last executing test programs: 1m5.854505816s ago: executing program 1 (id=1650): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000005c0)="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", 0x931) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 1m5.537594646s ago: executing program 2 (id=1654): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m5.254674339s ago: executing program 2 (id=1656): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="002ea6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x0, &(0x7f0000000000)={0x0, "ee48b79ad5608a408b490eb85ea48b3f5b1878e46100"}}) 1m3.436670437s ago: executing program 1 (id=1672): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) 1m3.235612948s ago: executing program 3 (id=1673): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x3) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x1400c0c0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1m2.175704029s ago: executing program 1 (id=1676): socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x100000, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xdf9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1c}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m1.954566133s ago: executing program 2 (id=1678): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002abd70000000000000000000000000000000000000000001fc0200000000f2ff000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff0000000000200000000000000000000000000000000000002f00000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500fe8000000000000000000000000000bb000000003c00000002000000ac1414bb000000000000000000000000060000000401"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1m1.884043947s ago: executing program 2 (id=1679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x11, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x9, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x3, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x1, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0xffffffff, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xa, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0x800cb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.782510242s ago: executing program 1 (id=1681): r0 = epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pselect6(0x40, &(0x7f0000001600)={0x8, 0x8, 0x7, 0x7, 0x40002c16035f, 0x86a, 0xbd7, 0x7ff}, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r3) 1m1.357637233s ago: executing program 2 (id=1683): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x31) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f00003fd000/0xc00000)=nil) shmat(r3, &(0x7f00009d5000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 1m0.245093135s ago: executing program 1 (id=1685): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="1c0012800b000100697076"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) syz_emit_ethernet(0xf8f, &(0x7f0000003180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x8f}) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.234692448s ago: executing program 2 (id=1686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 59.846834364s ago: executing program 3 (id=1687): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 59.816250161s ago: executing program 1 (id=1688): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x9, r1, 0x1, 0x9, 0x6, @multicast}, 0x14) fadvise64(r2, 0x10000, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048004) 59.647976559s ago: executing program 3 (id=1689): syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 59.540512617s ago: executing program 3 (id=1690): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="a7bc29", 0x3}], 0x1) 58.399690118s ago: executing program 0 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d000000008021100000108021100000050505050505000400f"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 58.170508888s ago: executing program 0 (id=1694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000840)={{0xdddd0000, 0x111e5001, 0x10, 0x6, 0xd, 0x2, 0x10, 0xc, 0x9, 0x7f, 0xc, 0x8}, {0x8080000, 0x25000, 0xd, 0x4, 0x7f, 0x4, 0x6, 0x2, 0xf8, 0x5, 0x0, 0x4}, {0x1, 0x41000, 0xc, 0x4, 0x0, 0x2, 0xc8, 0x5, 0x3, 0xd, 0x80, 0x8c}, {0x58000, 0x2, 0x8, 0x40, 0x8a, 0x1, 0x2, 0x2, 0x3, 0x5, 0xb, 0x2}, {0x54000, 0xffffffff, 0xa, 0xb6, 0xff, 0xed, 0x6, 0xb, 0x5, 0x3, 0x6, 0x4}, {0x60000, 0x8080000, 0x10, 0xd7, 0x5, 0x4, 0x84, 0x8, 0x2, 0xfa, 0x5f, 0xd}, {0x58000, 0x26000, 0xd, 0x6, 0x4, 0x5, 0x7, 0xff, 0x0, 0x7, 0x40, 0x6}, {0x40000, 0x100000, 0x0, 0x3e, 0x4, 0x2, 0xf, 0x7, 0x95, 0x0, 0x2, 0x6}, {0xf000, 0x4}, {0x1, 0x9}, 0x20000000, 0x0, 0xa000, 0x20001, 0x0, 0x2100, 0xdddd0000, [0x6, 0x2, 0x2040000000000, 0xffffffffffff5adc]}) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902600003010048f30904000000010100000a240106000a0002010209040080000002000009040101010102000009050109080000037f0725010c000200090402"], 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r4, 0x8744}], 0x1, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f0000002100)=[{r4, 0x688}], 0x1, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 57.936407528s ago: executing program 3 (id=1696): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002abd70000000000000000000000000000000000000000001fc0200000000f2ff000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff0000000000200000000000000000000000000000000000002f00000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500fe8000000000000000000000000000bb000000003c00000002000000ac1414bb000000000000000000000000060000000401"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 57.80126152s ago: executing program 3 (id=1697): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x227d, &(0x7f0000000040)={0x0, 0x50a7, 0xc000, 0x1, 0x282}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000880090001eb8689891fb8dbbd4d159885"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x4040) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) fcntl$setstatus(r7, 0x4, 0x2000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r9, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000040)={r9, @in6={{0xa, 0x4e23, 0xe, @local, 0x2}}, 0x40, 0x5, 0xfcc, 0x7f, 0x42, 0x1a873712, 0x6}, &(0x7f0000000100)=0x9c) 56.40232166s ago: executing program 0 (id=1699): sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 56.30616268s ago: executing program 0 (id=1700): syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 56.167177282s ago: executing program 0 (id=1701): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000005c0)="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", 0x931) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 54.715297517s ago: executing program 0 (id=1702): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.986375152s ago: executing program 32 (id=1686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 44.381369915s ago: executing program 33 (id=1688): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x9, r1, 0x1, 0x9, 0x6, @multicast}, 0x14) fadvise64(r2, 0x10000, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048004) 42.492856095s ago: executing program 34 (id=1697): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x227d, &(0x7f0000000040)={0x0, 0x50a7, 0xc000, 0x1, 0x282}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000880090001eb8689891fb8dbbd4d159885"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x4040) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) fcntl$setstatus(r7, 0x4, 0x2000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r9, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000040)={r9, @in6={{0xa, 0x4e23, 0xe, @local, 0x2}}, 0x40, 0x5, 0xfcc, 0x7f, 0x42, 0x1a873712, 0x6}, &(0x7f0000000100)=0x9c) 39.379345932s ago: executing program 35 (id=1702): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.687466627s ago: executing program 4 (id=1748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000880)={0xffffffffffffffff, 0x1, {0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0x5, "46975b3a74fa4cb8d0efced6f37ef4e426712520fb36670910deab0ad5cd9df5e383a33884449f818e39451a907c0121b8300f1a7b08fdff42fcef5f2160d202", "0a30e2e104ae102d1d0d8c757c24a8403cd548fd159e91d31ef8ee31dcd9a560b5e6e0404f7948ba886b18e3a2d0810b4a8cc25f3ce2057ace8c0d051aa09b28", "b47219a9ac6ede6c368ff8d27abbd638f22fa446d6b739c424b465d27a04507c", [0xffffffffffffffff, 0x8000000000000000]}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc01000000000000000000000000000000000000040000000000000000000079000000"], 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 11.604388161s ago: executing program 4 (id=1749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x80000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffff800}}, 0x101, 0x1, 0x985, 0x200, 0x9}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={r1, 0x3, 0x3, [0x40, 0x5, 0x6]}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) 11.299677321s ago: executing program 4 (id=1750): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000002c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)="020000") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.52373325s ago: executing program 5 (id=1714): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000a, 0x20132, 0xffffffffffffffff, 0xd606f000) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc400941b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002000000408205820540000102030109026e000301c0c310080b000201223061090400000001013000"], 0x0) 7.974155875s ago: executing program 4 (id=1751): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x20, 0x5, 0xf0, "96b7fa035fcbb31e9d4e7cc0217325fadec6c27f48faeb9223cf199c655649b0df1c06311d88310a34d0b46a56f3fcb2235042ebc6132b5404d16eeba73525cb91051d440899ad995ff5223821e947eb9796db859d3dda9fcaf8e06fc36707f5ca4fe0c8f1eae8b0b89edafd5d9c3582a3d7d5124e5675ba8e26e9812beb3c3cc461af97a1344a7ae3b9a067afcbe421fa0a795ac315d16edf26ed361d2d3800b03211501946a10503b790ea44fe366b07b5569f5c23df1825f2a65125a0a7482f0667a12baf5fca916f4a229b6d09e994e6ae02950a2df2d0c61c332bf67d78bf89e54c44c18bcfe0042963b46c04cf"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0xb, 0x2, "539b"}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "f4f5"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x2}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000180)) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) 7.298111539s ago: executing program 5 (id=1752): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x3) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x1400c0c0) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 5.740874675s ago: executing program 6 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d000000008021100000108021100000050505050505000400f"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 5.559380271s ago: executing program 6 (id=1753): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) syz_clone(0xc29ea980, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x2, 0xfffdfffffffffffd}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="995b1089d5a4a5706f9af33cd41ae23dd60063d520c610e786c3ea2bf7b8e4d36210bcb37d358f6bc10a29c6c548195e3384fe059244a013cb7d43571b7c2aa5fda3b5f161556ac653df6db4d32cdd3a754e1689af89c38e0221287a32141e687511e0a08d4028f8e5f26d8bca600e03ddba9d2450a59c129686ddd2d5039d2fb8eecd8af9846e46a900e2ed3107f23a920cca690480a5010699af1764a057af4ae763ad9d207e22dfa44cb76d0a4d1a9dae7c362b64d981c936b4f2067785", @ANYRESHEX=r1], 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x8004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x9a, 0xfffffffffffffffe}, 0x10) close(0xffffffffffffffff) inotify_init1(0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000700)={0xa, 0x4e23, 0xb7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, 0x1c, &(0x7f00000006c0)}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x2, @meta={0x43425052, 0x591b982, 0x68b1, 0x4e23, 0x5460e3d5}}) socket$unix(0x1, 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0x9, 0x6, @local}, 0x14) socket$kcm(0x10, 0x2, 0x0) 5.101955755s ago: executing program 7 (id=1717): syz_emit_ethernet(0x72, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x3c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x4, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 4.85011801s ago: executing program 7 (id=1754): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_disconnect(r0) 4.727015821s ago: executing program 4 (id=1755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000880)={0xffffffffffffffff, 0x1, {0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0x5, "46975b3a74fa4cb8d0efced6f37ef4e426712520fb36670910deab0ad5cd9df5e383a33884449f818e39451a907c0121b8300f1a7b08fdff42fcef5f2160d202", "0a30e2e104ae102d1d0d8c757c24a8403cd548fd159e91d31ef8ee31dcd9a560b5e6e0404f7948ba886b18e3a2d0810b4a8cc25f3ce2057ace8c0d051aa09b28", "b47219a9ac6ede6c368ff8d27abbd638f22fa446d6b739c424b465d27a04507c", [0xffffffffffffffff, 0x8000000000000000]}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc01000000000000000000000000000000000000040000000000000000000079000000"], 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 3.737001998s ago: executing program 8 (id=1718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008a5000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000258000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x2e0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) io_uring_enter(r1, 0x2216, 0x7a5e, 0x16, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000440)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3.372980738s ago: executing program 8 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) syz_emit_ethernet(0xf8f, &(0x7f0000003180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60"], 0x0) 3.020223021s ago: executing program 8 (id=1757): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 2.734091146s ago: executing program 7 (id=1758): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000002c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.624285567s ago: executing program 8 (id=1759): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r1 = socket$kcm(0x29, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) 2.441859287s ago: executing program 6 (id=1760): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10003}, 0x1c) close(r0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x40, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xbd65}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8002, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="ab62ca98f9c0d942534db4fa4f808611c2a7f7549fab411e893eb30ace927663258f0e00c7c4c518e70a34878d037d2750de1a3e80f79d9f92c02acc409cf5fa84d39cfa5d6e5982f2b4473bce826b25b5323d9e83d6c3131d89b2221069bab51dd0835061841164f53fe9c499dc933c11f6338515eaf6f1ae89c9d85413c5ce51d9e20dfc1e7e8b95f8c786f472c9e03ff0100b232f819bcc633591d26cc4270e204303491abce78600f8dc75be13cca4c6a33f16182f91ed02c22a4f78e07aeada6183", 