last executing test programs: 9.881769223s ago: executing program 3 (id=1466): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x32}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10000) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x40, 0xfb, 0x9, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0x10, 0xb, 0x8, 0x40, 0x6, 0x8, 0x9, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xf000, 0x3000, 0xd, 0xf, 0x43, 0xe, 0x2, 0xd, 0x47, 0x3, 0xfc, 0x1}, {0x100000, 0xb000, 0x15, 0x3f, 0x3, 0x9, 0x8, 0x5, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x6, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0xfe, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0xc, 0x0, 0x9000, [0x4, 0x402, 0x6, 0xc2]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000600)={0x1, 0x0, [{0x1, 0xff, 0x3, 0x289f, 0x5, 0x8, 0x2}]}) syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect(0x5, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501", @ANYRES64], 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000500)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x306, 0x0, 0x0, 0x1000, 0x5, r11, 0x0, 0x10}}}, &(0x7f0000000580)) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x3, 0xe03, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x17b}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f00000002c0)={0x0, 0xfb87, 0x8000, 0x3, 0x1032c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87ffffe, 0x200, 0x6, 0x8d, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x3, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000640)={0x2e, 0x50, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x3, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24008002) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 6.66865972s ago: executing program 3 (id=1480): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r1, &(0x7f0000000040)=""/27, 0x1b) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001300)='net/tcp6\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) lseek(r2, 0x7fffffff, 0x1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400020100350400"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)='8B', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000040801050004000000b2dd295d"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4840) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x4, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x470, 0xa7, 0x8, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0xf5, 0x0, 0x4, 0x0, 0xd318, 0x2000000000, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x6, 0x800000, 0x0, 0x101, 0x272f, 0xd721, 0x23f, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x4, 0x5, 0x1, 0x4000000, 0x5, 0x0, 0xdc5d, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) syz_usb_disconnect(r3) socket$inet6(0xa, 0x80002, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x20, 0xfffffffe, 0x50424752, 0x8, 0x7, [{0x79, 0x4}, {0x7, 0x9}, {0x35b2, 0x9}, {0x3a5, 0x8}, {0x6}, {0x1800000, 0x1}, {0x10001}, {0x6, 0x7}], 0xfd, 0x1, 0x3, 0x0, 0x1}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x400caed0, &(0x7f0000000100)={0x1, 0xff03, @ioapic={0xffffffff, 0x1, 0x3, 0x80000000, 0x0, [{0xd2, 0x5, 0x0, '\x00', 0x6}, {0x7, 0x9, 0x9f, '\x00', 0xc}, {0x6, 0x2, 0xfc, '\x00', 0xd1}, {0x5, 0x8, 0xfc, '\x00', 0xa}, {0x2, 0x40, 0x7, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0x9f}, {0x4, 0x10, 0x1, '\x00', 0x9}, {0x4, 0x6, 0x2, '\x00', 0x10}, {0x2, 0x3, 0x9, '\x00', 0x80}, {0x3, 0x3, 0x6, '\x00', 0x4}, {0x2, 0x8, 0x4, '\x00', 0x9}, {0x0, 0x2, 0x1, '\x00', 0xb4}, {0xeb, 0x10, 0x4, '\x00', 0x6}, {0x6, 0x6, 0x5, '\x00', 0x8}, {0x8d, 0x2, 0x1, '\x00', 0x7}, {0x80, 0x7, 0x6, '\x00', 0x1}, {0xff, 0x4, 0xff, '\x00', 0x6}, {0x0, 0x0, 0x5, '\x00', 0x1}, {0xa, 0x4, 0x2, '\x00', 0x7}, {0x10, 0x1c, 0x4b, '\x00', 0x3}, {0x6, 0x5, 0x9, '\x00', 0x7d}, {0xd, 0xfa, 0x40, '\x00', 0xa}, {0x5, 0x6, 0xb, '\x00', 0x1}, {0x90, 0xc, 0x4, '\x00', 0x4}]}}) 6.525493932s ago: executing program 4 (id=1481): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="db043e0205ea063476b091d5af39c66a933575274ee105b599fffbc1773a54388d92a94b4c77e6a83f60e4011e43bd4acdf69268f3ad7b7e4f079a7eceda9ea012de3c2d8914aeb0f2b2df1d68fddeaec1b375019805cf94eea2c4608834b25633010ca9b477fff5d52935a77de7a43c812e87c0dd393054368f73a7d803c22c8f3298e2f6b2c559aff558cd3bd43c17ff55fdb5db7bad98fb1ad5eaf224d4e5d04e0d2018d9b428187168469f70a3c6980b7d99eb72ee587127e30afabb011614e97791479b9480ebeaac729f310f8fa2d845df88a40ca9bfaba9e3805baf56b150c5fce1485f2e7bc5c91daa22", 0xee}], 0x1, &(0x7f0000000240), 0x0, 0x4040}, 0x801) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x29, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x7c}}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000101080000000000000000030000000800f720f0000001"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r8 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x1c1300) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x2000005, 0x13, r8, 0x1e67e000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x2}, 0xfff}], 0x1, 0x40000200, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000500)="9d59a622d4e4adc9fe7b2b18270044fd78861a4297c271708ffb006f1d84d15a59326d28898845cbab0c3b3df2ebcea55ecdb7b5f17ad1a80c2422666138f4ca89b06fbb05557d7090320308396f729206ea51efa18ba220cc66fd85730d1518e886dfde22652dc868bf074f2c91f3a9786f281129eb5df4aa526ee4b7e4feca593b9e2b6f79e772c9f73eaa20baf6d0ea328eb910763e3923c5675ca87e5c54fbd6d992c46402", 0xa7}, {&(0x7f0000001ac0)="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", 0x4de}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000020103000000000000000000020000080c00198008000280"], 0x20}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 5.730379073s ago: executing program 2 (id=1484): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) madvise(&(0x7f00009b8000/0x1000)=nil, 0x1000, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x222042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x240) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x9, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000240)={0x1, r5}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000180)={r5, 0xfffffffffffffff9}) r6 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) io_uring_enter(r7, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.53386339s ago: executing program 2 (id=1486): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c351300000f", 0x0, 0x0, 0x14, 0x0, 0x0}) 5.248423679s ago: executing program 2 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000000300000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40040d0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, &(0x7f00000001c0)="0f00551d2e9e8d8d0f38829f05006426a1cc003ef20fad8c0000260fbd9907000f09f2a70f01c2f00fba6d2300", 0x2d}], 0x1, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="666f6f23646e736572726f723d3100a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xfffff, 0xfffffffffffffffe) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x92c0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.19269936s ago: executing program 0 (id=1488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) syz_usb_connect$midi(0x3, 0x56, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000040392ad43f40000102030109024400010100800109040000020103000007240100011600062402010100092403010201010100090581020002000000052501010209"], 0x0) 5.123815723s ago: executing program 4 (id=1489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc010000190001000000000000000000000000000000000000000000000000000a0101020000000000000000000000000000ffff000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000000000000000000000080000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000002bdd020000000000000000000000000000010000000000000044010500fc010000000000000000000000000001000000002b0000000000000064010101000000000000000000000000000000000000fb0000000000493f0d5100000000fc010000000000000000000000000000000000002b00000002000000fc010000140000000000000000000000000000000003000000000000000000000000000000000024000000000000000000000001000000003c00000002000000ffffffff000000000000000000000000000000000103000000000000d62c000000000000ff020000000000000000000000000001000000003c00"], 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 4.993136188s ago: executing program 4 (id=1490): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88c00, 0x0) pwritev(r2, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/path123456789012345678901234567890123456789012345678901234567890\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='port\x00', &(0x7f0000000200)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='mountport\x00', &(0x7f0000000280)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="000f2200000053c90000006d59e5fe2c71e559120617f8d600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.642281423s ago: executing program 2 (id=1491): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0xa, 0x5, 0xfff, 0x80000000, 0x200c, 0x9, 0xfffffffe, 0x92e}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x8000, 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r4}, 0x10) (async) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r4}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000380)={0x1, {{0x2, 0x4e22, @broadcast}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000380)={0x1, {{0x2, 0x4e22, @broadcast}}}, 0x88) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1635}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1635}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000680)={r8, 0xc0000, 0x30}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000680)={r8, 0xc0000, 0x30}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r9, &(0x7f000000e280)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000100)={0x50, 0x0, r10}, 0x50) 4.164674203s ago: executing program 3 (id=1492): r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000000)=0x5) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x134, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x24000006) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000000c0)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xa6, &(0x7f0000000000)=[{0x3, 0x4, 0xcb}, {0xd, 0xffffffff00000001}, {0x3, 0x1ff, 0x5}, {0x7, 0x1, 0xc88e}, {0x8, 0x800, 0xe}, {0xfffffffffffff000, 0x2, 0x3}], 0x6, 0x2, 0x1, 0x0, 0x80, 0x20}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) fchdir(r2) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 3.391851501s ago: executing program 4 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, 0x1409, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x4) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x10d) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='scalable', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.804453438s ago: executing program 1 (id=1497): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c35130000f5", 0x0, 0x0, 0x14, 0x0, 0x0}) 2.803727763s ago: executing program 1 (id=1498): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket(0x840000000002, 0x3, 0xff) (rerun: 32) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000300)=""/36, 0x24}], 0x1, 0x0, 0x0, 0x8000}, 0x48845) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r1 = socket$kcm(0x2, 0x3, 0x106) landlock_restrict_self(0xffffffffffffffff, 0x1) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x9d, 0x1, 0x0, 0xf}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000e9ff020000000900010073797a30000000000900030073797a323fe4c2d8c78e14799aa1500000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000cf00280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f0000000680)="c653848a097808aff4103e7fab1dfa958d9db416aba921319d15f1522d0d4514f5240ed2e4084ae5117686ef0a4639b5", 0x30}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0xffeb}], 0x1}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (rerun: 32) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) (async, rerun: 32) r8 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) (async) socket$pppoe(0x18, 0x1, 0x0) 2.721545661s ago: executing program 3 (id=1499): socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x20000) socket(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x5, 0x3, 0x0, &(0x7f00000011c0)=0x8, 0x2000000) futex$unlock_wake_list32(&(0x7f00000002c0)=0x100, 0x601, 0x8000, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)=0x4, 0x2) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000002c0), 0x4) 2.673546771s ago: executing program 1 (id=1500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc010000190001000000000000000000000000000000000000000000000000000a0101020000000000000000000000000000ffff000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000000000000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000000000000000000032dd020000000000000000000000000000010000000000000044010500fc010000000000000000000000000001000000002b0000000000000064010101000000000000000000000000000000000000fb0000000000493f0d5100000000fc010000000000000000000000000000000000002b00000002000000fc010000140000000000000000000000000000000003000000000000000000000000000000000024000000000000000000000001000000003c00000002000000ffffffff000000000000000000000000000000000103000000000000d62c000000000000ff020000000000000000000000000001000000003c00"], 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 2.587080689s ago: executing program 1 (id=1501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0xd, 0x9, 0x8, 0xfffffffffffffffc, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x80, 0x43, &(0x7f00000000c0)=""/67, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x8, 0x7f, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)=[{0x1, 0x1, 0x2, 0x9}, {0x3, 0x2, 0x7, 0x8}, {0x3, 0x3, 0x10, 0x4}, {0x5, 0x4, 0xe, 0x5}, {0x1, 0x4, 0x9, 0x8}, {0x5, 0x2, 0xa, 0x18}, {0x5, 0x2, 0x1, 0xa}]}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x35}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000580)={0x4de, 0xd50, 0x6, 0x0, 0x2, 0x7}) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000580)={0x4de, 0xd50, 0x6, 0x0, 0x2, 0x7}) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)="a67be5bcc0e2dc91573c23829e736a525118410d1da99f906b184fecad87dd47a9c8d14d70e0a624eacdf1175648d6", 0x2f}, {&(0x7f0000000600)="9f002f5629b988dee2891cdb149faeaac3523d7ad58c1d389da6287eb9d77777e8549fc71f587fd0183b4048c9cf3763a770dba01b433ffa264c8e12f71dc5b9e94560e91430b6c74d530a", 0x4b}], 0x2, 0x1, 0x7, 0x10) (async) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)="a67be5bcc0e2dc91573c23829e736a525118410d1da99f906b184fecad87dd47a9c8d14d70e0a624eacdf1175648d6", 0x2f}, {&(0x7f0000000600)="9f002f5629b988dee2891cdb149faeaac3523d7ad58c1d389da6287eb9d77777e8549fc71f587fd0183b4048c9cf3763a770dba01b433ffa264c8e12f71dc5b9e94560e91430b6c74d530a", 0x4b}], 0x2, 0x1, 0x7, 0x10) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f00000007c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xa0, 0x0, [{@private}, {@initdev}, {@empty}, {@loopback}, {@multicast1}, {@multicast2}, {@multicast2}, {@empty}, {@broadcast}, {@broadcast}]}}) eventfd(0x5) (async) r5 = eventfd(0x5) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000008c0)=@generic={0x3, 0x0, 0x7}) syz_open_dev$video4linux(&(0x7f0000000900), 0x3, 0x88082) r6 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(r0, &(0x7f0000000ac0)=[{&(0x7f0000000940)="2e55b41bbd2e6daad144c086689e2492b753faff3ab8837fcc36d1c35e27105e1132c1ecf447be3ab5be8b6fa9b809eb6e19c22822b18650a4fa2fac912783bbdf657e9d4887e773fee6da81bd34b4aa48e74333e613137d12087dbee887ac424602afbb697326daca0f9404", 0x6c}, {&(0x7f00000009c0)="6c8503fb9c046067e9db1f8f74184a8217040d38f1eb896860e89d4e1318801fa5c51f72ad64a95fd3051e343e71f5a5a3598f28f790ec79521c350035e93d2835148f7c00082c2d3030a4a213d0a49d9ba283f1b2704bc45a6ce7c962a2c130183acde9020c8b8e0d3583b4e0254b3fb0abbcf6d45d8c40fe8ba2dc77f1652e694a8731cf7865aae95b0f2f96c2e9b0e7cf0e47a5606138a304fe2ca6c4ca0e1abc1a4826066d5e4c25e27c0f0adf23d01d0860f1b69d14753b7b2df6", 0xbd}, {&(0x7f0000000a80)="c946defc1230aa23751acb781649834b372009a46d08677e04a9c629d52777e4449dbbf6d6d96b0985e669382c9afe41d153e877af4c", 0x36}], 0x3, 0x5, 0x10001, 0x19) (async) pwritev2(r0, &(0x7f0000000ac0)=[{&(0x7f0000000940)="2e55b41bbd2e6daad144c086689e2492b753faff3ab8837fcc36d1c35e27105e1132c1ecf447be3ab5be8b6fa9b809eb6e19c22822b18650a4fa2fac912783bbdf657e9d4887e773fee6da81bd34b4aa48e74333e613137d12087dbee887ac424602afbb697326daca0f9404", 0x6c}, {&(0x7f00000009c0)="6c8503fb9c046067e9db1f8f74184a8217040d38f1eb896860e89d4e1318801fa5c51f72ad64a95fd3051e343e71f5a5a3598f28f790ec79521c350035e93d2835148f7c00082c2d3030a4a213d0a49d9ba283f1b2704bc45a6ce7c962a2c130183acde9020c8b8e0d3583b4e0254b3fb0abbcf6d45d8c40fe8ba2dc77f1652e694a8731cf7865aae95b0f2f96c2e9b0e7cf0e47a5606138a304fe2ca6c4ca0e1abc1a4826066d5e4c25e27c0f0adf23d01d0860f1b69d14753b7b2df6", 0xbd}, {&(0x7f0000000a80)="c946defc1230aa23751acb781649834b372009a46d08677e04a9c629d52777e4449dbbf6d6d96b0985e669382c9afe41d153e877af4c", 0x36}], 0x3, 0x5, 0x10001, 0x19) r7 = dup(r5) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @fwd={0x8}]}, {0x0, [0x30]}}, &(0x7f0000000b40)=""/198, 0x33, 0xc6, 0x0, 0x7fffffff, 0x10000, @value=r7}, 0x28) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x40010, r8, 0x4f9d9000) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000c80)={0x2, r1, 'id0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000c80)={0x2, r1, 'id0\x00'}) openat$cgroup_subtree(r9, &(0x7f0000000d00), 0x2, 0x0) (async) openat$cgroup_subtree(r9, &(0x7f0000000d00), 0x2, 0x0) recvmsg$can_bcm(r9, &(0x7f00000011c0)={&(0x7f0000000d40)=@sco, 0x80, &(0x7f0000001080)=[{&(0x7f0000000dc0)=""/187, 0xbb}, {&(0x7f0000000e80)=""/60, 0x3c}, {&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f0000000fc0)=""/22, 0x16}, {&(0x7f0000001000)=""/89, 0x59}], 0x6, &(0x7f0000001100)=""/168, 0xa8}, 0x10000) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001200)) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xf) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001240)=0x0) syz_pidfd_open(r10, 