 372.412359][ T24] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 372.429037][T10325] bond_slave_1: entered promiscuous mode [ 372.573536][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 372.582967][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.598265][ T24] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 372.731949][ T187] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 372.761989][ T5699] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 372.797267][ T24] gspca_sunplus: reg_w_riv err -71 [ 372.815737][ T24] sunplus 2-1:8.0: probe with driver sunplus failed with error -71 [ 372.840516][ T24] usb 2-1: USB disconnect, device number 92 [ 372.863434][ T187] usb 4-1: device descriptor read/64, error -71 [ 372.931887][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 372.940584][ T5699] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 372.952923][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.961391][ T5699] usb 3-1: Product: syz [ 372.966068][ T5699] usb 3-1: Manufacturer: syz [ 372.970747][ T5699] usb 3-1: SerialNumber: syz [ 372.980002][ T5699] usb 3-1: config 0 descriptor?? [ 373.094437][T10342] xt_HMARK: proto mask must be zero with L3 mode [ 373.112185][ T187] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 373.251920][ T187] usb 4-1: device descriptor read/64, error -71 [ 373.362550][ T187] usb usb4-port1: attempt power cycle [ 373.403260][ T5699] gspca_main: se401-2.14.0 probing 047d:5003 [ 373.452145][ T2035] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 373.591947][ T2035] usb 5-1: device descriptor read/64, error -71 [ 373.691932][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 373.702080][ T187] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 373.722419][ T187] usb 4-1: device descriptor read/8, error -71 [ 373.831969][ T2035] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 373.842319][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 373.849095][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.860463][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.869733][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.880427][ T24] usb 2-1: config 0 descriptor?? [ 373.955813][T10350] FAULT_INJECTION: forcing a failure. [ 373.955813][T10350] name failslab, interval 1, probability 0, space 0, times 0 [ 373.963950][ T187] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 373.969813][T10350] CPU: 1 UID: 0 PID: 10350 Comm: syz.2.1339 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.969863][T10350] Tainted: [L]=SOFTLOCKUP [ 373.969871][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 373.969884][T10350] Call Trace: [ 373.969893][T10350] [ 373.969902][T10350] dump_stack_lvl+0xe8/0x150 [ 373.969940][T10350] should_fail_ex+0x40c/0x560 [ 373.969970][T10350] should_failslab+0xa8/0x100 [ 373.970003][T10350] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 373.970031][T10350] ? alloc_empty_file+0x5b/0x1d0 [ 373.970056][T10350] ? alloc_empty_file+0x5b/0x1d0 [ 373.970083][T10350] ? stack_trace_save+0xa9/0x100 [ 373.970200][T10350] alloc_empty_file+0x5b/0x1d0 [ 373.970288][T10350] path_openat+0x8f/0x3830 [ 373.970396][T10350] ? kasan_save_track+0x4f/0x80 [ 373.970453][T10350] ? kasan_save_track+0x3e/0x80 [ 373.970521][T10350] ? __kasan_slab_alloc+0x6c/0x80 [ 373.970585][T10350] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 373.970648][T10350] ? do_getname+0x2e/0x250 [ 373.970715][T10350] ? do_sys_openat2+0xcc/0x200 [ 373.970764][T10350] ? __x64_sys_openat+0x138/0x170 [ 373.970828][T10350] ? do_syscall_64+0x174/0x580 [ 373.970889][T10350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.970980][T10350] ? __lock_acquire+0x683/0x2cf0 [ 373.971065][T10350] do_file_open+0x23e/0x4a0 [ 373.971150][T10350] ? __pfx_do_file_open+0x10/0x10 [ 373.971295][T10350] ? _raw_spin_unlock+0x28/0x50 [ 373.971475][T10350] ? alloc_fd+0x651/0x6c0 [ 373.971559][T10350] do_sys_openat2+0x115/0x200 [ 373.971668][T10350] ? __pfx_do_sys_openat2+0x10/0x10 [ 373.971781][T10350] ? ksys_write+0x242/0x270 [ 373.971874][T10350] ? __pfx_ksys_write+0x10/0x10 [ 373.971978][T10350] __x64_sys_openat+0x138/0x170 [ 373.972091][T10350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.972156][T10350] do_syscall_64+0x174/0x580 [ 373.972210][T10350] ? trace_irq_disable+0x3b/0x140 [ 373.972282][T10350] ? clear_bhb_loop+0x40/0x90 [ 373.972353][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.972414][T10350] RIP: 0033:0x7fe369d9de99 [ 373.972471][T10350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.972523][T10350] RSP: 002b:00007fe36ac7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 373.972585][T10350] RAX: ffffffffffffffda