last executing test programs: 10.510103745s ago: executing program 1 (id=677): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10.324437685s ago: executing program 1 (id=679): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10.247081538s ago: executing program 1 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = getpid() sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x8841) r4 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001080)}]) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x0) 7.642968563s ago: executing program 2 (id=689): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7.549257266s ago: executing program 4 (id=690): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af4fef8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300fff1000000b5fffffff30000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7.466908523s ago: executing program 2 (id=691): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r4 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r4, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, {@in=@broadcast, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@iptfs_init_delay={0x8, 0x27, 0xe}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x148}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r7 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6a000) ioctl$CEC_ADAP_G_LOG_ADDRS(r7, 0x805c6103, &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 7.432783687s ago: executing program 4 (id=692): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="00020000160020002abd7000fddbdf25ac1e00010000000000000000000000000a0101020000000000000000000000004e2300804e22007f0a0080006c000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d63c000000ffff00000000000000000000000000018300000000000000ff030000000000005e0900000000000005000000000000000800000000000000050000000000000000000600000000000400000000000000b20a00000000000005000000000000000f00000000000000fdffffffffffffff0200000009000000ff7f00002abd70000735000002000536c00000000000000001000000040000000c000f00010000000000000008001f0003000000080016000800000008001e0000040000e4000600ac14142c00"/231, @ANYRES32, @ANYRES32=r1, @ANYBLOB="ac1414aa000000000000000000000000000004d56c000000fc0100000000000000000000000000800500000000000000090000000000000007000000000000000100000000000000080000000000000004000000"], 0x200}, 0x1, 0x0, 0x0, 0x44040}, 0x4000001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0x10, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="020000ecffffff000200000000000000", @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000a001000000000000403c0100009ae6a97e67ecdcda5d62143725b1f31c6ecd890422c7f3bbf0b64586be02617af9db90fab4e96c7992718fa22fd66a8acd2bae4e6a703c935dadaf71fdbd6d7a131b61d23c2aaf5ccc2acee3a278f930d7d1e2716bbaf4655ecb8720b2ace27669482b4cd9cb82ba76b391dc25c65fcfa1a3211b57e6fd751e153bf1113a84b971681c670ce4b7709fe53b169e5dd238ff7c2304b91a6c55444d94a65e81f7e31935c7a9659d82dd06c5a83cb949303cb529e957381e217827"], 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x20000011) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000100)=0x100000) socket(0x15, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000100)="060000007f00000100150000000000006d6800"/44, 0x23f0977bc8f07d8b) fsopen(&(0x7f00000000c0)='9p\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r2, 0x80, 0x8, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r5, 0x2, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x40, r4, &(0x7f0000000240)="e15894f172c1", 0x6, 0x1, 0x0, 0x2}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 6.290521349s ago: executing program 2 (id=696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x113000, 0x8}) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4}) syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x214683) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000001c00)=[{0x0, 0x10, 0x0, 0x0}, {0x0, 0x800, 0x0, 0x0}, {0x7f, 0xc801, 0x0, 0x0}], 0x3}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r10, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 6.10824781s ago: executing program 0 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221c00000083f0d8e5590b24b79c718328062f9baa01cda98e"], 0x0}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r4, r3, 0x0, 0x558410e9) (async) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) (async) r5 = dup(r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={r6, 0xac, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae}, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x800}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000440)={r7, 0xb6, "2d8ae714282d377c208d3b3b0ae692cb8765844eb7c1c466d9eddf185e8d78e77eb98590ab1267a3d8f2b992c8b9a5f7ef05a706b8b03817eb7f362cc0f7257bf0d7ace30c24fd1681c71c00b56a40dd36ac7c7f78fdb7fc07f5048a37ca3fd3e247bd64dbae92e7946e6cfd88a2bd25632dd4244338fcf218fea89751a8a0163dd666b4467be0f34dfa799b240ac1e7a399c8ec71b76b6548c5155e4ecfe7faaba4a1c2971ec389dd9409c8253cad8a357ad3e9573c"}, &(0x7f0000000500)=0xbe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="36f22e64652ef04119a40962b1000066ba6100ec0f32410f01dd0066b802008ed00f22a40f2326c4832d0f8d0d0000006f45cf8f497c80590ac7442406000000000f011c24c463796269fa09", 0x4c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000080)={0xe, 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r9) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000000c0)=0x3, 0x4) 5.943881536s ago: executing program 3 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "7d3f41352b75ad1a", "8d53e874b92c009e37e44ca6f7930b36", "6436d658", "fde5e255e76a9ed4"}, 0x28) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0xfffffffa}}, 0x2, 0x4100}, &(0x7f00000002c0)=0x90) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/4123, 0x101b}, {&(0x7f0000002980)=""/4047, 0xfcf}, {&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f00000004c0)=""/233, 0xe9}], 0x5}, 0x40012000) 5.816942078s ago: executing program 1 (id=699): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000940)=ANY=[@ANYBLOB='permprofile :+%%:'], 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0xff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x6, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8000, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 5.673174697s ago: executing program 3 (id=700): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000002000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x80) 5.37342891s ago: executing program 4 (id=701): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000700)={0xffffa391, 0xfffffff1, 0x794}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x8, 0x5}}}, 0x24}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x400300, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r5, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0xffffffff00000000}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r8, &(0x7f0000003b80)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x7, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x8, 0x9, 0xd, 0x2}, @ldst={0x0, 0x0, 0x3, 0x3, 0x7, 0x80, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0xd, 0xb0, &(0x7f0000000340)=""/176, 0x41000, 0x20, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x8, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r6, r7, r8], &(0x7f0000000580)=[{0x4, 0x1, 0xc, 0xa}, {0x2, 0x2, 0xc, 0xa}, {0x9, 0x1}, {0x4, 0x5, 0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3, 0x8, 0x3}, {0x3, 0x2, 0x3, 0x3}], 0x10, 0xc}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x23, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0xc000) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x315}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r15, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x7, 0x51, 0x67, 0x0, 0x5, 0x6, 0x7fffffff, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0xffff52b3, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0x0, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x6, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0xd7, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0xffffff81, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x3, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x8, 0x8, 0x80, 0xe, 0x4, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x8, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x2, 0x7, 0x2c1, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1000, 0x7, 0x3, 0xc, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x3, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x1, 0x6, 0x8001, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffff7, 0x7c, 0xfffffffb, 0x7, 0x9, 0x200, 0xfffffffb, 0x0, 0x8, 0x200, 0x8e, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000001, 0x6, 0x4, 0xfff, 0x2, 0xd7f5, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x3, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xd, 0x8, 0x9, 0x3, 0x6, 0x0, 0x59, 0x401, 0x0, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x7, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0x0, 0x9, 0xffffff32, 0x5, 0xf, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x6, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffe, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0x1, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x68000, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x4, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcde, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x10001, 0xf30, 0x6, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0xd67, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2790, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x5, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x68b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r16 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r16, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000001c0)={0x18, r9, 0x4, 0x0, &(0x7f00000002c0)=[{0x10000, 0x6}, {0x7fffffff, 0x3}, {0x7ac, 0x8}, {0x2, 0x7}]}) 5.234609995s ago: executing program 3 (id=702): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x5000aea5, &(0x7f0000000040)) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x3, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x3, 0x18}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0x8, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) 4.544810649s ago: executing program 3 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740000000206050000000000000000030000fffd0e0003006269746d61703a697000000005000400000000000900020073797a31000000002c00078008000840000000cb1800018014000240200100000000000000000000000000010800060000006d2305000500020000000500010006"], 0x74}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000020801"], 0x20}, 0x1, 0x0, 0x0, 0x4010800}, 0x4000000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f0000000a40)={0x0, &(0x7f0000000a00), 0x40}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000489000/0x1000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r7, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.23557291s ago: executing program 4 (id=704): ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x3, 0x4) socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) shutdown(r0, 0x0) r1 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[], 0x0}, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (fail_nth: 38) 4.142237507s ago: executing program 0 (id=705): recvmmsg(0xffffffffffffffff, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a00)=""/19, 0x13}, 0x2d8}], 0x1, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 3.744447129s ago: executing program 0 (id=706): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r5 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r5, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, {@in=@broadcast, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@iptfs_init_delay={0x8, 0x27, 0xe}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x148}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r8 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6a000) ioctl$CEC_ADAP_G_LOG_ADDRS(r8, 0x805c6103, &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 3.571777033s ago: executing program 2 (id=707): r0 = add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x38, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "0011223344554d778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x9, 0x39, 0x30, 0x30, 0x38, 0x64, 0x32, 0x38, 0x30, 0x64, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x35, 0x30, 0x30, 0x0, 0x30, 0x63, 0x66, 0x50, 0x30, 0x61, 0x36, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r0) 3.268403735s ago: executing program 2 (id=708): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r1, 0x0, 0x28, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.13705814s ago: executing program 3 (id=709): syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) (async) 2.843551941s ago: executing program 4 (id=710): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)='\b', 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0xfffe) syz_usb_connect$uac3(0x0, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040820525004000010203010902860403017fa006080b0002012030230904000000010130000a24011022000a0000010008000000e603000cbf0d33184af09484fc7f12c457240b80007f00000008a3000904010000010230000904010101010230000905010960002503020a252572d29dc271fda3b9040200000102300009040201010102300009058209000200000000"], 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x1000, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000001c0)={0x6, r2}) flistxattr(0xffffffffffffffff, &(0x7f00000002c0)=""/126, 0x7e) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0x200, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xc}, {0x1}, {0x300, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x20009800) sendmsg$nl_route_sched(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) 2.393564937s ago: executing program 3 (id=711): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="00020000160020002abd7000fddbdf25ac1e00010000000000000000000000000a0101020000000000000000000000004e2300804e22007f0a0080006c000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d63c000000ffff00000000000000000000000000018300000000000000ff030000000000005e0900000000000005000000000000000800000000000000050000000000000000000600000000000400000000000000b20a00000000000005000000000000000f00000000000000fdffffffffffffff0200000009000000ff7f00002abd70000735000002000536c00000000000000001000000040000000c000f00010000000000000008001f0003000000080016000800000008001e0000040000e4000600ac14142c00"/231, @ANYRES32, @ANYRES32=r1, @ANYBLOB="ac1414aa000000000000000000000000000004d56c000000fc0100000000000000000000000000800500000000000000090000000000000007000000000000000100000000000000080000000000000004000000"], 0x200}, 0x1, 0x0, 0x0, 0x44040}, 0x4000001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0x10, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="020000ecffffff000200000000000000", @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000a001000000000000403c0100009ae6a97e67ecdcda5d62143725b1f31c6ecd890422c7f3bbf0b64586be02617af9db90fab4e96c7992718fa22fd66a8acd2bae4e6a703c935dadaf71fdbd6d7a131b61d23c2aaf5ccc2acee3a278f930d7d1e2716bbaf4655ecb8720b2ace27669482b4cd9cb82ba76b391dc25c65fcfa1a3211b57e6fd751e153bf1113a84b971681c670ce4b7709fe53b169e5dd238ff7c2304b91a6c55444d94a65e81f7e31935c7a9659d82dd06c5a83cb949303cb529e957381e217827"], 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x20000011) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000100)=0x100000) socket(0x15, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000100)="060000007f00000100150000000000006d6800"/44, 0x23f0977bc8f07d8b) fsopen(&(0x7f00000000c0)='9p\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r2, 0x80, 0x8, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r5, 0x2, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x40, r4, &(0x7f0000000240)="e15894f172c1", 0x6, 0x1, 0x0, 0x2}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 1.356929153s ago: executing program 1 (id=712): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x8, 0x1, 0x3}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="8bf16816086ea5297f6e3a2dc7ab94483f96558a874787e13543584fee6fe7ffc114efce1a931fb7c9e88460d512b3dc02966f36c8e912bcb49d54cfba14f05eeacf5494cb5fdfa58a30c0f494fa74c04fedc31231f3290fb1ceceb8e4aae771a8b3805cf678ddd6826488794bd24c5c8828a6918d15bb72341504927204f58cafe3ba40b4a60d68e881af7f805f4d33ba152cbb9555c9a8a13340503bdcb72ca3383f2d924dbf2e70d624ec6874feea14407d5ba609695c96111f70c0", 0xbd}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x10}}], 0x58}, 0x4000804) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/231, 0xe7}, {&(0x7f0000001380)=""/208, 0xd0}], 0x3, 0x8000, 0x5) r1 = syz_open_dev$mtd(&(0x7f00000014c0), 0x6, 0x101000) ioctl$ECCGETLAYOUT(r1, 0x81484d11, &(0x7f0000001500)) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r2, 0x0, &(0x7f0000001680)) fstat(r2, &(0x7f00000016c0)) quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000001780)=@attr_other={0x0, 0x1000, 0x80000000, &(0x7f0000001740)=0x1}) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000001d80)={&(0x7f00000017c0)=0x100000001, 0x0, &(0x7f0000001800)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001d40)}) pipe2(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001e00)={0x0, 0x18, "d5d2305415d44330c917a8aec9d52bc5b2a63b426b404a2e"}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000001e40)={0x3, 0x0, 0x1, 0x0, 0x0, [{{r2}, 0x9}]}) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r0, 0xc0107521, &(0x7f0000002e80)={0x4, 0x37f, 0x8, &(0x7f0000001e80)=@buf_4k="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"}) ioctl$KVM_CAP_VM_TYPES(r3, 0x4068aea3, &(0x7f0000002f00)={0xeb, 0x0, 0x3}) io_uring_enter(0xffffffffffffffff, 0x49c0, 0x441, 0xe, &(0x7f0000002f80)={[0x3]}, 0x8) fsetxattr(0xffffffffffffffff, &(0x7f0000002fc0)=@known='system.posix_acl_access\x00', &(0x7f0000003000)='/dev/mtd#\x00', 0xa, 0x3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003080), r0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x14, r4, 0x210, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8001) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, &(0x7f0000003180)={0x7}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003280)={'syztnl2\x00', &(0x7f0000003200)={'gre0\x00', 0x0, 0x40, 0x20, 0x2, 0x73fc0691, {{0x18, 0x4, 0x0, 0x34, 0x60, 0x65, 0x0, 0xfe, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0x7, 0x99, [@local]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1a, 0x1, [{0x5, 0x10, "6fb3856e5ffb0df307aedd4c61d7"}, {0x1, 