0x0) (async) syz_pidfd_open(r10, 0x0) epoll_create(0x4) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000001280)={0x1, r1}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000012c0)=0x2, 0x4) 2.582267941s ago: executing program 1 (id=1502): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r1, &(0x7f0000000040)=""/27, 0x1b) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001300)='net/tcp6\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) lseek(r2, 0x7fffffff, 0x1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400020100350400"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)='8B', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000040801050004000000b2dd295d"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4840) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x4, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x470, 0xa7, 0x8, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0xf5, 0x0, 0x4, 0x0, 0xd318, 0x2000000000, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x6, 0x800000, 0x0, 0x101, 0x272f, 0xd721, 0x23f, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x4, 0x5, 0x1, 0x4000000, 0x5, 0x0, 0xdc5d, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) syz_usb_disconnect(r3) socket$inet6(0xa, 0x80002, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x20, 0xfffffffe, 0x50424752, 0x8, 0x7, [{0x79, 0x4}, {0x7, 0x9}, {0x35b2, 0x9}, {0x3a5, 0x8}, {0x6}, {0x1800000, 0x1}, {0x10001}, {0x6, 0x7}], 0xfd, 0x1, 0x3, 0x0, 0x1}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x400caed0, &(0x7f0000000100)={0x1, 0xff03, @ioapic={0xffffffff, 0x1, 0x3, 0x80000000, 0x0, [{0xd2, 0x5, 0x0, '\x00', 0x6}, {0x7, 0x9, 0x9f, '\x00', 0xc}, {0x6, 0x2, 0xfc, '\x00', 0xd1}, {0x5, 0x8, 0xfc, '\x00', 0xa}, {0x2, 0x40, 0x7, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0x9f}, {0x4, 0x10, 0x1, '\x00', 0x9}, {0x4, 0x6, 0x2, '\x00', 0x10}, {0x2, 0x3, 0x9, '\x00', 0x80}, {0x3, 0x3, 0x6, '\x00', 0x4}, {0x2, 0x8, 0x4, '\x00', 0x9}, {0x0, 0x2, 0x1, '\x00', 0xb4}, {0xeb, 0x10, 0x4, '\x00', 0x6}, {0x6, 0x6, 0x5, '\x00', 0x8}, {0x8d, 0x2, 0x1, '\x00', 0x7}, {0x80, 0x7, 0x6, '\x00', 0x1}, {0xff, 0x4, 0xff, '\x00', 0x6}, {0x0, 0x0, 0x5, '\x00', 0x1}, {0xa, 0x4, 0x2, '\x00', 0x7}, {0x10, 0x1c, 0x4b, '\x00', 0x3}, {0x6, 0x5, 0x9, '\x00', 0x7d}, {0xd, 0xfa, 0x40, '\x00', 0xa}, {0x5, 0x6, 0xb, '\x00', 0x1}, {0x90, 0xc, 0x4, '\x00', 0x4}]}}) 2.482894501s ago: executing program 4 (id=1503): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x7, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x2, 0xc2, 0x0, 0x20, 0x5}, 0x19, &(0x7f0000000740)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "77013d8ee73df87a6a5e73391739feb3"}]}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x20, 0x7, 0x8, {0x8, 0x4, "213751a078b4"}}, 0x0}, &(0x7f0000000e40)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x80, "06d0a5f00608bf6149af0d4fb860fd713ab2d80fe08fae8bb11a596b36db1d49a01c3fac799e556b7781df502e843fd77dd4e36ceb2986087ac1dcba49d8b7ae5676aab9bd4f6846eb651dba8f7165afdc0488697d6d83cbbb87ba3a9e8a88b1d45c1916c4ef2f5348cf6fc781b70547fcc53476af12c70d001325d471eab92a"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x83, 0x2}, &(0x7f0000000dc0)={0x20, 0x87, 0x2, 0x81}, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e9e", 0x2}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000), 0x0, 0x0) 1.995288676s ago: executing program 0 (id=1504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x2, 0x8}, &(0x7f0000000100)=0x90) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) r2 = syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00') (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') (rerun: 32) fchdir(r3) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r1, 0x15, 0x1e, "2ae8cf96d004950e7e1c686f404d2eef41634d7d44f2f3f7d4aa77b9c8c0"}, 0x26) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) sendmsg$rds(r4, &(0x7f0000000cc0)={&(0x7f0000000380)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000480)=""/206, 0xce}], 0x3, &(0x7f0000000b40)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff, 0x4f}, {&(0x7f00000005c0)=""/80, 0x50}, &(0x7f0000000940)=[{&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000840)=""/50, 0x32}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/56, 0x38}], 0x7, 0x36, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0xfffffffa, 0x100}, &(0x7f00000009c0), &(0x7f0000000a00)=0xb32, 0x3, 0x100000000, 0x401, 0xffffffffffffffff, 0x20, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x4}, &(0x7f0000000a40)=0xe083, &(0x7f0000000a80)=0x3c4e, 0x80000001, 0x4, 0x6, 0x2, 0x50, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x101, 0x3}, &(0x7f0000000ac0)=0x7f, &(0x7f0000000b00)=0x200, 0x9effe76, 0x1, 0xb, 0x1ff, 0x1, 0xfffffffffffffffa}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x9}}], 0x168, 0x8040000}, 0xc000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x6}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="8725a5f5a8", 0x5}], 0x1}}], 0x1, 0x40840) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="01", 0x1}], 0x1, 0xfff7fc01, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x802}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b007f00000000000000e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) getdents(r2, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0x41, "b936a108174614947e92671140375d3c80352d1113627ea0e0b39ac8f3e910ad30eabedd8c06a945b2fade2000ba0d2a3313de4d5b46724989d99a7984f0e50abc"}, &(0x7f00000001c0)=0x49) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b1000000004000000000000000000000dd000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.734361001s ago: executing program 0 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000500)=0x6e, 0x0) connect$unix(r4, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x5}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000)=0x100) r10 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000004c0)={0x80000004}) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) setsockopt$inet6_udp_int(r10, 0x11, 0x65, &(0x7f00000000c0)=0xfffffffa, 0x4) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xc}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x140, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.303946685s ago: executing program 0 (id=1506): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x80, 0xfffffffffffffffe, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0xb, 0x9, 0x0, 0x201, 0x7fffffff}, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 1.219702766s ago: executing program 2 (id=1507): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400096c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c014}, 0x4040000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 927.146225ms ago: executing program 3 (id=1508): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c35130000f7", 0x0, 0x0, 0x14, 0x0, 0x0}) 890.98185ms ago: executing program 3 (id=1509): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="140f52b0350e0179e6f042e0fe8faefdf6aab2ebd6919264ab3c0bdec2dd6c6f55f00fe0eb0ae48f0098306487f5b6536594cb82fb02465cb98c418bebbad885cd0781898e7e095766950cba4973c152534711092354caff8b1cb14c6e4d52085daeb4"], 0x0) unshare(0x60000000) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @broadcast}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x0, 0x4000000000008, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0x7, 0xf27d, 0x3, 0x26, 0x4, 0xd43, 0xc615, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0x83, 0xe0, 0x8, 0x7, 0x8, 0x9, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x4, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0x5, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x3, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0x10001, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x37, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x7f, 0x3, 0x80, 0x7, 0x200, 0x5c6, 0x63a, 0xba2, 0x0, 0x2, 0x5, 0xffffffffffffa0e5, 0x8000000000000001, 0x5, 0x1e1, 0x6, 0x802, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x26, 0x3, 0x9, 0x80000000f, 0x9, 0x8, 0xf6, 0x200, 0x7, 0x7fffffffffffffff, 0xf5d, 0x3, 0x9]}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 381.074723ms ago: executing program 2 (id=1510): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x203, 0xfd9, 0x942, r3}, 0x10) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x30080880}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="50010000", @ANYRES16=r8, @ANYBLOB="00032cbd7000e7dbdf25170000001400018008010100", @ANYRES32=r7, @ANYBLOB="08000300020000003400018014000200776730000000000000000000000000001400020076657468305f6d61637674617000000008000300000000006800018008000100", @ANYRESHEX=r4, @ANYBLOB="1400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="1400020076657468305f766972745f776966690008000300010000001400020076657468305f766c616e00000000000008000300030000002800018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="140002006272696467655f736c6176655f3100004c0001801400020067726530000000000000000000000000140002006261746164765f736c6176655f30000008000300030000000800030001000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="180001801400020073797a6b616c6c657231000000000000"], 0x150}}, 0x0) unshare(0x66000080) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r11 = gettid() sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r10, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r11], 0x28}}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x7, 0x1}, 0x1c) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r14, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000201010400000000000000000200000208000840000001750400188008001a40000000df6c20d6ea1a17c8307707"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 332.369083ms ago: executing program 0 (id=1511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc010000190001000000000000000000000000000000000000000000000000000a0101020000000000000000000000000000ffff000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000000000000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000000000000000000033dd020000000000000000000000000000010000000000000044010500fc010000000000000000000000000001000000002b0000000000000064010101000000000000000000000000000000000000fb0000000000493f0d5100000000fc010000000000000000000000000000000000002b00000002000000fc010000140000000000000000000000000000000003000000000000000000000000000000000024000000000000000000000001000000003c00000002000000ffffffff000000000000000000000000000000000103000000000000d62c000000000000ff020000000000000000000000000001000000003c00"], 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 231.525353ms ago: executing program 0 (id=1512): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) clock_getres(0x6, &(0x7f00000008c0)) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 192.111205ms ago: executing program 1 (id=1513): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{r0, 0x50a2}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0x8) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f00000001c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000f0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000061c000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00007c8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) brk(0x200000ffc000) (async) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000c80)={{0xffffffff, 0x1}, 0x100, './file0/file0\x00'}) (async) r2 = dup(r1) mprotect(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) (async) r3 = dup(r1) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x9, 0x4, {{0x3a, 0x4, 0x3, 0x2e, 0xe8, 0x67, 0x0, 0x4, 0x29, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x48, 0x1, [{0x1, 0xc, "71ebaf7b0bb4e189e376"}, {0x0, 0x9, "7630280e5e514b"}, {0x1, 0xc, "47dd94cd48c6f5bbab11"}, {0x0, 0x11, "969ea874252a36f8d2c58817457023"}, {0x7, 0x10, "bd0c13a3c9cc96a70dd2620b946c"}]}, @timestamp_addr={0x44, 0x4c, 0xb0, 0x1, 0x5, [{@rand_addr=0x64010101, 0x81}, {@rand_addr=0x64010100, 0x4}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xff}, {@empty, 0x3a61}, {@multicast1, 0x622}, {@multicast2, 0xa8}, {@broadcast, 0x200}, {@rand_addr=0x64010100, 0x266ed2ef}]}, @generic={0x44, 0x8, "b8968161150f"}, @lsrr={0x83, 0x1b, 0x41, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast2]}, @noop, @rr={0x7, 0x1b, 0x8b, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast]}, @noop]}}}}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x400c090) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8004009}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb8, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x84}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000088}, 0x1) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async, rerun: 32) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl(r8, 0x81, &(0x7f00000003c0)="8b111333c4cc515e4bad9078358ce20b505901dfc5af10fb34dd3573246b515d77543b3f3daebe547517c93827b3db83bc8832951bea24d78e2e7cce886c9a0fc547a555b445d1aadf0249b2a18d040f07e1fe95898a147e8fa288fa651006efa07f446a22cebe6968f4edb6c33fe95657b6784874f41e9bd537a5f6f32762eb1ab0b68a8c046eeb1627aeae42223977d34cae5e6b2bb95af2068e0b8a9dcb63315434281b0b7a9cd1e7f920f4bf6b9b0aae94bc1a5c915539e3abaf0f09920a15ad6fe4490b70485a998b93d6665388316a5e73cc1fd156ac51979dfee27ae205e989132734582a3f0087b7c99ec700c3dc9ebf921c6c") (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) 0s ago: executing program 4 (id=1514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe880000000000000000000000f300010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003200000000000000000000000000000000c40005"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): max is 0 [ 312.612135][ T1217] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 312.640419][ T1217] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 312.640793][ T3302] bridge_slave_1: left allmulticast mode [ 312.674299][ T1217] usb 5-1: config 129 has no interface number 0 [ 312.679348][ T3302] bridge_slave_1: left promiscuous mode [ 312.694016][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.695037][ T1217] usb 5-1: config 129 has no interface number 1 [ 312.716833][ T1217] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 312.730652][ T1217] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 312.744688][ T1217] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 312.759807][ T1217] usb 5-1: config 129 interface 135 has no altsetting 0 [ 312.767049][ T1217] usb 5-1: config 129 interface 5 has no altsetting 0 [ 312.775604][ T3302] bridge_slave_0: left allmulticast mode [ 312.786250][ T3302] bridge_slave_0: left promiscuous mode [ 312.793298][ T1217] usb 5-1: string descriptor 0 read error: -22 [ 312.800031][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.808361][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.849177][ T9414] input: syz0 as /devices/virtual/input/input22 [ 312.895130][ T1217] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.909949][ T1217] usb 5-1: MIDIStreaming interface descriptor not found [ 313.155977][ T985] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 313.281458][ T1217] usb 5-1: USB disconnect, device number 65 [ 313.316017][ T985] usb 2-1: Using ep0 maxpacket: 32 [ 313.324230][ T985] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 313.351524][ T985] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 313.387475][ T985] usb 2-1: config 1 has no interface number 0 [ 313.411198][ T985] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.437525][ T3302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.450999][ T985] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.485085][ T3302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.506611][ T985] usb 2-1: config 1 interface 236 has no altsetting 0 [ 313.525257][ T985] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 313.540525][ T3302] bond0 (unregistering): Released all slaves [ 313.551507][ T985] usb 2-1: config 1 has no interface number 0 [ 313.564857][ T3302] bond1 (unregistering): Released all slaves [ 313.571891][ T985] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.595942][ T985] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.626637][ T985] usb 2-1: config 1 interface 236 has no altsetting 0 [ 313.644857][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.663992][ T985] usb 2-1: Product: syz [ 313.679186][ T985] usb 2-1: Manufacturer: syz [ 313.693442][ T985] usb 2-1: SerialNumber: syz [ 313.704723][ T3302] tipc: Left network mode [ 313.749478][ T985] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected [ 313.797070][ T9427] tipc: Enabling of bearer rejected, already enabled [ 313.933776][ T9427] tipc: Resetting bearer [ 314.033814][ T1217] usb 2-1: USB disconnect, device number 49 [ 314.234935][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 314.349010][ T9438] binder_alloc: 9432: binder_alloc_buf size 4294966880 failed, no address space [ 314.364271][ T9438] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 314.377247][ T5622] Bluetooth: hci3: command tx timeout [ 314.558652][ T9453] kernel read not supported for file /sg0 (pid: 9453 comm: syz.0.1064) [ 314.767069][ T1217] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 314.966737][ T1217] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 314.998613][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.027786][ T1217] usb 5-1: Product: syz [ 315.042389][ T1217] usb 5-1: Manufacturer: syz [ 315.068000][ T1217] usb 5-1: SerialNumber: syz [ 315.152808][ T1217] usb 5-1: config 0 descriptor?? [ 315.221578][ T3302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.261662][ T3302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.391851][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.428161][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.462631][ T1217] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.668824][ T1217] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 315.773190][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 315.990288][ T3302] team0 (unregistering): Port device team_slave_1 removed [ 316.021542][ T3302] team0 (unregistering): Port device team_slave_0 removed [ 316.105417][ T9490] loop4: detected capacity change from 0 to 7 [ 316.113985][ T9490] loop4: [ 316.118405][ T9490] loop4: partition table partially beyond EOD, truncated [ 316.330709][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 316.343300][ T9495] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.1071'. [ 316.456134][ T5622] Bluetooth: hci3: command tx timeout [ 316.508133][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.527358][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.550351][ T9407] bridge_slave_0: entered allmulticast mode [ 316.568201][ T9407] bridge_slave_0: entered promiscuous mode [ 316.595662][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.603817][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.611217][ T9407] bridge_slave_1: entered allmulticast mode [ 316.619667][ T9407] bridge_slave_1: entered promiscuous mode [ 316.693805][ T1217] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 316.712086][ T9407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.728074][ T9407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.750921][ T9507] openvswitch: netlink: Duplicate or invalid key (type 0). [ 316.792123][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.822968][ T5700] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 316.842412][ T9507] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1074'. [ 316.853281][ T9407] team0: Port device team_slave_0 added [ 316.870385][ T1217] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.883217][ T1217] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.894475][ T1217] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.906462][ T1217] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 316.918547][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.949415][ T1217] hub 3-1:1.0: bad descriptor, ignoring hub [ 316.965546][ T1217] hub 3-1:1.0: probe with driver hub failed with error -5 [ 316.980615][ T5700] usb 2-1: device descriptor read/64, error -71 [ 316.992105][ T1217] cdc_wdm 3-1:1.0: skipping garbage [ 317.001297][ T1217] cdc_wdm 3-1:1.0: skipping garbage [ 317.007117][ T1217] cdc_wdm 3-1:1.0: skipping garbage [ 317.012925][ T1217] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 317.080380][ T9407] team0: Port device team_slave_1 added [ 317.140686][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.150221][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.159053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 317.257777][ T5700] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 317.339757][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.346314][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.486719][ T9407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.507941][ T9509] tipc: New replicast peer: 255.255.255.255 [ 317.519837][ T9509] tipc: Enabled bearer , priority 10 [ 317.556019][ T5700] usb 2-1: device descriptor read/64, error -71 [ 317.578512][ T5707] usb 5-1: USB disconnect, device number 66 [ 317.684909][ T5700] usb usb2-port1: attempt power cycle [ 317.701851][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.822495][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.903110][ T9407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.092602][ T5700] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 318.398395][ T9407] hsr_slave_0: entered promiscuous mode [ 318.429980][ T9407] hsr_slave_1: entered promiscuous mode [ 318.539305][ T5622] Bluetooth: hci3: command tx timeout [ 318.841061][ T5700] usb 2-1: device descriptor read/8, error -71 [ 319.128509][ T9537] binder: 9536:9537 unknown command 0 [ 319.156135][ T9537] binder: 9536:9537 ioctl c0306201 200000004a40 returned -22 [ 319.265992][ T5700] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 319.326839][ T5700] usb 2-1: device descriptor read/8, error -71 [ 319.479525][ T5700] usb usb2-port1: unable to enumerate USB device [ 319.566478][ T5707] usb 3-1: USB disconnect, device number 48 [ 319.859631][ T5622] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 319.933148][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 319.990824][ T9548] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1080'. [ 320.070378][ T9546] binder_alloc: 9541: binder_alloc_buf size 4294966880 failed, no address space [ 320.091652][ T9546] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 320.415997][ T1217] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 320.601756][ T1217] usb 5-1: Using ep0 maxpacket: 8 [ 320.626017][ T5622] Bluetooth: hci3: command tx timeout [ 320.633997][ T1217] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 320.665536][ T1217] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 320.692436][ T1217] usb 5-1: Product: syz [ 320.713534][ T1217] usb 5-1: Manufacturer: syz [ 320.729638][ T1217] usb 5-1: SerialNumber: syz [ 320.772037][ T1217] usb 5-1: config 0 descriptor?? [ 320.802881][ T1217] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 321.203985][ T1217] gspca_zc3xx: reg_r err -71 [ 321.223550][ T1217] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 321.257112][ T1217] usb 5-1: USB disconnect, device number 67 [ 321.719311][ T9407] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.735467][ T9407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.755041][ T9407] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.793876][ T9407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.825273][ T9407] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.850003][ T9407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.871764][ T9407] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.917544][ T9407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.106317][ T5707] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 322.250972][ T9407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.268548][ T5707] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 322.300251][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.320195][ T5707] usb 3-1: Product: syz [ 322.329232][ T5707] usb 3-1: Manufacturer: syz [ 322.342503][ T9407] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.350246][ T5707] usb 3-1: SerialNumber: syz [ 322.400585][ T5614] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.421103][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.428322][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.488150][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.495379][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.816334][ T5711] usb 3-1: USB disconnect, device number 49 [ 322.871562][ T9407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.939857][ T9624] xt_hashlimit: size too large, truncated to 1048576 [ 323.055296][ T9407] veth0_vlan: entered promiscuous mode [ 323.100618][ T9407] veth1_vlan: entered promiscuous mode [ 323.245747][ T9407] veth0_macvtap: entered promiscuous mode [ 323.323405][ T9407] veth1_macvtap: entered promiscuous mode [ 323.439844][ T9407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.503281][ T9407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.658727][ T5614] usb 3-1: Service connection timeout for: 256 [ 323.693564][ T5614] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 323.737439][ T5614] ath9k_htc: Failed to initialize the device [ 323.774682][ T5711] usb 3-1: ath9k_htc: USB layer deinitialized [ 323.889082][ T9632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.956666][ T9631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.087075][ T1000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.117653][ T1000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.212628][ T9631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.245227][ T9631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.387943][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.407252][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.896887][ T1000] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 324.916727][ T9675] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 325.038250][ T985] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 325.216598][ T985] usb 5-1: Using ep0 maxpacket: 8 [ 325.235043][ T985] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 325.272918][ T985] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 325.299020][ T985] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.322703][ T985] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 325.354374][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.368979][ T985] usb 5-1: Product: syz [ 325.376942][ T9694] loop2: detected capacity change from 0 to 7 [ 325.383225][ T985] usb 5-1: Manufacturer: syz [ 325.391234][ T985] usb 5-1: SerialNumber: syz [ 325.413480][ T9694] Dev loop2: unable to read RDB block 7 [ 325.423066][ T9694] loop2: AHDI p1 p2 p3 [ 325.441551][ T9694] loop2: partition table partially beyond EOD, truncated [ 325.485448][ T9694] loop2: p1 start 1818582900 is beyond EOD, truncated [ 325.516926][ T9694] loop2: p3 start 335544320 is beyond EOD, truncated [ 326.086228][ T5700] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 326.226844][ T5700] usb 4-1: device descriptor read/64, error -71 [ 326.266014][ T9718] netlink: 'syz.2.1107': attribute type 2 has an invalid length. [ 326.476013][ T5700] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 326.544153][ T9675] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 326.556226][ T5347] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 326.619471][ T5700] usb 4-1: device descriptor read/64, error -71 [ 326.702335][ T985] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 326.730356][ T5347] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 326.747741][ T5700] usb usb4-port1: attempt power cycle [ 326.776325][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.802037][ T5347] usb 2-1: Product: syz [ 326.813456][ T5347] usb 2-1: Manufacturer: syz [ 326.829353][ T5347] usb 2-1: SerialNumber: syz [ 326.855789][ T5347] usb 2-1: config 0 descriptor?? [ 326.898692][ T985] usb 5-1: USB disconnect, device number 68 [ 326.976008][ T1217] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 326.992278][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.099760][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.108732][ T5700] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 327.158553][ T5700] usb 4-1: device descriptor read/8, error -71 [ 327.168498][ T1217] usb 3-1: Using ep0 maxpacket: 16 [ 327.173835][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.191223][ T1217] usb 3-1: unable to get BOS descriptor or descriptor too short [ 327.206071][ T1217] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.ab [ 327.223634][ T5347] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 327.232966][ T1217] usb 3-1: config 9 has an invalid descriptor of length 11, skipping remainder of the config [ 327.258610][ T1217] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 327.287868][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.318120][ T1217] usb 3-1: Product: syz [ 327.333954][ T1217] usb 3-1: Manufacturer: syz [ 327.359826][ T1217] usb 3-1: SerialNumber: syz [ 327.427468][ T5700] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 327.486647][ T5700] usb 4-1: device descriptor read/8, error -71 [ 327.606500][ T5700] usb usb4-port1: unable to enumerate USB device [ 327.620284][ T1217] usb 3-1: USB disconnect, device number 50 [ 327.866618][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 328.103026][ T5347] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 328.154164][ T5347] usb 2-1: USB disconnect, device number 54 [ 329.021018][ T1217] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 329.656964][ T5707] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 329.686079][ T5700] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 329.828023][ T5707] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.852039][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.880690][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.903258][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.935431][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.971177][ T5707] usb 3-1: config 0 descriptor?? [ 330.487158][ T5707] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 330.746291][ T5614] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 330.780621][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.803190][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.907308][ T5614] usb 5-1: Using ep0 maxpacket: 32 [ 330.935558][ T5614] usb 5-1: unable to get BOS descriptor or descriptor too short [ 330.975519][ T5614] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 331.034762][ T5614] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 331.090107][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.123983][ T5614] usb 5-1: Product: syz [ 331.147656][ T5614] usb 5-1: Manufacturer: syz [ 331.169565][ T5614] usb 5-1: SerialNumber: syz [ 331.257412][ T5614] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 331.433200][ T9831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1135'. [ 331.463023][ T9831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1135'. [ 331.690507][ T5614] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 331.809806][ T5614] usb 5-1: USB disconnect, device number 69 [ 331.851439][ T9842] fuse: Bad value for 'fd' [ 331.910205][ T5671] udevd[5671]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.937326][ T5711] usb 3-1: reset full-speed USB device number 51 using dummy_hcd [ 331.971620][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 332.013808][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 332.051033][ T9847] FAULT_INJECTION: forcing a failure. [ 332.051033][ T9847] name failslab, interval 1, probability 0, space 0, times 0 [ 332.118132][ T9847] CPU: 1 UID: 0 PID: 9847 Comm: syz.2.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.118169][ T9847] Tainted: [L]=SOFTLOCKUP [ 332.118179][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.118192][ T9847] Call Trace: [ 332.118202][ T9847] [ 332.118210][ T9847] dump_stack_lvl+0xe8/0x150 [ 332.118263][ T9847] should_fail_ex+0x410/0x560 [ 332.118290][ T9847] ? __alloc_skb+0x1db/0x7a0 [ 332.118310][ T9847] should_failslab+0xa8/0x100 [ 332.118332][ T9847] ? __alloc_skb+0x1db/0x7a0 [ 332.118349][ T9847] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 332.118377][ T9847] ? __alloc_skb+0x18d/0x7a0 [ 332.118396][ T9847] ? __alloc_skb+0x1db/0x7a0 [ 332.118423][ T9847] __alloc_skb+0x1db/0x7a0 [ 332.118448][ T9847] netlink_dump+0x1e7/0xee0 [ 332.118486][ T9847] ? __pfx_netlink_dump+0x10/0x10 [ 332.118525][ T9847] ? genl_start+0x497/0x6d0 [ 332.118564][ T9847] __netlink_dump_start+0x589/0x7b0 [ 332.118598][ T9847] genl_family_rcv_msg_dumpit+0x213/0x310 [ 332.118637][ T9847] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 332.118670][ T9847] ? genl_get_cmd+0x82f/0x960 [ 332.118707][ T9847] ? __pfx_genl_start+0x10/0x10 [ 332.118737][ T9847] ? __pfx_genl_dumpit+0x10/0x10 [ 332.118768][ T9847] ? __pfx_genl_done+0x10/0x10 [ 332.118801][ T9847] ? __dev_queue_xmit+0x29b/0x3820 [ 332.118839][ T9847] genl_rcv_msg+0x5e1/0x7a0 [ 332.118880][ T9847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.118911][ T9847] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 332.118943][ T9847] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.118980][ T9847] netlink_rcv_skb+0x226/0x4a0 [ 332.119009][ T9847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.119044][ T9847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.119086][ T9847] ? down_read+0x2be/0x330 [ 332.119157][ T9847] genl_rcv+0x28/0x40 [ 332.119188][ T9847] netlink_unicast+0x7bd/0x940 [ 332.119222][ T9847] netlink_sendmsg+0x813/0xb40 [ 332.119259][ T9847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.119282][ T9847] ? aa_sock_msg_perm+0xf6/0x1c0 [ 332.119307][ T9847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.119326][ T9847] sock_sendmsg_nosec+0x13a/0x180 [ 332.119351][ T9847] ____sys_sendmsg+0x54e/0x850 [ 332.119373][ T9847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.119398][ T9847] ? import_iovec+0x73/0xa0 [ 332.119419][ T9847] ___sys_sendmsg+0x2a5/0x360 [ 332.119436][ T9847] ? __lock_acquire+0x683/0x2cf0 [ 332.119463][ T9847] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.119507][ T9847] ? __fget_files+0x2a/0x420 [ 332.119524][ T9847] ? __fget_files+0x3a2/0x420 [ 332.119548][ T9847] __x64_sys_sendmsg+0x1b1/0x290 [ 332.119568][ T9847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.119604][ T9847] do_syscall_64+0x166/0x520 [ 332.119626][ T9847] ? trace_irq_disable+0x3b/0x140 [ 332.119648][ T9847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.119664][ T9847] ? clear_bhb_loop+0x70/0xc0 [ 332.119710][ T9847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.119733][ T9847] RIP: 0033:0x7f259099e0d9 [ 332.119752][ T9847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.119771][ T9847] RSP: 002b:00007f25918f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.119793][ T9847] RAX: ffffffffffffffda RBX: 00007f2590c25fa0 RCX: 00007f259099e0d9 [ 332.119814][ T9847] RDX: 0000000020008040 RSI: 0000200000001400 RDI: 0000000000000003 [ 332.119824][ T9847] RBP: 00007f25918f8090 R08: 0000000000000000 R09: 0000000000000000 [ 332.119834][ T9847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.119843][ T9847] R13: 00007f2590c26038 R14: 00007f2590c25fa0 R15: 00007f2590d4fa48 [ 332.119867][ T9847] [ 332.695897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 333.111390][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.169981][ T5700] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 333.210132][ T5700] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 333.259630][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 333.287892][ T5700] usb 4-1: can't read configurations, error -71 [ 333.515473][ T5347] usb 3-1: USB disconnect, device number 51 [ 333.596427][ T5614] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 333.765962][ T5347] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 333.948665][ T5347] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 333.993638][ T5347] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 334.022126][ T5347] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 334.036629][ T5347] usb 3-1: config 220 interface 0 has no altsetting 0 [ 334.046389][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1147'. [ 334.062227][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.082417][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1147'. [ 334.086987][ T5347] usb 3-1: Product: syz [ 334.110952][ T5347] usb 3-1: Manufacturer: syz [ 334.115654][ T5347] usb 3-1: SerialNumber: syz [ 334.331664][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 334.356203][ T5614] usb 5-1: device descriptor read/64, error -71 [ 334.398077][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.459873][ T9878] bridge0: port 3(batadv1) entered blocking state [ 334.466570][ T9878] bridge0: port 3(batadv1) entered listening state [ 334.519680][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 334.533052][ T9878] bridge0: port 4(batadv2) entered blocking state [ 334.539729][ T9878] bridge0: port 4(batadv2) entered listening state [ 334.576289][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 334.646155][ T5614] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 334.665577][ T9884] FAULT_INJECTION: forcing a failure. [ 334.665577][ T9884] name failslab, interval 1, probability 0, space 0, times 0 [ 334.681320][ T9884] CPU: 0 UID: 0 PID: 9884 Comm: syz.3.1151 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.681355][ T9884] Tainted: [L]=SOFTLOCKUP [ 334.681362][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.681375][ T9884] Call Trace: [ 334.681383][ T9884] [ 334.681396][ T9884] dump_stack_lvl+0xe8/0x150 [ 334.681441][ T9884] should_fail_ex+0x410/0x560 [ 334.681474][ T9884] should_failslab+0xa8/0x100 [ 334.681490][ T9884] ? skb_clone+0x212/0x3a0 [ 334.681509][ T9884] kmem_cache_alloc_noprof+0xa1/0x600 [ 334.681532][ T9884] ? skb_clone+0x212/0x3a0 [ 334.681555][ T9884] skb_clone+0x212/0x3a0 [ 334.681576][ T9884] __netlink_deliver_tap+0x413/0x860 [ 334.681609][ T9884] ? netlink_deliver_tap+0x2e/0x1b0 [ 334.681631][ T9884] netlink_deliver_tap+0x19c/0x1b0 [ 334.681652][ T9884] netlink_dump+0x95b/0xee0 [ 334.681679][ T9884] ? __pfx_netlink_dump+0x10/0x10 [ 334.681707][ T9884] ? genl_start+0x497/0x6d0 [ 334.681735][ T9884] __netlink_dump_start+0x589/0x7b0 [ 334.681759][ T9884] genl_family_rcv_msg_dumpit+0x213/0x310 [ 334.681787][ T9884] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 334.681811][ T9884] ? genl_get_cmd+0x82f/0x960 [ 334.681838][ T9884] ? __pfx_genl_start+0x10/0x10 [ 334.681860][ T9884] ? __pfx_genl_dumpit+0x10/0x10 [ 334.681883][ T9884] ? __pfx_genl_done+0x10/0x10 [ 334.681907][ T9884] ? __dev_queue_xmit+0x29b/0x3820 [ 334.681937][ T9884] genl_rcv_msg+0x5e1/0x7a0 [ 334.681966][ T9884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.681989][ T9884] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 334.682013][ T9884] ? __pfx_ref_tracker_free+0x10/0x10 [ 334.682039][ T9884] netlink_rcv_skb+0x226/0x4a0 [ 334.682059][ T9884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.682085][ T9884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.682115][ T9884] ? down_read+0x2be/0x330 [ 334.682142][ T9884] genl_rcv+0x28/0x40 [ 334.682164][ T9884] netlink_unicast+0x7bd/0x940 [ 334.682189][ T9884] netlink_sendmsg+0x813/0xb40 [ 334.682216][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.682239][ T9884] ? aa_sock_msg_perm+0xf6/0x1c0 [ 334.682263][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.682282][ T9884] sock_sendmsg_nosec+0x13a/0x180 [ 334.682308][ T9884] ____sys_sendmsg+0x54e/0x850 [ 334.682360][ T9884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.682395][ T9884] ? import_iovec+0x73/0xa0 [ 334.682416][ T9884] ___sys_sendmsg+0x2a5/0x360 [ 334.682438][ T9884] ? __lock_acquire+0x683/0x2cf0 [ 334.682465][ T9884] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.682509][ T9884] ? __fget_files+0x2a/0x420 [ 334.682526][ T9884] ? __fget_files+0x3a2/0x420 [ 334.682550][ T9884] __x64_sys_sendmsg+0x1b1/0x290 [ 334.682571][ T9884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.682604][ T9884] do_syscall_64+0x166/0x520 [ 334.682626][ T9884] ? trace_irq_disable+0x3b/0x140 [ 334.682648][ T9884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.682663][ T9884] ? clear_bhb_loop+0x70/0xc0 [ 334.682686][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.682702][ T9884] RIP: 0033:0x7fa65ed9e0d9 [ 334.682717][ T9884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.682729][ T9884] RSP: 002b:00007fa65fbd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.682747][ T9884] RAX: ffffffffffffffda RBX: 00007fa65f025fa0 RCX: 00007fa65ed9e0d9 [ 334.682758][ T9884] RDX: 0000000020008040 RSI: 0000200000001400 RDI: 0000000000000003 [ 334.682768][ T9884] RBP: 00007fa65fbd0090 R08: 0000000000000000 R09: 0000000000000000 [ 334.682778][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.682787][ T9884] R13: 00007fa65f026038 R14: 00007fa65f025fa0 R15: 00007fa65f14fa48 [ 334.682811][ T9884] [ 334.816342][ T5614] usb 5-1: Using ep0 maxpacket: 8 [ 335.091299][ T5614] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.101247][ T5614] usb 5-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=f6.6a [ 335.112048][ T5614] usb 5-1: config 6 has an invalid interface number: 114 but max is 0 [ 335.121259][ T5614] usb 5-1: config 6 has no interface number 0 [ 335.127901][ T5614] usb 5-1: config 6 interface 114 has no altsetting 0 [ 335.138494][ T5614] usb 5-1: string descriptor 0 read error: -22 [ 335.146055][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.177471][ T5614] gspca_main: spca501-2.14.0 probing 0506:00df [ 335.367563][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.377053][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.591579][ T5614] gspca_spca501: reg write: error -71 [ 335.602133][ T5614] spca501 5-1:6.114: Reg write failed for 0x00,0x02,0x01 [ 335.617595][ T5614] spca501 5-1:6.114: probe with driver spca501 failed with error -22 [ 335.638696][ T5614] usb 5-1: USB disconnect, device number 71 [ 336.745889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 336.967461][ T5700] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 337.184811][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 337.230089][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 337.275810][ T5700] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 337.320990][ T5700] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.379280][ T5700] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.422324][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.444535][ T5700] usb 4-1: Product: syz [ 337.463668][ T5700] usb 4-1: Manufacturer: syz [ 337.480018][ T5700] usb 4-1: SerialNumber: syz [ 337.555392][ T5700] usb 4-1: interface 1 not found [ 337.725762][ T10] usb 4-1: USB disconnect, device number 51 [ 338.490981][ T9919] FAULT_INJECTION: forcing a failure. [ 338.490981][ T9919] name failslab, interval 1, probability 0, space 0, times 0 [ 338.525469][ T9919] CPU: 1 UID: 0 PID: 9919 Comm: syz.0.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.525508][ T9919] Tainted: [L]=SOFTLOCKUP [ 338.525513][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.525523][ T9919] Call Trace: [ 338.525529][ T9919] [ 338.525553][ T9919] dump_stack_lvl+0xe8/0x150 [ 338.525590][ T9919] should_fail_ex+0x410/0x560 [ 338.525617][ T9919] should_failslab+0xa8/0x100 [ 338.525644][ T9919] ? skb_clone+0x212/0x3a0 [ 338.525662][ T9919] kmem_cache_alloc_noprof+0xa1/0x600 [ 338.525684][ T9919] ? skb_clone+0x212/0x3a0 [ 338.525726][ T9919] skb_clone+0x212/0x3a0 [ 338.525755][ T9919] __netlink_deliver_tap+0x413/0x860 [ 338.525798][ T9919] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.525819][ T9919] netlink_deliver_tap+0x19c/0x1b0 [ 338.525859][ T9919] netlink_dump+0x95b/0xee0 [ 338.525899][ T9919] ? __pfx_netlink_dump+0x10/0x10 [ 338.525936][ T9919] ? genl_start+0x497/0x6d0 [ 338.525975][ T9919] __netlink_dump_start+0x589/0x7b0 [ 338.525999][ T9919] genl_family_rcv_msg_dumpit+0x213/0x310 [ 338.526048][ T9919] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 338.526080][ T9919] ? genl_get_cmd+0x82f/0x960 [ 338.526119][ T9919] ? __pfx_genl_start+0x10/0x10 [ 338.526141][ T9919] ? __pfx_genl_dumpit+0x10/0x10 [ 338.526162][ T9919] ? __pfx_genl_done+0x10/0x10 [ 338.526208][ T9919] ? __dev_queue_xmit+0x29b/0x3820 [ 338.526244][ T9919] genl_rcv_msg+0x5e1/0x7a0 [ 338.526284][ T9919] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.526308][ T9919] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 338.526355][ T9919] ? __pfx_ref_tracker_free+0x10/0x10 [ 338.526392][ T9919] netlink_rcv_skb+0x226/0x4a0 [ 338.526418][ T9919] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.526452][ T9919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.526483][ T9919] ? down_read+0x2be/0x330 [ 338.526534][ T9919] genl_rcv+0x28/0x40 [ 338.526563][ T9919] netlink_unicast+0x7bd/0x940 [ 338.526599][ T9919] netlink_sendmsg+0x813/0xb40 [ 338.526626][ T9919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.526663][ T9919] ? aa_sock_msg_perm+0xf6/0x1c0 [ 338.526698][ T9919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.526725][ T9919] sock_sendmsg_nosec+0x13a/0x180 [ 338.526759][ T9919] ____sys_sendmsg+0x54e/0x850 [ 338.526789][ T9919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.526826][ T9919] ? import_iovec+0x73/0xa0 [ 338.526857][ T9919] ___sys_sendmsg+0x2a5/0x360 [ 338.526879][ T9919] ? __lock_acquire+0x683/0x2cf0 [ 338.526916][ T9919] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.526964][ T9919] ? __fget_files+0x2a/0x420 [ 338.526997][ T9919] ? __fget_files+0x3a2/0x420 [ 338.527032][ T9919] __x64_sys_sendmsg+0x1b1/0x290 [ 338.527060][ T9919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.527103][ T9919] do_syscall_64+0x166/0x520 [ 338.527125][ T9919] ? trace_irq_disable+0x3b/0x140 [ 338.527168][ T9919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.527190][ T9919] ? clear_bhb_loop+0x70/0xc0 [ 338.527216][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.527242][ T9919] RIP: 0033:0x7f92e999e0d9 [ 338.527256][ T9919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.527270][ T9919] RSP: 002b:00007f92ea7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.527287][ T9919] RAX: ffffffffffffffda RBX: 00007f92e9c25fa0 RCX: 00007f92e999e0d9 [ 338.527316][ T9919] RDX: 0000000020008040 RSI: 0000200000001400 RDI: 0000000000000003 [ 338.527352][ T9919] RBP: 00007f92ea7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 338.527365][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.527376][ T9919] R13: 00007f92e9c26038 R14: 00007f92e9c25fa0 R15: 00007f92e9d4fa48 [ 338.527409][ T9919] [ 338.786219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 339.212500][ T5347] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b03) [ 339.283302][ T5347] uvcvideo 3-1:220.0: No valid video chain found. [ 339.369310][ T9925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1164'. [ 339.392084][ T9925] unsupported nlmsg_type 40 [ 339.712738][ T29] audit: type=1326 audit(1787681303.936:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.0.1165" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92e999e0d9 code=0x0 [ 339.808442][ T9931] netlink: 'syz.3.1166': attribute type 5 has an invalid length. [ 339.845960][ T9931] netlink: 'syz.3.1166': attribute type 5 has an invalid length. [ 340.499735][ T9940] loop9: detected capacity change from 0 to 7 [ 340.573699][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.583539][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.633924][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.643998][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.712549][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.722263][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.730692][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.740390][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.753081][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.762806][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.811975][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.821719][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.836110][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.845925][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.853840][ T9940] ldm_validate_partition_table(): Disk read failed. [ 340.865529][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.875366][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.884591][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.894339][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.909000][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.918682][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.938937][ T5700] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 340.949253][ T9940] Dev loop9: unable to read RDB block 0 [ 340.973156][ T9940] loop9: unable to read partition table [ 340.994575][ T9940] loop9: partition table beyond EOD, truncated [ 341.024391][ T9940] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 341.129828][ T5700] usb 4-1: not running at top speed; connect to a high speed hub [ 341.155992][ T5700] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 341.188841][ T5700] usb 4-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.217213][ T5700] usb 4-1: config 1 interface 0 has no altsetting 0 [ 341.239159][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.247828][ T5700] usb 4-1: Product: syz [ 341.252190][ T5700] usb 4-1: Manufacturer: syz [ 341.273075][ T5700] usb 4-1: SerialNumber: syz [ 341.559338][ T5700] usbhid 4-1:1.0: can't add hid device: -71 [ 341.581141][ T5700] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 341.647055][ T5700] usb 4-1: USB disconnect, device number 52 [ 342.042552][ T9951] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 342.566102][ T5711] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 342.741202][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.766950][ T5711] usb 4-1: not running at top speed; connect to a high speed hub [ 342.784631][ T5711] usb 4-1: New USB device found, idVendor=0b05, idProduct=4043, bcdDevice= 1.00 [ 342.807706][ T5711] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 342.830894][ T5711] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 342.843659][ T5711] usb 4-1: can't read configurations, error -61 [ 342.986772][ T5711] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 343.158828][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.173610][ T5711] usb 4-1: not running at top speed; connect to a high speed hub [ 343.187625][ T5711] usb 4-1: New USB device found, idVendor=0b05, idProduct=4043, bcdDevice= 1.00 [ 343.213835][ T5711] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 343.226532][ T5711] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 343.236097][ T5711] usb 4-1: can't read configurations, error -61 [ 343.251960][ T5711] usb usb4-port1: attempt power cycle [ 343.595995][ T5618] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 343.596103][ T5711] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 343.629845][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.639407][ T5711] usb 4-1: not running at top speed; connect to a high speed hub [ 343.647339][ T5711] usb 4-1: New USB device found, idVendor=0b05, idProduct=4043, bcdDevice= 1.00 [ 343.656564][ T5711] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 343.666181][ T5711] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 343.673824][ T5711] usb 4-1: can't read configurations, error -61 [ 343.776053][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 343.782257][ T5618] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 343.792959][ T5618] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 343.801278][ T5618] usb 2-1: config 0 has no interface number 0 [ 343.808122][ T5618] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 343.816272][ T5711] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 343.824920][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.833918][ T5618] usb 2-1: Product: syz [ 343.838314][ T5618] usb 2-1: Manufacturer: syz [ 343.843383][ T5618] usb 2-1: SerialNumber: syz [ 343.851676][ T5618] usb 2-1: config 0 descriptor?? [ 343.854046][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.867632][ T9973] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 343.871236][ T5711] usb 4-1: not running at top speed; connect to a high speed hub [ 343.883800][ T5711] usb 4-1: New USB device found, idVendor=0b05, idProduct=4043, bcdDevice= 1.00 [ 343.893790][ T5711] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 343.904343][ T5711] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 343.913593][ T5711] usb 4-1: can't read configurations, error -61 [ 343.921209][ T5711] usb usb4-port1: unable to enumerate USB device [ 344.084001][ T9973] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 344.119874][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1184'. [ 344.166104][ T9984] fuse: fd is not a fuse device [ 345.476892][T10009] netlink: 'syz.4.1192': attribute type 7 has an invalid length. [ 345.524148][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.573347][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.621680][T10011] bridge1: entered promiscuous mode [ 345.851158][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1193'. [ 346.021125][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.063778][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.229219][T10018] ip6tnl1: entered promiscuous mode [ 347.484478][T10040] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 347.503054][T10039] IPVS: stopping backup sync thread 10040 ... [ 347.926409][ T5618] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 347.967524][ T5618] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 348.024747][ T5618] asix 2-1:0.188: probe with driver asix failed with error -71 [ 348.101745][ T5618] usb 2-1: USB disconnect, device number 56 [ 348.516017][ T5618] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 348.614956][T10072] fuse: Unknown parameter '0x000000000000000300000000000000000000003' [ 348.711643][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 348.740250][ T5618] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 348.782593][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.822529][ T5618] usb 2-1: Product: syz [ 348.845711][ T5618] usb 2-1: Manufacturer: syz [ 348.848824][T10069] kvm: pic: non byte write [ 348.877248][ T5618] usb 2-1: SerialNumber: syz [ 348.910693][ T5618] usb 2-1: config 0 descriptor?? [ 349.211268][T10094] binder_alloc: 10088: binder_alloc_buf size 4294966880 failed, no address space [ 349.233946][T10094] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 349.368657][ T5618] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 349.433946][ T5618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.460713][ T5618] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 349.479304][ T5618] usb 2-1: media controller created [ 349.521787][ T5618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.927590][ T5618] zl10353_read_register: readreg error (reg=127, ret==0) [ 349.950415][ T5618] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 349.969517][ T5618] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 349.978738][ C1] bridge0: port 4(batadv2) entered learning state [ 349.979039][ C1] bridge0: port 3(batadv1) entered learning state [ 350.012681][ T5618] usb 2-1: USB disconnect, device number 57 [ 350.220537][ T5618] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 350.863059][T10107] bridge_slave_0: left allmulticast mode [ 350.888524][T10107] bridge_slave_0: left promiscuous mode [ 350.910084][T10107] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.980375][T10107] bridge_slave_1: left allmulticast mode [ 351.040260][T10107] bridge_slave_1: left promiscuous mode [ 351.078274][T10107] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.103708][T10113] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 351.142023][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 351.244624][T10107] bond0: (slave bond_slave_0): Releasing backup interface [ 351.344799][T10107] bond0: (slave bond_slave_1): Releasing backup interface [ 351.431598][T10107] team0: Port device team_slave_0 removed [ 351.497246][T10107] team0: Port device team_slave_1 removed [ 351.524725][T10107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.560374][T10107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.595821][T10107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.617804][T10107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.664989][T10107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 352.288664][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.323422][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.367460][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.395563][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.410892][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1228'. [ 352.425288][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 352.445305][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1228'. [ 352.742105][T10145] binder_alloc: 10138: binder_alloc_buf size 4294966880 failed, no address space [ 352.753292][T10145] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 352.778020][ T5711] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 352.936011][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 352.960661][ T5711] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 353.006946][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.035575][ T5711] usb 4-1: Product: syz [ 353.058198][ T5711] usb 4-1: Manufacturer: syz [ 353.083615][ T5711] usb 4-1: SerialNumber: syz [ 353.108836][ T5711] usb 4-1: config 0 descriptor?? [ 353.119768][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.143670][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.169098][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.200573][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.564569][ T5711] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 353.576068][ T5707] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 353.604756][ T5711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.634071][ T5711] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 353.648281][ T5711] usb 4-1: media controller created [ 353.683080][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.720075][ T5707] usb 5-1: device descriptor read/64, error -71 [ 353.879764][ T5711] zl10353_read_register: readreg error (reg=127, ret==0) [ 353.901371][ T5711] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 353.931928][ T5711] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 353.978524][ T5707] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 354.147094][ T5707] usb 5-1: device descriptor read/64, error -71 [ 354.266400][ T5707] usb usb5-port1: attempt power cycle [ 354.450553][ T5711] usb 4-1: USB disconnect, device number 57 [ 354.573138][ T5711] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 354.656119][ T5707] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 354.698564][ T5707] usb 5-1: device descriptor read/8, error -71 [ 354.948505][ T5707] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 354.986623][ T5707] usb 5-1: device descriptor read/8, error -71 [ 355.052838][T10169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1240'. [ 355.092870][T10169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1240'. [ 355.107287][ T5707] usb usb5-port1: unable to enumerate USB device [ 355.287380][T10164] FAULT_INJECTION: forcing a failure. [ 355.287380][T10164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.300988][T10164] CPU: 1 UID: 0 PID: 10164 Comm: syz.1.1238 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.301023][T10164] Tainted: [L]=SOFTLOCKUP [ 355.301032][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.301044][T10164] Call Trace: [ 355.301130][T10164] [ 355.301182][T10164] dump_stack_lvl+0xe8/0x150 [ 355.301340][T10164] should_fail_ex+0x410/0x560 [ 355.301445][T10164] _copy_to_user+0x31/0xb0 [ 355.301596][T10164] simple_read_from_buffer+0xe1/0x170 [ 355.301651][T10164] proc_fail_nth_read+0x1bb/0x230 [ 355.301694][T10164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.301734][T10164] ? rw_verify_area+0x24a/0x4c0 [ 355.301773][T10164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.301802][T10164] vfs_read+0x213/0xa80 [ 355.301834][T10164] ? __pfx___mutex_lock+0x10/0x10 [ 355.301943][T10164] ? __pfx_vfs_read+0x10/0x10 [ 355.301971][T10164] ? __fget_files+0x2a/0x420 [ 355.302001][T10164] ? __fget_files+0x3a2/0x420 [ 355.302027][T10164] ? __fget_files+0x2a/0x420 [ 355.302061][T10164] ksys_read+0x150/0x270 [ 355.302091][T10164] ? __pfx_ksys_read+0x10/0x10 [ 355.302121][T10164] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 355.302152][T10164] do_syscall_64+0x166/0x520 [ 355.302235][T10164] ? trace_irq_disable+0x3b/0x140 [ 355.302293][T10164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.302331][T10164] ? clear_bhb_loop+0x70/0xc0 [ 355.302358][T10164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.302381][T10164] RIP: 0033:0x7f3cbd35e90e [ 355.302434][T10164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.302451][T10164] RSP: 002b:00007f3cbe189fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.302505][T10164] RAX: ffffffffffffffda RBX: 00007f3cbe18a6c0 RCX: 00007f3cbd35e90e [ 355.302521][T10164] RDX: 000000000000000f RSI: 00007f3cbe18a0a0 RDI: 0000000000000003 [ 355.302533][T10164] RBP: 00007f3cbe18a090 R08: 0000000000000000 R09: 0000000000000000 [ 355.302547][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.302560][T10164] R13: 00007f3cbd626038 R14: 00007f3cbd625fa0 R15: 00007f3cbd74fa48 [ 355.302592][T10164] [ 356.076900][T10187] raw_sendmsg: syz.3.1246 forgot to set AF_INET. Fix it! [ 357.036000][ T5618] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 357.093280][T10206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1252'. [ 357.106517][T10206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1252'. [ 357.206524][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 357.224173][ T5618] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 357.260834][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.280638][ T5618] usb 2-1: Product: syz [ 357.290762][ T5618] usb 2-1: Manufacturer: syz [ 357.301739][ T5618] usb 2-1: SerialNumber: syz [ 357.321748][ T5618] usb 2-1: config 0 descriptor?? [ 357.367510][ T5622] Bluetooth: hci2: ISO packet too small [ 357.543214][T10213] netlink: 'syz.2.1256': attribute type 38 has an invalid length. [ 357.746076][ T5711] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 357.761822][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.772778][ T5618] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 357.778045][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.803788][ T5618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 357.828695][ T5618] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 357.843115][ T5618] usb 2-1: media controller created [ 357.862920][ T5618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.916810][ T5711] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 357.927969][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 357.939582][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 357.949868][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.036149][ T5618] zl10353_read_register: readreg error (reg=127, ret==0) [ 358.044015][ T5618] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 358.052604][ T5618] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 358.086260][ T5347] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 358.201311][ T5711] pegasus 5-1:1.0: probe with driver pegasus failed with error -71 [ 358.247679][ T5347] usb 4-1: Using ep0 maxpacket: 32 [ 358.260592][ T5347] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 358.270537][ T5711] usb 5-1: USB disconnect, device number 76 [ 358.285238][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.321722][ T5347] usb 4-1: config 0 descriptor?? [ 358.544415][ T5347] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 358.554941][ T5347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.572947][ T5347] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 358.585091][ T5347] usb 4-1: media controller created [ 358.603656][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.628230][ T5707] usb 2-1: USB disconnect, device number 58 [ 358.717224][ T5707] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 358.792646][ T5347] az6027: usb out operation failed. (-71) [ 358.807288][ T5347] az6027: usb out operation failed. (-71) [ 358.826852][ T5347] stb0899_attach: Driver disabled by Kconfig [ 358.839143][ T5347] az6027: no front-end attached [ 358.839143][ T5347] [ 358.855384][ T5347] az6027: usb out operation failed. (-71) [ 358.870247][ T5347] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 358.895604][ T5347] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 358.950736][ T5347] dvb-usb: schedule remote query interval to 400 msecs. [ 358.981126][ T5347] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 359.015772][ T5347] usb 4-1: USB disconnect, device number 58 [ 359.154032][ T5347] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 359.297214][T10237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1263'. [ 359.338825][T10237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1263'. [ 359.791339][T10246] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 359.828812][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 359.844810][T10247] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 359.874006][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 360.859119][T10261] loop4: detected capacity change from 0 to 7 [ 360.874895][T10263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1271'. [ 360.885912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 360.900800][T10261] loop4: [ 360.908628][T10261] loop4: partition table partially beyond EOD, truncated [ 361.240170][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 361.290200][ T29] audit: type=1326 audit(1787681325.516:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39e0d9 code=0x0 [ 361.376320][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 361.386553][ T5347] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 361.539884][ T5347] usb 5-1: device descriptor read/64, error -71 [ 361.555945][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 361.573571][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 361.638463][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.647706][ T10] usb 4-1: Product: syz [ 361.658513][ T10] usb 4-1: Manufacturer: syz [ 361.668819][ T10] usb 4-1: SerialNumber: syz [ 361.695996][ T10] usb 4-1: config 0 descriptor?? [ 361.786090][ T5347] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 361.941716][ T5347] usb 5-1: device descriptor read/64, error -71 [ 362.067185][ T5347] usb usb5-port1: attempt power cycle [ 362.152962][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 362.186190][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.207009][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 362.247338][ T10] usb 4-1: media controller created [ 362.293177][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.436878][ T5347] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 362.483409][ T5347] usb 5-1: device descriptor read/8, error -71 [ 362.746119][ T5347] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 362.789003][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 362.801063][ T5347] usb 5-1: device descriptor read/8, error -71 [ 362.810568][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 362.819432][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 362.843097][ T10] usb 4-1: USB disconnect, device number 59 [ 362.928854][ T5347] usb usb5-port1: unable to enumerate USB device [ 363.011534][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 363.135540][T10296] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 363.160132][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 363.867569][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 364.035995][ T10] usb 4-1: device descriptor read/64, error -71 [ 364.286639][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 364.435950][ T10] usb 4-1: device descriptor read/64, error -71 [ 364.566605][ T10] usb usb4-port1: attempt power cycle [ 364.830630][T10324] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1288'. [ 364.927052][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 364.987929][ T10] usb 4-1: device descriptor read/8, error -71 [ 365.248878][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 365.311496][ T10] usb 4-1: device descriptor read/8, error -71 [ 365.336024][ C1] bridge0: port 3(batadv1) entered forwarding state [ 365.342739][ C1] bridge0: topology change detected, propagating [ 365.349585][ C1] bridge0: port 4(batadv2) entered forwarding state [ 365.356291][ C1] bridge0: topology change detected, propagating [ 365.440961][ T10] usb usb4-port1: unable to enumerate USB device [ 365.726147][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 365.885994][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 365.895941][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 365.912789][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 365.925375][ T10] usb 2-1: config 0 has no interface number 0 [ 365.935975][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.955755][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 365.970424][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.980466][ T10] usb 2-1: Product: syz [ 365.984772][ T10] usb 2-1: Manufacturer: syz [ 365.990155][ T10] usb 2-1: SerialNumber: syz [ 366.000988][ T10] usb 2-1: config 0 descriptor?? [ 366.497503][T10349] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 366.511858][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 366.621036][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 366.634944][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input24 [ 366.833426][ T10] usb 2-1: USB disconnect, device number 59 [ 366.878445][ T10] appletouch 2-1:0.85: input: appletouch disconnected [ 367.463618][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.474888][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.591166][T10364] kvm: kvm [10363]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2a000000292c [ 367.609642][T10364] kvm: kvm [10363]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc90000004900 [ 368.206006][ T5707] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 368.379706][ T5707] usb 4-1: not running at top speed; connect to a high speed hub [ 368.396558][ T5707] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 368.414508][T10394] binder: 10393:10394 ioctl c0306201 0 returned -14 [ 368.423457][ T5707] usb 4-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 368.435896][ T5707] usb 4-1: config 65 has 2 interfaces, different from the descriptor's value: 3 [ 368.448579][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.458540][ T5707] usb 4-1: Product: syz [ 368.462841][ T5707] usb 4-1: Manufacturer: syz [ 368.468677][ T5707] usb 4-1: SerialNumber: syz [ 368.475139][T10395] binder: 10393:10395 ioctl c0306201 0 returned -14 [ 368.502668][ T5707] usb 4-1: 0:2 : does not exist [ 368.512163][ T5707] usb 4-1: unit 130 not found! [ 368.548934][T10398] binder: 10393:10398 ioctl 40189206 0 returned -22 [ 368.926515][ T5707] usb 4-1: USB disconnect, device number 64 [ 369.050829][ T5671] udevd[5671]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.209991][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 369.406699][T10406] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 