RBX: 00007fe36a025fa0 RCX: 00007fe369d9de99 [ 373.972629][T10350] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 373.972670][T10350] RBP: 00007fe36ac7a090 R08: 0000000000000000 R09: 0000000000000000 [ 373.972710][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.972743][T10350] R13: 00007fe36a026038 R14: 00007fe36a025fa0 R15: 00007fe36a14fa48 [ 373.972828][T10350] [ 374.171212][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 374.182061][ T2035] usb 5-1: device descriptor read/64, error -71 [ 374.292441][ T187] usb 4-1: device descriptor read/8, error -71 [ 374.382264][ T2035] usb usb5-port1: attempt power cycle [ 374.412457][ T187] usb usb4-port1: unable to enumerate USB device [ 374.483226][ T5699] gspca_se401: read req failed req 0x06 error -19 [ 374.492150][ T5699] usb 3-1: USB disconnect, device number 99 [ 374.615446][ T187] usb 2-1: USB disconnect, device number 93 [ 374.722237][ T2035] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 374.752632][ T2035] usb 5-1: device descriptor read/8, error -71 [ 374.840854][T10359] fuse: Bad value for 'fd' [ 374.992013][ T2035] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 375.023112][ T2035] usb 5-1: device descriptor read/8, error -71 [ 375.142558][ T2035] usb usb5-port1: unable to enumerate USB device [ 375.505568][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 375.516896][T10371] netlink: 'syz.0.1344': attribute type 30 has an invalid length. [ 375.540354][T10371] vxlan0: entered promiscuous mode [ 375.547676][T10371] vxlan0: entered allmulticast mode [ 375.556865][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 375.568893][T10373] netlink: 'syz.0.1344': attribute type 30 has an invalid length. [ 375.574067][ T6191] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.613440][ T6191] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.642953][ T6191] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.729906][T10373] vxlan1: entered promiscuous mode [ 375.745643][T10373] vxlan1: entered allmulticast mode [ 375.762929][ T6191] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.924929][T10382] input: syz0 as /devices/virtual/input/input40 [ 375.935421][T10369] input: syz0 as /devices/virtual/input/input39 [ 376.008282][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 376.152339][ T24] usb 4-1: device descriptor read/64, error -71 [ 376.317976][T10400] FAULT_INJECTION: forcing a failure. [ 376.317976][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 376.338564][T10400] CPU: 0 UID: 0 PID: 10400 Comm: syz.1.1351 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.338599][T10400] Tainted: [L]=SOFTLOCKUP [ 376.338608][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 376.338622][T10400] Call Trace: [ 376.338631][T10400] [ 376.338641][T10400] dump_stack_lvl+0xe8/0x150 [ 376.338683][T10400] should_fail_ex+0x40c/0x560 [ 376.338717][T10400] should_failslab+0xa8/0x100 [ 376.338752][T10400] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 376.338781][T10400] ? security_file_alloc+0x34/0x310 [ 376.338811][T10400] ? security_file_alloc+0x34/0x310 [ 376.338847][T10400] security_file_alloc+0x34/0x310 [ 376.338879][T10400] init_file+0x90/0x2b0 [ 376.338910][T10400] alloc_empty_file+0x74/0x1d0 [ 376.338939][T10400] path_openat+0x8f/0x3830 [ 376.338978][T10400] ? kasan_save_track+0x4f/0x80 [ 376.339005][T10400] ? kasan_save_track+0x3e/0x80 [ 376.339031][T10400] ? __kasan_slab_alloc+0x6c/0x80 [ 376.339060][T10400] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 376.339084][T10400] ? do_getname+0x2e/0x250 [ 376.339108][T10400] ? do_sys_openat2+0xcc/0x200 [ 376.339134][T10400] ? __x64_sys_openat+0x138/0x170 [ 376.339161][T10400] ? do_syscall_64+0x174/0x580 [ 376.339184][T10400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.339218][T10400] ? __lock_acquire+0x683/0x2cf0 [ 376.339260][T10400] do_file_open+0x23e/0x4a0 [ 376.339300][T10400] ? __pfx_do_file_open+0x10/0x10 [ 376.339356][T10400] ? _raw_spin_unlock+0x28/0x50 [ 376.339386][T10400] ? alloc_fd+0x651/0x6c0 [ 376.339425][T10400] do_sys_openat2+0x115/0x200 [ 376.339464][T10400] ? __pfx_do_sys_openat2+0x10/0x10 [ 376.339494][T10400] ? ksys_write+0x242/0x270 [ 376.339530][T10400] ? __pfx_ksys_write+0x10/0x10 [ 376.339565][T10400] __x64_sys_openat+0x138/0x170 [ 376.339600][T10400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.339623][T10400] do_syscall_64+0x174/0x580 [ 376.339644][T10400] ? trace_irq_disable+0x3b/0x140 [ 376.339673][T10400] ? clear_bhb_loop+0x40/0x90 [ 376.339700][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.339723][T10400] RIP: 0033:0x7fbb8d59de99 [ 376.339744][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.339764][T10400] RSP: 