0x4, 'i)'}]}, @cipso={0x86, 0x15, 0x3, [{0x1, 0xf, "c354752702618264b9618aef54"}]}, @lsrr={0x83, 0xf, 0xf7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000003340)={&(0x7f00000031c0), 0xc, &(0x7f0000003300)={&(0x7f00000032c0)=@bridge_getlink={0x34, 0x12, 0x200, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r6, 0x40, 0x20}, [@IFLA_PHYS_SWITCH_ID={0xc, 0x24, "b2bfc0d3bc8a15d6"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) copy_file_range(r0, 0x0, r2, &(0x7f0000003380)=0x2, 0x1, 0x0) rmdir(&(0x7f00000033c0)='./file0/file0\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000037c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x402c0800}, 0xc, &(0x7f0000003780)={&(0x7f0000003440)={0x2f4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xde, 0x80, [@gcr_ga={0xbd, 0x6, @device_b}, @perr={0x84, 0x56, {0x4a, 0x6, [{{}, @device_a, 0x4a44, @void, 0x15}, {{}, @device_b, 0x1000000, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x10000, @value, 0x40}, {{}, @device_a, 0x2, @void, 0x37}, {{}, @device_a, 0x1, @void, 0x1}, {{}, @device_a, 0x0, @void, 0x3c}]}}, @tim={0x5, 0x65, {0x80, 0x9f, 0x1, "86f9a8f7ba1a42f135aa0b52860c7be6d397c0e6b1d606f0d5d28eab404932f5ca36732077be8a9ddd8c1b230ccd9f45d421e37e57532beba483dde84716a707d3628c8ea693ac67e526e86f481bb1b94bb6ba8599e27db2ace345eb16eba7322bf6"}}, @channel_switch={0x25, 0x3, {0x1, 0xcc, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xc, 0xb, 0x40}}, @cf={0x4, 0x6, {0xb, 0x4, 0xff}}]}, @NL80211_ATTR_IE={0x1fd, 0x2a, [@prep={0x83, 0x1f, {{}, 0x8, 0xd, @broadcast, 0xb, @void, 0x2, 0x7, @device_b, 0x1}}, @preq={0x82, 0x72, {{0x1, 0x0, 0x1}, 0xd1, 0xf, 0x2, @device_b, 0x3, @void, 0x80000000, 0x7, 0x8, [{{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x10001}, {{}, @broadcast, 0xe}, {{0x0, 0x0, 0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0xf47}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @broadcast, 0x200}]}}, @supported_rates={0x1, 0x4, [{0x36, 0x1}, {0x0, 0x1}, {0x6c, 0x1}, {0x3}]}, @challenge={0x10, 0x1, 0x3e}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x28}}, @perr={0x84, 0x127, {0x9, 0x11, [{{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x3b}, {{}, @device_a, 0x2, @void, 0x26}, {{0x0, 0x1}, @broadcast, 0xffffffbb, @value=@device_b, 0x3d}, {{0x0, 0x1}, @device_a, 0xffff, @value=@device_b, 0x3b}, {{}, @broadcast, 0x2, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x1f}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x38}, {{0x0, 0x1}, @broadcast, 0xfffffffa, @value=@broadcast, 0x26}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x26}, {{}, @device_b, 0x2, @void, 0xa}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x23}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x5}, {{}, @broadcast, 0xff, @void, 0x2a}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x13}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x11}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x17}, {{}, @broadcast, 0x6, @void, 0x18}]}}, @ibss={0x6, 0x2, 0x200}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4, 0x60}}, @mesh_chsw={0x76, 0x6, {0x4, 0x5, 0x3f, 0x9}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000880) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r7) 866.035219ms ago: executing program 4 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x64}}, 0x4000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x25, 0x0, 0x1f, 0x1, 0x0, r8, 0x0, 0x0, 0xa00, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x200b}) r10 = mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x200000b, 0x10010, r5, 0x0) r11 = syz_open_procfs$userns(0x0, &(0x7f0000002840)) ioctl$LOOP_GET_STATUS64(r11, 0x8004b709, 0x0) r12 = mmap$IORING_OFF_SQES(0x0, 0x81, 0x4, 0x10, r5, 0x10000000) syz_io_uring_submit(0x0, r10, r12, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x4000, @fd_index, 0x8001, &(0x7f0000000400)=""/167, 0xa7, 0x1, 0x1, {0x1, 0x0, 0x3, '\x00', &(0x7f0000000540)={0x6, 0x5, 0x6f, &(0x7f00000004c0)="4519c05609b0ffad63e12c463ebe802283eb1f9515cda869b36471096cd0d7dfe9ce02507f54f2b01ff37eec9d02676d21c9ac0928338d21f8606587ecb41bd26dc8ecfce5f32335ce74d924aa133829430c7fa8a83dd5f793b5771dec7dfb64549614abbd6a7aaa3077c3013b62e0", 0x3}, 0xffffffffffffffff}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="4cd1c06233", @ANYRES64=r3, @ANYRES8=r4, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRESHEX=r7, @ANYRES16=r2], 0x48) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf2508000100000000002955e1abd5926f05e70a45001cfb0dc4446378a7871adb372b8774b201"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r14 = syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') lseek(r14, 0xffffff60, 0x1) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) socket$inet(0x2, 0x80001, 0x84) 835.009562ms ago: executing program 0 (id=714): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0xffffffff}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x35314241, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {}, {0x0, 0x1}]}}) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff00000000000000000900000000000000000a000000000000000000000080400000000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff0100000000000000000000000000010735000001"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000021000100fffffffffefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000100050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ac1414aa0000000000000000000000006c01"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000001080)={0x2, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e1f, @multicast1}}}, 0x108) 592.354547ms ago: executing program 1 (id=715): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0xa950, 0x7, {0x2, @sdr={0x384c4150, 0xfffffff7}}, 0x8}) sendmsg$nl_generic(r2, 0x0, 0x4008094) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x80, 0x80, 0x2, 0x0, {{0x18, 0x4, 0x0, 0x3c, 0x60, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp={0x44, 0x14, 0x23, 0x0, 0x7, [0x1, 0x7, 0x9, 0x1ff]}, @cipso={0x86, 0x17, 0x22b0eab40703096f, [{0x1, 0x11, "3d29709552e3b977fd969520f8403e"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x66, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r6}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2300400018a8ba3f1dda06c35b09a820b0ac8239f4294e185354175e20bf75dc4f000000000000000024b33aeb3b821c36929b71bf12ff3f332522fe77d395481dfbbb968a36a2e2345081cc54ebcd08aa6166fb", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 492.61411ms ago: executing program 0 (id=716): recvmmsg(0xffffffffffffffff, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a00)=""/19, 0x13}, 0x2d8}], 0x1, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 203.207751ms ago: executing program 0 (id=717): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000940)=ANY=[@ANYBLOB='permprofile :+%%:'], 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0xff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x6, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x8000, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 0s ago: executing program 2 (id=718): sendmmsg(0xffffffffffffffff, &(0x7f0000002c40)=[{{&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0xfeee712733896d21, {0x200}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)='ck', 0x2}, {&(0x7f0000000580)="1571ebe08910870374ae33ca7b140a90e7a93fa37e1720d0db5ff45b3abeb92c8421df4e45e28e8d23f62964d755a7e2cfed02bb82db2233c57c0ca41b6fdcc04d59afd5533946f83e48c95e9863d1e622aae67538c52ddf57dc33a0c68ed04886fe1ca304cffc7d79210b65f15ceadb6c0c6b06c1fcbaf437d040153dbda4d2b63f453dda2ef39590d58e4fe6f9d6d60e98ff31aac8a6c94d65a7f509b0cb595b6e59f636f78417b37d96da7e6006d94c98a1d35485e99e37c901e9b615e1a286889a3c0338af9aefb465a506bc32a70110624485f5172eac7ccacbe7a066c0bc21d0bc9c07bc6f18d0bacde75100dd0fe38126ddf11ac21af558116d3c5d5e73814ffaed1d31c79c572db84aad23c3194b5b838990198fec750d3cdf13bfdf9f25d057ecbc59a5281afb85ad34d6929a3afd02f728fe6515fec202c01e6381f84b749394a955c98b752194600bd8b513b0", 0x152}], 0x2}}], 0x1, 0x4004804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x4, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x8, 0x3}) kernel console output (not intermixed with test programs): : can't add hid device: -71 [ 168.970262][ T5688] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 168.979162][ T10] usb 4-1: device descriptor read/64, error -71 [ 168.981055][ T30] usb usb2-port1: unable to enumerate USB device [ 169.023617][ T5702] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 169.025251][ T192] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 169.076887][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.091095][ T5688] usb 5-1: USB disconnect, device number 23 [ 169.098561][ T5702] usb 1-1: config 0 descriptor?? [ 169.220727][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 169.350749][ T10] usb 4-1: device descriptor read/64, error -71 [ 169.472547][ T10] usb usb4-port1: attempt power cycle [ 169.527824][ T7234] syz_tun: entered allmulticast mode [ 169.550315][ T7234] pimreg: entered allmulticast mode [ 169.566905][ T7233] syz_tun: left allmulticast mode [ 169.605405][ T5702] usb 1-1: string descriptor 0 read error: -71 [ 169.618697][ T5702] usb 1-1: USB disconnect, device number 21 [ 169.685568][ T192] gspca_sunplus: reg_r err -71 [ 169.685660][ T192] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 169.695891][ T192] usb 3-1: USB disconnect, device number 27 [ 169.831349][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 169.852498][ T10] usb 4-1: device descriptor read/8, error -71 [ 170.027396][ T7249] program syz.4.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.090690][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 170.112325][ T10] usb 4-1: device descriptor read/8, error -71 [ 170.152842][ T7251] __nla_validate_parse: 57 callbacks suppressed [ 170.152857][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 170.153463][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 170.221571][ T10] usb usb4-port1: unable to enumerate USB device [ 170.750717][ T30] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 170.903286][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.904103][ T30] usb 1-1: not running at top speed; connect to a high speed hub [ 170.904138][ T30] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 170.906321][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.906466][ T30] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.906530][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.909634][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.909659][ T30] usb 1-1: Product: syz [ 170.909673][ T30] usb 1-1: Manufacturer: syz [ 170.909687][ T30] usb 1-1: SerialNumber: syz [ 171.010360][ T7278] binder: 7277:7278 ioctl c0306201 0 returned -14 [ 171.357239][ T30] usb 1-1: USB disconnect, device number 22 [ 171.400882][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 171.491496][ T6805] udevd[6805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.560776][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 171.569892][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 171.583815][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.618791][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 171.618812][ T10] pvrusb2: ********** [ 171.618819][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 171.618832][ T10] pvrusb2: Important functionality might not be entirely working. [ 171.618842][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 171.618853][ T10] pvrusb2: ********** [ 171.962611][ T2356] pvrusb2: Invalid write control endpoint [ 171.988752][ T7293] netlink: 'syz.1.401': attribute type 2 has an invalid length. [ 171.988776][ T7293] netlink: 52 bytes leftover after parsing attributes in process `syz.1.401'. [ 172.176022][ T2356] pvrusb2: Invalid write control endpoint [ 172.176036][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 172.176043][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 172.176048][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 172.176054][ T2356] pvrusb2: Device being rendered inoperable [ 172.176345][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 172.176392][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 172.208752][ T2356] pvrusb2: Attached sub-driver cx25840 [ 172.208771][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 172.208782][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 172.228010][ T7293] : entered promiscuous mode [ 172.340234][ T10] usb 5-1: USB disconnect, device number 24 [ 172.794927][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.795063][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.804576][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.804731][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.804889][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.805013][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.805135][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.805258][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.805414][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.805563][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.805686][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.812885][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.814844][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.814973][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815096][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815221][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815351][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815474][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815595][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815718][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815841][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.815967][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.816091][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.816229][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.817677][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.817807][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.818029][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.818162][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.818298][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.818433][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.818564][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.818696][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.818827][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.822212][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.822364][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.822495][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.822621][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.822746][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.836962][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.837100][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.837423][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.837556][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.837682][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.837807][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.837933][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.838066][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.838194][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.838319][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.846156][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.846301][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.846465][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.846592][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.846721][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.846846][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.847018][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.847146][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.847291][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.851481][ T7321] snd_dummy snd_dummy.0: control 0:0:128:syz0:1 is already present [ 172.907160][ T30] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 173.077614][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 173.086349][ T30] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 173.103173][ T30] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 173.103192][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.103203][ T30] usb 2-1: config 0 has no interface number 0 [ 173.103234][ T30] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 173.103249][ T30] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.103265][ T30] usb 2-1: config 0 interface 184 has no altsetting 0 [ 173.137402][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.137422][ T30] usb 2-1: Product: syz [ 173.137430][ T30] usb 2-1: Manufacturer: syz [ 173.137439][ T30] usb 2-1: SerialNumber: syz [ 173.151725][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 173.275371][ T30] usb 2-1: config 0 descriptor?? [ 173.391610][ T10] usb 1-1: device descriptor read/64, error -71 [ 173.391755][ T30] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 173.392011][ T30] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 173.631936][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 173.738254][ T7340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.414'. [ 173.760777][ T30] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 173.778431][ T10] usb 1-1: device descriptor read/64, error -71 [ 173.891070][ T10] usb usb1-port1: attempt power cycle [ 173.904376][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.911452][ T30] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 173.913331][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 173.913372][ T30] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 173.913403][ T30] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 173.913425][ T30] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.913443][ T30] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 173.913478][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.950824][ T7332] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 173.957314][ T30] ims_pcu 5-1:1.0: Max IN packet size is too small (0) [ 173.957368][ T30] ims_pcu 5-1:1.0: probe with driver ims_pcu failed with error -22 [ 174.000162][ T7347] binder: 7346:7347 ioctl 40046205 0 returned -22 [ 174.006828][ T7347] binder: 7346:7347 ioctl 40309410 200000000000 returned -22 [ 174.158303][ T30] usb 5-1: USB disconnect, device number 25 [ 174.272049][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 