369.482354][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 370.502206][ T5614] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 370.558123][T10431] loop5: detected capacity change from 0 to 7 [ 370.566857][T10431] Dev loop5: unable to read RDB block 7 [ 370.573013][T10431] loop5: AHDI p2 [ 370.577010][T10431] loop5: partition table partially beyond EOD, truncated [ 370.639332][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.671478][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.690025][ T5614] usb 5-1: Using ep0 maxpacket: 16 [ 370.704369][ T5614] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 370.728246][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.746160][ T5614] usb 5-1: Product: syz [ 370.750702][ T5614] usb 5-1: Manufacturer: syz [ 370.755375][ T5614] usb 5-1: SerialNumber: syz [ 370.763433][ T5614] usb 5-1: config 0 descriptor?? [ 371.174997][ T5614] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 371.199596][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.219680][ T5614] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 371.246478][ T5614] usb 5-1: media controller created [ 371.261106][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.439368][ T5614] zl10353_read_register: readreg error (reg=127, ret==0) [ 371.456076][ T5614] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 371.475931][ T5614] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 371.654966][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.673665][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.777428][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 371.787222][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1319'. [ 372.038163][ T5347] usb 5-1: USB disconnect, device number 81 [ 372.144073][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 372.973025][T10463] netlink: 'syz.4.1325': attribute type 2 has an invalid length. [ 373.016836][T10460] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 373.037971][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 373.187371][ T10] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 373.336240][ T5347] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 373.366666][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 373.393800][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 373.405508][ T10] usb 4-1: config 0 has no interface number 0 [ 373.420433][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.438735][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 373.456662][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 373.474829][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 373.497783][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 373.512672][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.546136][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.558836][ T5347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 373.569702][ T5347] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 373.595405][ T10] usb 4-1: config 0 descriptor?? [ 373.607156][ T5347] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 373.619332][T10466] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 373.632032][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.640824][ T5347] usb 2-1: Product: syz [ 373.645079][ T5347] usb 2-1: Manufacturer: syz [ 373.657400][T10466] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 373.683360][ T5347] usb 2-1: SerialNumber: syz [ 373.715473][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 373.800841][ T5347] comedi comedi5: Wrong number of endpoints [ 373.821456][ T5347] dt9812 2-1:5.0: driver 'dt9812' failed to auto-configure device. [ 373.834965][T10474] xt_hashlimit: size too large, truncated to 1048576 [ 373.898843][T10464] ldusb 4-1:0.55: Write buffer overflow, 1048496 bytes dropped [ 373.947436][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.967086][ T5347] usb 2-1: USB disconnect, device number 60 [ 373.987038][T10475] netlink: 'syz.0.1329': attribute type 8 has an invalid length. [ 373.992967][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.054140][ T5614] usb 4-1: USB disconnect, device number 65 [ 374.123688][ T5614] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 375.086006][ T5347] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 375.185586][T10508] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 375.197135][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 375.235945][ T5347] usb 5-1: Using ep0 maxpacket: 16 [ 375.250187][ T5347] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 375.289557][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.307929][ T5347] usb 5-1: Product: syz [ 375.317490][ T5347] usb 5-1: Manufacturer: syz [ 375.328515][ T5347] usb 5-1: SerialNumber: syz [ 375.353329][ T5347] usb 5-1: config 0 descriptor?? [ 375.747943][ T5711] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 375.788570][ T5347] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 375.821903][ T5347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.832610][ T5347] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 375.845302][ T5347] usb 5-1: media controller created [ 375.883494][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.910794][ T5711] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 375.933351][ T5711] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 375.948412][ T5711] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 375.960377][ T5711] usb 2-1: config 220 has no interface number 2 [ 375.966981][ T5711] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 375.980697][ T5711] usb 2-1: config 220 interface 0 has no altsetting 0 [ 375.987947][ T5711] usb 2-1: config 220 interface 76 has no altsetting 0 [ 375.996517][ T5711] usb 2-1: config 220 interface 1 has no altsetting 0 [ 376.012881][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.031830][ T5711] usb 2-1: Product: syz [ 376.040990][ T5711] usb 2-1: Manufacturer: syz [ 376.051138][ T5711] usb 2-1: SerialNumber: syz [ 376.130841][ T5347] zl10353_read_register: readreg error (reg=127, ret==0) [ 376.144369][ T5347] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 376.165482][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 376.208755][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 376.273048][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.283194][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.392231][ T5711] usb 2-1: selecting invalid altsetting 0 [ 376.405514][ T5711] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 376.431021][ T5711] uvcvideo 2-1:220.0: No valid video chain found. [ 376.467933][ T5711] usb 2-1: selecting invalid altsetting 0 [ 376.474654][ T5711] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 376.491724][ T5711] usb 2-1: USB disconnect, device number 61 [ 376.730262][ T5711] usb 5-1: USB disconnect, device number 82 [ 376.800673][ T5711] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 376.994762][T10530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1345'. [ 378.026017][ T5614] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 378.218642][ T5614] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 378.279930][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.283945][ T5711] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 378.322261][ T5614] usb 5-1: Product: syz [ 378.351000][ T5614] usb 5-1: Manufacturer: syz [ 378.368134][ T5614] usb 5-1: SerialNumber: syz [ 378.393027][ T5614] usb 5-1: config 0 descriptor?? [ 378.500822][ T5711] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 378.529636][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.551270][ T5711] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 378.572824][ T5711] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 378.635123][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.702659][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.756623][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.779893][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797243][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.807463][ T5711] usb 4-1: Product: syz [ 378.843221][ T5711] usb 4-1: Manufacturer: syz [ 378.881035][ T5711] usb 4-1: SerialNumber: syz [ 378.912709][ T5614] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 379.416516][ C0] usb 4-1: received EP1 urb->status = -2 [ 379.422638][ T5711] usb 4-1: unable to init card! (ret=-110) [ 379.429576][ T5711] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 379.549606][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 379.620397][ T5618] usb 4-1: USB disconnect, device number 66 [ 379.840856][ T5614] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 379.886382][ T5614] usb 5-1: USB disconnect, device number 83 [ 379.914400][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.952932][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.346811][ T5711] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 380.430743][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 380.506002][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 380.516070][ T5711] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 380.533959][T10599] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 380.559095][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.569059][ T5711] usb 2-1: Product: syz [ 380.575252][ T5711] usb 2-1: Manufacturer: syz [ 380.582676][ T5711] usb 2-1: SerialNumber: syz [ 380.611346][ T5711] usb 2-1: config 0 descriptor?? [ 380.967727][T10598] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1362'. [ 381.030969][ T5711] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 381.060983][ T5711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.089713][ T5711] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 381.111383][ T5711] usb 2-1: media controller created [ 381.137196][ T5614] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 381.168387][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.294573][ T5711] zl10353_read_register: readreg error (reg=127, ret==0) [ 381.315221][ T5711] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 381.326716][ T5614] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 381.339465][ T5711] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 381.341920][ T5614] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 381.368131][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.399992][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.444497][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.462123][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.477669][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.502895][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.520164][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.534568][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.547521][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.565071][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.578573][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.601998][T10616] binder_alloc: 10612: binder_alloc_buf size 4294966880 failed, no address space [ 381.612804][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.616505][T10616] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 381.630731][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.643399][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.655133][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.665755][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.675471][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.687087][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.696391][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.708932][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.721641][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.731033][ T5614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.740656][ T5614] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.753156][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.764178][ T5614] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 381.773444][ T5614] usb 4-1: Product: syz [ 381.778263][ T5614] usb 4-1: Manufacturer: syz [ 381.783000][ T5614] usb 4-1: SerialNumber: syz [ 381.792649][ T5614] usb 4-1: config 0 descriptor?? [ 381.806838][ T5614] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 381.899438][ T5614] usb 2-1: USB disconnect, device number 62 [ 381.971141][ T5614] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 382.081858][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 382.090291][ T5618] usb 4-1: USB disconnect, device number 67 [ 382.105365][ T5618] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 382.685974][ T5618] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 382.847117][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 382.853394][ T5618] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 382.864086][ T5618] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.879296][ T5618] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 382.906376][ T5618] usb 2-1: config 0 interface 0 has no altsetting 0 [ 382.919224][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.931234][ T5618] usb 2-1: Product: syz [ 382.935521][ T5618] usb 2-1: Manufacturer: syz [ 382.943324][ T5618] usb 2-1: SerialNumber: syz [ 382.955106][ T5618] usb 2-1: config 0 descriptor?? [ 383.330196][T10643] loop5: detected capacity change from 0 to 7 [ 383.345152][T10643] Dev loop5: unable to read RDB block 7 [ 383.351645][T10643] loop5: AHDI p2 [ 383.355450][T10643] loop5: partition table partially beyond EOD, truncated [ 383.379075][ T5618] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 383.527575][T10649] loop4: detected capacity change from 0 to 7 [ 383.535457][T10649] loop4: [ 383.538864][T10649] loop4: partition table partially beyond EOD, truncated [ 383.561496][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.571150][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.840960][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.856547][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.891951][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.924994][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.978433][ T29] audit: type=1400 audit(1787681348.196:4282): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26090260 pid=10618 comm="syz.1.1366" [ 384.009724][ T5347] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 384.052043][ T5618] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 384.105436][ T5618] usb 2-1: USB disconnect, device number 63 [ 384.177922][ T5347] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 384.196154][ T5614] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 384.202617][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.217182][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.236563][ T5347] usb 4-1: config 0 descriptor?? [ 384.377808][ T5614] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 384.397467][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.415967][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.436011][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.455168][ T5614] usb 5-1: config 0 descriptor?? [ 384.472174][ T5347] usbhid 4-1:0.0: can't add hid device: -71 [ 384.487834][ T5347] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 384.513678][ T5347] usb 4-1: USB disconnect, device number 68 [ 384.755268][ T29] audit: type=1326 audit(1787681348.976:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 384.829212][ T29] audit: type=1326 audit(1787681349.006:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 384.884912][ T29] audit: type=1326 audit(1787681349.016:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 384.924100][ T29] audit: type=1326 audit(1787681349.016:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 384.989805][ T29] audit: type=1326 audit(1787681349.016:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 385.014784][ T5347] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 385.030714][ T5614] hid_parser_main: 7 callbacks suppressed [ 385.030779][ T5614] konepure 0003:1E7D:2DBE.0012: unknown main item tag 0x4 [ 385.051171][T10682] loop5: detected capacity change from 0 to 7 [ 385.056132][ T29] audit: type=1326 audit(1787681349.016:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 385.103310][T10682] Dev loop5: unable to read RDB block 7 [ 385.109628][ T29] audit: type=1326 audit(1787681349.016:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 385.124738][T10682] loop5: AHDI p2 [ 385.167439][ T29] audit: type=1326 audit(1787681349.016:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 385.198595][T10682] loop5: partition table partially beyond EOD, truncated [ 385.215975][ T5347] usb 4-1: Using ep0 maxpacket: 8 [ 385.222090][ T5347] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 385.233671][ T5347] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 385.242428][ T5347] usb 4-1: config 0 has no interface number 0 [ 385.252884][ T5347] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.266938][ T29] audit: type=1326 audit(1787681349.016:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.2.1384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259099e0d9 code=0x7ffc0000 [ 385.302701][ T5347] usb 4-1: config 0 interface 52 has no altsetting 0 [ 385.310423][ T5614] konepure 0003:1E7D:2DBE.