0xc4}], 0x1) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) 2.006349685s ago: executing program 5 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d000000008021100000108021100000050505050505000400f"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 196.088959ms ago: executing program 8 (id=1762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @dev={0xac, 0x14, 0x14, 0x25}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r4, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 168.82988ms ago: executing program 6 (id=1763): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x80000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffff800}}, 0x101, 0x1, 0x985, 0x200, 0x9}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={r1, 0x3, 0x3, [0x40, 0x5, 0x6]}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) 167.219125ms ago: executing program 7 (id=1764): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x20, 0x5, 0xf0, "96b7fa035fcbb31e9d4e7cc0217325fadec6c27f48faeb9223cf199c655649b0df1c06311d88310a34d0b46a56f3fcb2235042ebc6132b5404d16eeba73525cb91051d440899ad995ff5223821e947eb9796db859d3dda9fcaf8e06fc36707f5ca4fe0c8f1eae8b0b89edafd5d9c3582a3d7d5124e5675ba8e26e9812beb3c3cc461af97a1344a7ae3b9a067afcbe421fa0a795ac315d16edf26ed361d2d3800b03211501946a10503b790ea44fe366b07b5569f5c23df1825f2a65125a0a7482f0667a12baf5fca916f4a229b6d09e994e6ae02950a2df2d0c61c332bf67d78bf89e54c44c18bcfe0042963b46c04cf"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0xb, 0x2, "539b"}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "f4f5"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x2}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000180)) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) 0s ago: executing program 4 (id=1765): socket$tipc(0x1e, 0x5, 0x0) fsopen(0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) kernel console output (not intermixed with test programs): s:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 468.156018][ T9193] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 468.157673][ T9193] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.160176][ T9193] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 468.160682][ T9193] Node 0 DMA32 free:1272608kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:736kB inactive_anon:21928kB active_file:96168kB inactive_file:144472kB unevictable:0kB writepending:812kB zspages:0kB present:3129332kB managed:2560500kB mlocked:0kB bounce:0kB free_pcp:21780kB local_pcp:1856kB free_cma:0kB [ 468.164982][ T9193] lowmem_reserve[]: 0 0 1 1 1 [ 468.167323][ T9193] Node 0 Normal free:12kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 468.168042][ T9193] lowmem_reserve[]: 0 0 0 0 0 [ 468.169633][ T9193] Node 1 Normal free:3947112kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.171465][ T9193] lowmem_reserve[]: 0 0 0 0 0 [ 468.188508][ T9193] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.258615][ T9193] Node 0 DMA32: 1084*4kB (UME) 530*8kB (UME) 219*16kB (UME) 326*32kB (UME) 293*64kB (UME) 184*128kB (UME) 120*256kB (UME) 39*512kB (M) 12*1024kB (M) 9*2048kB (UM) 275*4096kB (UM) = 1272624kB [ 468.354394][ T9193] Node 0 Normal: [ 468.361880][ T5576] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 468.367712][ T9193] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.399902][ T9193] Node 1 Normal: [ 468.542343][ T5858] gspca_vc032x: reg_r err -110 [ 468.542608][ T5858] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 468.551861][ T5576] usb 3-1: Using ep0 maxpacket: 8 [ 468.570855][ T5576] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 468.621836][ T5576] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 468.621889][ T5576] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.621909][ T5576] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.621931][ T5576] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.621951][ T5576] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.621990][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.862249][ T9193] 2*4kB (UM) 8*8kB (UM) 10*16kB (UM) 14*32kB (UM) 13*64kB (UM) 5*128kB (UM) 2*256kB (M) 4*512kB (UM) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3947112kB [ 468.862425][ T9193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.862445][ T9193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.862463][ T9193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.862482][ T9193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.862501][ T9193] 60742 total pagecache pages [ 468.862510][ T9193] 0 pages in swap cache [ 468.862518][ T9193] Free swap = 124996kB [ 468.862527][ T9193] Total swap = 124996kB [ 468.862536][ T9193] 2097051 pages RAM [ 468.862545][ T9193] 0 pages HighMem/MovableOnly [ 468.862553][ T9193] 424848 pages reserved [ 468.862560][ T9193] 0 pages cma reserved [ 469.046460][ T5729] usb 1-1: USB disconnect, device number 16 [ 469.059690][ T5576] usb 3-1: GET_CAPABILITIES returned 0 [ 469.059741][ T5576] usbtmc 3-1:16.0: can't read capabilities [ 469.239297][ T9193] vivid-008: disconnect [ 469.250523][ T9192] vivid-008: reconnect [ 469.336507][ T5576] usb 3-1: USB disconnect, device number 18 [ 471.009511][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 471.130214][ T9222] ipvlan2: entered allmulticast mode [ 471.130240][ T9222] syz_tun: entered allmulticast mode [ 471.752725][ T5732] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 471.902433][ T5732] usb 4-1: Using ep0 maxpacket: 8 [ 471.906055][ T5732] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 471.907540][ T5732] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 471.907567][ T5732] usb 4-1: config 0 has no interface number 0 [ 471.907611][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 471.907635][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 471.907661][ T5732] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.907697][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.907742][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.013365][ T5732] usb 4-1: config 0 descriptor?? [ 472.034982][ T5732] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 472.613796][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 472.613798][ T5858] usb 4-1: USB disconnect, device number 18 [ 473.861202][ T5858] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 473.921077][ T9262] ldusb: No device or device unplugged -19 [ 473.929478][ T9261] ldusb: No device or device unplugged -19 [ 474.148826][ T9273] fuse: Unknown parameter '' [ 477.367772][ T9316] fuse: Unknown parameter '' [ 477.580294][ T9328] syzkaller0: entered promiscuous mode [ 477.580320][ T9328] syzkaller0: entered allmulticast mode [ 477.620018][ T9328] tipc: Started in network mode [ 477.620071][ T9328] tipc: Node identity 5269d2b78906, cluster identity 4711 [ 477.620682][ T9328] tipc: Enabled bearer , priority 0 [ 477.672376][ T9326] tipc: Resetting bearer [ 480.253727][ T9326] tipc: Disabling bearer [ 480.352055][ T5858] tipc: Node number set to 3681538743 [ 480.593644][ T9360] fuse: Unknown parameter '' [ 486.713507][ T9419] netlink: 'syz.4.1107': attribute type 21 has an invalid length. [ 486.713535][ T9419] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1107'. [ 486.713669][ T9419] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1107'. [ 486.865178][ T9421] syz.0.1108: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 486.865255][ T9421] CPU: 1 UID: 0 PID: 9421 Comm: syz.0.1108 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 486.865285][ T9421] Tainted: [L]=SOFTLOCKUP [ 486.865293][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.865307][ T9421] Call Trace: [ 486.865315][ T9421] [ 486.865325][ T9421] dump_stack_lvl+0xe8/0x150 [ 486.865363][ T9421] warn_alloc+0x24c/0x270 [ 486.865386][ T9421] ? __se_sys_ioctl+0x47/0x170 [ 486.865416][ T9421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.865444][ T9421] ? __pfx_warn_alloc+0x10/0x10 [ 486.865482][ T9421] ? look_up_lock_class+0x57/0x110 [ 486.865516][ T9421] __vmalloc_node_range_noprof+0x12c/0x1730 [ 486.865563][ T9421] ? __lock_acquire+0x683/0x2ce0 [ 486.865588][ T9421] ? kasan_quarantine_put+0xbb/0x1f0 [ 486.865624][ T9421] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 486.865662][ T9421] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 486.865688][ T9421] vmalloc_noprof+0xb2/0xe0 [ 486.865713][ T9421] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 486.865739][ T9421] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 486.865763][ T9421] ? dvb_demux_do_ioctl+0x323/0x540 [ 486.865796][ T9421] dvb_demux_do_ioctl+0x460/0x540 [ 486.865822][ T9421] dvb_usercopy+0x199/0x2e0 [ 486.865843][ T9421] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 486.865866][ T9421] ? __pfx_dvb_usercopy+0x10/0x10 [ 486.865895][ T9421] ? __fget_files+0x3a8/0x420 [ 486.865910][ T9421] ? __fget_files+0x2a/0x420 [ 486.865928][ T9421] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 486.865950][ T9421] dvb_demux_ioctl+0x29/0x40 [ 486.865973][ T9421] __se_sys_ioctl+0xff/0x170 [ 486.865993][ T9421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.866011][ T9421] do_syscall_64+0x174/0x580 [ 486.866030][ T9421] ? trace_irq_disable+0x3b/0x140 [ 486.866056][ T9421] ? clear_bhb_loop+0x70/0xc0 [ 486.866075][ T9421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.866092][ T9421] RIP: 0033:0x7fe1c119e0d9 [ 486.866107][ T9421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.866120][ T9421] RSP: 002b:00007fe1bf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.866136][ T9421] RAX: ffffffffffffffda RBX: 00007fe1c1425fa0 RCX: 00007fe1c119e0d9 [ 486.866148][ T9421] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 486.866158][ T9421] RBP: 00007fe1c1235024 R08: 0000000000000000 R09: 0000000000000000 [ 486.866167][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.866176][ T9421] R13: 00007fe1c1426038 R14: 00007fe1c1425fa0 R15: 00007ffe3ed7b9b8 [ 486.866201][ T9421] [ 486.890754][ T9421] Mem-Info: [ 486.890804][ T9421] active_anon:185 inactive_anon:5882 isolated_anon:0 [ 486.890804][ T9421] active_file:24114 inactive_file:36116 isolated_file:0 [ 486.890804][ T9421] unevictable:0 dirty:117 writeback:0 [ 486.890804][ T9421] slab_reclaimable:11926 slab_unreclaimable:102582 [ 486.890804][ T9421] mapped:30557 shmem:538 pagetables:1163 [ 486.890804][ T9421] sec_pagetables:0 bounce:0 [ 486.890804][ T9421] kernel_misc_reclaimable:0 [ 486.890804][ T9421] free:1305592 free_pcp:7105 free_cma:0 [ 486.890971][ T9421] Node 0 active_anon:740kB inactive_anon:23528kB active_file:96200kB inactive_file:144464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122184kB dirty:468kB writeback:0kB shmem:2152kB kernel_stack:12724kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 486.891126][ T9421] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 486.891262][ T9421] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.891395][ T9421] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 486.891502][ T9421] Node 0 DMA32 free:1259896kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:740kB inactive_anon:23528kB active_file:96200kB inactive_file:144464kB unevictable:0kB writepending:468kB zspages:0kB present:3129332kB managed:2560500kB mlocked:0kB bounce:0kB free_pcp:28408kB local_pcp:13368kB free_cma:0kB [ 486.892287][ T9421] lowmem_reserve[]: 0 0 1 1 1 [ 486.892390][ T9421] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 486.892566][ T9421] lowmem_reserve[]: 0 0 0 0 0 [ 486.894541][ T9421] Node 1 Normal free:3947112kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.894769][ T9421] lowmem_reserve[]: 0 0 0 0 0 [ 486.907552][ T9421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 486.907956][ T9421] Node 0 DMA32: 830*4kB (UME) 467*8kB (UME) 204*16kB (UME) 172*32kB (UM) 236*64kB (UME) 182*128kB (UME) 118*256kB (UME) 40*512kB (M) 12*1024kB (M) 10*2048kB (UM) 274*4096kB (UM) = 1259984kB [ 486.908471][ T9421] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 486.908701][ T9421] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 10*16kB (UM) 14*32kB (UM) 13*64kB (UM) 5*128kB (UM) 2*256kB (M) 4*512kB (UM) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3947112kB [ 486.932104][ T9421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.932156][ T9421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 486.932199][ T9421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.932242][ T9421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 486.932286][ T9421] 60764 total pagecache pages [ 486.932309][ T9421] 0 pages in swap cache [ 486.932330][ T9421] Free swap = 124996kB [ 486.932351][ T9421] Total swap = 124996kB [ 486.932374][ T9421] 2097051 pages RAM [ 486.932426][ T9421] 0 pages HighMem/MovableOnly [ 486.932448][ T9421] 424848 pages reserved [ 486.932469][ T9421] 0 pages cma reserved [ 487.706698][ T9423] vivid-000: disconnect [ 488.824499][ T5319] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 489.130897][ T9420] vivid-000: reconnect [ 492.355544][ T9475] vivid-008: disconnect [ 492.512549][ T9472] vivid-008: reconnect [ 497.640157][ T9523] warn_alloc: 1 callbacks suppressed [ 497.640174][ T9523] syz.4.1136: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 497.640227][ T9523] CPU: 1 UID: 0 PID: 9523 Comm: syz.4.1136 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 497.640250][ T9523] Tainted: [L]=SOFTLOCKUP [ 497.640256][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.640266][ T9523] Call Trace: [ 497.640273][ T9523] [ 497.640280][ T9523] dump_stack_lvl+0xe8/0x150 [ 497.640309][ T9523] warn_alloc+0x24c/0x270 [ 497.640325][ T9523] ? __se_sys_ioctl+0x47/0x170 [ 497.640345][ T9523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.640366][ T9523] ? __pfx_warn_alloc+0x10/0x10 [ 497.640394][ T9523] ? look_up_lock_class+0x57/0x110 [ 497.640418][ T9523] __vmalloc_node_range_noprof+0x12c/0x1730 [ 497.640447][ T9523] ? __lock_acquire+0x683/0x2ce0 [ 497.640471][ T9523] ? kasan_quarantine_put+0xbb/0x1f0 [ 497.640506][ T9523] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 497.640541][ T9523] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 497.640566][ T9523] vmalloc_noprof+0xb2/0xe0 [ 497.640591][ T9523] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 497.640616][ T9523] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 497.640640][ T9523] ? dvb_demux_do_ioctl+0x323/0x540 [ 497.640666][ T9523] dvb_demux_do_ioctl+0x460/0x540 [ 497.640722][ T9523] dvb_usercopy+0x199/0x2e0 [ 497.640751][ T9523] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 497.640784][ T9523] ? __pfx_dvb_usercopy+0x10/0x10 [ 497.640827][ T9523] ? __fget_files+0x3a8/0x420 [ 497.640843][ T9523] ? __fget_files+0x2a/0x420 [ 497.640860][ T9523] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 