174.292521][ T10] usb 1-1: device descriptor read/8, error -71 [ 174.541690][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 174.563114][ T10] usb 1-1: device descriptor read/8, error -71 [ 174.682231][ T10] usb usb1-port1: unable to enumerate USB device [ 175.076416][ T7365] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 175.476231][ T7368] No such timeout policy "syz1" [ 175.871883][ T10] usb 2-1: USB disconnect, device number 21 [ 175.905768][ T5615] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 176.005692][ T7376] netlink: 56 bytes leftover after parsing attributes in process `syz.1.425'. [ 176.050703][ T5615] usb 4-1: device descriptor read/64, error -71 [ 176.090411][ T7379] binder: BINDER_SET_CONTEXT_MGR already set [ 176.090427][ T7379] binder: 7378:7379 ioctl 4018620d 200000004a80 returned -16 [ 176.290767][ T5615] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 176.330933][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 176.332161][ T7386] trusted_key: encrypted_key: keyword 'tÛPœ`efault' not recognized [ 176.441333][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 176.442924][ T5615] usb 4-1: device descriptor read/64, error -71 [ 176.551861][ T5615] usb usb4-port1: attempt power cycle [ 176.593653][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 176.595380][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.603881][ T10] usb 2-1: config 0 descriptor?? [ 176.641605][ T10] pwc: Creative Labs Webcam 5 detected. [ 176.920724][ T5615] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 176.952155][ T5615] usb 4-1: device descriptor read/8, error -71 [ 177.101506][ T5695] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 177.192482][ T5615] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 177.221675][ T5615] usb 4-1: device descriptor read/8, error -71 [ 177.242698][ T5695] usb 3-1: device descriptor read/64, error -71 [ 177.261084][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 177.261969][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 177.262438][ T10] pwc: recv_control_msg error -71 req 04 val 1600 [ 177.263100][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 177.263566][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 177.264034][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 177.265559][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 177.267258][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 177.267803][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 177.268935][ T10] pwc: recv_control_msg error -71 req 06 val 0600 [ 177.269804][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 177.272236][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 177.275550][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 177.276014][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 177.276605][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 177.277107][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 177.278628][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 177.280220][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 177.281636][ T10] pwc: Failed to power off camera (-71) [ 177.291430][ T10] pwc: Registered as video103. [ 177.302308][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 177.343705][ T5615] usb usb4-port1: unable to enumerate USB device [ 177.351119][ T10] usb 2-1: USB disconnect, device number 22 [ 177.491913][ T5695] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 177.628668][ T7401] netlink: 5 bytes leftover after parsing attributes in process `syz.4.433'. [ 177.630981][ T5695] usb 3-1: device descriptor read/64, error -71 [ 177.651361][ T7401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.741114][ T5695] usb usb3-port1: attempt power cycle [ 178.103186][ T5695] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 178.123281][ T5702] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 178.147146][ T5695] usb 3-1: device descriptor read/8, error -71 [ 178.272782][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 178.274092][ T5702] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 178.313234][ T5702] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 178.313262][ T5702] usb 5-1: config 4 has no interface number 0 [ 178.313307][ T5702] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 178.313340][ T5702] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 178.313364][ T5702] usb 5-1: config 4 interface 9 has no altsetting 0 [ 178.378811][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.378840][ T5702] usb 5-1: Product: syz [ 178.378856][ T5702] usb 5-1: Manufacturer: syz [ 178.378870][ T5702] usb 5-1: SerialNumber: syz [ 178.380752][ T5695] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 178.411447][ T5695] usb 3-1: device descriptor read/8, error -71 [ 178.425886][ T7408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.426044][ T7408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.465165][ T5702] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 178.522320][ T5695] usb usb3-port1: unable to enumerate USB device [ 178.606639][ T7419] openvswitch: netlink: IP tunnel dst address not specified [ 178.679450][ T31] kauditd_printk_skb: 243 callbacks suppressed [ 178.679471][ T31] audit: type=1326 audit(1791104192.111:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc571197ed7 code=0x7ffc0000 [ 178.679560][ T31] audit: type=1326 audit(1791104192.111:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc57113f4d9 code=0x7ffc0000 [ 178.679601][ T31] audit: type=1326 audit(1791104192.111:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc571197ed7 code=0x7ffc0000 [ 178.679640][ T31] audit: type=1326 audit(1791104192.111:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc57113f4d9 code=0x7ffc0000 [ 178.679706][ T31] audit: type=1326 audit(1791104192.111:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc571197ed7 code=0x7ffc0000 [ 178.679749][ T31] audit: type=1326 audit(1791104192.111:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc57113f4d9 code=0x7ffc0000 [ 178.702348][ T31] audit: type=1326 audit(1791104192.121:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc571197ed7 code=0x7ffc0000 [ 178.702399][ T31] audit: type=1326 audit(1791104192.121:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc57113f4d9 code=0x7ffc0000 [ 178.702439][ T31] audit: type=1326 audit(1791104192.121:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc571197ed7 code=0x7ffc0000 [ 178.702477][ T31] audit: type=1326 audit(1791104192.121:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc57113f4d9 code=0x7ffc0000 [ 179.319633][ T5897] usb 5-1: USB disconnect, device number 26 [ 179.320051][ T43] usb 5-1: Failed to submit usb control message: -71 [ 179.320089][ T43] usb 5-1: unable to send the bmi data to the device: -71 [ 179.320108][ T43] usb 5-1: unable to get target info from device [ 179.320123][ T43] usb 5-1: could not get target info (-71) [ 179.320333][ T43] usb 5-1: could not probe fw (-71) [ 179.360996][ T5702] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 179.446444][ T7434] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 179.512193][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 179.514557][ T5702] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.517635][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.517667][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.517689][ T5702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.517731][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.526225][ T5702] usb 1-1: config 0 descriptor?? [ 179.750470][ T7436] netlink: 56 bytes leftover after parsing attributes in process `syz.4.440'. [ 180.083566][ T7443] binder: BINDER_SET_CONTEXT_MGR already set [ 180.083585][ T7443] binder: 7442:7443 ioctl 4018620d 200000004a80 returned -16 [ 180.179091][ T7444] binder: 7441:7444 ioctl c0306201 0 returned -14 [ 180.370972][ T5897] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 180.478572][ T5702] usbhid 1-1:0.0: can't add hid device: -71 [ 180.478661][ T5702] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 180.497414][ T5702] usb 1-1: USB disconnect, device number 27 [ 180.527903][ T5897] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 180.545332][ T5897] usb 4-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 180.551558][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.551585][ T5897] usb 4-1: Product: syz [ 180.551599][ T5897] usb 4-1: Manufacturer: syz [ 180.551612][ T5897] usb 4-1: SerialNumber: syz [ 180.623013][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 180.734077][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.750524][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.781667][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 180.786681][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 180.790178][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.801948][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.811424][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.890497][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.910767][ T30] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 180.912404][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.912791][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.913010][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.955330][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 180.955349][ T25] pvrusb2: ********** [ 180.955356][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 180.955403][ T25] pvrusb2: Important functionality might not be entirely working. [ 180.955414][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 180.955426][ T25] pvrusb2: ********** [ 181.019739][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.020285][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.020395][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.020489][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.029989][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.059060][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.096062][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.096385][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.098610][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.098702][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.117377][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.156593][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.156750][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.156850][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.156946][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157042][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157134][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157229][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157331][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157426][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157521][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157618][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157713][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157806][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157898][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.157992][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.158084][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.209225][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.231115][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.232826][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.232915][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.233036][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.233160][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.233282][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.233403][ T7459] usb usb7: usbfs: process 7459 (syz.0.446) did not claim interface 0 before use [ 181.239673][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.349240][ T2356] pvrusb2: Invalid write control endpoint [ 181.351074][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.664404][ T5702] usb 5-1: USB disconnect, device number 27 [ 181.689003][ T5897] usbsevseg 4-1:219.0: USB 7 Segment device now attached [ 181.718669][ T5897] usb 4-1: USB disconnect, device number 35 [ 181.728868][ T5897] usbsevseg 4-1:219.0: USB 7 Segment now disconnected [ 181.799416][ T2356] pvrusb2: Invalid write control endpoint [ 181.799434][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 181.799474][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 181.799483][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 181.799494][ T2356] pvrusb2: Device being rendered inoperable [ 181.799524][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 181.799569][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 181.909042][ T2356] pvrusb2: Attached sub-driver cx25840 [ 181.909062][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 181.909074][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 181.920617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 182.190903][ T7473] tipc: Enabling of bearer rejected, failed to enable media [ 182.324810][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 182.697122][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 183.232855][ T7502] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 183.330698][ T5702] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 183.340503][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.354310][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.355271][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.366703][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.368091][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.402929][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.403574][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.403836][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.439313][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.439596][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.483124][ T5702] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 183.490069][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.490097][ T5702] usb 1-1: Product: syz [ 183.490111][ T5702] usb 1-1: Manufacturer: syz [ 183.490125][ T5702] usb 1-1: SerialNumber: syz [ 183.536733][ T5702] usb 1-1: config 0 descriptor?? [ 183.561835][ T5695] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 183.565083][ T5702] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 183.667836][ T5702] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.670226][ T5702] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 183.670286][ T5702] usb 1-1: media controller created [ 183.716748][ T5695] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 183.717964][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.717983][ T5695] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.717997][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 183.718010][ T5695] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 183.735479][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.735506][ T5695] usb 4-1: Product: syz [ 183.735520][ T5695] usb 4-1: Manufacturer: syz [ 183.735533][ T5695] usb 4-1: SerialNumber: syz [ 183.757337][ T5695] usb 4-1: config 0 descriptor?? [ 183.775553][ T5695] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 183.800555][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.808704][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.847663][ T7499] dvb-usb: bulk message failed: -22 (7/0) [ 183.910433][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.965876][ T9] usb 4-1: USB disconnect, device number 36 [ 184.128320][ T5702] DVB: Unable to find symbol mt352_attach() [ 184.165252][ T5695] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 184.209237][ T5702] DVB: Unable to find symbol nxt6000_attach() [ 184.209258][ T5702] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 184.248226][ T5702] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 184.272924][ T5702] dvb-usb: schedule remote query interval to 1000 msecs. [ 184.272950][ T5702] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 184.273002][ T5702] dvb-usb: bulk message failed: -22 (7/0) [ 184.273019][ T5702] dvb-usb: bulk message failed: -22 (7/0) [ 184.291115][ T5695] usb 2-1: device descriptor read/64, error -71 [ 184.323169][ T5702] usb 1-1: USB disconnect, device number 28 [ 184.531963][ T5695] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 184.664773][ T5695] usb 2-1: device descriptor read/64, error -71 [ 184.699842][ T5702] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 184.771029][ T5695] usb usb2-port1: attempt power cycle [ 185.110965][ T5695] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 185.135183][ T5695] usb 2-1: device descriptor read/8, error -71 [ 185.376548][ T5695] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 185.391438][ T5695] usb 2-1: device descriptor read/8, error -71 [ 185.397611][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 185.507111][ T5695] usb usb2-port1: unable to enumerate USB device [ 185.842380][ T7550] netlink: 68 bytes leftover after parsing attributes in process `syz.3.464'. [ 186.395709][ T7561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.468'. [ 186.714473][ T31] kauditd_printk_skb: 1174 callbacks suppressed [ 186.714495][ T31] audit: type=1326 audit(1791104200.151:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 186.715545][ T31] audit: type=1326 audit(1791104200.151:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 186.715790][ T31] audit: type=1326 audit(1791104200.151:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 186.715967][ T31] audit: type=1326 audit(1791104200.151:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 186.716239][ T31] audit: type=1326 audit(1791104200.151:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a0e15e98e code=0x7ffc0000 [ 186.716858][ T31] audit: type=1326 audit(1791104200.151:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0e19ddeb code=0x7ffc0000 [ 186.717775][ T31] audit: type=1326 audit(1791104200.151:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0e19ddeb code=0x7ffc0000 [ 186.757055][ T31] audit: type=1326 audit(1791104200.191:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0e19ddeb code=0x7ffc0000 [ 186.757385][ T31] audit: type=1326 audit(1791104200.191:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0e19ddeb code=0x7ffc0000 [ 186.776727][ T7563] sctp: [Deprecated]: syz.0.469 (pid 7563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.776727][ T7563] Use struct sctp_sack_info instead [ 186.856443][ T31] audit: type=1326 audit(1791104200.291:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.4.470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0e19ddeb code=0x7ffc0000 [ 187.020712][ T30] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 187.172464][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 187.174269][ T30] usb 5-1: config index 0 descriptor too short (expected 1158, got 134) [ 187.174296][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.174315][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.180389][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.180416][ T30] usb 5-1: Product: syz [ 187.180431][ T30] usb 5-1: Manufacturer: syz [ 187.180446][ T30] usb 5-1: SerialNumber: syz [ 187.329927][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 187.370781][ T5702] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 187.400806][ T5897] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 187.524277][ T5702] usb 4-1: not running at top speed; connect to a high speed hub [ 187.524319][ T5702] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.526094][ T5702] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.526123][ T5702] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 187.526175][ T5702] usb 4-1: config 1 interface 0 has no altsetting 0 [ 187.527244][ T5702] usb 4-1: language id specifier not provided by device, defaulting to English [ 187.529819][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.529844][ T5702] usb 4-1: Product: 䢋歊纕念ᦁ陞镁䚹٩㨹Cꦦ䟸㼫⏅엏絛旬鲤㎮㤜︢䩸Ꙛ䈾鳑—呺䋧㢭顃僷㼕뺫苢뜎ᶳ⮳ᾰ켏὿칸瘞⢣汄맢຅練뾕㤗崎ㅁ蚚䔶糮ཞ荫Ⅿῒ闛坼牠庰숖튱苬摿ⳁ᯶賀꣪ᢗ滢쭂᳟짳焼槬痢뇒Ὺഏ還᳅묞붒嶅䭋Ե㭛鎯닷꧝鬽ኊ掠蟭쬀퓩䯐韕線ⷄ吙 [ 187.529878][ T5702] usb 4-1: Manufacturer: ꣫샂﬊玷௎썎鼎醊饤㻗⪹έ쫍눱落涎ꪲ꿞滹옦ﰿ덴카⼅㈘项夌㱅ᄰ㋰띙⻰떡艜툨⺣挳讍׺䦽金䗇錮ꗻ厹숪ᆋⵦ旙镟Ⱘ俻ᗅᛞ퉵籭쟜ꁶ肒糂ៃﺪ닝홲袱렢⡜᳈읬᲍ᆫ燢綀ፑ柎๼␁ࡄ [ 187.529906][ T5702] usb 4-1: SerialNumber: syz [ 187.665874][ T5897] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 187.667360][ T5897] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.667420][ T5897] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.667461][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.674146][ T7572] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 187.733223][ T5897] hub 3-1:4.0: USB hub found [ 187.906374][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 187.938598][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.944065][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.961171][ T5897] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 188.001518][ T5897] usb 3-1: USB disconnect, device number 33 [ 188.227738][ T30] usb 5-1: USB disconnect, device number 28 [ 188.339434][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.321736][ T10] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 189.486472][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 189.486511][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 189.489539][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 93, changing to 4 [ 189.489572][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 189.538835][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.538865][ T10] usb 3-1: Product: 尉┢᳅遊㼉厩퀽⊴霒쳢b愾⅋颀앾敖瓝珷댚隐ὸﮎ磁焳蔔뾋華藷ꩺ澨먠惾㘶퍖㧏ꁺ䑞톕洮 [ 189.538878][ T10] usb 3-1: Manufacturer: 堡찄镴뛹媶⦥儿떌負繴袛︾퇙衎苕뒂빟எ퉥ί压䇏삜䌔꿂툁츍鳍Ꙇ駓혂퐴냼㥀⭛䆴搈좨䐭ﺆ䰽쾨倂奆퀇谗颠씴俖燫鼢去칬軣廊硡ܘ彄융⃗ꂥ饹ܓ㺗圭掮 [ 189.538899][ T10] usb 3-1: SerialNumber: অຼ裫Ꮞ秮녾큭렠栦囕ߠ蛊녖㳖ॴ墼肑舁묱袊ﴽ틈硫ᬄ࿛ౠ杞叴佀躑ꗋ︥佥ℨשּׁ㔅ꓽꊆ㞺瓭븡舞鵫쏘貋⋙쀃计獮 [ 189.754904][ T7609] tipc: Started in network mode [ 189.754960][ T7609] tipc: Node identity 860c4d1c7aba, cluster identity 4711 [ 189.755818][ T7609] tipc: Enabled bearer , priority 0 [ 189.789028][ T7610] tipc: Resetting bearer [ 189.858890][ T7610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.009082][ T10] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 190.198549][ T5702] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 190.229364][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 190.262548][ T5702] usb 4-1: USB disconnect, device number 37 [ 190.277074][ T10] usb 3-1: USB disconnect, device number 34 [ 190.413708][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.760816][ T5615] tipc: Node number set to 4239805724 [ 191.191551][ T5702] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 191.343073][ T5702] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 191.369898][ T5702] usb 5-1: config index 0 descriptor too short (expected 1158, got 134) [ 191.369931][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.369950][ T5702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.417452][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.417483][ T5702] usb 5-1: Product: syz [ 191.417498][ T5702] usb 5-1: Manufacturer: syz [ 191.417530][ T5702] usb 5-1: SerialNumber: syz [ 191.540045][ T7648] netlink: 'syz.2.494': attribute type 14 has an invalid length. [ 191.626853][ T7650] syz.1.495 (7650): /proc/7649/oom_adj is deprecated, please use /proc/7649/oom_score_adj instead. [ 191.722277][ T31] kauditd_printk_skb: 125 callbacks suppressed [ 191.722298][ T31] audit: type=1326 audit(1791104205.161:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.724305][ T31] audit: type=1326 audit(1791104205.161:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.790655][ T31] audit: type=1326 audit(1791104205.221:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.791485][ T31] audit: type=1326 audit(1791104205.231:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.791680][ T31] audit: type=1326 audit(1791104205.231:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.825560][ T31] audit: type=1326 audit(1791104205.261:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.825722][ T31] audit: type=1326 audit(1791104205.261:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.853831][ T31] audit: type=1326 audit(1791104205.261:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.853886][ T31] audit: type=1326 audit(1791104205.271:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 191.853924][ T31] audit: type=1326 audit(1791104205.271:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19e159 code=0x7ffc0000 [ 192.197294][ T7656] sit0: entered promiscuous mode [ 192.217124][ T7656] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 192.217149][ T7656] netlink: 1 bytes leftover after parsing attributes in process `syz.2.497'. [ 192.270683][ T10] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 192.424375][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 192.440661][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.453788][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.475112][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 192.475147][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 192.475192][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.525474][ T7650] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.544155][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 192.544185][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 192.544701][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 192.544711][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 192.544783][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 192.842109][ T10] usb 2-1: USB disconnect, device number 27 [ 192.928252][ T5702] usb 5-1: USB disconnect, device number 29 [ 193.098943][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.111610][ T7663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.456854][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 193.600736][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 193.602991][ T10] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 193.603018][ T10] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 193.604016][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.604037][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.605036][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.605059][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.607755][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.607778][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.696187][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.696216][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.697367][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.697391][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.698555][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.698580][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.699532][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.699555][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.786397][ T10] usb 1-1: config 2 has an invalid descriptor of length 9, skipping remainder of the config [ 193.786426][ T10] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 193.953145][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 193.966327][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 193.966570][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 193.966760][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 193.966960][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 193.970485][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 194.037393][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 194.037932][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 194.069116][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 194.083893][ T7668] binder_alloc: binder_alloc_mmap_handler: 7665 200000ffe000-200001000000 already mapped failed -16 [ 194.391859][ T7671] cgroup: fork rejected by pids controller in /syz1 [ 194.482581][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.482643][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615430][ T7704] binder: BINDER_SET_CONTEXT_MGR already set [ 194.615444][ T7704] binder: 7700:7704 ioctl 4018620d 200000004a80 returned -16 [ 195.233993][ T10] usb 1-1: string descriptor 0 read error: -71 [ 195.234113][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.266935][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 195.266955][ T10] r8152-cfgselector 1-1: rejected 8 configurations due to insufficient available bus power [ 195.266968][ T10] r8152-cfgselector 1-1: no configuration chosen from 8 choices [ 195.298507][ T10] r8152-cfgselector 1-1: USB disconnect, device number 29 [ 195.975697][ T7752] program syz.3.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.317920][ T7745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.410536][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 196.566969][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.566998][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.567787][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.567808][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.692830][ T5702] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 196.884049][ T5702] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 196.885433][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 196.885454][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25970, setting to 1024 [ 196.885479][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.890069][ T5702] usb 2-1: config 0 descriptor?? [ 196.902130][ T7747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.003311][ T30] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 197.150893][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 197.153045][ T30] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 197.160416][ T30] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 197.160468][ T30] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 197.160493][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.160555][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.206947][ T30] usb 1-1: config 0 descriptor?? [ 197.334374][ T5702] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 197.334452][ T5702] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 197.370945][ T5702] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0009/input/input16 [ 197.466281][ T5702] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 197.476202][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x3 [ 197.476386][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x6 [ 197.476412][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 197.476434][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 197.476457][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 197.476479][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 197.476501][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 197.476523][ T30] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 197.485794][ T30] wacom 0003:056A:0094.000A: Using device in hidraw-only mode [ 197.513982][ T30] wacom 0003:056A:0094.000A: hidraw1: USB HID v0.01 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 197.842770][ T5702] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 197.928448][ T5897] usb 2-1: USB disconnect, device number 28 [ 197.982690][ T5702] usb 4-1: device descriptor read/64, error -71 [ 198.220659][ T5702] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 198.360763][ T5702] usb 4-1: device descriptor read/64, error -71 [ 198.473021][ T5702] usb usb4-port1: attempt power cycle [ 198.625300][ T7789] FAULT_INJECTION: forcing a failure. [ 198.625300][ T7789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.625328][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz.1.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.625346][ T7789] Tainted: [L]=SOFTLOCKUP [ 198.625351][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.625358][ T7789] Call Trace: [ 198.625364][ T7789] [ 198.625370][ T7789] dump_stack_lvl+0xe8/0x150 [ 198.625392][ T7789] should_fail_ex+0x410/0x560 [ 198.625410][ T7789] _copy_from_user+0x2d/0xb0 [ 198.625428][ T7789] ___sys_recvmsg+0x173/0x5a0 [ 198.625443][ T7789] ? __pfx____sys_recvmsg+0x10/0x10 [ 198.625462][ T7789] ? lock_acquire+0x115/0x350 [ 198.625493][ T7789] do_recvmmsg+0x31a/0x7f0 [ 198.625510][ T7789] ? __pfx_do_recvmmsg+0x10/0x10 [ 198.625529][ T7789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.625551][ T7789] ? __fget_files+0x3a2/0x420 [ 198.625587][ T7789] __x64_sys_recvmmsg+0x198/0x250 [ 198.625611][ T7789] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 198.625643][ T7789] do_syscall_64+0x166/0x520 [ 198.625664][ T7789] ? trace_irq_disable+0x3b/0x140 [ 198.625677][ T7789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.625689][ T7789] ? clear_bhb_loop+0x70/0xc0 [ 198.625704][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.625715][ T7789] RIP: 0033:0x7fc57119e159 [ 198.625727][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.625738][ T7789] RSP: 002b:00007fc572000028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 198.625752][ T7789] RAX: ffffffffffffffda RBX: 00007fc571426090 RCX: 00007fc57119e159 [ 198.625761][ T7789] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 198.625772][ T7789] RBP: 00007fc572000090 R08: 0000000000000000 R09: 0000000000000000 [ 198.625780][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.625787][ T7789] R13: 00007fc571426128 R14: 00007fc571426090 R15: 00007fc57154fa48 [ 198.625805][ T7789] [ 198.833781][ T5702] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 198.852015][ T5702] usb 4-1: device descriptor read/8, error -71 [ 199.083641][ T5702] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 199.113366][ T5702] usb 4-1: device descriptor read/8, error -71 [ 199.232164][ T5702] usb usb4-port1: unable to enumerate USB device [ 199.608472][ T7809] netlink: 112 bytes leftover after parsing attributes in process `syz.2.524'. [ 199.736698][ T25] usb 1-1: USB disconnect, device number 30 [ 199.861685][ T5702] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 200.011590][ T5897] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 200.011808][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 200.015012][ T5702] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 200.016210][ T5702] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 200.020881][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.020908][ T5702] usb 3-1: Product: syz [ 200.020921][ T5702] usb 3-1: Manufacturer: syz [ 200.020934][ T5702] usb 3-1: SerialNumber: syz [ 200.026547][ T5702] usb 3-1: config 0 descriptor?? [ 200.037137][ T5702] cdc_ether 3-1:0.0: missing cdc header descriptor [ 200.038091][ T5702] usb 3-1: unsupported MDLM descriptors [ 200.096702][ T7819] netlink: 56 bytes leftover after parsing attributes in process `syz.0.527'. [ 200.171397][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 200.173981][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.174048][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.216393][ T5897] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 200.605071][ T5897] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 200.770602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 200.808260][ T5897] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 200.808323][ T5897] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 200.808802][ T5897] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 200.858592][ T5897] usb 5-1: USB disconnect, device number 30 [ 200.972910][ T5615] usb 3-1: USB disconnect, device number 35 [ 201.556192][ T7837] input: syz0 as /devices/virtual/input/input17 [ 202.543412][ T7852] netlink: 56 bytes leftover after parsing attributes in process `syz.4.538'. [ 202.700798][ T7855] binder: BINDER_SET_CONTEXT_MGR already set [ 202.701887][ T7855] binder: 7854:7855 ioctl 4018620d 200000004a80 returned -16 [ 202.807121][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.537'. [ 202.807141][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.537'. [ 203.032546][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 203.180988][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 203.184458][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 203.188236][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.188532][ T9] usb 5-1: Product: syz [ 203.188551][ T9] usb 5-1: Manufacturer: syz [ 203.188566][ T9] usb 5-1: SerialNumber: syz [ 203.236834][ T9] usb 5-1: config 0 descriptor?? [ 203.263510][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 203.453683][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 203.453704][ T31] audit: type=1326 audit(1791104216.881:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57119e159 code=0x7ffc0000 [ 203.453765][ T31] audit: type=1326 audit(1791104216.891:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57119e159 code=0x7ffc0000 [ 203.458468][ T31] audit: type=1326 audit(1791104216.891:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc57119e159 code=0x7ffc0000 [ 203.458617][ T31] audit: type=1326 audit(1791104216.891:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57119e159 