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 385.311482][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.442691][ T5347] usb 4-1: config 0 descriptor?? [ 385.817374][ T5614] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 385.899664][ T5347] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input26 [ 386.091525][T10686] dvmrp0: entered allmulticast mode [ 386.091531][ T5347] usb 4-1: USB disconnect, device number 69 [ 386.166883][T10686] netlink: 'syz.1.1387': attribute type 10 has an invalid length. [ 386.851771][ T5347] usb 5-1: USB disconnect, device number 84 [ 387.224748][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.376206][ T5347] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 387.469259][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 387.496053][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 387.525054][T10722] netlink: 'syz.2.1397': attribute type 12 has an invalid length. [ 387.539135][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.576279][ T5347] usb 5-1: Using ep0 maxpacket: 16 [ 387.593853][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.638914][ T5347] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 387.655771][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 387.668331][ T9633] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.687660][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 387.699128][ T3358] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.715096][T10722] netlink: 'syz.2.1397': attribute type 12 has an invalid length. [ 387.738975][ T3358] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.764930][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.773654][ T5347] usb 5-1: Product: syz [ 387.783943][ T3358] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.801814][ T5347] usb 5-1: Manufacturer: syz [ 387.820886][ T5347] usb 5-1: SerialNumber: syz [ 387.862576][ T5347] usb 5-1: config 0 descriptor?? [ 388.308696][ T5347] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 388.411623][ T5347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.453487][ T5347] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 388.478738][ T5347] usb 5-1: media controller created [ 388.559590][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.734293][ T5614] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.780372][ T5614] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 388.846969][ T5614] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 388.879279][ T5614] usb 2-1: can't read configurations, error -71 [ 389.000934][ T5347] zl10353_read_register: readreg error (reg=127, ret==0) [ 389.032693][ T5347] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 389.076870][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 389.132283][ T5347] usb 5-1: USB disconnect, device number 85 [ 389.343638][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 389.360402][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'. [ 390.370217][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.384288][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.407774][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.416961][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.429053][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 390.506087][ T5614] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 390.655963][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 390.667142][ T5614] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 390.687045][ T5614] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 390.695123][ T5614] usb 4-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 390.716021][ T5614] usb 4-1: config 0 has no interface number 0 [ 390.722288][ T5614] usb 4-1: too many endpoints for config 0 interface 5 altsetting 49: 43, using maximum allowed: 30 [ 390.736263][ T5614] usb 4-1: config 0 interface 5 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 43 [ 390.749689][ T5614] usb 4-1: config 0 interface 5 has no altsetting 0 [ 390.757243][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.769347][ T5614] usb 4-1: config 0 descriptor?? [ 390.886955][ T1217] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 391.025985][ T1217] usb 2-1: device descriptor read/64, error -71 [ 391.115941][ T5707] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 391.194686][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1410'. [ 391.219373][ T5614] usb 4-1: string descriptor 0 read error: -71 [ 391.233909][ T5614] usb 4-1: USB disconnect, device number 70 [ 391.266102][ T1217] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 391.273815][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 391.281790][ T5707] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 391.295744][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.304289][ T5707] usb 5-1: Product: syz [ 391.308659][ T5707] usb 5-1: Manufacturer: syz [ 391.313330][ T5707] usb 5-1: SerialNumber: syz [ 391.321037][ T5707] usb 5-1: config 0 descriptor?? [ 391.406080][ T1217] usb 2-1: device descriptor read/64, error -71 [ 391.516411][ T1217] usb usb2-port1: attempt power cycle [ 391.731943][ T5707] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 391.759867][ T5707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.780825][ T5707] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 391.789540][ T5707] usb 5-1: media controller created [ 391.816886][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.856012][ T1217] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 391.877215][ T1217] usb 2-1: device descriptor read/8, error -71 [ 391.929570][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.943114][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.965765][T10784] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 391.990545][ T9634] IPVS: starting estimator thread 0... [ 391.997297][T10784] netlink: 'syz.3.1417': attribute type 13 has an invalid length. [ 392.021779][ T5707] zl10353_read_register: readreg error (reg=127, ret==0) [ 392.034492][ T5707] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 392.045154][ T5707] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 392.116272][T10785] IPVS: using max 35 ests per chain, 84000 per kthread [ 392.137064][ T1217] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 392.177630][ T1217] usb 2-1: device descriptor read/8, error -71 [ 392.298553][ T1217] usb usb2-port1: unable to enumerate USB device [ 392.569017][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.582453][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.619489][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 392.639198][ T10] usb 5-1: USB disconnect, device number 86 [ 392.724672][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 394.454939][T10817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.485663][T10817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.530993][T10809] syzkaller0: entered promiscuous mode [ 394.571716][T10809] syzkaller0: entered allmulticast mode [ 395.436899][ T5707] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 395.498970][T10843] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.1434'. [ 395.611316][ T5707] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 395.641944][ T5707] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 395.663802][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.691945][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.703082][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.713258][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.731894][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.774823][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.795536][T10848] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 395.804144][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.829020][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.852691][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.863199][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.882287][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.905338][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.919112][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.942869][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.965620][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.983716][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.011620][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.036780][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.049777][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.069654][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 396.069673][ T29] audit: type=1326 audit(1787681360.296:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa65ed9e0d9 code=0x0 [ 396.093501][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.124724][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.146122][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.157584][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.167772][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.197603][ T5707] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 396.210258][ T5707] usb 5-1: Product: syz [ 396.246055][ T5707] usb 5-1: Manufacturer: syz [ 396.251175][ T5707] usb 5-1: SerialNumber: syz [ 396.281211][ T5707] usb 5-1: config 0 descriptor?? [ 396.304043][ T5707] yurex 5-1:0.0: Could not find endpoints [ 396.389915][T10863] netlink: get zone limit has 4 unknown bytes [ 396.535792][ T5707] usb 5-1: USB disconnect, device number 87 [ 396.738272][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1441'. [ 397.624328][T10895] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 397.631011][T10895] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 397.655367][T10895] vhci_hcd vhci_hcd.0: Device attached [ 397.947902][ T1217] usb 40-1: SetAddress Request (2) to port 0 [ 397.966233][T10896] vhci_hcd: connection closed [ 397.966570][ T3358] vhci_hcd vhci_hcd.3: stop threads [ 397.982761][ T1217] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 398.000627][ T3358] vhci_hcd vhci_hcd.3: release socket [ 398.014004][ T3358] vhci_hcd vhci_hcd.3: disconnect device [ 398.546080][ T5707] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 398.576037][ T985] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 398.717781][ T5707] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 398.727681][ T985] usb 5-1: device descriptor read/64, error -71 [ 398.759925][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 398.797443][ T5707] usb 2-1: Product: syz [ 398.825982][ T5707] usb 2-1: SerialNumber: syz [ 398.871444][ T5707] usb 2-1: config 0 descriptor?? [ 398.987317][ T985] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 399.110749][ T5707] hso 2-1:0.0: Failed to find BULK eps [ 399.136005][ T985] usb 5-1: device descriptor read/64, error -71 [ 399.266407][ T985] usb usb5-port1: attempt power cycle [ 399.540234][T10920] syzkaller0: entered promiscuous mode [ 399.546169][T10920] syzkaller0: entered allmulticast mode [ 399.636120][ T985] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 399.656682][ T985] usb 5-1: device descriptor read/8, error -71 [ 399.685925][ T5347] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 399.866275][ T5347] usb 4-1: Using ep0 maxpacket: 16 [ 399.872960][ T5347] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 399.884864][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.916239][ T985] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 399.936063][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.976603][ T5347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.996101][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.005283][ T985] usb 5-1: device descriptor read/8, error -71 [ 400.014750][ T5347] usb 4-1: config 0 descriptor?? [ 400.117037][ T985] usb usb5-port1: unable to enumerate USB device [ 400.227769][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.242357][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.283250][ T5347] usbhid 4-1:0.0: can't add hid device: -71 [ 400.317963][ T5347] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 400.375994][ T5347] usb 4-1: USB disconnect, device number 71 [ 400.654244][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.689804][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.730427][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.736379][ T5347] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 400.752918][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.915946][ T5347] usb 4-1: Using ep0 maxpacket: 32 [ 400.934553][ T5347] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 400.968582][ T5347] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 108, changing to 7 [ 401.001320][ T5347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.011017][ T5347] usb 4-1: Product: syz [ 401.019481][ T5347] usb 4-1: Manufacturer: syz [ 401.024294][ T5347] usb 4-1: SerialNumber: syz [ 401.222344][ T5711] usb 2-1: USB disconnect, device number 70 [ 401.280281][T10930] program syz.3.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.307678][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.342055][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.471016][ T5347] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 401.508827][ T5347] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 401.685577][ T5347] usb 4-1: USB disconnect, device number 72 [ 401.799058][ T5671] udevd[5671]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.816380][ T5618] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 402.016494][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 402.023993][ T5618] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 402.061730][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.114958][ T5618] usb 2-1: Product: syz [ 402.140301][ T5618] usb 2-1: Manufacturer: syz [ 402.153945][ T5618] usb 2-1: SerialNumber: syz [ 402.183216][ T5618] usb 2-1: config 0 descriptor?? [ 402.216753][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 402.264834][T10962] syzkaller0: entered promiscuous mode [ 402.273460][T10962] syzkaller0: entered allmulticast mode [ 402.599654][ T9630] IPVS: starting estimator thread 0... [ 402.615331][ T5618] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 402.627699][ T5618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.639234][ T5618] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 402.642810][T10975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1468'. [ 402.649729][ T5618] usb 2-1: media controller created [ 402.678863][ T5618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.715982][T10976] IPVS: using max 29 ests per chain, 69600 per kthread [ 402.796035][ T5711] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 402.888747][ T5618] zl10353_read_register: readreg error (reg=127, ret==0) [ 402.896044][ T5347] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 402.896592][ T5618] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 402.912437][ T5618] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 402.947278][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 402.965247][ T5711] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 402.976735][ T5711] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 402.985250][ T5711] usb 4-1: config 0 has no interface number 0 [ 402.992446][ T5711] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.004924][ T5711] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 403.016786][ T5711] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 403.028496][ T5711] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 403.039076][ T5711] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 403.051323][ T5711] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.061618][ T5711] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 403.072197][ T5347] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 403.081694][ T5711] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 403.093636][ T5711] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 403.106173][ T1217] usb 40-1: device descriptor read/8, error -110 [ 403.116199][ T5347] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 403.126972][ T5347] usb 5-1: config 1 has no interface number 0 [ 403.133401][ T5711] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.146764][ T5347] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 403.157547][ T5347] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.172500][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.181317][ T5347] usb 5-1: Product: syz [ 403.185735][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.194086][ T5347] usb 5-1: Manufacturer: syz [ 403.199530][ T5711] usb 4-1: Product: syz [ 403.203827][ T5347] usb 5-1: SerialNumber: syz [ 403.208572][ T5711] usb 4-1: Manufacturer: syz [ 403.214705][ T5711] usb 4-1: SerialNumber: syz [ 403.221955][T10975] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 403.236285][T10975] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 403.246304][ T5711] usb 4-1: config 0 descriptor?? [ 403.257170][T10972] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 403.265001][T10972] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 403.275040][ T5347] usb 5-1: Expected 3 endpoints, found: 2 [ 403.282534][ T5711] usb 4-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 403.293134][ T5711] usb 4-1: couldn't find an output bulk endpoint. Bailing out. [ 403.403749][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.413181][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.449222][ T5618] usb 2-1: USB disconnect, device number 71 [ 403.481257][ T5618] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 403.508276][ T1217] usb usb40-port1: attempt power cycle [ 404.087720][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.110484][ T1217] usb usb40-port1: unable to enumerate USB device [ 404.124410][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.371498][T11005] netlink: 'syz.2.1473': attribute type 5 has an invalid length. [ 405.052814][T11018] overlayfs: missing 'lowerdir' [ 405.293313][T11021] IPVS: You probably need to specify IP address on multicast interface. [ 405.305087][T11021] IPVS: Error connecting to the multicast addr [ 405.430467][T11023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1478'. [ 405.430467][T11021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1478'. [ 405.485343][ T5711] usb 4-1: USB disconnect, device number 73 [ 405.665114][ T5618] usb 5-1: USB disconnect, device number 92 [ 405.986101][ T1217] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 406.160809][ T1217] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 406.171082][ T5618] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 406.179102][ T1217] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 406.191877][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.219791][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.250972][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.265471][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.274937][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.286218][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.295294][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.345996][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 406.368098][ T5618] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 406.378473][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.390385][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.401888][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.412335][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.422009][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.438957][ T5618] usb 2-1: Product: syz [ 406.453929][ T5618] usb 2-1: Manufacturer: syz [ 406.473911][ T5618] usb 2-1: SerialNumber: syz [ 406.481828][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.507673][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.518919][ T5618] usb 2-1: config 0 descriptor?? [ 406.539122][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.576709][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.601397][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.610401][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.624697][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.637402][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.663315][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.684126][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.709174][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.731572][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.754019][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.763104][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.775305][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.786165][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.803677][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.815576][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.827524][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.838864][ T1217] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.853090][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.873909][ T1217] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 406.890756][ T1217] usb 4-1: Product: syz [ 406.902780][ T1217] usb 4-1: Manufacturer: syz [ 406.919729][ T1217] usb 4-1: SerialNumber: syz [ 406.944764][ T1217] usb 4-1: config 0 descriptor?? [ 406.979547][ T1217] yurex 4-1:0.0: Could not find endpoints [ 407.004069][ T5618] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 407.025202][ T5618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.040064][ T5618] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 407.048580][ T5618] usb 2-1: media controller created [ 407.094964][ T5618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.197644][T11052] Option ' äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 407.271952][ T1217] usb 4-1: USB disconnect, device number 74 [ 407.318471][ T5618] zl10353_read_register: readreg error (reg=127, ret==0) [ 407.341620][ T5618] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 407.375409][ T5618] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 407.656363][ T5347] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 407.698604][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.708699][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.826857][ T5347] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 407.837720][ T5347] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 407.849122][ T5347] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 407.861871][ T5347] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 407.875105][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.883642][ T5347] usb 5-1: Product: syz [ 407.888130][ T5347] usb 5-1: Manufacturer: syz [ 407.892845][ T5347] usb 5-1: SerialNumber: syz [ 407.901916][ T5347] usb 5-1: config 0 descriptor?? [ 407.913942][T11063] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 407.921568][T11063] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 407.928750][ T5618] usb 2-1: USB disconnect, device number 72 [ 407.935429][ T5347] usb 5-1: ucan: probing device on interface #0 [ 407.990290][ T5618] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 408.340420][ T5347] usb 5-1: ucan: failed to retrieve device info [ 408.349674][ T5347] usb 5-1: ucan: probe failed; try to update the device firmware [ 408.366237][ T5347] usb 5-1: USB disconnect, device number 93 [ 408.416044][ T5711] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 408.566111][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 408.572225][ T5711] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 408.584568][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.597676][ T5711] usb 4-1: config 0 descriptor?? [ 408.610622][ T5711] as10x_usb: device has been detected [ 408.618116][ T5711] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 408.638349][ T5711] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 408.728391][ T5711] as10x_usb: error during firmware upload part1 [ 408.735263][ T5711] Registered device nBox DVB-T Dongle [ 408.810092][ T5711] usb 4-1: USB disconnect, device number 75 [ 408.849936][ T5711] Unregistered device nBox DVB-T Dongle [ 408.851537][ T5711] as10x_usb: device has been disconnected [ 409.995984][ T1217] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 410.146145][ T5347] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 410.166837][ T1217] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 410.191703][ T1217] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 410.214608][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.249035][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.278817][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.310190][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.320356][ T5347] usb 5-1: Using ep0 maxpacket: 16 [ 410.329102][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.339861][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.350341][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.356423][ T5347] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 410.367564][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.399498][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.421264][ T5347] usb 5-1: Product: syz [ 410.425523][ T5347] usb 5-1: Manufacturer: syz [ 410.430206][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.430244][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.430290][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.430319][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.473947][ T5347] usb 5-1: SerialNumber: syz [ 410.487108][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.513403][ T5347] usb 5-1: config 0 descriptor?? [ 410.522703][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.541030][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.554455][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.572130][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.585361][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.595531][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.614451][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.624829][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.638212][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.648745][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.662159][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.673227][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.685764][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.701906][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.715598][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.729746][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.741257][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.751677][ T1217] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.775291][ T1217] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.799262][ T1217] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 410.816587][ T1217] usb 2-1: Product: syz [ 410.826314][ T1217] usb 2-1: Manufacturer: syz [ 410.839101][ T1217] usb 2-1: SerialNumber: syz [ 410.862958][ T1217] usb 2-1: config 0 descriptor?? [ 410.864124][T11114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1505'. [ 410.889712][T11114] tipc: Enabling of bearer rejected, already enabled [ 410.906547][ T1217] yurex 2-1:0.0: Could not find endpoints [ 411.007842][ T5347] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 411.072024][ T5347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.083150][ T5347] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 411.091326][ T5347] usb 5-1: media controller created [ 411.137700][ T5711] usb 2-1: USB disconnect, device number 73 [ 411.162105][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.216410][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.250737][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.581159][ T5347] zl10353_read_register: readreg error (reg=127, ret==0) [ 411.602372][ T5347] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 411.618911][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 411.631498][ T5347] usb 5-1: USB disconnect, device number 94 [ 411.706967][ T5347] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 412.072683][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.110041][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.351695][T11137] ------------[ cut here ]------------ [ 412.357801][T11137] ODEBUG: free active (active state 0) object: ffff88802aadc420 object type: hrtimer hint: dummy_hrtimer_callback+0x0/0x150 [ 412.371713][T11137] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: syz.1.1513/11137 [ 412.382912][T11137] Modules linked in: [ 412.387401][T11137] CPU: 1 UID: 0 PID: 11137 Comm: syz.1.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.398694][T11137] Tainted: [L]=SOFTLOCKUP [ 412.403151][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.413485][T11137] RIP: 0010:debug_print_object+0x18a/0x230 [ 412.419503][T11137] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 3d 70 4f fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 77 92 0b 48 83 c4 10 5b 41 5c [ 412.439180][T11137] RSP: 0018:ffffc90004cd77d0 EFLAGS: 00010246 [ 412.445276][T11137] RAX: 1ffffffff181f12c RBX: dffffc0000000000 RCX: 0000000000000000 [ 412.454817][T11137] RDX: ffffffff8c6d6340 RSI: ffffffff8c6d5dc0 RDI: ffffffff9084dfc0 [ 412.462931][T11137] RBP: ffffffff8c6d6340 R08: ffff88802aadc420 R09: ffffffff8c0f8ba0 [ 412.470976][T11137] R10: dffffc0000000000 R11: ffffffff81b3d530 R12: 0000000000000000 [ 412.478987][T11137] R13: ffffffff9084dfc0 R14: ffff88802aadc420 R15: ffffffff8c0f8960 [ 412.487152][T11137] FS: 0000000000000000(0000) GS:ffff888124df1000(0000) knlGS:0000000000000000 [ 412.496252][T11137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.502887][T11137] CR2: 000000110c453820 CR3: 0000000038810000 CR4: 00000000003526f0 [ 412.510931][T11137] Call Trace: [ 412.514447][T11137] [ 412.517588][T11137] ? __pfx_dummy_hrtimer_callback+0x10/0x10 [ 412.523531][T11137] ? __pfx_dummy_hrtimer_callback+0x10/0x10 [ 412.529544][T11137] debug_check_no_obj_freed+0x2e3/0x450 [ 412.535156][T11137] kfree+0x13e/0x650 [ 412.539369][T11137] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.544680][T11137] ? dummy_pcm_close+0x9b/0xb0 [ 412.549746][T11137] dummy_pcm_close+0x9b/0xb0 [ 412.554386][T11137] snd_pcm_release_substream+0x313/0x490 [ 412.560237][T11137] snd_pcm_release+0xb6/0x160 [ 412.565036][T11137] ? __pfx_snd_pcm_release+0x10/0x10 [ 412.570428][T11137] __fput+0x418/0xa50 [ 412.574568][T11137] task_work_run+0x1d9/0x270 [ 412.579295][T11137] ? __pfx_task_work_run+0x10/0x10 [ 412.584435][T11137] ? do_raw_spin_unlock+0xf5/0x200 [ 412.589641][T11137] do_exit+0x73a/0x2360 [ 412.593833][T11137] ? __pfx_do_exit+0x10/0x10 [ 412.598496][T11137] ? do_raw_spin_lock+0x12b/0x2f0 [ 412.603553][T11137] do_group_exit+0x22d/0x2f0 [ 412.608222][T11137] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.613446][T11137] get_signal+0x121b/0x12c0 [ 412.618236][T11137] arch_do_signal_or_restart+0xbb/0x860 [ 412.623841][T11137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.630206][T11137] exit_to_user_mode_loop+0x10e/0x770 [ 412.635629][T11137] ? rcu_is_watching+0x16/0xb0 [ 412.640538][T11137] do_syscall_64+0x328/0x520 [ 412.645150][T11137] ? trace_irq_disable+0x3b/0x140 [ 412.650241][T11137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.656362][T11137] ? clear_bhb_loop+0x70/0xc0 [ 412.661056][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.666999][T11137] RIP: 0033:0x7f3cbd39e0d9 [ 412.671444][T11137] Code: Unable to access opcode bytes at 0x7f3cbd39e0af. [ 412.678662][T11137] RSP: 002b:00007f3cbb5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.687143][T11137] RAX: 0000000000000000 RBX: 00007f3cbd626090 RCX: 00007f3cbd39e0d9 [ 412.695230][T11137] RDX: 0000000000000000 RSI: 0000000000004140 RDI: 0000000000000003 [ 412.703529][T11137] RBP: 00007f3cbd435024 R08: 0000000000000000 R09: 0000000000000000 [ 412.711572][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.719780][T11137] R13: 00007f3cbd626128 R14: 00007f3cbd626090 R15: 00007f3cbd74fa48 [ 412.727959][T11137] [ 412.731034][T11137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.738327][T11137] CPU: 1 UID: 0 PID: 11137 Comm: syz.1.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.749295][T11137] Tainted: [L]=SOFTLOCKUP [ 412.753639][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.763726][T11137] Call Trace: [ 412.767060][T11137] [ 412.770014][T11137] vpanic+0x56d/0xa60 [ 412.774050][T11137] ? __pfx__printk+0x10/0x10 [ 412.778667][T11137] ? __pfx_vpanic+0x10/0x10 [ 412.783192][T11137] ? is_bpf_text_address+0x292/0x2b0 [ 412.788576][T11137] ? is_bpf_text_address+0x26/0x2b0 [ 412.793796][T11137] panic+0xc5/0xd0 [ 412.797546][T11137] ? __pfx_panic+0x10/0x10 [ 412.801997][T11137] __warn+0x315/0x4c0 [ 412.806005][T11137] ? debug_print_object+0xec/0x230 [ 412.811153][T11137] ? debug_print_object+0xec/0x230 [ 412.816279][T11137] __report_bug+0x276/0x570 [ 412.820992][T11137] ? debug_print_object+0xec/0x230 [ 412.826145][T11137] ? __pfx___report_bug+0x10/0x10 [ 412.831222][T11137] ? __lock_acquire+0x683/0x2cf0 [ 412.836191][T11137] report_bug_entry+0x19b/0x290 [ 412.841078][T11137] ? debug_print_object+0x18a/0x230 [ 412.846303][T11137] ? debug_print_object+0x18f/0x230 [ 412.851569][T11137] handle_bug+0xce/0x200 [ 412.855834][T11137] exc_invalid_op+0x1a/0x50 [ 412.860371][T11137] asm_exc_invalid_op+0x1a/0x20 [ 412.865232][T11137] RIP: 0010:debug_print_object+0x18a/0x230 [ 412.871052][T11137] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 3d 70 4f fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 77 92 0b 48 83 c4 10 5b 41 5c [ 412.890669][T11137] RSP: 0018:ffffc90004cd77d0 EFLAGS: 00010246 [ 412.896752][T11137] RAX: 1ffffffff181f12c RBX: dffffc0000000000 RCX: 0000000000000000 [ 412.904732][T11137] RDX: ffffffff8c6d6340 RSI: ffffffff8c6d5dc0 RDI: ffffffff9084dfc0 [ 412.912746][T11137] RBP: ffffffff8c6d6340 R08: ffff88802aadc420 R09: ffffffff8c0f8ba0 [ 412.920758][T11137] R10: dffffc0000000000 R11: ffffffff81b3d530 R12: 0000000000000000 [ 412.928778][T11137] R13: ffffffff9084dfc0 R14: ffff88802aadc420 R15: ffffffff8c0f8960 [ 412.936775][T11137] ? __pfx_hrtimer_debug_hint+0x10/0x10 [ 412.942363][T11137] ? __pfx_dummy_hrtimer_callback+0x10/0x10 [ 412.948358][T11137] ? __pfx_dummy_hrtimer_callback+0x10/0x10 [ 412.954271][T11137] debug_check_no_obj_freed+0x2e3/0x450 [ 412.959856][T11137] kfree+0x13e/0x650 [ 412.963772][T11137] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.968981][T11137] ? dummy_pcm_close+0x9b/0xb0 [ 412.973766][T11137] dummy_pcm_close+0x9b/0xb0 [ 412.978467][T11137] snd_pcm_release_substream+0x313/0x490 [ 412.984123][T11137] snd_pcm_release+0xb6/0x160 [ 412.988824][T11137] ? __pfx_snd_pcm_release+0x10/0x10 [ 412.994130][T11137] __fput+0x418/0xa50 [ 412.998126][T11137] task_work_run+0x1d9/0x270 [ 413.002753][T11137] ? __pfx_task_work_run+0x10/0x10 [ 413.008054][T11137] ? do_raw_spin_unlock+0xf5/0x200 [ 413.013208][T11137] do_exit+0x73a/0x2360 [ 413.017403][T11137] ? __pfx_do_exit+0x10/0x10 [ 413.022042][T11137] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.027117][T11137] do_group_exit+0x22d/0x2f0 [ 413.031850][T11137] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.037078][T11137] get_signal+0x121b/0x12c0 [ 413.041624][T11137] arch_do_signal_or_restart+0xbb/0x860 [ 413.047193][T11137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 413.053378][T11137] exit_to_user_mode_loop+0x10e/0x770 [ 413.058785][T11137] ? rcu_is_watching+0x16/0xb0 [ 413.063575][T11137] do_syscall_64+0x328/0x520 [ 413.068187][T11137] ? trace_irq_disable+0x3b/0x140 [ 413.073246][T11137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.079343][T11137] ? clear_bhb_loop+0x70/0xc0 [ 413.084038][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.089992][T11137] RIP: 0033:0x7f3cbd39e0d9 [ 413.094419][T11137] Code: Unable to access opcode bytes at 0x7f3cbd39e0af. [ 413.101441][T11137] RSP: 002b:00007f3cbb5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.109875][T11137] RAX: 0000000000000000 RBX: 00007f3cbd626090 RCX: 00007f3cbd39e0d9 [ 413.117857][T11137] RDX: 0000000000000000 RSI: 0000000000004140 RDI: 0000000000000003 [ 413.125862][T11137] RBP: 00007f3cbd435024 R08: 0000000000000000 R09: 0000000000000000 [ 413.133879][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.141873][T11137] R13: 00007f3cbd626128 R14: 00007f3cbd626090 R15: 00007f3cbd74fa48 [ 413.149886][T11137] [ 413.153119][T11137] Kernel Offset: disabled [ 413.157455][T11137] Rebooting in 86400 seconds..