497.640883][ T9523] dvb_demux_ioctl+0x29/0x40 [ 497.640911][ T9523] __se_sys_ioctl+0xff/0x170 [ 497.640932][ T9523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.640950][ T9523] do_syscall_64+0x174/0x580 [ 497.640970][ T9523] ? trace_irq_disable+0x3b/0x140 [ 497.640996][ T9523] ? clear_bhb_loop+0x70/0xc0 [ 497.641016][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.641033][ T9523] RIP: 0033:0x7fa095c5e0d9 [ 497.641048][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.641062][ T9523] RSP: 002b:00007fa093eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.641078][ T9523] RAX: ffffffffffffffda RBX: 00007fa095ee5fa0 RCX: 00007fa095c5e0d9 [ 497.641090][ T9523] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 497.641100][ T9523] RBP: 00007fa095cf5024 R08: 0000000000000000 R09: 0000000000000000 [ 497.641110][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.641120][ T9523] R13: 00007fa095ee6038 R14: 00007fa095ee5fa0 R15: 00007ffcac29cde8 [ 497.641145][ T9523] [ 497.641151][ T9523] Mem-Info: [ 497.641158][ T9523] active_anon:185 inactive_anon:9082 isolated_anon:0 [ 497.641158][ T9523] active_file:24134 inactive_file:36100 isolated_file:0 [ 497.641158][ T9523] unevictable:0 dirty:170 writeback:0 [ 497.641158][ T9523] slab_reclaimable:11992 slab_unreclaimable:102853 [ 497.641158][ T9523] mapped:34448 shmem:3968 pagetables:1174 [ 497.641158][ T9523] sec_pagetables:0 bounce:0 [ 497.641158][ T9523] kernel_misc_reclaimable:0 [ 497.641158][ T9523] free:1307242 free_pcp:2351 free_cma:0 [ 497.641201][ T9523] Node 0 active_anon:740kB inactive_anon:36328kB active_file:96280kB inactive_file:144400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137748kB dirty:680kB writeback:0kB shmem:15872kB kernel_stack:12744kB pagetables:4556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 497.641241][ T9523] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 497.641277][ T9523] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.641323][ T9523] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 497.641350][ T9523] Node 0 DMA32 free:1266496kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:740kB inactive_anon:36328kB active_file:96280kB inactive_file:144400kB unevictable:0kB writepending:680kB zspages:0kB present:3129332kB managed:2560500kB mlocked:0kB bounce:0kB free_pcp:9392kB local_pcp:1508kB free_cma:0kB [ 497.641401][ T9523] lowmem_reserve[]: 0 0 1 1 1 [ 497.641426][ T9523] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 497.641469][ T9523] lowmem_reserve[]: 0 0 0 0 0 [ 497.641494][ T9523] Node 1 Normal free:3947112kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.641539][ T9523] lowmem_reserve[]: 0 0 0 0 0 [ 497.677419][ T9523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 497.677770][ T9523] Node 0 DMA32: 464*4kB (UME) 566*8kB (UE) 157*16kB (UE) 308*32kB (UME) 234*64kB (UM) 183*128kB (UME) 120*256kB (UME) 40*512kB (M) 13*1024kB (UM) 9*2048kB (UM) 275*4096kB (UM) = 1266496kB [ 497.678264][ T9523] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 497.678497][ T9523] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 10*16kB (UM) 14*32kB (UM) 13*64kB (UM) 5*128kB (UM) 2*256kB (M) 4*512kB (UM) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3947112kB [ 497.696610][ T9523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.696663][ T9523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 497.696695][ T9523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.696723][ T9523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 497.696781][ T9523] 64198 total pagecache pages [ 497.696803][ T9523] 0 pages in swap cache [ 497.696824][ T9523] Free swap = 124996kB [ 497.696852][ T9523] Total swap = 124996kB [ 497.696875][ T9523] 2097051 pages RAM [ 497.696904][ T9523] 0 pages HighMem/MovableOnly [ 497.696927][ T9523] 424848 pages reserved [ 497.696947][ T9523] 0 pages cma reserved [ 497.851790][ T5785] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 498.039579][ T5785] usb 1-1: device descriptor read/64, error -71 [ 498.373405][ T5785] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 498.531825][ T5785] usb 1-1: device descriptor read/64, error -71 [ 498.614481][ T9525] vivid-008: disconnect [ 498.652223][ T5785] usb usb1-port1: attempt power cycle [ 498.880318][ T9522] vivid-008: reconnect [ 499.168439][ T5785] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 499.187808][ T5785] usb 1-1: device descriptor read/8, error -71 [ 500.591825][ T5785] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 500.613881][ T5785] usb 1-1: device descriptor read/8, error -71 [ 500.727906][ T5785] usb usb1-port1: unable to enumerate USB device [ 501.561907][ T5785] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 501.711796][ T5785] usb 2-1: Using ep0 maxpacket: 8 [ 501.712824][ T5785] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 501.714134][ T5785] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 501.714161][ T5785] usb 2-1: config 0 has no interface number 0 [ 501.714205][ T5785] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 501.714222][ T5785] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 501.714241][ T5785] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.714259][ T5785] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 501.714290][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.719977][ T5785] usb 2-1: config 0 descriptor?? [ 501.819452][ T5785] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 501.871872][ T36] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 502.001903][ T36] usb 3-1: device descriptor read/64, error -71 [ 502.015673][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 502.047308][ T5576] usb 2-1: USB disconnect, device number 12 [ 502.060146][ T5576] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 502.171853][ T5785] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 502.242399][ T36] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 502.302807][ T5785] usb 1-1: device descriptor read/64, error -71 [ 502.391881][ T36] usb 3-1: device descriptor read/64, error -71 [ 502.503639][ T36] usb usb3-port1: attempt power cycle [ 502.551802][ T5785] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 502.691802][ T5785] usb 1-1: device descriptor read/64, error -71 [ 502.804655][ T5785] usb usb1-port1: attempt power cycle [ 503.941567][ T36] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 503.992905][ T36] usb 3-1: device descriptor read/8, error -71 [ 504.201799][ T5785] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 504.222506][ T5785] usb 1-1: device descriptor read/8, error -71 [ 504.258831][ T36] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 504.279896][ T36] usb 3-1: device descriptor read/8, error -71 [ 504.382741][ T36] usb usb3-port1: unable to enumerate USB device [ 504.481823][ T5785] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 504.502915][ T5785] usb 1-1: device descriptor read/8, error -71 [ 504.625904][ T5785] usb usb1-port1: unable to enumerate USB device [ 504.631957][ T5858] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 504.781827][ T5858] usb 2-1: device descriptor read/64, error -71 [ 505.032152][ T5858] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 506.523775][ T5858] usb 2-1: device descriptor read/64, error -71 [ 506.636350][ T5858] usb usb2-port1: attempt power cycle [ 506.684168][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.001873][ T5858] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 507.022659][ T5858] usb 2-1: device descriptor read/8, error -71 [ 508.975721][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.976333][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.001829][ T5858] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 509.080679][ T997] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 509.181902][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 509.185984][ T5858] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 509.187427][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.187484][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.211830][ T997] usb 4-1: device descriptor read/64, error -71 [ 509.233549][ T5858] usb 2-1: config 0 descriptor?? [ 509.256469][ T5858] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 509.436393][ T9628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.454396][ T997] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 509.547415][ T9628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.586236][ T997] usb 4-1: device descriptor read/64, error -71 [ 509.692230][ T997] usb usb4-port1: attempt power cycle [ 509.879121][ T5858] gspca_vc032x: reg_r err -71 [ 509.879210][ T5858] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 509.911140][ T5858] usb 2-1: USB disconnect, device number 17 [ 510.031998][ T997] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 510.066198][ T997] usb 4-1: device descriptor read/8, error -71 [ 510.301859][ T997] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 510.322804][ T997] usb 4-1: device descriptor read/8, error -71 [ 510.432181][ T997] usb usb4-port1: unable to enumerate USB device [ 511.202272][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.203597][ T67] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.203644][ T67] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.203702][ T67] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.820700][ T9696] syz.1.1194: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 515.820779][ T9696] CPU: 1 UID: 0 PID: 9696 Comm: syz.1.1194 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 515.820809][ T9696] Tainted: [L]=SOFTLOCKUP [ 515.820818][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.820831][ T9696] Call Trace: [ 515.820839][ T9696] [ 515.820849][ T9696] dump_stack_lvl+0xe8/0x150 [ 515.820887][ T9696] warn_alloc+0x24c/0x270 [ 515.820909][ T9696] ? __se_sys_ioctl+0x47/0x170 [ 515.820941][ T9696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.820970][ T9696] ? __pfx_warn_alloc+0x10/0x10 [ 515.821007][ T9696] ? look_up_lock_class+0x57/0x110 [ 515.821040][ T9696] __vmalloc_node_range_noprof+0x12c/0x1730 [ 515.821082][ T9696] ? __lock_acquire+0x683/0x2ce0 [ 515.821113][ T9696] ? kasan_quarantine_put+0xbb/0x1f0 [ 515.821159][ T9696] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 515.821208][ T9696] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 515.821242][ T9696] vmalloc_noprof+0xb2/0xe0 [ 515.821278][ T9696] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 515.821306][ T9696] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 515.821331][ T9696] ? dvb_demux_do_ioctl+0x323/0x540 [ 515.821358][ T9696] dvb_demux_do_ioctl+0x460/0x540 [ 515.821385][ T9696] dvb_usercopy+0x199/0x2e0 [ 515.821409][ T9696] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 515.821448][ T9696] ? __pfx_dvb_usercopy+0x10/0x10 [ 515.821481][ T9696] ? __fget_files+0x3a8/0x420 [ 515.821503][ T9696] ? __fget_files+0x2a/0x420 [ 515.821523][ T9696] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 515.821548][ T9696] dvb_demux_ioctl+0x29/0x40 [ 515.821573][ T9696] __se_sys_ioctl+0xff/0x170 [ 515.821595][ T9696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.821616][ T9696] do_syscall_64+0x174/0x580 [ 515.821639][ T9696] ? trace_irq_disable+0x3b/0x140 [ 515.821667][ T9696] ? clear_bhb_loop+0x70/0xc0 [ 515.821689][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.821706][ T9696] RIP: 0033:0x7f5a1480e0d9 [ 515.821725][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.821743][ T9696] RSP: 002b:00007f5a12a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.821761][ T9696] RAX: ffffffffffffffda RBX: 00007f5a14a95fa0 RCX: 00007f5a1480e0d9 [ 515.821776][ T9696] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 515.821788][ T9696] RBP: 00007f5a148a5024 R08: 0000000000000000 R09: 0000000000000000 [ 515.821800][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.821811][ T9696] R13: 00007f5a14a96038 R14: 00007f5a14a95fa0 R15: 00007ffea36c5c18 [ 515.821840][ T9696] [ 515.829666][ T9696] Mem-Info: [ 515.829708][ T9696] active_anon:185 inactive_anon:5492 isolated_anon:0 [ 515.829708][ T9696] active_file:24142 inactive_file:36098 isolated_file:0 [ 515.829708][ T9696] unevictable:0 dirty:46 writeback:0 [ 515.829708][ T9696] slab_reclaimable:11983 slab_unreclaimable:102793 [ 515.829708][ T9696] mapped:29928 shmem:518 pagetables:1175 [ 515.829708][ T9696] sec_pagetables:0 bounce:0 [ 515.829708][ T9696] kernel_misc_reclaimable:0 [ 515.829708][ T9696] free:1306365 free_pcp:8164 free_cma:0 [ 515.830530][ T9696] Node 0 active_anon:740kB inactive_anon:21968kB active_file:96312kB inactive_file:144392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119668kB dirty:184kB writeback:0kB shmem:2072kB kernel_stack:12816kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 515.830704][ T9696] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 515.830833][ T9696] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.831002][ T9696] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 515.831108][ T9696] Node 0 DMA32 free:1262988kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:740kB inactive_anon:21968kB active_file:96312kB inactive_file:144392kB unevictable:0kB writepending:184kB zspages:0kB present:3129332kB managed:2560500kB mlocked:0kB bounce:0kB free_pcp:32636kB local_pcp:8376kB free_cma:0kB [ 515.831280][ T9696] lowmem_reserve[]: 0 0 1 1 1 [ 515.831382][ T9696] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 515.835093][ T9696] lowmem_reserve[]: 0 0 0 0 0 [ 515.835211][ T9696] Node 1 Normal free:3947112kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.835387][ T9696] lowmem_reserve[]: 0 0 0 0 0 [ 515.835564][ T9696] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 515.837314][ T9696] Node 0 DMA32: 1952*4kB (UME) 1153*8kB (UME) 547*16kB (UME) 261*32kB (UME) 189*64kB (UME) 148*128kB (UM) 119*256kB (UME) 18*512kB (M) 13*1024kB (M) 9*2048kB (UM) 275*4096kB (UM) = 1263000kB [ 515.837867][ T9696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 515.838163][ T9696] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 10*16kB (UM) 14*32kB (UM) 13*64kB (UM) 5*128kB (UM) 2*256kB (M) 4*512kB (UM) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3947112kB [ 515.842962][ T9696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.843016][ T9696] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.843071][ T9696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.843126][ T9696] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.843170][ T9696] 60754 total pagecache pages [ 515.843201][ T9696] 0 pages in swap cache [ 515.843215][ T9696] Free swap = 124996kB [ 515.843224][ T9696] Total swap = 124996kB [ 515.843254][ T9696] 2097051 pages RAM [ 515.843262][ T9696] 0 pages HighMem/MovableOnly [ 515.843270][ T9696] 424848 pages reserved [ 515.843278][ T9696] 0 pages cma reserved [ 517.318617][ T997] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 517.560400][ T9699] vivid-002: disconnect [ 518.930958][ T9699] vivid-002: reconnect [ 522.793460][ T9754] vivid-008: disconnect [ 523.384549][ T9748] vivid-008: reconnect [ 528.363879][ T9794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.394114][ T9801] warn_alloc: 1 callbacks suppressed [ 528.394132][ T9801] syz.0.1225: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 528.394207][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.0.1225 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 528.394238][ T9801] Tainted: [L]=SOFTLOCKUP [ 528.394246][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.394260][ T9801] Call Trace: [ 528.394269][ T9801] [ 528.394279][ T9801] dump_stack_lvl+0xe8/0x150 [ 528.394322][ T9801] warn_alloc+0x24c/0x270 [ 528.394345][ T9801] ? __se_sys_ioctl+0x47/0x170 [ 528.394391][ T9801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.394422][ T9801] ? __pfx_warn_alloc+0x10/0x10 [ 528.394462][ T9801] ? look_up_lock_class+0x57/0x110 [ 528.394495][ T9801] __vmalloc_node_range_noprof+0x12c/0x1730 [ 528.394538][ T9801] ? __lock_acquire+0x683/0x2ce0 [ 528.394570][ T9801] ? kasan_quarantine_put+0xbb/0x1f0 [ 528.394620][ T9801] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 528.394672][ T9801] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 528.394707][ T9801] vmalloc_noprof+0xb2/0xe0 [ 528.394744][ T9801] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 528.394780][ T9801] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 528.394813][ T9801] ? dvb_demux_do_ioctl+0x323/0x540 [ 528.394849][ T9801] dvb_demux_do_ioctl+0x460/0x540 [ 528.395008][ T9801] dvb_usercopy+0x199/0x2e0 [ 528.395042][ T9801] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 528.395074][ T9801] ? __pfx_dvb_usercopy+0x10/0x10 [ 528.395114][ T9801] ? __fget_files+0x3a8/0x420 [ 528.395149][ T9801] ? __fget_files+0x2a/0x420 [ 528.395177][ T9801] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 528.395208][ T9801] dvb_demux_ioctl+0x29/0x40 [ 528.395240][ T9801] __se_sys_ioctl+0xff/0x170 [ 528.395279][ T9801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.395304][ T9801] do_syscall_64+0x174/0x580 [ 528.395334][ T9801] ? trace_irq_disable+0x3b/0x140 [ 528.395371][ T9801] ? clear_bhb_loop+0x70/0xc0 [ 528.395400][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.395459][ T9801] RIP: 0033:0x7fe1c119e0d9 [ 528.395481][ T9801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.395501][ T9801] RSP: 002b:00007fe1bf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.395527][ T9801] RAX: ffffffffffffffda RBX: 00007fe1c1425fa0 RCX: 00007fe1c119e0d9 [ 528.395543][ T9801] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000006 [ 528.395556][ T9801] RBP: 00007fe1c1235024 R08: 0000000000000000 R09: 0000000000000000 [ 528.395569][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.395582][ T9801] R13: 00007fe1c1426038 R14: 00007fe1c1425fa0 R15: 00007ffe3ed7b9b8 [ 528.395617][ T9801] [ 528.434857][ T9801] Mem-Info: [ 528.434918][ T9801] active_anon:185 inactive_anon:14757 isolated_anon:0 [ 528.434918][ T9801] active_file:24146 inactive_file:36098 isolated_file:0 [ 528.434918][ T9801] unevictable:0 dirty:130 writeback:0 [ 528.434918][ T9801] slab_reclaimable:11953 slab_unreclaimable:103121 [ 528.434918][ T9801] mapped:31889 shmem:9799 pagetables:1165 [ 528.434918][ T9801] sec_pagetables:0 bounce:0 [ 528.434918][ T9801] kernel_misc_reclaimable:0 [ 528.434918][ T9801] free:1302278 free_pcp:2902 free_cma:0 [ 528.435085][ T9801] Node 0 active_anon:740kB inactive_anon:59028kB active_file:96328kB inactive_file:144392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127556kB dirty:516kB writeback:0kB shmem:39196kB kernel_stack:12616kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 528.435271][ T9801] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 528.435413][ T9801] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.435586][ T9801] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 528.435696][ T9801] Node 0 DMA32 free:1246640kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:740kB inactive_anon:59028kB active_file:96328kB inactive_file:144392kB unevictable:0kB writepending:516kB zspages:0kB present:3129332kB managed:2560500kB mlocked:0kB bounce:0kB free_pcp:11588kB local_pcp:2204kB free_cma:0kB [ 528.435889][ T9801] lowmem_reserve[]: 0 0 1 1 1 [ 528.436019][ T9801] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 528.436178][ T9801] lowmem_reserve[]: 0 0 0 0 0 [ 528.436282][ T9801] Node 1 Normal free:3947112kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.450664][ T9801] lowmem_reserve[]: 0 0 0 0 0 [ 528.450810][ T9801] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 528.451180][ T9801] Node 0 DMA32: 1576*4kB (UME) 1604*8kB (UME) 806*16kB (UME) 461*32kB (UME) 280*64kB (UME) 123*128kB (UM) 29*256kB (UME) 1*512kB (M) 13*1024kB (UM) 9*2048kB (UM) 275*4096kB (UM) = 1246528kB [ 528.453572][ T9801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 528.475107][ T9801] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 10*16kB (UM) 14*32kB (UM) 13*64kB (UM) 5*128kB (UM) 2*256kB (M) 4*512kB (UM) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3947112kB [ 528.475614][ T9801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.475673][ T9801] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.475721][ T9801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.475777][ T9801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.475834][ T9801] 69989 total pagecache pages [ 528.475863][ T9801] 0 pages in swap cache [ 528.475885][ T9801] Free swap = 124996kB [ 528.475909][ T9801] Total swap = 124996kB [ 528.475942][ T9801] 2097051 pages RAM [ 528.481326][ T9801] 0 pages HighMem/MovableOnly [ 528.481351][ T9801] 424848 pages reserved [ 528.481361][ T9801] 0 pages cma reserved [ 528.651777][ T36] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 529.033306][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 529.041918][ T36] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 529.087659][ T36] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 529.087690][ T36] usb 4-1: config 0 has no interface number 0 [ 529.087741][ T36] usb 4-1: config 0 interface 12 has no altsetting 0 [ 529.164965][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.164994][ T36] usb 4-1: Product: syz [ 529.165010][ T36] usb 4-1: Manufacturer: syz [ 529.165024][ T36] usb 4-1: SerialNumber: syz [ 529.198953][ T36] usb 4-1: config 0 descriptor?? [ 529.578262][ T9803] vivid-000: disconnect [ 529.651949][ T5692] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 529.656335][ T9798] vivid-000: reconnect [ 530.821853][ T5576] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 530.971858][ T5576] usb 3-1: Using ep0 maxpacket: 32 [ 530.973483][ T5576] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 531.006581][ T5576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.006610][ T5576] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.006704][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.062475][ T5576] usb 3-1: config 0 descriptor?? [ 532.794718][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.795415][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.904832][ T36] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 532.904991][ T36] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 532.905012][ T36] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 532.905144][ T36] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 532.965698][ T36] usb 4-1: USB disconnect, device number 23 [ 533.362133][ T9850] vivid-002: disconnect [ 533.514228][ T36] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 533.610719][ T9847] vivid-002: reconnect [ 533.771550][ T5860] usb 3-1: USB disconnect, device number 23 [ 534.202032][ T5860] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 534.362625][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 534.418561][ T5860] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 534.420428][ T5860] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 534.420456][ T5860] usb 3-1: config 0 has no interface number 0 [ 534.420502][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.420527][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 534.420553][ T5860] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.420580][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 534.420623][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.486891][ T5860] usb 3-1: config 0 descriptor?? [ 535.668900][ T5860] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 535.806788][ T5860] usb 3-1: USB disconnect, device number 24 [ 535.858674][ T5860] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 536.567444][ T9898] vivid-008: disconnect [ 536.813228][ T9894] vivid-008: reconnect [ 538.082368][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 538.496647][ T5692] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 539.581760][ T5692] usb 3-1: Using ep0 maxpacket: 8 [ 539.582815][ T5692] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 539.584451][ T5692] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 539.584478][ T5692] usb 3-1: config 0 has no interface number 0 [ 539.584523][ T5692] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.584548][ T5692] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 539.584574][ T5692] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.584601][ T5692] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.584644][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.699226][ T5692] usb 3-1: config 0 descriptor?? [ 539.784827][ T5692] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 539.984353][ T5692] usb 3-1: USB disconnect, device number 25 [ 540.038970][ T5692] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 540.561865][ T5576] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 540.732810][ T5576] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 540.756913][ T5576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.756943][ T5576] usb 2-1: Product: syz [ 540.756960][ T5576] usb 2-1: Manufacturer: syz [ 540.756977][ T5576] usb 2-1: SerialNumber: syz [ 540.794143][ T5576] usb 2-1: config 0 descriptor?? [ 540.840108][ T5576] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 541.191914][ T997] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 541.385285][ T997] usb 3-1: Using ep0 maxpacket: 8 [ 541.386487][ T997] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 541.414357][ T997] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 541.414388][ T997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.414407][ T997] usb 3-1: config 0 has no interface number 0 [ 541.414517][ T997] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.414541][ T997] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.414585][ T997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.560101][ T997] usb 3-1: config 0 descriptor?? [ 541.681864][ T997] ldusb 3-1:0.55: Interrupt in endpoint not found [ 542.098957][ T9965] qrtr: Invalid version 0 [ 542.156863][ T9965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.252350][ T9965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.266079][ T5576] gspca_sunplus: reg_w_riv err -71 [ 542.266415][ T5576] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 542.296751][ T5576] usb 2-1: USB disconnect, device number 20 [ 542.628313][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 542.660934][ T9987] ipvlan2: entered allmulticast mode [ 542.660960][ T9987] syz_tun: entered allmulticast mode [ 543.837164][ T997] usb 3-1: USB disconnect, device number 26 [ 543.981942][T10004] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ   8    \x09   ўџџњ џџџџ [ 546.386501][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 546.752702][ T5576] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 546.912814][ T5576] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 546.952221][ T5576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.952252][ T5576] usb 4-1: Product: syz [ 546.952267][ T5576] usb 4-1: Manufacturer: syz [ 546.952281][ T5576] usb 4-1: SerialNumber: syz [ 547.334678][T10064] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10064] [ 547.441114][ T5576] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 547.441195][ T5576] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 547.441978][ T5576] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 547.442035][ T5576] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 547.522612][ T5576] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 547.545716][ T5576] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 547.672510][T10049] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.672895][T10049] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.474201][T10049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.529862][T10049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.562799][T10091] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5590] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10091] [ 549.633028][ T5860] usb 4-1: USB disconnect, device number 24 [ 549.781825][ T5858] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 549.941892][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 549.943877][ T5858] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 549.945147][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.945191][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.986901][ T5858] usb 2-1: config 0 descriptor?? [ 550.010107][ T5858] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 550.613569][ T5858] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 550.744549][ T1433] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.753657][ T1433] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.753807][ T1433] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.753877][ T1433] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.782626][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 550.782691][ T5858] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 550.812462][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.812506][ T5858] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 550.812587][ T5858] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.819996][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.820032][ T5858] usb 3-1: Product: syz [ 550.820049][ T5858] usb 3-1: Manufacturer: syz [ 550.820067][ T5858] usb 3-1: SerialNumber: syz [ 551.368241][T10125] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10125] [ 551.405583][ T5858] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 551.428778][ T5858] usb 3-1: USB disconnect, device