code=0x7ffc0000 [ 203.458818][ T31] audit: type=1326 audit(1791104216.891:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57119e159 code=0x7ffc0000 [ 203.501590][ T31] audit: type=1326 audit(1791104216.941:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc57115e98e code=0x7ffc0000 [ 203.502376][ T31] audit: type=1326 audit(1791104216.941:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc57119ddeb code=0x7ffc0000 [ 203.502831][ T31] audit: type=1326 audit(1791104216.941:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc57119ddeb code=0x7ffc0000 [ 203.509723][ T31] audit: type=1326 audit(1791104216.941:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc57119ddeb code=0x7ffc0000 [ 203.515255][ T31] audit: type=1326 audit(1791104216.951:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc57119ddeb code=0x7ffc0000 [ 203.552564][ T192] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 203.700717][ T192] usb 4-1: Using ep0 maxpacket: 32 [ 203.722926][ T192] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 203.728737][ T192] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 203.728794][ T192] usb 4-1: config 0 has no interface number 0 [ 203.737997][ T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.738022][ T192] usb 4-1: Product: syz [ 203.738035][ T192] usb 4-1: Manufacturer: syz [ 203.738048][ T192] usb 4-1: SerialNumber: syz [ 203.756872][ T192] usb 4-1: config 0 descriptor?? [ 203.772843][ T192] hub 4-1:0.89: bad descriptor, ignoring hub [ 203.772899][ T192] hub 4-1:0.89: probe with driver hub failed with error -5 [ 203.774327][ T5615] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 203.799409][ T192] option 4-1:0.89: GSM modem (1-port) converter detected [ 203.827213][ T192] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 203.923447][ T5615] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.00 [ 203.931696][ T5615] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.931733][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.973379][ T5615] usb 2-1: config 0 descriptor?? [ 204.263310][ T5615] usbhid 2-1:0.0: can't add hid device: -71 [ 204.263430][ T5615] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 204.279207][ T5615] usb 2-1: USB disconnect, device number 29 [ 204.387616][ T7881] xt_policy: neither incoming nor outgoing policy selected [ 204.435005][ T7883] netlink: 56 bytes leftover after parsing attributes in process `syz.0.550'. [ 204.622157][ T5897] usb 4-1: USB disconnect, device number 42 [ 204.628086][ T5897] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 204.630151][ T5897] option 4-1:0.89: device disconnected [ 204.633315][ T5615] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 204.760703][ T5615] usb 2-1: device descriptor read/64, error -71 [ 205.001464][ T5615] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 205.130798][ T5615] usb 2-1: device descriptor read/64, error -71 [ 205.142037][ T9] gspca_sonixj: reg_r err -32 [ 205.151924][ T30] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 205.180873][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 205.241183][ T5615] usb usb2-port1: attempt power cycle [ 205.320668][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 205.321417][ T30] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 205.322445][ T30] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.322475][ T30] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 205.322500][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.322533][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.391914][ T30] usb 4-1: config 0 descriptor?? [ 205.580718][ T5615] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 205.603316][ T5615] usb 2-1: device descriptor read/8, error -71 [ 205.842389][ T5615] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 205.865144][ T5615] usb 2-1: device descriptor read/8, error -71 [ 205.888625][ T30] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04B4:BCA1.000B/input/input18 [ 205.971838][ T5615] usb usb2-port1: unable to enumerate USB device [ 205.977811][ T7902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.013090][ T30] cypress 0003:04B4:BCA1.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 206.785569][ T30] usb 5-1: USB disconnect, device number 31 [ 206.813055][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 206.982019][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.983663][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.983726][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.983768][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.040314][ T7910] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 207.060497][ T7930] syz_tun: entered allmulticast mode [ 207.069976][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.144693][ T7928] syz_tun: left allmulticast mode [ 207.280724][ T30] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 207.433238][ T30] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 207.437481][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.466559][ T30] usb 5-1: config 0 descriptor?? [ 207.631634][ T5615] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 207.670316][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 207.781765][ T5615] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 207.791978][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.792004][ T5615] usb 2-1: Product: syz [ 207.792017][ T5615] usb 2-1: Manufacturer: syz [ 207.792031][ T5615] usb 2-1: SerialNumber: syz [ 207.892767][ T30] usb 5-1: Cannot read MAC address [ 207.893071][ T30] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 207.935598][ T30] usb 5-1: USB disconnect, device number 32 [ 208.054824][ T5615] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 208.058601][ T5615] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 208.073697][ T5615] usb 2-1: USB disconnect, device number 34 [ 208.701636][ T7949] binder: BINDER_SET_CONTEXT_MGR already set [ 208.701652][ T7949] binder: 7948:7949 ioctl 4018620d 200000004a80 returned -16 [ 208.986861][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.768504][ T5615] usb 1-1: USB disconnect, device number 31 [ 209.876112][ T7964] batman_adv: batadv0: Adding interface: syzkaller0 [ 209.876132][ T7964] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.877985][ T7964] batman_adv: batadv0: Interface activated: syzkaller0 [ 210.006772][ T7963] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 210.069132][ T7963] batman_adv: batadv0: Removing interface: syzkaller0 [ 210.245615][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 210.374705][ T7983] binder: BINDER_SET_CONTEXT_MGR already set [ 210.374724][ T7983] binder: 7982:7983 ioctl 4018620d 200000004a80 returned -16 [ 210.400731][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 210.401443][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 210.404818][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.404840][ T10] usb 5-1: Product: syz [ 210.404849][ T10] usb 5-1: Manufacturer: syz [ 210.404857][ T10] usb 5-1: SerialNumber: syz [ 210.419027][ T10] usb 5-1: config 0 descriptor?? [ 210.426382][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 211.120481][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 211.330967][ T7995] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 211.570766][ T5615] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 211.571287][ T7995] bond2: entered promiscuous mode [ 211.578963][ T7995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.738644][ T5615] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 211.751965][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.752430][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.753345][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.775765][ T8002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.804068][ T8002] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 211.804129][ T8002] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 211.834224][ T5615] usb 2-1: config 0 descriptor?? [ 211.850506][ T5615] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 211.864164][ T8008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.053066][ T8002] bond2: (slave wireguard0): making interface the new active one [ 212.053095][ T8002] wireguard0: entered promiscuous mode [ 212.093184][ T8002] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 212.358189][ T5702] logitech-hidpp-device 0003:046D:C082.000C: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 212.403209][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 212.437203][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 212.510502][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.511537][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.593558][ T7997] loop4: detected capacity change from 0 to 2640 [ 212.652222][ T5625] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.652976][ T5625] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.653715][ T5625] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.654480][ T5625] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.655346][ T5625] Buffer I/O error on dev loop4, logical block 0, async page read [ 212.745568][ T8014] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 212.745679][ T8014] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 212.745725][ T8014] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 212.745789][ T8014] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 212.745833][ T8014] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 212.747437][ T8013] fido_id[8013]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.995237][ T5615] usb 2-1: USB disconnect, device number 35 [ 213.322619][ T10] gspca_stk1135: reg_w 0x351 err -71 [ 213.323663][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323675][ T10] gspca_stk1135: Sensor write failed [ 213.323701][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323711][ T10] gspca_stk1135: Sensor write failed [ 213.323735][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323741][ T10] gspca_stk1135: Sensor read failed [ 213.323760][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323765][ T10] gspca_stk1135: Sensor read failed [ 213.323770][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 213.323794][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323803][ T10] gspca_stk1135: Sensor read failed [ 213.323829][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323838][ T10] gspca_stk1135: Sensor read failed [ 213.323864][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323873][ T10] gspca_stk1135: Sensor write failed [ 213.323892][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 213.323898][ T10] gspca_stk1135: Sensor write failed [ 213.323948][ T10] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 213.454351][ T10] usb 5-1: USB disconnect, device number 33 [ 213.776251][ T8021] team0: entered promiscuous mode [ 213.776273][ T8021] team_slave_0: entered promiscuous mode [ 213.776455][ T8021] team_slave_1: entered promiscuous mode [ 213.776600][ T8021] team0: entered allmulticast mode [ 213.776614][ T8021] team_slave_0: entered allmulticast mode [ 213.776627][ T8021] team_slave_1: entered allmulticast mode [ 214.115610][ T8021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.170979][ T8021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.183339][ T8021] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 214.277827][ T8021] bond0 (unregistering): Released all slaves [ 214.818779][ T5702] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 215.021051][ T5702] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 215.026737][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.026757][ T5702] usb 5-1: Product: syz [ 215.026766][ T5702] usb 5-1: Manufacturer: syz [ 215.026774][ T5702] usb 5-1: SerialNumber: syz [ 215.103192][ T8030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 215.103346][ T8030] block device autoloading is deprecated and will be removed. [ 215.187287][ T6671] bridge_slave_1: left allmulticast mode [ 215.187336][ T6671] bridge_slave_1: left promiscuous mode [ 215.190725][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.261572][ T6671] bridge_slave_0: left allmulticast mode [ 215.261594][ T6671] bridge_slave_0: left promiscuous mode [ 215.261811][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.305465][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 215.560831][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.564612][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.687046][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 215.687149][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 215.693092][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 215.693174][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 215.761157][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.789428][ T5702] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 215.867890][ T5702] usb 5-1: USB disconnect, device number 34 [ 216.510674][ T5615] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 216.661423][ T5615] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 216.666119][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.666148][ T5615] usb 3-1: Product: syz [ 216.666163][ T5615] usb 3-1: Manufacturer: syz [ 216.666178][ T5615] usb 3-1: SerialNumber: syz [ 216.777415][ T6671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.820148][ T6671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.845179][ T6671] bond0 (unregistering): Released all slaves [ 217.435420][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.436097][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.626152][ T31] kauditd_printk_skb: 85 callbacks suppressed [ 217.626173][ T31] audit: type=1326 audit(1791104231.061:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8d997ed7 code=0x7ffc0000 [ 217.626612][ T31] audit: type=1326 audit(1791104231.061:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8d93f4d9 code=0x7ffc0000 [ 217.628137][ T31] audit: type=1326 audit(1791104231.061:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8d997ed7 code=0x7ffc0000 [ 217.628551][ T31] audit: type=1326 audit(1791104231.061:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8d93f4d9 code=0x7ffc0000 [ 217.628598][ T31] audit: type=1326 audit(1791104231.061:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8d997ed7 code=0x7ffc0000 [ 217.628736][ T31] audit: type=1326 audit(1791104231.061:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8d93f4d9 code=0x7ffc0000 [ 217.629008][ T31] audit: type=1326 audit(1791104231.061:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8d997ed7 code=0x7ffc0000 [ 217.629286][ T31] audit: type=1326 audit(1791104231.061:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8d93f4d9 code=0x7ffc0000 [ 217.785545][ T31] audit: type=1326 audit(1791104231.201:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8d997ed7 code=0x7ffc0000 [ 217.785600][ T31] audit: type=1326 audit(1791104231.211:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.0.598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8d93f4d9 code=0x7ffc0000 [ 218.026173][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 218.026238][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 218.026258][ T5615] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.091161][ T5615] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 218.119703][ T5615] usb 3-1: USB disconnect, device number 36 [ 218.678067][ T6671] hsr_slave_0: left promiscuous mode [ 218.707517][ T6671] hsr_slave_1: left promiscuous mode [ 218.737197][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.737260][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.762955][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.762980][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.930337][ T6671] veth1_macvtap: left promiscuous mode [ 218.931541][ T6671] veth0_macvtap: left promiscuous mode [ 218.932722][ T6671] veth1_vlan: left promiscuous mode [ 218.954230][ T6671] veth0_vlan: left promiscuous mode [ 219.046401][ T8080] program syz.1.