002b:00007fbb8e505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 376.339788][T10400] RAX: ffffffffffffffda RBX: 00007fbb8d825fa0 RCX: 00007fbb8d59de99 [ 376.339805][T10400] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 376.339821][T10400] RBP: 00007fbb8e505090 R08: 0000000000000000 R09: 0000000000000000 [ 376.339836][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.339849][T10400] R13: 00007fbb8d826038 R14: 00007fbb8d825fa0 R15: 00007fbb8d94fa48 [ 376.339884][T10400] [ 376.444869][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 376.786240][ T24] usb 4-1: device descriptor read/64, error -71 [ 376.912105][ T24] usb usb4-port1: attempt power cycle [ 376.973822][ T187] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 376.981903][ T5704] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 377.132532][ T187] usb 2-1: Using ep0 maxpacket: 16 [ 377.142677][ T187] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 377.159618][ T5704] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 377.177627][ T5704] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 377.189304][ T187] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 377.200694][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.226965][ T5704] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 377.238978][ T5704] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 377.255871][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.270259][ T187] usb 2-1: config 0 descriptor?? [ 377.273115][T10410] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.283041][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 377.312505][ T24] usb 4-1: device descriptor read/8, error -71 [ 377.572022][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 377.623277][ T24] usb 4-1: device descriptor read/8, error -71 [ 377.722535][ T187] usbhid 2-1:0.0: can't add hid device: -71 [ 377.732396][ T24] usb usb4-port1: unable to enumerate USB device [ 377.746413][ T187] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 377.768762][ T187] usb 2-1: USB disconnect, device number 94 [ 377.846981][T10432] fuse: Unknown parameter '' [ 377.869138][T10432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1359'. [ 378.358621][T10436] input: syz0 as /devices/virtual/input/input42 [ 378.687482][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.694004][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.750246][T10438] input: syz0 as /devices/virtual/input/input43 [ 379.112673][ T2035] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 379.186711][ T30] audit: type=1326 audit(1784690517.402:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.2.1366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe369d9de99 code=0x0 [ 379.208256][T10449] kvm: pic: non byte write [ 379.271913][ T2035] usb 4-1: device descriptor read/64, error -71 [ 379.309859][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'. [ 379.355460][T10446] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 379.513446][ T2035] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 379.652033][ T2035] usb 4-1: device descriptor read/64, error -71 [ 379.762274][ T2035] usb usb4-port1: attempt power cycle [ 379.792893][ T5704] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 379.800217][ T24] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 379.812180][ T5704] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input41 [ 379.953291][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 379.969610][ T24] usb 3-1: config 123 interface 0 has no altsetting 0 [ 379.992546][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 380.038554][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.047050][ T24] usb 3-1: Product: syz [ 380.051644][ T24] usb 3-1: Manufacturer: syz [ 380.066881][ T24] usb 3-1: SerialNumber: syz [ 380.102194][ T2035] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 380.143049][ T2035] usb 4-1: device descriptor read/8, error -71 [ 380.303558][T10479] input: syz0 as /devices/virtual/input/input44 [ 380.401909][ T2035] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 380.432573][ T2035] usb 4-1: device descriptor read/8, error -71 [ 380.502742][ T187] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 380.518172][ T30] audit: type=1326 audit(1784690518.732:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69dc19de99 code=0x0 [ 380.549237][ T2035] usb usb4-port1: unable to enumerate USB device [ 380.662637][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 380.664722][ T187] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 380.664782][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.694421][ T187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 380.694468][ T187] pvrusb2: ********** [ 380.694480][ T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 380.694496][ T187] pvrusb2: Important functionality might not be entirely working. [ 380.694509][ T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 380.694525][ T187] pvrusb2: ********** [ 380.930414][ T24] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 380.949142][ T2368] pvrusb2: Invalid write control endpoint [ 380.974463][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 381.005186][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 381.037023][ T24] usb 3-1: media controller created [ 381.088400][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.119679][T10480] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 381.131787][T10480] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 381.140393][T10480] CPU: 0 UID: 0 PID: 10480 Comm: syz.1.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.151414][T10480] Tainted: [L]=SOFTLOCKUP [ 381.155787][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 381.165891][T10480] RIP: 0010:__mutex_lock+0x149/0x1550 [ 381.171333][T10480] Code: c0 80 15 78 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d 05 c7 a6 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 ec b5 62 f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 381.191008][T10480] RSP: 0018:ffffc9000d53f460 EFLAGS: 00010206 [ 381.197130][T10480] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a781503 [ 381.205145][T10480] RDX: 0000000000000000 RSI: ffffffff8e4b1104 RDI: 00000000000000c0 [ 381.213166][T10480] RBP: ffffc9000d53f5f8 R08: ffffc9000d53f567 R09: 0000000000000000 [ 381.221248][T10480] R10: ffffc9000d53f540 R11: fffff52001aa7ead R12: 0000000000000068 [ 381.229265][T10480] R13: 0000000000000000 R14: 1ffff92001aa7ea0 R15: 0000000000000000 [ 381.237287][T10480] FS: 00007fbb8e5056c0(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 381.246260][T10480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.252893][T10480] CR2: 0000200000034000 CR3: 0000000076862000 CR4: 00000000003526f0 [ 381.260921][T10480] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 381.269201][T10480] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 381.277214][T10480] Call Trace: [ 381.280524][T10480] [ 381.283489][T10480] ? __mutex_lock+0x30d/0x1550 [ 381.288298][T10480] ? dvb_usbv2_generic_write+0x26/0x60 [ 381.293960][T10480] ? __mutex_trylock_common+0x15f/0x270 [ 381.299552][T10480] ? __pfx___mutex_lock+0x10/0x10 [ 381.304626][T10480] ? __pfx___mutex_lock+0x10/0x10 [ 381.309700][T10480] ? trace_contention_end+0x3d/0x140 [ 381.315114][T10480] ? __mutex_lock+0x30d/0x1550 [ 381.319909][T10480] dvb_usbv2_generic_write+0x26/0x60 [ 381.325235][T10480] mxl111sf_ctrl_msg+0x160/0x2f0 [ 381.330313][T10480] mxl111sf_write_reg+0xa9/0x1b0 [ 381.335289][T10480] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 381.340870][T10480] mxl111sf_i2c_xfer+0x463/0x5060 [ 381.345937][T10480] ? is_bpf_text_address+0x26/0x2b0 [ 381.351185][T10480] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 381.356682][T10480] ? kernel_text_address+0xa5/0xe0 [ 381.361837][T10480] ? __kernel_text_address+0xd/0x30 [ 381.367166][T10480] ? unwind_get_return_address+0x4d/0x90 [ 381.372825][T10480] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.379020][T10480] ? arch_stack_walk+0xfb/0x150 [ 381.383946][T10480] ? stack_trace_save+0xa9/0x100 [ 381.388913][T10480] ? __pfx_stack_trace_save+0x10/0x10 [ 381.394314][T10480] ? stack_trace_save+0xa9/0x100 [ 381.399293][T10480] ? stack_depot_save_flags+0x33/0x800 [ 381.404864][T10480] ? __roundup_pow_of_two+0x21/0x40 [ 381.410097][T10480] ? kasan_save_track+0x4f/0x80 [ 381.414979][T10480] ? kasan_save_track+0x3e/0x80 [ 381.419860][T10480] ? __kasan_kmalloc+0x93/0xb0 [ 381.424653][T10480] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 381.431299][T10480] ? memdup_user+0x2b/0xd0 [ 381.435753][T10480] ? look_up_lock_class+0x57/0x110 [ 381.440900][T10480] ? register_lock_class+0x31/0x2e0 [ 381.446143][T10480] ? __lock_acquire+0x683/0x2cf0 [ 381.451144][T10480] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.456203][T10480] __i2c_transfer+0x7be/0x1fe0 [ 381.461132][T10480] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.466994][T10480] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.472235][T10480] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.478094][T10480] ? rt_mutex_lock_nested+0x156/0x1c0 [ 381.483530][T10480] ? i2c_transfer+0xc8/0x2d0 [ 381.488168][T10480] i2c_transfer+0x1cc/0x2d0 [ 381.492738][T10480] i2cdev_ioctl_rdwr+0x460/0x740 [ 