number 27 [ 551.536687][ T9807] udevd[9807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.447760][T10164] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10164] [ 552.551907][ T5858] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 552.608844][ T5576] usb 2-1: USB disconnect, device number 21 [ 552.715946][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 552.715987][ T5858] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 552.719171][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.719190][ T5858] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 552.719232][ T5858] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.771189][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.771235][ T5858] usb 3-1: Product: syz [ 552.771250][ T5858] usb 3-1: Manufacturer: syz [ 552.771265][ T5858] usb 3-1: SerialNumber: syz [ 553.673594][ T5858] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 553.738088][ T5858] usb 3-1: USB disconnect, device number 28 [ 553.850121][ T9807] udevd[9807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.348971][T10203] netlink: 'syz.3.1365': attribute type 21 has an invalid length. [ 554.349001][T10203] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1365'. [ 554.349097][T10203] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1365'. [ 554.598491][T10209] syzkaller0: entered promiscuous mode [ 554.598510][T10209] syzkaller0: entered allmulticast mode [ 554.641878][ T5733] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 554.791754][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 554.792502][ T5733] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 554.796410][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.796479][ T5733] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 554.796503][ T5733] usb 4-1: config 1 interface 0 has no altsetting 1 [ 554.796518][ T5733] usb 4-1: config 1 interface 1 has no altsetting 0 [ 554.823969][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.824071][ T5733] usb 4-1: Product: syz [ 554.824113][ T5733] usb 4-1: Manufacturer: syz [ 554.824154][ T5733] usb 4-1: SerialNumber: syz [ 555.015552][ T5733] snd-ua101 4-1:1.1: invalid num_altsetting [ 555.015641][ T5733] snd-ua101 4-1:1.0: invalid bNumEndpoints [ 555.045213][ T5733] usb 4-1: selecting invalid altsetting 0 [ 555.051543][ T5733] usb 4-1: selecting invalid altsetting 0 [ 555.051582][ T5733] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 555.066607][ T5733] usb 4-1: selecting invalid altsetting 0 [ 555.066672][ T5733] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 555.067947][ T5733] usb 4-1: selecting invalid altsetting 0 [ 555.068073][ T5733] snd-ua101 4-1:1.1: probe with driver snd-ua101 failed with error -22 [ 555.210746][ T5733] usb 4-1: USB disconnect, device number 25 [ 555.506941][ T5576] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 555.653367][ T5576] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 555.657948][ T5576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.657980][ T5576] usb 3-1: Product: syz [ 555.657997][ T5576] usb 3-1: Manufacturer: syz [ 555.658015][ T5576] usb 3-1: SerialNumber: syz [ 556.115847][ T5576] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 556.115893][ T5576] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 556.116714][ T5576] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 556.116768][ T5576] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 556.130963][ T5576] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 556.198195][ T5576] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 556.585866][ T37] audit: type=1326 audit(1786930818.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10234 comm="syz.3.1377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0c937e0d9 code=0x0 [ 556.638194][T10239] kvm: user requested TSC rate below hardware speed [ 556.701906][T10245] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5590] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10245] [ 558.372657][ T5576] usb 3-1: USB disconnect, device number 29 [ 558.831878][ T997] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 558.921891][ T5576] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 558.971830][ T5733] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 558.992659][ T997] usb 2-1: Using ep0 maxpacket: 32 [ 558.993606][ T997] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 558.994845][ T997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.994878][ T997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.994913][ T997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.030334][ T997] usb 2-1: config 0 descriptor?? [ 559.102800][ T5576] usb 3-1: Using ep0 maxpacket: 8 [ 559.103546][ T5576] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 559.106686][ T5576] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 559.106712][ T5576] usb 3-1: config 0 has no interface number 0 [ 559.106742][ T5576] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.106836][ T5576] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 559.106862][ T5576] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.106888][ T5576] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 559.107038][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.237511][ T5576] usb 3-1: config 0 descriptor?? [ 559.247727][ T5733] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 559.274981][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 559.275012][ T5733] usb 1-1: Product: syz [ 559.275028][ T5733] usb 1-1: SerialNumber: syz [ 559.354013][ T5576] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 559.384748][ T5733] usb 1-1: config 0 descriptor?? [ 559.528000][ T997] usbhid 2-1:0.0: can't add hid device: -32 [ 559.528279][ T997] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 559.646307][ T5733] hso 1-1:0.0: Failed to find BULK eps [ 559.726182][ T5576] usb 3-1: USB disconnect, device number 30 [ 559.726369][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 559.780946][ T5576] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 559.805030][ T5733] usb 1-1: USB disconnect, device number 27 [ 559.826692][T10283] ldusb: No device or device unplugged -19 [ 559.826718][T10283] ldusb: No device or device unplugged -19 [ 559.826735][T10283] ldusb: No device or device unplugged -19 [ 559.826926][T10283] ldusb: No device or device unplugged -19 [ 561.491836][ T5692] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 561.662447][ T5692] usb 4-1: Using ep0 maxpacket: 8 [ 561.663300][ T5692] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 561.671431][ T5692] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 561.671461][ T5692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.671481][ T5692] usb 4-1: config 0 has no interface number 0 [ 561.671526][ T5692] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 561.671547][ T5692] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.671589][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.747289][ T5576] usb 2-1: USB disconnect, device number 22 [ 561.812018][T10313] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5587] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10313] [ 561.946898][ T5692] usb 4-1: config 0 descriptor?? [ 561.974394][ T5692] ldusb 4-1:0.55: Interrupt in endpoint not found [ 562.256175][T10309] qrtr: Invalid version 0 [ 562.703890][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.716439][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.881764][ T5692] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 563.034359][ T5692] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 563.052468][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 563.052489][ T5692] usb 1-1: Product: syz [ 563.052500][ T5692] usb 1-1: SerialNumber: syz [ 563.086901][ T5692] usb 1-1: config 0 descriptor?? [ 563.324681][ T5692] hso 1-1:0.0: Failed to find BULK eps [ 563.439566][T10337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.528755][ T5692] usb 1-1: USB disconnect, device number 28 [ 564.253011][ T997] usb 4-1: USB disconnect, device number 26 [ 564.771917][ T5860] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 564.941799][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 564.942745][ T5860] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 564.944206][ T5860] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 564.944234][ T5860] usb 4-1: config 0 has no interface number 0 [ 564.944278][ T5860] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 564.944306][ T5860] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 564.944325][ T5860] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 564.944344][ T5860] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 564.944382][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.949068][ T5860] usb 4-1: config 0 descriptor?? [ 565.062607][ T5860] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 565.187369][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 565.187388][ T5576] usb 4-1: USB disconnect, device number 27 [ 565.215374][ T5576] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 565.217774][T10373] ldusb: No device or device unplugged -19 [ 565.217813][T10373] ldusb: No device or device unplugged -19 [ 565.217831][T10373] ldusb: No device or device unplugged -19 [ 565.217847][T10373] ldusb: No device or device unplugged -19 [ 566.782641][T10417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.151839][ T5576] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 567.301779][ T5576] usb 1-1: Using ep0 maxpacket: 8 [ 567.302844][ T5576] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 567.304535][ T5576] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 567.304561][ T5576] usb 1-1: config 0 has no interface number 0 [ 567.304607][ T5576] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 567.304632][ T5576] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 567.304658][ T5576] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 567.304687][ T5576] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 567.304729][ T5576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.402347][ T5576] usb 1-1: config 0 descriptor?? [ 567.410926][ T5576] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 567.663103][ T5576] usb 1-1: USB disconnect, device number 29 [ 567.663192][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 567.687272][ T5576] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 567.689562][T10433] ldusb: No device or device unplugged -19 [ 567.689600][T10433] ldusb: No device or device unplugged -19 [ 567.689617][T10433] ldusb: No device or device unplugged -19 [ 567.689633][T10433] ldusb: No device or device unplugged -19 [ 568.126642][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.051808][ T5733] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 569.223338][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 569.224366][ T5733] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 569.225897][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.225932][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.225973][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.292406][ T5733] usb 1-1: config 0 descriptor?? [ 569.714615][ T5733] usbhid 1-1:0.0: can't add hid device: -32 [ 569.714753][ T5733] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 569.892606][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.893001][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.985242][T10477] program syz.2.1459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.364653][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.382139][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.361870][T10483] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 571.512635][T10483] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 571.516677][T10483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.516711][T10483] usb 2-1: Product: syz [ 571.516729][T10483] usb 2-1: Manufacturer: syz [ 571.516745][T10483] usb 2-1: SerialNumber: syz [ 571.721184][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 571.820604][ T5319] usb 1-1: USB disconnect, device number 30 [ 571.929548][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1464'. [ 571.962078][ T1181] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.963460][ T1181] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.963513][ T1181] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.963626][ T1181] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.031176][T10483] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 572.031250][T10483] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 572.046242][T10483] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 572.046419][T10483] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 572.098996][T10483] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 572.170407][T10483] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 574.211258][ T5319] usb 2-1: USB disconnect, device number 23 [ 575.824533][T10563] syzkaller0: entered promiscuous mode [ 575.824564][T10563] syzkaller0: entered allmulticast mode [ 576.551782][T10483] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 576.701785][T10483] usb 4-1: Using ep0 maxpacket: 32 [ 576.702628][T10483] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 576.704124][T10483] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 576.704151][T10483] usb 4-1: config 0 has no interface number 0 [ 576.704198][T10483] usb 4-1: config 0 interface 12 has no altsetting 0 [ 576.731498][T10483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.731554][T10483] usb 4-1: Product: syz [ 576.731569][T10483] usb 4-1: Manufacturer: syz [ 576.731586][T10483] usb 4-1: SerialNumber: syz [ 576.815035][T10483] usb 4-1: config 0 descriptor?? [ 578.294776][T10605] ip6gre1: entered promiscuous mode [ 578.294809][T10605] ip6gre1: entered allmulticast mode [ 579.885928][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.886674][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.080582][T10483] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 580.080627][T10483] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 580.080640][T10483] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 580.080706][T10483] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 580.189643][T10483] usb 4-1: USB disconnect, device number 28 [ 580.308195][T10637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.262079][T10475] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 581.422857][T10475] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 581.424679][T10475] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 581.424708][T10475] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 581.424727][T10475] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 