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.095682][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.096035][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.127473][ T8100] binder: BINDER_SET_CONTEXT_MGR already set [ 220.127627][ T8100] binder: 8099:8100 ioctl 4018620d 200000004a80 returned -16 [ 220.350035][ T6671] team0 (unregistering): Port device team_slave_1 removed [ 220.405626][ T6671] team0 (unregistering): Port device team_slave_0 removed [ 221.397711][ T192] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 221.460700][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 221.560761][ T192] usb 5-1: Using ep0 maxpacket: 32 [ 221.561884][ T192] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 221.563940][ T192] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 221.563967][ T192] usb 5-1: config 0 has no interface number 0 [ 221.564010][ T192] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 221.566626][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.566650][ T192] usb 5-1: Product: syz [ 221.566664][ T192] usb 5-1: Manufacturer: syz [ 221.566678][ T192] usb 5-1: SerialNumber: syz [ 221.570687][ T5897] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 221.628869][ T25] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 221.632543][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.632619][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.632639][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 221.632660][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.675226][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.675253][ T25] usb 2-1: Product: syz [ 221.675293][ T25] usb 2-1: Manufacturer: syz [ 221.675307][ T25] usb 2-1: SerialNumber: syz [ 221.724342][ T192] usb 5-1: config 0 descriptor?? [ 221.726108][ T8103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 221.746535][ T5897] usb 1-1: New USB device found, idVendor=083a, idProduct=5046, bcdDevice=6c.a8 [ 221.748590][ T5897] usb 1-1: config 15 has an invalid interface number: 149 but max is 0 [ 221.748608][ T5897] usb 1-1: config 15 has no interface number 0 [ 221.748650][ T5897] usb 1-1: config 15 interface 149 has no altsetting 0 [ 221.792960][ T5897] usb 1-1: Dual-Role OTG device on HNP port [ 221.793704][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.793720][ T5897] usb 1-1: Product: syz [ 221.793729][ T5897] usb 1-1: Manufacturer: syz [ 221.793773][ T5897] usb 1-1: SerialNumber: syz [ 221.949027][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.949754][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.006507][ T25] usb 2-1: Limiting number of CPorts to U8_MAX [ 222.016835][ T25] usb 2-1: Not enough endpoints found in device, aborting! [ 222.063418][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.095476][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.108175][ T5897] pegasus 1-1:15.149: Missing or invalid endpoints [ 222.132372][ T8109] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.155950][ T5897] usb 1-1: USB disconnect, device number 32 [ 222.228503][ T25] usb 2-1: USB disconnect, device number 36 [ 222.276097][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.296882][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.444550][ T8113] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 222.475440][ T8113] bond0 (unregistering): Released all slaves [ 222.738830][ T192] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 222.739098][ T192] asix 5-1:0.188: probe with driver asix failed with error -71 [ 222.766894][ T192] usb 5-1: USB disconnect, device number 35 [ 223.043564][ T8123] netlink: 'syz.1.615': attribute type 12 has an invalid length. [ 223.043620][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 223.051257][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 223.161349][ T8126] netlink: 296 bytes leftover after parsing attributes in process `syz.1.615'. [ 223.203850][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 223.205393][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 223.205435][ T25] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 223.207194][ T25] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 223.207261][ T25] usb 1-1: can't read configurations, error -22 [ 223.330820][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 223.412572][ T5688] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 223.445692][ T8130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.482236][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 223.483767][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 223.483809][ T25] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 223.486601][ T25] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 223.486669][ T25] usb 1-1: can't read configurations, error -22 [ 223.487743][ T25] usb usb1-port1: attempt power cycle [ 223.540734][ T5688] usb 2-1: device descriptor read/64, error -71 [ 223.781561][ T5688] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 223.823967][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 223.844132][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 223.845597][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 223.845641][ T25] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 223.848067][ T25] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 223.848105][ T25] usb 1-1: can't read configurations, error -22 [ 223.912010][ T5688] usb 2-1: device descriptor read/64, error -71 [ 223.983314][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 224.002132][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 224.003643][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 224.003714][ T25] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 224.007995][ T25] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 224.008033][ T25] usb 1-1: can't read configurations, error -22 [ 224.008374][ T25] usb usb1-port1: unable to enumerate USB device [ 224.024483][ T5688] usb usb2-port1: attempt power cycle [ 224.180731][ T192] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 224.330656][ T192] usb 5-1: Using ep0 maxpacket: 32 [ 224.336642][ T192] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 224.337770][ T192] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 224.337795][ T192] usb 5-1: config 0 has no interface number 0 [ 224.337844][ T192] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.337865][ T192] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 224.337890][ T192] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 224.337911][ T192] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.339914][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.339935][ T192] usb 5-1: Product: syz [ 224.339948][ T192] usb 5-1: Manufacturer: syz [ 224.339961][ T192] usb 5-1: SerialNumber: syz [ 224.361039][ T5688] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 224.362460][ T8140] program syz.2.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.381439][ T5688] usb 2-1: device descriptor read/8, error -71 [ 224.457398][ T192] usb 5-1: config 0 descriptor?? [ 224.475413][ T192] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input19 [ 224.525208][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 224.525230][ T31] audit: type=1326 audit(1791104237.961:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.526596][ T31] audit: type=1326 audit(1791104237.961:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.528085][ T31] audit: type=1326 audit(1791104237.961:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.528523][ T31] audit: type=1326 audit(1791104237.961:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.536774][ T31] audit: type=1326 audit(1791104237.961:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.536827][ T31] audit: type=1326 audit(1791104237.971:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.536871][ T31] audit: type=1326 audit(1791104237.971:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.536914][ T31] audit: type=1326 audit(1791104237.971:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.536958][ T31] audit: type=1326 audit(1791104237.971:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.537001][ T31] audit: type=1326 audit(1791104237.971:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f626339e159 code=0x7ffc0000 [ 224.621422][ T5688] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 224.641737][ T5688] usb 2-1: device descriptor read/8, error -71 [ 224.728141][ T5702] usb 4-1: USB disconnect, device number 43 [ 224.758169][ T5688] usb usb2-port1: unable to enumerate USB device [ 224.971590][ T10] usb 5-1: USB disconnect, device number 36 [ 225.220672][ T8175] netlink: 56 bytes leftover after parsing attributes in process `syz.3.626'. [ 225.367187][ T8180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.423864][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 225.425929][ T8181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.951218][ T8192] nvme_rdma: malformed address passed: 172.20.20.2<5trsv:4420 [ 225.963528][ T6674] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.979310][ T8165] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.979357][ T8165] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.979392][ T8165] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.318675][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 226.509126][ T8209] program syz.2.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.808986][ T8215] binder: 8214:8215 ioctl c0306201 0 returned -14 [ 227.090940][ T5688] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 227.212904][ T25] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 227.213008][ T5897] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 227.241667][ T5688] usb 1-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 227.244945][ T5688] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 227.244965][ T5688] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 227.244990][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.258006][ T8205] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.258140][ T8205] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.368678][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 227.368772][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 227.381544][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 227.393679][ T5897] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.393905][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.402180][ T5897] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.402204][ T5897] usb 5-1: config 0 has no interface number 0 [ 227.410378][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.410402][ T5897] usb 5-1: Product: syz [ 227.410415][ T5897] usb 5-1: Manufacturer: syz [ 227.410427][ T5897] usb 5-1: SerialNumber: syz [ 227.464644][ T5897] usb 5-1: config 0 descriptor?? [ 227.475115][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 227.475131][ T25] pvrusb2: ********** [ 227.475137][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 227.475148][ T25] pvrusb2: Important functionality might not be entirely working. [ 227.475156][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 227.475166][ T25] pvrusb2: ********** [ 227.572704][ T5623] Bluetooth: hci5: Can't claim NULL iso interface [ 227.685870][ T2356] pvrusb2: Invalid write control endpoint [ 227.965368][ T2356] pvrusb2: Invalid write control endpoint [ 227.965386][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 227.965398][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 227.965407][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 227.965418][ T2356] pvrusb2: Device being rendered inoperable [ 227.971224][ T8225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.971731][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 227.971779][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 228.098033][ T2356] pvrusb2: Attached sub-driver cx25840 [ 228.098046][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 228.098052][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 228.205905][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.206348][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.206674][ T25] usb 4-1: USB disconnect, device number 44 [ 228.234262][ T5897] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 228.234283][ T5897] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.243064][ T5897] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 228.243518][ T5897] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 228.357495][ T5897] usb 5-1: USB disconnect, device number 37 [ 229.040633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.184754][ T12] nvmet: connect request for invalid subsystem testsubsys! [ 229.212816][ T8228] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 229.270697][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 229.438461][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 229.439164][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 229.439198][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.470626][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.470677][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 229.515916][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.515943][ T10] usb 3-1: Product: syz [ 229.515958][ T10] usb 3-1: Manufacturer: syz [ 229.515973][ T10] usb 3-1: SerialNumber: syz [ 229.521739][ T8231] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.580706][ T192] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 229.616383][ T5623] Bluetooth: hci5: Failed to get device id (-71) [ 229.616534][ T5623] Bluetooth: hci5: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 229.619167][ T5897] usb 1-1: USB disconnect, device number 37 [ 229.750843][ T192] usb 4-1: Using ep0 maxpacket: 8 [ 229.753698][ T192] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.753753][ T192] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 229.755180][ T192] usb 4-1: config 4 interface 0 has no altsetting 0 [ 229.758722][ T192] usb 4-1: string descriptor 0 read error: -22 [ 229.758821][ T192] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 229.817244][ T10] cdc_ncm 3-1:1.0: bind() failure [ 229.828025][ T192] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 229.852926][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 229.852957][ T10] cdc_ncm 3-1:1.1: bind() failure [ 229.872976][ T192] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.873209][ T192] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 229.873239][ T192] usb 4-1: media controller created [ 229.877971][ T10] usb 3-1: USB disconnect, device number 37 [ 229.936982][ T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.289103][ T8246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.380727][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 230.553030][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 230.554019][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 230.555485][ T9] usb 2-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 230.555550][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.555590][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.610882][ T9] usb 2-1: config 0 descriptor?? [ 230.804008][ T8255] program syz.2.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.821669][ T5897] usb 2-1: USB disconnect, device number 41 [ 230.977697][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 230.977719][ T31] audit: type=1326 audit(1791104244.411:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 230.977920][ T31] audit: type=1326 audit(1791104244.411:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 230.979021][ T31] audit: type=1326 audit(1791104244.411:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 230.979154][ T31] audit: type=1326 audit(1791104244.411:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 230.986803][ T31] audit: type=1326 audit(1791104244.411:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 230.986868][ T31] audit: type=1326 audit(1791104244.421:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 230.986893][ T31] audit: type=1326 audit(1791104244.421:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 230.986936][ T31] audit: type=1326 audit(1791104244.421:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 231.021514][ T31] audit: type=1326 audit(1791104244.451:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 231.064734][ T31] audit: type=1326 audit(1791104244.501:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.0.652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8d99e159 code=0x7ffc0000 [ 231.173614][ T8239] usb 4-1: dvb_usb_au6610: wlen=4100, aborting [ 231.240460][ T192] zl10353_read_register: readreg error (reg=127, ret==0) [ 231.318619][ T192] usb 4-1: USB disconnect, device number 45 [ 231.554745][ T8261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.700816][ T30] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 231.727207][ T5897] bridge0: entered promiscuous mode [ 231.740690][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 231.852492][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 231.863355][ T30] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 231.864544][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.864567][ T30] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 231.864587][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 231.874626][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.874649][ T30] usb 1-1: Product: syz [ 231.874663][ T30] usb 1-1: Manufacturer: syz [ 231.874676][ T30] usb 1-1: SerialNumber: syz [ 231.879699][ T30] usb 1-1: config 0 descriptor?? [ 231.931740][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.959770][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.959800][ T9] usb 2-1: Product: syz [ 231.959816][ T9] usb 2-1: Manufacturer: syz [ 231.959830][ T9] usb 2-1: SerialNumber: syz [ 232.160715][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 232.311389][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 232.312261][ T25] usb 3-1: New USB device found, idVendor=1210, idProduct=0003, bcdDevice= 1.00 [ 232.319028][ T25] usb 3-1: config 6 has an invalid interface number: 14 but max is 0 [ 232.319086][ T25] usb 3-1: config 6 has no interface number 0 [ 232.319130][ T25] usb 3-1: config 6 interface 14 altsetting 7 endpoint 0xD has invalid wMaxPacketSize 0 [ 232.319154][ T25] usb 3-1: config 6 interface 14 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 232.319174][ T25] usb 3-1: config 6 interface 14 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 232.319230][ T25] usb 3-1: config 6 interface 14 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 232.319255][ T25] usb 3-1: config 6 interface 14 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 232.319277][ T25] usb 3-1: config 6 interface 14 has no altsetting 0 [ 232.323440][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.323463][ T25] usb 3-1: Product: syz [ 232.323476][ T25] usb 3-1: Manufacturer: ᝆ뿫୞ኜ浒ꃪ笈鸺旖靊ᤝ뫤ꁾ⮸ꉦⓚ낭㵀䀶吊巿糛꺷럳趸蓰둝郐⩇ț闘䃷菂所顸㚇儎咱㇓냨ᫀ笖穊လ憍鿅컬韲굱ꩡ堷꺃譏䦫渿ꃦ祱ᕺ摆Ⲟ炎㶊㯡⿑⹑鸈쑲Ωꇺ༊殐憑ແ灘⇢휐㈓뷦妾侯怪 [ 232.323501][ T25] usb 3-1: SerialNumber: syz [ 232.527466][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 232.527557][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 232.528146][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 232.528202][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 232.577863][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 232.601302][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 232.629482][ T9] usb 2-1: USB disconnect, device number 42 [ 232.683738][ T25] usb-storage 3-1:6.14: USB Mass Storage device detected [ 232.751835][ T25] usb-storage 3-1:6.14: Quirks match for vid 1210 pid 0003: 20 [ 232.819169][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 232.835472][ T25] usb 3-1: USB disconnect, device number 38 [ 233.029626][ T30] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 233.029663][ T30] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 233.039705][ T30] usb 1-1: USB disconnect, device number 38 [ 233.172007][ T8307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.225820][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 233.260935][ T192] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 233.420675][ T192] usb 5-1: Using ep0 maxpacket: 32 [ 233.421467][ T192] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 233.423438][ T192] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 233.423463][ T192] usb 5-1: config 0 has no interface number 0 [ 233.426037][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.426055][ T192] usb 5-1: Product: syz [ 233.426065][ T192] usb 5-1: Manufacturer: syz [ 233.426073][ T192] usb 5-1: SerialNumber: syz [ 233.429146][ T192] usb 5-1: config 0 descriptor?? [ 233.520908][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 233.678899][ T25] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 233.681815][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.681839][ T25] usb 3-1: config 0 has no interfaces? [ 233.698904][ T8314] program syz.1.