381.497792][T10480] i2cdev_ioctl+0x6a5/0x880 [ 381.502366][T10480] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 381.507432][T10480] ? __fget_files+0x3a2/0x420 [ 381.512146][T10480] ? __fget_files+0x2a/0x420 [ 381.516777][T10480] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.521739][T10480] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 381.526834][T10480] __se_sys_ioctl+0xfc/0x170 [ 381.531452][T10480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.537556][T10480] do_syscall_64+0x174/0x580 [ 381.542173][T10480] ? trace_irq_disable+0x3b/0x140 [ 381.547232][T10480] ? clear_bhb_loop+0x40/0x90 [ 381.551944][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.557867][T10480] RIP: 0033:0x7fbb8d59de99 [ 381.562317][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.581950][T10480] RSP: 002b:00007fbb8e505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.590400][T10480] RAX: ffffffffffffffda RBX: 00007fbb8d825fa0 RCX: 00007fbb8d59de99 [ 381.598407][T10480] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 381.606415][T10480] RBP: 00007fbb8d633eaf R08: 0000000000000000 R09: 0000000000000000 [ 381.614427][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.622430][T10480] R13: 00007fbb8d826038 R14: 00007fbb8d825fa0 R15: 00007fbb8d94fa48 [ 381.630447][T10480] [ 381.633511][T10480] Modules linked in: [ 381.638639][T10480] ---[ end trace 0000000000000000 ]--- [ 381.689592][T10480] RIP: 0010:__mutex_lock+0x149/0x1550 [ 381.713470][ T29] usb 5-1: USB disconnect, device number 65 [ 381.713527][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 381.735913][T10480] Code: c0 80 15 78 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d 05 c7 a6 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 ec b5 62 f6 4d 39 64 24 58 0f 85 48 11 00 00 [ 381.770155][ T2368] pvrusb2: Invalid write control endpoint [ 381.779667][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 381.784081][ T5689] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 381.801403][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 381.816649][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 381.831167][ T24] set interface failed [ 381.841961][ T2368] pvrusb2: Device being rendered inoperable [ 381.872825][ T2368] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 381.880085][ T2368] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 381.896509][T10480] RSP: 0018:ffffc9000d53f460 EFLAGS: 00010206 [ 381.913322][ T2368] pvrusb2: Attached sub-driver cx25840 [ 381.921710][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 381.942065][T10480] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a781503 [ 381.950272][T10480] RDX: 0000000000000000 RSI: ffffffff8e4b1104 RDI: 00000000000000c0 [ 381.958394][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 381.972699][ T5689] usb 1-1: Using ep0 maxpacket: 16 [ 381.979280][ T5689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 381.982513][T10480] RBP: ffffc9000d53f5f8 R08: ffffc9000d53f567 R09: 0000000000000000 [ 381.996052][ T5689] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 382.004921][T10480] R10: ffffc9000d53f540 R11: fffff52001aa7ead R12: 0000000000000068 [ 382.013352][ T5689] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 382.022001][ T5689] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 382.022860][T10480] R13: 0000000000000000 R14: 1ffff92001aa7ea0 R15: 0000000000000000 [ 382.030784][ T5689] usb 1-1: config 7 has an invalid interface number: 227 but max is 3 [ 382.047184][ T5689] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 382.052072][T10480] FS: 00007fbb8e5056c0(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 382.058742][ T5689] usb 1-1: config 7 has no interface number 0 [ 382.081905][T10480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.100059][ T5689] usb 1-1: config 7 has no interface number 1 [ 382.101980][T10480] CR2: 00007f241b9a2e9c CR3: 0000000076862000 CR4: 00000000003526f0 [ 382.117841][ T5689] usb 1-1: config 7 has no interface number 2 [ 382.126196][T10480] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 382.136342][ T5689] usb 1-1: config 7 has no interface number 3 [ 382.143052][ T5689] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 382.154713][ T5689] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 382.155598][T10480] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 382.166226][ T5689] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 382.185346][ T5689] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 382.196715][T10480] Kernel panic - not syncing: Fatal exception [ 382.203433][T10480] Kernel Offset: disabled [ 382.207792][T10480] Rebooting in 86400 seconds..