581.424769][T10475] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 581.424796][T10475] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 581.426388][T10475] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 581.426412][T10475] usb 4-1: Product: syz [ 581.426427][T10475] usb 4-1: Manufacturer: syz [ 581.527387][T10475] cdc_wdm 4-1:1.0: skipping garbage [ 581.527409][T10475] cdc_wdm 4-1:1.0: skipping garbage [ 581.543525][T10475] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 581.543546][T10475] cdc_wdm 4-1:1.0: Unknown control protocol [ 581.546545][T10669] tipc: Started in network mode [ 581.546565][T10669] tipc: Node identity 2007ff, cluster identity 4711 [ 581.546578][T10669] tipc: Node number set to 2099199 [ 581.561306][T10675] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ   8    \x09   ўџџњ џџџџ [ 582.161560][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.404772][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.404798][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.406022][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.406051][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.406267][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.406280][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.406488][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.406501][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.406696][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.406709][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.407141][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.407159][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.407372][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.407386][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.407598][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.407611][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.407811][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.407825][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 582.408029][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 582.444302][T10475] usb 4-1: USB disconnect, device number 29 [ 582.444450][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 582.581822][T10483] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 582.733356][T10483] usb 2-1: Using ep0 maxpacket: 8 [ 582.734211][T10483] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 582.737614][T10483] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.737654][T10483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.805086][T10483] usb 2-1: config 0 descriptor?? [ 582.825608][T10483] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 582.951752][T10494] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 583.144449][T10494] usb 3-1: unable to get BOS descriptor or descriptor too short [ 583.144494][T10494] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 583.152586][T10494] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 583.152854][T10494] usb 3-1: can't read configurations, error -71 [ 583.512547][T10483] gspca_vc032x: reg_r err -71 [ 583.512667][T10483] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 583.518564][T10483] usb 2-1: USB disconnect, device number 24 [ 583.717678][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'. [ 585.091848][T10494] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 585.276311][T10494] usb 3-1: unable to get BOS descriptor or descriptor too short [ 585.276389][T10494] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 585.277375][T10494] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 585.277410][T10494] usb 3-1: can't read configurations, error -71 [ 585.579711][T10725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1546'. [ 586.107010][T10739] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5587] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ   8    \x09   ўџџњ џџџџ [ 587.978752][T10765] syzkaller0: entered promiscuous mode [ 587.978779][T10765] syzkaller0: entered allmulticast mode [ 588.102158][T10494] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 588.316734][T10494] usb 2-1: unable to get BOS descriptor or descriptor too short [ 588.316787][T10494] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 588.354445][T10494] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 588.354495][T10494] usb 2-1: can't read configurations, error -71 [ 589.725502][T10803] syzkaller0: entered promiscuous mode [ 589.725522][T10803] syzkaller0: entered allmulticast mode [ 590.363275][T10483] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 590.515022][T10483] usb 3-1: unable to get BOS descriptor or descriptor too short [ 590.515080][T10483] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 590.516635][T10483] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.516659][T10483] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 590.516723][T10483] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.520475][T10483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.520501][T10483] usb 3-1: Product: syz [ 590.520516][T10483] usb 3-1: Manufacturer: syz [ 590.520531][T10483] usb 3-1: SerialNumber: syz [ 590.946879][T10825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1585'. [ 591.252289][T10483] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 591.278939][T10483] usb 3-1: USB disconnect, device number 35 [ 591.363670][ T9807] udevd[9807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.543351][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'. [ 591.730479][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1591'. [ 591.898350][T10846] syzkaller0: entered promiscuous mode [ 591.898373][T10846] syzkaller0: entered allmulticast mode [ 592.222668][T10862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1601'. [ 592.371805][T10494] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 592.527008][T10494] usb 1-1: unable to get BOS descriptor or descriptor too short [ 592.527087][T10494] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 592.528947][T10494] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.528975][T10494] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 592.529055][T10494] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.584477][T10494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.584507][T10494] usb 1-1: Product: syz [ 592.584522][T10494] usb 1-1: Manufacturer: syz [ 592.584537][T10494] usb 1-1: SerialNumber: syz [ 593.072992][T10494] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 593.123844][T10494] usb 1-1: USB disconnect, device number 31 [ 593.198915][ T9807] udevd[9807]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.262958][T10889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1612'. [ 593.280851][ T5319] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 593.390765][T10892] syzkaller0: entered promiscuous mode [ 593.390785][T10892] syzkaller0: entered allmulticast mode [ 593.411862][ T5319] usb 3-1: device descriptor read/64, error -71 [ 593.471902][ T5576] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 593.507068][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1617'. [ 593.621764][ T5576] usb 4-1: Using ep0 maxpacket: 8 [ 593.662853][ T5319] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 593.666249][ T5576] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 593.667878][ T5576] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 593.667904][ T5576] usb 4-1: config 0 has no interface number 0 [ 593.667964][ T5576] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.667989][ T5576] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 593.668016][ T5576] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.668044][ T5576] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.668086][ T5576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.698748][ T5576] usb 4-1: config 0 descriptor?? [ 593.768031][ T5576] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 593.861790][ T5319] usb 3-1: device descriptor read/64, error -71 [ 593.921517][ T5576] usb 4-1: USB disconnect, device number 30 [ 593.972135][ T5319] usb usb3-port1: attempt power cycle [ 593.978741][ T5576] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 594.311773][ T5319] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 594.334061][ T5319] usb 3-1: device descriptor read/8, error -71 [ 594.571888][ T5319] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 594.593398][ T5319] usb 3-1: device descriptor read/8, error -71 [ 594.678724][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1628'. [ 594.702081][ T5319] usb usb3-port1: unable to enumerate USB device [ 594.751822][ T5858] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 594.901768][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 594.910388][ T5858] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 594.920820][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.920847][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.920898][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.960490][ T5858] usb 2-1: config 0 descriptor?? [ 595.379036][ T5858] usbhid 2-1:0.0: can't add hid device: -32 [ 595.379167][ T5858] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 596.327094][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.372207][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.447958][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1640'. [ 596.871928][ T5319] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 597.021890][ T5319] usb 4-1: Using ep0 maxpacket: 16 [ 597.022995][ T5319] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 597.027115][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.027139][ T5319] usb 4-1: Product: syz [ 597.027155][ T5319] usb 4-1: Manufacturer: syz [ 597.027173][ T5319] usb 4-1: SerialNumber: syz [ 597.285023][ T5319] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 597.328927][ T5319] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.329787][ T5319] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 597.329893][ T5319] usb 4-1: media controller created [ 597.376452][ T5319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.525535][ T5858] usb 2-1: USB disconnect, device number 27 [ 597.693295][ T5319] zl10353_read_register: readreg error (reg=127, ret==-110) [ 597.798508][T10962] syzkaller1: entered promiscuous mode [ 597.798538][T10962] syzkaller1: entered allmulticast mode [ 597.856160][ T5319] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 597.861443][ T5319] usb 4-1: USB disconnect, device number 31 [ 598.131823][ T66] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.131877][ T66] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.131916][ T66] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.131950][ T66] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.268674][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 598.459479][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'. [ 598.528791][T10986] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5590] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ   8    \x09   ўџџњ џџџџ [ 599.111903][ T5576] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 599.303345][ T5576] usb 3-1: Using ep0 maxpacket: 32 [ 599.304343][ T5576] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 599.306186][ T5576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.306218][ T5576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.306258][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.346681][ T5576] usb 3-1: config 0 descriptor?? [ 599.430241][T11009] syzkaller1: entered promiscuous mode [ 599.430270][T11009] syzkaller1: entered allmulticast mode [ 599.578466][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 599.816188][ T5576] usbhid 3-1:0.0: can't add hid device: -32 [ 599.816325][ T5576] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 600.058724][T11017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 601.211751][ T5576] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 601.374056][ T5576] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 601.417676][ T5576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.417699][ T5576] usb 4-1: Product: syz [ 601.417710][ T5576] usb 4-1: Manufacturer: syz [ 601.417721][ T5576] usb 4-1: SerialNumber: syz [ 601.498803][ T5576] usb 4-1: config 0 descriptor?? [ 601.554210][ T5576] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 601.727034][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 601.893785][T11063] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ 8    \x09   ўџџњ џџџџ"[11063] [ 602.026607][T10494] usb 3-1: USB disconnect, device number 40 [ 603.051048][ T5576] gspca_sunplus: reg_w_riv err -71 [ 603.051373][ T5576] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 603.118757][ T5576] usb 4-1: USB disconnect, device number 32 [ 603.878097][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'. [ 604.071917][ T5319] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 604.146612][T11092] syzkaller0: entered promiscuous mode [ 604.146637][T11092] syzkaller0: entered allmulticast mode [ 604.242668][ T5319] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 604.246607][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 604.246636][ T5319] usb 1-1: Product: syz [ 604.246651][ T5319] usb 1-1: SerialNumber: syz [ 604.249713][T11096] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5589] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ 8    \x09   ўџџњ џџџџ"[11096] [ 604.276299][ T5319] usb 1-1: config 0 descriptor?? [ 604.626148][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 604.634259][ T5319] hso 1-1:0.0: Failed to find BULK eps [ 604.801803][T10494] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 604.843749][ T5319] usb 1-1: USB disconnect, device number 32 [ 604.952818][T10494] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.976547][T10494] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.976577][T10494] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 604.976611][T10494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.040453][T11102] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 605.062118][T10494] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.575493][T10494] usb 4-1: USB disconnect, device number 33 [ 606.151800][T10483] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 606.341810][T10483] usb 1-1: Using ep0 maxpacket: 32 [ 606.342607][T10483] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 606.343830][T10483] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.343905][T10483] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 606.343934][T10483] usb 1-1: config 1 interface 0 has no altsetting 1 [ 606.343947][T10483] usb 1-1: config 1 interface 1 has no altsetting 0 [ 606.346403][T10483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.346426][T10483] usb 1-1: Product: syz [ 606.346440][T10483] usb 1-1: Manufacturer: syz [ 606.346459][T10483] usb 1-1: SerialNumber: syz [ 606.459587][T10483] snd-ua101 1-1:1.1: invalid num_altsetting [ 606.459610][T10483] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 606.459650][T10483] usb 1-1: selecting invalid altsetting 0 [ 606.478671][T10483] usb 1-1: selecting invalid altsetting 0 [ 606.478712][T10483] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 606.493968][T10483] usb 1-1: selecting invalid altsetting 0 [ 606.494104][T10483] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 606.515690][T10483] usb 1-1: selecting invalid altsetting 0 [ 606.515730][T10483] snd-ua101 1-1:1.1: probe with driver snd-ua101 failed with error -22 [ 606.753508][T10483] usb 1-1: USB disconnect, device number 33 [ 607.673342][T11130] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ"[11130] [ 609.761482][ T37] audit: type=1326 audit(1786930871.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.0.1702" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1c119e0d9 code=0x0 [ 613.817114][T11152] loop5: detected capacity change from 0 to 7 [ 613.875850][T11152] Dev loop5: unable to read RDB block 7 [ 613.875887][T11152] loop5: unable to read partition table [ 613.876033][T11152] loop5: partition table beyond EOD, truncated [ 613.876081][T11152] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 615.149374][T11161] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ"[11161] [ 619.360467][T11175] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 619.417454][T11175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 619.420901][T11175] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 619.438427][T11175] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 619.439230][T11175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 619.966491][T11175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 619.972523][T11175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 619.990325][T11175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 620.046363][T11175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 620.050177][T11175] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 621.683900][ T5600] Bluetooth: hci5: command tx timeout [ 621.778098][T11175] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 621.866746][T11175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 621.870019][T11175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 621.871294][T11175] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 621.881997][T11175] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 622.306247][T11188] Bluetooth: hci6: command tx timeout [ 623.735138][T11188] Bluetooth: hci5: command tx timeout [ 624.121860][T11188] Bluetooth: hci7: command tx timeout [ 624.312291][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 624.375067][T11188] Bluetooth: hci6: command tx timeout [ 625.747626][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.790767][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.802046][ T5596] Bluetooth: hci5: command tx timeout [ 625.805114][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 625.808846][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 625.941978][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.202049][T11188] Bluetooth: hci7: command tx timeout [ 626.452025][ T5600] Bluetooth: hci6: command tx timeout [ 627.881891][ T5600] Bluetooth: hci5: command tx timeout [ 627.996569][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.996598][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.281818][T11188] Bluetooth: hci7: command tx timeout [ 628.286554][ T5600] Bluetooth: hci0: command tx timeout [ 628.522915][ T5600] Bluetooth: hci6: command tx timeout [ 628.696577][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.696616][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.149566][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.149596][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.548924][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.548954][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.584751][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.361788][ T5600] Bluetooth: hci7: command tx timeout [ 630.361835][ T5600] Bluetooth: hci0: command tx timeout [ 630.430761][T11173] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.431073][T11173] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.431272][T11173] bridge_slave_0: entered allmulticast mode [ 630.456781][T11173] bridge_slave_0: entered promiscuous mode [ 630.546802][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.546927][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.547143][T11186] bridge_slave_0: entered allmulticast mode [ 630.549103][T11186] bridge_slave_0: entered promiscuous mode [ 630.556180][T11173] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.556512][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.557070][T11173] bridge_slave_1: entered allmulticast mode [ 630.570156][T11173] bridge_slave_1: entered promiscuous mode [ 630.634843][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.634995][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.635185][T11186] bridge_slave_1: entered allmulticast mode [ 630.637189][T11186] bridge_slave_1: entered promiscuous mode [ 630.728879][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.729061][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.729294][T11179] bridge_slave_0: entered allmulticast mode [ 630.736716][T11179] bridge_slave_0: entered promiscuous mode [ 630.805555][T11179] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.805665][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.805823][T11179] bridge_slave_1: entered allmulticast mode [ 630.809431][T11179] bridge_slave_1: entered promiscuous mode [ 630.874776][T11173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.995790][ T66] bridge_slave_1: left allmulticast mode [ 630.995959][ T66] bridge_slave_1: left promiscuous mode [ 631.005577][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.118222][ T66] bridge_slave_0: left allmulticast mode [ 631.118251][ T66] bridge_slave_0: left promiscuous mode [ 631.118433][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.262789][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.322584][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.364328][ T66] bond0 (unregistering): Released all slaves [ 632.418078][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.421132][T11173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.441765][ T5600] Bluetooth: hci0: command tx timeout [ 632.658149][T11210] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.658246][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.658411][T11210] bridge_slave_0: entered allmulticast mode [ 632.660456][T11210] bridge_slave_0: entered promiscuous mode [ 632.683098][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.718285][T11179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.720578][ T66] tipc: Left network mode [ 632.721193][T11210] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.721279][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.721459][T11210] bridge_slave_1: entered allmulticast mode [ 632.730486][T11210] bridge_slave_1: entered promiscuous mode [ 632.824026][T11179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.907354][T11173] team0: Port device team_slave_0 added [ 632.948226][T11186] team0: Port device team_slave_0 added [ 632.951286][T11173] team0: Port device team_slave_1 added [ 632.981056][T11210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.000337][T11186] team0: Port device team_slave_1 added [ 633.267417][T11179] team0: Port device team_slave_0 added [ 633.276987][T11210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.348509][T11179] team0: Port device team_slave_1 added [ 633.428115][T11173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.428132][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.428156][T11173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.546528][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.546544][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.546567][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.573287][T11173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.573345][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.573425][T11173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.674241][T11210] team0: Port device team_slave_0 added [ 633.679560][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.679579][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.679607][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.944388][T11210] team0: Port device team_slave_1 added [ 633.964257][T11179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.964277][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.964305][T11179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.309196][T11179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.309214][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.309241][T11179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.442799][T11210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.442817][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.442845][T11210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.522091][ T5600] Bluetooth: hci0: command tx timeout [ 634.539605][T11210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.539620][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.539640][T11210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.706241][T11173] hsr_slave_0: entered promiscuous mode [ 634.707679][T11173] hsr_slave_1: entered promiscuous mode [ 634.708657][T11173] debugfs: 'hsr0' already exists in 'hsr' [ 634.708682][T11173] Cannot create hsr debugfs directory [ 634.780637][T11186] hsr_slave_0: entered promiscuous mode [ 634.788575][T11186] hsr_slave_1: entered promiscuous mode [ 634.789448][T11186] debugfs: 'hsr0' already exists in 'hsr' [ 634.789467][T11186] Cannot create hsr debugfs directory [ 634.852464][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 634.889960][T11269] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ"[11269] [ 634.990371][T11179] hsr_slave_0: entered promiscuous mode [ 634.997653][T11179] hsr_slave_1: entered promiscuous mode [ 635.000115][T11179] debugfs: 'hsr0' already exists in 'hsr' [ 635.023514][T11179] Cannot create hsr debugfs directory [ 635.202075][ T66] hsr_slave_0: left promiscuous mode [ 635.242618][ T66] hsr_slave_1: left promiscuous mode [ 635.243656][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.243763][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.306567][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.306605][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.448406][ T66] veth1_macvtap: left promiscuous mode [ 635.448657][ T66] veth0_macvtap: left promiscuous mode [ 635.448877][ T66] veth1_vlan: left promiscuous mode [ 635.449100][ T66] veth0_vlan: left promiscuous mode [ 636.352432][ T66] team0 (unregistering): Port device team_slave_1 removed [ 636.416063][ T66] team0 (unregistering): Port device team_slave_0 removed [ 636.838953][T11210] hsr_slave_0: entered promiscuous mode [ 636.840395][T11210] hsr_slave_1: entered promiscuous mode [ 636.841384][T11210] debugfs: 'hsr0' already exists in 'hsr' [ 636.841418][T11210] Cannot create hsr debugfs directory [ 638.410214][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 638.620079][T11305] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11305] [ 638.909524][T11173] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 638.973777][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.975450][T11173] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 639.084583][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.102576][T11173] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 639.166161][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.233086][T11173] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 639.339838][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.609197][ T37] audit: type=1326 audit(1786930901.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11331 comm="syz.4.1732" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa095c5e0d9 code=0x7ffc0000 [ 639.609340][ T37] audit: type=1326 audit(1786930901.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11331 comm="syz.4.1732" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa095c5e0d9 code=0x7ffc0000 [ 639.623899][ T37] audit: type=1326 audit(1786930901.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11331 comm="syz.4.1732" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa095c5e0d9 code=0x7ffc0000 [ 639.721993][ T37] audit: type=1326 audit(1786930901.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11331 comm="syz.4.1732" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa095c5e0d9 code=0x7ffc0000 [ 639.722059][ T37] audit: type=1326 audit(1786930901.680:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11331 comm="syz.4.1732" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa095c5e0d9 code=0x7ffc0000 [ 639.722099][ T37] audit: type=1326 audit(1786930901.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11331 comm="syz.4.1732" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa095c5e0d9 code=0x7ffc0000 [ 639.778040][ T37] audit: type=1326 audit(1786930901.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11331 comm="syz.4.1732" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa095c5e0d9 code=0x7ffc0000 [ 639.935777][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 640.426996][T11179] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 640.516659][T11179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 640.572416][T11179] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 640.607836][T11179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 640.889721][T11179] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 640.953037][T11179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 640.978565][T11179] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 641.029371][T11179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.097168][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 641.521207][T11186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 641.560690][T11186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.656768][T11186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 641.687767][T11186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.718672][T11186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 641.824068][T11186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.850636][T11363] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11363] [ 641.902862][T11186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 641.964745][T11186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.405695][T11173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.569710][T11378] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by "\x0a \x0b ./binderfs/binder0"[11378] [ 642.895021][T11173] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.936697][T11210] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 642.977707][T11210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.155963][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.212722][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.236433][ T66] bond0 (unregistering): Released all slaves [ 644.281519][T11210] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 644.321255][T11210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.352237][T11210] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 644.450314][T11210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.507500][T11210] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 644.605323][T11210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.622085][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.625976][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.631511][ T66] tipc: Left network mode [ 644.690090][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.690251][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.947763][T11179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.586067][T11179] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.707655][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.707825][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.029043][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.029238][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.105361][T11405] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11405] [ 646.335853][T11186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.388190][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5 [ 646.561877][ T66] hsr_slave_0: left promiscuous mode [ 646.582043][ T66] hsr_slave_1: left promiscuous mode [ 646.583036][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.623019][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.183513][ T66] team0 (unregistering): Port device team_slave_1 removed [ 647.223482][ T66] team0 (unregistering): Port device team_slave_0 removed [ 647.586858][T11186] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.680000][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.680094][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.753285][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.753559][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.815674][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.143056][T11210] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.327248][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.327432][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.448336][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.448442][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.864698][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.670077][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6 [ 650.423396][T11179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.614284][T11173] veth0_vlan: entered promiscuous mode [ 650.657035][T11173] veth1_vlan: entered promiscuous mode [ 650.896845][T11173] veth0_macvtap: entered promiscuous mode [ 650.936124][T11173] veth1_macvtap: entered promiscuous mode [ 650.973373][T11186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.020181][T11173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.056638][T11173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.363429][ T1446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.363735][ T1446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.363936][ T1446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.364110][ T1446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.966267][T11210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.574429][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7 [ 652.579196][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.579218][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.969342][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.969365][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.188419][T11179] veth0_vlan: entered promiscuous mode [ 653.370595][T11179] veth1_vlan: entered promiscuous mode [ 653.400467][T11186] veth0_vlan: entered promiscuous mode [ 653.524573][T11186] veth1_vlan: entered promiscuous mode [ 653.723163][T11210] veth0_vlan: entered promiscuous mode [ 653.728121][T11179] veth0_macvtap: entered promiscuous mode [ 653.794602][T11179] veth1_macvtap: entered promiscuous mode [ 653.877275][T11210] veth1_vlan: entered promiscuous mode [ 653.889208][T11186] veth0_macvtap: entered promiscuous mode [ 653.963543][T10475] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 654.049668][T11186] veth1_macvtap: entered promiscuous mode [ 654.081445][T11179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.137265][T10475] usb 6-1: Using ep0 maxpacket: 8 [ 654.138126][T10475] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 654.139549][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8 [ 654.162229][T10475] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 654.162307][T10475] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.162358][T10475] usb 6-1: config 0 has no interface number 0 [ 654.162481][T10475] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 654.162542][T10475] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.162685][T10475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.227342][T10475] usb 6-1: config 0 descriptor?? [ 654.249256][T10475] ldusb 6-1:0.55: Interrupt in endpoint not found [ 654.267920][T11179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.370302][T11186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.471998][T11543] qrtr: Invalid version 0 [ 654.488809][T11543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.489373][T11543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.537043][T11186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.626196][T11210] veth0_macvtap: entered promiscuous mode [ 654.909732][T11210] veth1_macvtap: entered promiscuous mode [ 655.915116][T11210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.011865][ T1446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.011887][ T1446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.193264][T11210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.453337][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.453356][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.708276][T10475] usb 6-1: USB disconnect, device number 2 [ 656.856846][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.856876][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.909759][ T1018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.909813][ T1018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.909851][ T1018] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.909889][ T1018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.909925][ T1018] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.414958][ T5319] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 657.564972][ T1433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.566619][ T1431] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.566675][ T1431] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.566716][ T1431] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.566753][ T1431] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.566792][ T1431] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.566831][ T1431] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.663757][ T5319] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 657.702901][ T5319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.702928][ T5319] usb 6-1: Product: syz [ 657.702942][ T5319] usb 6-1: Manufacturer: syz [ 657.702956][ T5319] usb 6-1: SerialNumber: syz [ 657.742526][ T5319] usb 6-1: config 0 descriptor?? [ 657.773061][ T5319] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 657.915277][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.915369][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.116395][ T5319] gspca_sunplus: reg_r err -71 [ 658.165555][ T5319] usb 6-1: USB disconnect, device number 3 [ 658.545744][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.545765][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.788405][T11565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 658.788425][T11565] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 659.004099][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.004127][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.344480][T11565] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 659.344508][T11565] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 659.651763][ T5319] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 659.812592][ T5319] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 659.813975][ T5319] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 659.813996][ T5319] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 659.814017][ T5319] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 659.814062][ T5319] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 659.814082][ T5319] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 659.815802][ T5319] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 659.815820][ T5319] usb 8-1: Product: syz [ 659.815830][ T5319] usb 8-1: Manufacturer: syz [ 659.974198][T11565] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 659.974223][T11565] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 660.009985][ T5319] cdc_wdm 8-1:1.0: skipping garbage [ 660.010008][ T5319] cdc_wdm 8-1:1.0: skipping garbage [ 660.085801][ T5319] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 660.085826][ T5319] cdc_wdm 8-1:1.0: Unknown control protocol [ 660.426900][ T36] usb 8-1: USB disconnect, device number 2 [ 660.533137][T11565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 660.533162][T11565] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 660.879213][T11600] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1756'. [ 661.941868][T10474] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 662.129142][T10474] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 662.130643][T10474] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.130692][T10474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.952884][T10474] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 663.772169][T10474] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.7-1/input0 [ 663.876651][T10474] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:056A:033B.0006/input/input7 [ 664.670385][T10474] BUG: unable to handle page fault for address: fffff52003c00001 [ 664.670412][T10474] #PF: supervisor read access in kernel mode [ 664.670425][T10474] #PF: error_code(0x0000) - not-present page [ 664.670436][T10474] PGD 23fff5067 P4D 23fff5067 PUD 1ae8f067 PMD 3ce3f067 PTE 0 [ 664.670480][T10474] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 664.670505][T10474] CPU: 0 UID: 0 PID: 10474 Comm: kworker/0:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.670536][T10474] Tainted: [L]=SOFTLOCKUP [ 664.670544][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.670559][T10474] Workqueue: usb_hub_wq hub_event [ 664.670658][T10474] RIP: 0010:__list_add_valid_or_report+0x3e/0x130 [ 664.670759][T10474] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 e7 e8 e2 8b 61 fd 4d 39 34 24 75 71 [ 664.670779][T10474] RSP: 0018:ffffc900042bf790 EFLAGS: 00010a02 [ 664.670797][T10474] RAX: 0000000000100000 RBX: ffffc9001e000000 RCX: 0000000080000001 [ 664.670814][T10474] RDX: ffffc9001e000000 RSI: ffffffff8e220f00 RDI: ffffc9001aaaa000 [ 664.670831][T10474] RBP: 1ffff92003c00001 R08: ffffffff8b477b80 R09: 0000000000000000 [ 664.670846][T10474] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: ffffc9001e000008 [ 664.670860][T10474] R13: dffffc0000000000 R14: ffffffff8e220f00 R15: ffffc9001aaaa000 [ 664.670875][T10474] FS: 0000000000000000(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 664.670891][T10474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.670905][T10474] CR2: fffff52003c00001 CR3: 0000000063994000 CR4: 00000000003526f0 [ 664.670923][T10474] Call Trace: [ 664.670931][T10474] [ 664.670941][T10474] kcov_remote_stop+0x457/0x680 [ 664.671031][T10474] hub_event+0x4789/0x4cf0 [ 664.671076][T10474] ? __pfx_hub_event+0x10/0x10 [ 664.671097][T10474] ? process_scheduled_works+0xa20/0x14e0 [ 664.671167][T10474] ? rcu_is_watching+0x15/0xb0 [ 664.671214][T10474] ? process_scheduled_works+0xa20/0x14e0 [ 664.671237][T10474] process_scheduled_works+0xa8e/0x14e0 [ 664.671274][T10474] ? __pfx_process_scheduled_works+0x10/0x10 [ 664.671301][T10474] ? assign_work+0x3cf/0x5d0 [ 664.671326][T10474] worker_thread+0xa47/0xfb0 [ 664.671356][T10474] ? __kthread_parkme+0x71/0x1f0 [ 664.671386][T10474] kthread+0x388/0x470 [ 664.671438][T10474] ? __pfx_worker_thread+0x10/0x10 [ 664.671460][T10474] ? __pfx_kthread+0x10/0x10 [ 664.671489][T10474] ret_from_fork+0x514/0xb70 [ 664.671549][T10474] ? __pfx_ret_from_fork+0x10/0x10 [ 664.671580][T10474] ? __switch_to+0xc89/0x1420 [ 664.671630][T10474] ? __pfx_kthread+0x10/0x10 [ 664.671659][T10474] ret_from_fork_asm+0x1a/0x30 [ 664.671700][T10474] [ 664.671714][T10474] Modules linked in: [ 664.671737][T10474] CR2: fffff52003c00001 [ 664.671761][T10474] ---[ end trace 0000000000000000 ]--- [ 664.671773][T10474] RIP: 0010:__list_add_valid_or_report+0x3e/0x130 [ 664.671809][T10474] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 e7 e8 e2 8b 61 fd 4d 39 34 24 75 71 [ 664.671828][T10474] RSP: 0018:ffffc900042bf790 EFLAGS: 00010a02 [ 664.671846][T10474] RAX: 0000000000100000 RBX: ffffc9001e000000 RCX: 0000000080000001 [ 664.671861][T10474] RDX: ffffc9001e000000 RSI: ffffffff8e220f00 RDI: ffffc9001aaaa000 [ 664.671878][T10474] RBP: 1ffff92003c00001 R08: ffffffff8b477b80 R09: 0000000000000000 [ 664.671893][T10474] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: ffffc9001e000008 [ 664.671908][T10474] R13: dffffc0000000000 R14: ffffffff8e220f00 R15: ffffc9001aaaa000 [ 664.671923][T10474] FS: 0000000000000000(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 664.671941][T10474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.671954][T10474] CR2: fffff52003c00001 CR3: 0000000063994000 CR4: 00000000003526f0 [ 664.671979][T10474] Kernel panic - not syncing: Fatal exception [ 664.672584][T10474] Kernel Offset: disabled