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.711725][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.711750][ T25] usb 3-1: Product: syz [ 233.711762][ T25] usb 3-1: Manufacturer: syz [ 233.711775][ T25] usb 3-1: SerialNumber: syz [ 233.722655][ T25] usb 3-1: config 0 descriptor?? [ 233.860505][ T192] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 233.860535][ T192] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.941546][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.942338][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.084999][ T192] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 234.085324][ T192] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 234.177673][ T10] usb 3-1: USB disconnect, device number 39 [ 234.244066][ T8319] netlink: 5 bytes leftover after parsing attributes in process `syz.0.667'. [ 234.246475][ T8319] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 234.292079][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.297806][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.450013][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 234.755192][ T8339] netlink: 56 bytes leftover after parsing attributes in process `syz.0.673'. [ 234.782262][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 235.475507][ T8357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.592610][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 235.741624][ T9] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 235.743111][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.743129][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 235.743153][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.807955][ T9] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 235.949670][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.949945][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.510953][ T30] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 236.668453][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 236.688715][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.688736][ T30] usb 4-1: Product: syz [ 236.688745][ T30] usb 4-1: Manufacturer: syz [ 236.688754][ T30] usb 4-1: SerialNumber: syz [ 237.093714][ T8380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.198809][ T5897] usb 5-1: USB disconnect, device number 38 [ 237.260439][ T8380] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 237.385527][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 237.385629][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 237.398281][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 237.551438][ T8386] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 237.566875][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 237.588896][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 237.588960][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 237.608076][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 237.634140][ T30] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 238.661997][ T8401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.282209][ T8419] binder: 8418:8419 ioctl c0306201 0 returned -14 [ 239.408319][ T5688] usb 4-1: USB disconnect, device number 46 [ 239.526021][ T8426] netlink: 60 bytes leftover after parsing attributes in process `syz.3.698'. [ 239.527079][ T5702] usb 2-1: USB disconnect, device number 43 [ 239.535825][ T5702] idmouse 2-1:1.0: disconnected [ 239.590092][ T8426] netlink: 60 bytes leftover after parsing attributes in process `syz.3.698'. [ 239.597411][ T30] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 239.645277][ T5897] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 239.702142][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 239.702165][ T31] audit: type=1400 audit(1791104253.141:3114): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=8427 comm="syz.1.699" [ 239.755033][ T30] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 239.756103][ T30] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.756123][ T30] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.756138][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 239.756158][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.812399][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 239.814067][ T30] usb 1-1: config 0 descriptor?? [ 239.817295][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 239.847443][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.895227][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 239.895241][ T5897] pvrusb2: ********** [ 239.895246][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 239.895253][ T5897] pvrusb2: Important functionality might not be entirely working. [ 239.895258][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 239.895264][ T5897] pvrusb2: ********** [ 239.959081][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 240.191353][ T5688] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 240.285334][ T2356] pvrusb2: Invalid write control endpoint [ 240.343125][ T5688] usb 2-1: Using ep0 maxpacket: 16 [ 240.344940][ T5688] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 240.360793][ T5688] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.360825][ T5688] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 240.360848][ T5688] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.360880][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.433876][ T5688] usb 2-1: config 0 descriptor?? [ 240.516644][ T30] usbhid 1-1:0.0: can't add hid device: -71 [ 240.516733][ T30] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 240.539202][ T30] usb 1-1: USB disconnect, device number 39 [ 240.656978][ T2356] pvrusb2: Invalid write control endpoint [ 240.656996][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 240.657005][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 240.657013][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 240.657024][ T2356] pvrusb2: Device being rendered inoperable [ 240.721195][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 240.721256][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 240.722959][ T2356] pvrusb2: Attached sub-driver cx25840 [ 240.722974][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 240.722986][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 240.766175][ T30] usb 3-1: USB disconnect, device number 40 [ 240.915059][ T5688] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04B4:BCA1.000D/input/input20 [ 241.011743][ T5688] cypress 0003:04B4:BCA1.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0 [ 241.100213][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 241.209403][ T8447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.459034][ T8455] FAULT_INJECTION: forcing a failure. [ 241.459034][ T8455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.459073][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.4.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.459100][ T8455] Tainted: [L]=SOFTLOCKUP [ 241.459108][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.459120][ T8455] Call Trace: [ 241.459129][ T8455] [ 241.459138][ T8455] dump_stack_lvl+0xe8/0x150 [ 241.459173][ T8455] should_fail_ex+0x410/0x560 [ 241.459204][ T8455] _copy_from_user+0x2d/0xb0 [ 241.459231][ T8455] ___sys_recvmsg+0x173/0x5a0 [ 241.459258][ T8455] ? __pfx____sys_recvmsg+0x10/0x10 [ 241.459284][ T8455] ? lock_acquire+0x115/0x350 [ 241.459341][ T8455] do_recvmmsg+0x31a/0x7f0 [ 241.459369][ T8455] ? __pfx_do_recvmmsg+0x10/0x10 [ 241.459401][ T8455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.459432][ T8455] ? __fget_files+0x3a2/0x420 [ 241.459473][ T8455] __x64_sys_recvmmsg+0x198/0x250 [ 241.459495][ T8455] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 241.459528][ T8455] do_syscall_64+0x166/0x520 [ 241.459555][ T8455] ? trace_irq_disable+0x3b/0x140 [ 241.459575][ T8455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.459596][ T8455] ? clear_bhb_loop+0x70/0xc0 [ 241.459619][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.459638][ T8455] RIP: 0033:0x7f8a0e19e159 [ 241.459657][ T8455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.459674][ T8455] RSP: 002b:00007f8a0c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 241.459698][ T8455] RAX: ffffffffffffffda RBX: 00007f8a0e426090 RCX: 00007f8a0e19e159 [ 241.459713][ T8455] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 241.459725][ T8455] RBP: 00007f8a0c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.459738][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.459751][ T8455] R13: 00007f8a0e426128 R14: 00007f8a0e426090 R15: 00007f8a0e54fa48 [ 241.459784][ T8455] [ 242.561119][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 242.685410][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.711434][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 242.712331][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 242.715471][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.752160][ T10] usb 3-1: config 0 descriptor?? [ 242.793307][ T10] usb 3-1: probing VID:PID(0424:012C) [ 242.798605][ T10] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 242.798715][ T10] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 242.798736][ T10] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 242.798754][ T10] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 242.798772][ T10] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 243.090995][ T30] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 243.257120][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 243.262021][ T30] usb 5-1: config index 0 descriptor too short (expected 1158, got 134) [ 243.262072][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.262091][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.273753][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.273778][ T30] usb 5-1: Product: syz [ 243.273791][ T30] usb 5-1: Manufacturer: syz [ 243.273804][ T30] usb 5-1: SerialNumber: syz [ 243.342062][ T10] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 243.565798][ T10] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 243.616661][ T924] usb 2-1: USB disconnect, device number 44 [ 244.659434][ T10] usb 3-1: USB disconnect, device number 41 [ 244.660359][ T5616] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 244.688149][ T30] usb 5-1: USB disconnect, device number 39 [ 244.689112][ T5616] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 244.713012][ T5616] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 244.767800][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 244.847464][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.998098][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 244.998127][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 245.166428][ T8488] tipc: Resetting bearer [ 245.296932][ T31] audit: type=1400 audit(1791104258.731:3115): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=8495 comm="syz.0.717" [ 245.407764][ T10] USB vub300 remote SDIO host controller[0] now disconnected [ 245.683051][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 245.683081][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8472, name: syz.3.711 [ 245.683101][ C0] preempt_count: 100, expected: 0 [ 245.683113][ C0] RCU nest depth: 1, expected: 0 [ 245.683124][ C0] locks held by syz.3.711/8472: 4, last CPU#0: [ 245.683140][ C0] #0: ffff88802b9bccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 245.683199][ C0] #1: ffff88804ce2ecd0 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0x119/0x720 [ 245.683247][ C0] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 245.683301][ C0] #3: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 245.683366][ C0] Preemption disabled at: [ 245.683373][ C0] [] handle_softirqs+0xab/0x860 [ 245.683411][ C0] CPU: 0 UID: 0 PID: 8472 Comm: syz.3.711 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.683439][ C0] Tainted: [L]=SOFTLOCKUP [ 245.683447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 245.683459][ C0] Call Trace: [ 245.683468][ C0] [ 245.683477][ C0] dump_stack_lvl+0xe8/0x150 [ 245.683508][ C0] __might_resched+0x36a/0x4c0 [ 245.683541][ C0] ? handle_softirqs+0xab/0x860 [ 245.683571][ C0] __cancel_work_sync+0x6d/0x110 [ 245.683605][ C0] mmc_free_host+0x19/0x40 [ 245.683633][ C0] call_timer_fn+0x18d/0x5f0 [ 245.683659][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 245.683682][ C0] ? call_timer_fn+0xd5/0x5f0 [ 245.683707][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 245.683745][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.683772][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 245.683796][ C0] __run_timer_base+0x652/0x8b0 [ 245.683836][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 245.683865][ C0] ? ktime_get+0x1f5/0x220 [ 245.683887][ C0] ? lapic_next_event+0x11/0x20 [ 245.683916][ C0] run_timer_softirq+0xb7/0x170 [ 245.683941][ C0] handle_softirqs+0x226/0x860 [ 245.683972][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 245.684006][ C0] __irq_exit_rcu+0xcb/0x220 [ 245.684034][ C0] irq_exit_rcu+0x9/0x30 [ 245.684059][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 245.684088][ C0] [ 245.684095][ C0] [ 245.684104][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.684127][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 245.684150][ C0] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 245.684168][ C0] RSP: 0018:ffffc9000724f160 EFLAGS: 00000296 [ 245.684187][ C0] RAX: 935df50bc747c800 RBX: 0000000000000000 RCX: 0000000000000046 [ 245.684201][ C0] RDX: 000000003ced1f58 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 245.684217][ C0] RBP: ffff88802961ddc0 R08: ffffffff817811df R09: 0000000000000000 [ 245.684231][ C0] R10: ffffc9000724f298 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0 [ 245.684252][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 245.684270][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 245.684292][ C0] ? unwind_next_frame+0x8f/0x2550 [ 245.684342][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.684364][ C0] ? unwind_next_frame+0x8f/0x2550 [ 245.684388][ C0] unwind_next_frame+0xac/0x2550 [ 245.684411][ C0] ? unwind_next_frame+0x8f/0x2550 [ 245.684439][ C0] ? do_syscall_64+0x328/0x520 [ 245.684468][ C0] ? unwind_next_frame+0x8f/0x2550 [ 245.684495][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 245.684516][ C0] arch_stack_walk+0x11b/0x150 [ 245.684545][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.684571][ C0] stack_trace_save+0xa9/0x100 [ 245.684592][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 245.684616][ C0] ? __lock_acquire+0x747/0x2de0 [ 245.684643][ C0] kasan_save_track+0x3e/0x80 [ 245.684666][ C0] ? kasan_save_track+0x3e/0x80 [ 245.684688][ C0] ? kasan_save_free_info+0x40/0x50 [ 245.684718][ C0] ? __kasan_slab_free+0x5c/0x80 [ 245.684743][ C0] ? kmem_cache_free+0x182/0x650 [ 245.684766][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 245.684787][ C0] ? free_pgtables+0x836/0xb70 [ 245.684808][ C0] ? exit_mmap+0x4aa/0x9f0 [ 245.684825][ C0] ? __mmput+0x118/0x420 [ 245.684840][ C0] ? exit_mm+0x18e/0x240 [ 245.684851][ C0] ? do_exit+0x6cd/0x2360 [ 245.684861][ C0] ? do_group_exit+0x22d/0x2f0 [ 245.684871][ C0] ? get_signal+0x121b/0x12c0 [ 245.684884][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 245.684900][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 245.684912][ C0] ? do_syscall_64+0x328/0x520 [ 245.684927][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.684958][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 245.684968][ C0] kasan_save_free_info+0x40/0x50 [ 245.684985][ C0] __kasan_slab_free+0x5c/0x80 [ 245.684999][ C0] kmem_cache_free+0x182/0x650 [ 245.685015][ C0] unlink_anon_vmas+0x35d/0x720 [ 245.685031][ C0] free_pgtables+0x836/0xb70 [ 245.685043][ C0] ? lock_acquire+0x115/0x350 [ 245.685060][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 245.685076][ C0] ? __pfx_down_write+0x10/0x10 [ 245.685092][ C0] exit_mmap+0x4aa/0x9f0 [ 245.685104][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 245.685114][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 245.685138][ C0] ? __pfx_exit_aio+0x10/0x10 [ 245.685155][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 245.685174][ C0] __mmput+0x118/0x420 [ 245.685189][ C0] exit_mm+0x18e/0x240 [ 245.685201][ C0] do_exit+0x6cd/0x2360 [ 245.685218][ C0] ? __pfx_do_exit+0x10/0x10 [ 245.685231][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.685251][ C0] do_group_exit+0x22d/0x2f0 [ 245.685262][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.685278][ C0] get_signal+0x121b/0x12c0 [ 245.685303][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 245.685327][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 245.685352][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 245.685364][ C0] ? rcu_is_watching+0x16/0xb0 [ 245.685381][ C0] do_syscall_64+0x328/0x520 [ 245.685396][ C0] ? trace_irq_disable+0x3b/0x140 [ 245.685408][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.685419][ C0] ? clear_bhb_loop+0x70/0xc0 [ 245.685433][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.685444][ C0] RIP: 0033:0x7f626339e159 [ 245.685456][ C0] Code: Unable to access opcode bytes at 0x7f626339e12f. [ 245.685462][ C0] RSP: 002b:00007f62642a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 245.685475][ C0] RAX: fffffffffffffe00 RBX: 00007f6263625fa8 RCX: 00007f626339e159 [ 245.685483][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6263625fa8 [ 245.685491][ C0] RBP: 00007f6263625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 245.685498][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.685505][ C0] R13: 00007f6263626038 R14: 00007f626374f960 R15: 00007f626374fa48 [ 245.685521][ C0] [ 245.685953][ C0] [ 245.692672][ T924] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 246.379565][ C0] ============================= [ 246.384429][ C0] WARNING: suspicious RCU usage [ 246.389268][ C0] syzkaller #0 Tainted: G W L [ 246.395248][ C0] ----------------------------- [ 246.400084][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 246.412070][ C0] [ 246.412070][ C0] other info that might help us debug this: [ 246.412070][ C0] [ 246.422306][ C0] [ 246.422306][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 246.430354][ C0] locks held by syz.3.711/8472: 4, last CPU#0: [ 246.436568][ C0] #0: ffff88802b9bccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 246.445665][ C0] #1: ffff88804ce2ecd0 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0x119/0x720 [ 246.455534][ C0] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 246.465239][ C0] #3: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 246.475714][ C0] [ 246.475714][ C0] stack backtrace: [ 246.481626][ C0] CPU: 0 UID: 0 PID: 8472 Comm: syz.3.711 Tainted: G W L syzkaller #0 PREEMPT(full) [ 246.492381][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 246.497570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 246.507630][ C0] Call Trace: [ 246.510903][ C0] [ 246.513747][ C0] dump_stack_lvl+0xe8/0x150 [ 246.518338][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 246.523713][ C0] __synchronize_srcu+0x157/0x2f0 [ 246.528730][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 246.534269][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.539300][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 246.545116][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 246.550663][ C0] ? synchronize_srcu+0x20a/0x260 [ 246.555704][ C0] wakeup_source_unregister+0x129/0x3f0 [ 246.561252][ C0] mmc_host_classdev_release+0x47/0x100 [ 246.566799][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 246.572953][ C0] device_release+0xc4/0x1f0 [ 246.577556][ C0] kobject_put+0x222/0x550 [ 246.581991][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 246.586772][ C0] call_timer_fn+0x18d/0x5f0 [ 246.591364][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 246.598028][ C0] ? call_timer_fn+0xd5/0x5f0 [ 246.602699][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 246.607835][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.613062][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 246.619743][ C0] __run_timer_base+0x652/0x8b0 [ 246.624612][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 246.629985][ C0] ? ktime_get+0x1f5/0x220 [ 246.634403][ C0] ? lapic_next_event+0x11/0x20 [ 246.639251][ C0] run_timer_softirq+0xb7/0x170 [ 246.644101][ C0] handle_softirqs+0x226/0x860 [ 246.648865][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 246.653629][ C0] __irq_exit_rcu+0xcb/0x220 [ 246.658216][ C0] irq_exit_rcu+0x9/0x30 [ 246.662457][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 246.668092][ C0] [ 246.671014][ C0] [ 246.673941][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.679913][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 246.685192][ C0] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 246.704791][ C0] RSP: 0018:ffffc9000724f160 EFLAGS: 00000296 [ 246.710869][ C0] RAX: 935df50bc747c800 RBX: 0000000000000000 RCX: 0000000000000046 [ 246.718833][ C0] RDX: 000000003ced1f58 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 246.726795][ C0] RBP: ffff88802961ddc0 R08: ffffffff817811df R09: 0000000000000000 [ 246.734773][ C0] R10: ffffc9000724f298 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0 [ 246.742735][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 246.750716][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.756866][ C0] ? unwind_next_frame+0x8f/0x2550 [ 246.761979][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.768042][ C0] ? unwind_next_frame+0x8f/0x2550 [ 246.773145][ C0] unwind_next_frame+0xac/0x2550 [ 246.778078][ C0] ? unwind_next_frame+0x8f/0x2550 [ 246.783183][ C0] ? do_syscall_64+0x328/0x520 [ 246.787945][ C0] ? unwind_next_frame+0x8f/0x2550 [ 246.793053][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.799205][ C0] arch_stack_walk+0x11b/0x150 [ 246.803967][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.810032][ C0] stack_trace_save+0xa9/0x100 [ 246.814803][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 246.820170][ C0] ? __lock_acquire+0x747/0x2de0 [ 246.825103][ C0] kasan_save_track+0x3e/0x80 [ 246.829772][ C0] ? kasan_save_track+0x3e/0x80 [ 246.834613][ C0] ? kasan_save_free_info+0x40/0x50 [ 246.839810][ C0] ? __kasan_slab_free+0x5c/0x80 [ 246.844740][ C0] ? kmem_cache_free+0x182/0x650 [ 246.849670][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 246.854683][ C0] ? free_pgtables+0x836/0xb70 [ 246.859454][ C0] ? exit_mmap+0x4aa/0x9f0 [ 246.863865][ C0] ? __mmput+0x118/0x420 [ 246.868102][ C0] ? exit_mm+0x18e/0x240 [ 246.872334][ C0] ? do_exit+0x6cd/0x2360 [ 246.876666][ C0] ? do_group_exit+0x22d/0x2f0 [ 246.881437][ C0] ? get_signal+0x121b/0x12c0 [ 246.886107][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 246.891821][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 246.897378][ C0] ? do_syscall_64+0x328/0x520 [ 246.902153][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.908232][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 246.913246][ C0] kasan_save_free_info+0x40/0x50 [ 246.918270][ C0] __kasan_slab_free+0x5c/0x80 [ 246.923027][ C0] kmem_cache_free+0x182/0x650 [ 246.927874][ C0] unlink_anon_vmas+0x35d/0x720 [ 246.932735][ C0] free_pgtables+0x836/0xb70 [ 246.937317][ C0] ? lock_acquire+0x115/0x350 [ 246.941994][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 246.947099][ C0] ? __pfx_down_write+0x10/0x10 [ 246.951949][ C0] exit_mmap+0x4aa/0x9f0 [ 246.956192][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 246.960942][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 246.966232][ C0] ? __pfx_exit_aio+0x10/0x10 [ 246.970909][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 246.976121][ C0] __mmput+0x118/0x420 [ 246.980188][ C0] exit_mm+0x18e/0x240 [ 246.984258][ C0] do_exit+0x6cd/0x2360 [ 246.988435][ C0] ? __pfx_do_exit+0x10/0x10 [ 246.993025][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.998057][ C0] do_group_exit+0x22d/0x2f0 [ 247.002652][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.007854][ C0] get_signal+0x121b/0x12c0 [ 247.012364][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 247.017911][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 247.024071][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 247.029440][ C0] ? rcu_is_watching+0x16/0xb0 [ 247.034202][ C0] do_syscall_64+0x328/0x520 [ 247.038793][ C0] ? trace_irq_disable+0x3b/0x140 [ 247.043807][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.049866][ C0] ? clear_bhb_loop+0x70/0xc0 [ 247.054539][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.060441][ C0] RIP: 0033:0x7f626339e159 [ 247.064852][ C0] Code: Unable to access opcode bytes at 0x7f626339e12f. [ 247.071859][ C0] RSP: 002b:00007f62642a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 247.080278][ C0] RAX: fffffffffffffe00 RBX: 00007f6263625fa8 RCX: 00007f626339e159 [ 247.088242][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6263625fa8 [ 247.096203][ C0] RBP: 00007f6263625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 247.104166][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.112142][ C0] R13: 00007f6263626038 R14: 00007f626374f960 R15: 00007f626374fa48 [ 247.120117][ C0] [ 247.123174][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 247.123185][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8472, name: syz.3.711 [ 247.123194][ C0] preempt_count: 100, expected: 0 [ 247.123201][ C0] RCU nest depth: 1, expected: 0 [ 247.123207][ C0] locks held by syz.3.711/8472: 4, last CPU#0: [ 247.123216][ C0] #0: ffff88802b9bccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 247.123250][ C0] #1: ffff88804ce2ecd0 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0x119/0x720 [ 247.123280][ C0] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 247.123311][ C0] #3: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 247.123343][ C0] Preemption disabled at: [ 247.123346][ C0] [] handle_softirqs+0xab/0x860 [ 247.123369][ C0] CPU: 0 UID: 0 PID: 8472 Comm: syz.3.711 Tainted: G W L syzkaller #0 PREEMPT(full) [ 247.123387][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 247.123391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.123398][ C0] Call Trace: [ 247.123404][ C0] [ 247.123410][ C0] dump_stack_lvl+0xe8/0x150 [ 247.123428][ C0] __might_resched+0x36a/0x4c0 [ 247.123446][ C0] ? handle_softirqs+0xab/0x860 [ 247.123461][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 247.123476][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 247.123488][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.123518][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.123532][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 247.123547][ C0] ? synchronize_srcu+0x20a/0x260 [ 247.123569][ C0] wakeup_source_unregister+0x129/0x3f0 [ 247.123602][ C0] mmc_host_classdev_release+0x47/0x100 [ 247.123619][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 247.123634][ C0] device_release+0xc4/0x1f0 [ 247.123651][ C0] kobject_put+0x222/0x550 [ 247.123663][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 247.123681][ C0] call_timer_fn+0x18d/0x5f0 [ 247.123695][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 247.123707][ C0] ? call_timer_fn+0xd5/0x5f0 [ 247.123720][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 247.123739][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.123752][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 247.123766][ C0] __run_timer_base+0x652/0x8b0 [ 247.123787][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 247.123802][ C0] ? ktime_get+0x1f5/0x220 [ 247.123814][ C0] ? lapic_next_event+0x11/0x20 [ 247.123830][ C0] run_timer_softirq+0xb7/0x170 [ 247.123844][ C0] handle_softirqs+0x226/0x860 [ 247.123860][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 247.123878][ C0] __irq_exit_rcu+0xcb/0x220 [ 247.123893][ C0] irq_exit_rcu+0x9/0x30 [ 247.123906][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 247.123922][ C0] [ 247.123926][ C0] [ 247.123931][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.123944][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 247.123957][ C0] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 247.123967][ C0] RSP: 0018:ffffc9000724f160 EFLAGS: 00000296 [ 247.123978][ C0] RAX: 935df50bc747c800 RBX: 0000000000000000 RCX: 0000000000000046 [ 247.123986][ C0] RDX: 000000003ced1f58 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 247.123998][ C0] RBP: ffff88802961ddc0 R08: ffffffff817811df R09: 0000000000000000 [ 247.124006][ C0] R10: ffffc9000724f298 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0 [ 247.124014][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 247.124024][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.124036][ C0] ? unwind_next_frame+0x8f/0x2550 [ 247.124054][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.124065][ C0] ? unwind_next_frame+0x8f/0x2550 [ 247.124078][ C0] unwind_next_frame+0xac/0x2550 [ 247.124091][ C0] ? unwind_next_frame+0x8f/0x2550 [ 247.124106][ C0] ? do_syscall_64+0x328/0x520 [ 247.124121][ C0] ? unwind_next_frame+0x8f/0x2550 [ 247.124135][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.124147][ C0] arch_stack_walk+0x11b/0x150 [ 247.124164][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.124178][ C0] stack_trace_save+0xa9/0x100 [ 247.124190][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 247.124203][ C0] ? __lock_acquire+0x747/0x2de0 [ 247.124217][ C0] kasan_save_track+0x3e/0x80 [ 247.124231][ C0] ? kasan_save_track+0x3e/0x80 [ 247.124242][ C0] ? kasan_save_free_info+0x40/0x50 [ 247.124257][ C0] ? __kasan_slab_free+0x5c/0x80 [ 247.124270][ C0] ? kmem_cache_free+0x182/0x650 [ 247.124282][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 247.124292][ C0] ? free_pgtables+0x836/0xb70 [ 247.124304][ C0] ? exit_mmap+0x4aa/0x9f0 [ 247.124324][ C0] ? __mmput+0x118/0x420 [ 247.124337][ C0] ? exit_mm+0x18e/0x240 [ 247.124347][ C0] ? do_exit+0x6cd/0x2360 [ 247.124357][ C0] ? do_group_exit+0x22d/0x2f0 [ 247.124368][ C0] ? get_signal+0x121b/0x12c0 [ 247.124381][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 247.124396][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 247.124408][ C0] ? do_syscall_64+0x328/0x520 [ 247.124423][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.124453][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 247.124464][ C0] kasan_save_free_info+0x40/0x50 [ 247.124480][ C0] __kasan_slab_free+0x5c/0x80 [ 247.124500][ C0] kmem_cache_free+0x182/0x650 [ 247.124517][ C0] unlink_anon_vmas+0x35d/0x720 [ 247.124533][ C0] free_pgtables+0x836/0xb70 [ 247.124545][ C0] ? lock_acquire+0x115/0x350 [ 247.124573][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 247.124602][ C0] ? __pfx_down_write+0x10/0x10 [ 247.124619][ C0] exit_mmap+0x4aa/0x9f0 [ 247.124632][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 247.124641][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 247.124666][ C0] ? __pfx_exit_aio+0x10/0x10 [ 247.124683][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 247.124702][ C0] __mmput+0x118/0x420 [ 247.124716][ C0] exit_mm+0x18e/0x240 [ 247.124730][ C0] do_exit+0x6cd/0x2360 [ 247.124746][ C0] ? __pfx_do_exit+0x10/0x10 [ 247.124759][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.124779][ C0] do_group_exit+0x22d/0x2f0 [ 247.124790][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.124807][ C0] get_signal+0x121b/0x12c0 [ 247.124831][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 247.124849][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 247.124873][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 247.124886][ C0] ? rcu_is_watching+0x16/0xb0 [ 247.124902][ C0] do_syscall_64+0x328/0x520 [ 247.124918][ C0] ? trace_irq_disable+0x3b/0x140 [ 247.124930][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.124941][ C0] ? clear_bhb_loop+0x70/0xc0 [ 247.124955][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.124966][ C0] RIP: 0033:0x7f626339e159 [ 247.124977][ C0] Code: Unable to access opcode bytes at 0x7f626339e12f. [ 247.124983][ C0] RSP: 002b:00007f62642a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 247.124998][ C0] RAX: fffffffffffffe00 RBX: 00007f6263625fa8 RCX: 00007f626339e159 [ 247.125006][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6263625fa8 [ 247.125014][ C0] RBP: 00007f6263625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 247.125021][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.125028][ C0] R13: 00007f6263626038 R14: 00007f626374f960 R15: 00007f626374fa48 [ 247.125045][ C0] [ 247.125053][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90007248000, but annotated. [ 247.125323][ C0] ------------[ cut here ]------------ [ 247.125328][ C0] 1 [ 247.125331][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.3.711/8472 [ 247.879469][ C0] Modules linked in: [ 247.883364][ C0] CPU: 0 UID: 0 PID: 8472 Comm: syz.3.711 Tainted: G W L syzkaller #0 PREEMPT(full) [ 247.894120][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 247.899303][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.909352][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 247.915259][ C0] Code: cc cc cc 41 ff c7 44 89 3d 49 10 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 247.934859][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 247.940919][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 935df50bc747c800 [ 247.948881][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 247.956853][ C0] RBP: ffff88802961dde0 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 247.964863][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff8880269318a0 [ 247.972830][ C0] R13: ffff888028d89738 R14: dffffc0000000000 R15: 0000000000000001 [ 247.980811][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 247.989735][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.996333][ C0] CR2: 0000200000124030 CR3: 0000000065bcc000 CR4: 00000000003526f0 [ 248.004332][ C0] Call Trace: [ 248.007612][ C0] [ 248.010470][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 248.016019][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 248.021048][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 248.026589][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.031635][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.037433][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 248.042979][ C0] ? synchronize_srcu+0x20a/0x260 [ 248.048015][ C0] wakeup_source_unregister+0x129/0x3f0 [ 248.053581][ C0] mmc_host_classdev_release+0x47/0x100 [ 248.059134][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 248.065283][ C0] device_release+0xc4/0x1f0 [ 248.069878][ C0] kobject_put+0x222/0x550 [ 248.074289][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 248.079055][ C0] call_timer_fn+0x18d/0x5f0 [ 248.083642][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.090307][ C0] ? call_timer_fn+0xd5/0x5f0 [ 248.094979][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 248.100087][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.105279][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.111963][ C0] __run_timer_base+0x652/0x8b0 [ 248.116815][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 248.122182][ C0] ? ktime_get+0x1f5/0x220 [ 248.126596][ C0] ? lapic_next_event+0x11/0x20 [ 248.131444][ C0] run_timer_softirq+0xb7/0x170 [ 248.136286][ C0] handle_softirqs+0x226/0x860 [ 248.141051][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 248.145812][ C0] __irq_exit_rcu+0xcb/0x220 [ 248.150397][ C0] irq_exit_rcu+0x9/0x30 [ 248.154634][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 248.160267][ C0] [ 248.163191][ C0] [ 248.166115][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.172089][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 248.177390][ C0] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 248.196988][ C0] RSP: 0018:ffffc9000724f160 EFLAGS: 00000296 [ 248.203046][ C0] RAX: 935df50bc747c800 RBX: 0000000000000000 RCX: 0000000000000046 [ 248.211010][ C0] RDX: 000000003ced1f58 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 248.218974][ C0] RBP: ffff88802961ddc0 R08: ffffffff817811df R09: 0000000000000000 [ 248.226954][ C0] R10: ffffc9000724f298 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0 [ 248.234916][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 248.242881][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.249026][ C0] ? unwind_next_frame+0x8f/0x2550 [ 248.254134][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.260191][ C0] ? unwind_next_frame+0x8f/0x2550 [ 248.265297][ C0] unwind_next_frame+0xac/0x2550 [ 248.270234][ C0] ? unwind_next_frame+0x8f/0x2550 [ 248.275343][ C0] ? do_syscall_64+0x328/0x520 [ 248.280103][ C0] ? unwind_next_frame+0x8f/0x2550 [ 248.285205][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.291352][ C0] arch_stack_walk+0x11b/0x150 [ 248.296113][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.302177][ C0] stack_trace_save+0xa9/0x100 [ 248.306932][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 248.312314][ C0] ? __lock_acquire+0x747/0x2de0 [ 248.317262][ C0] kasan_save_track+0x3e/0x80 [ 248.321929][ C0] ? kasan_save_track+0x3e/0x80 [ 248.326770][ C0] ? kasan_save_free_info+0x40/0x50 [ 248.331961][ C0] ? __kasan_slab_free+0x5c/0x80 [ 248.336909][ C0] ? kmem_cache_free+0x182/0x650 [ 248.341840][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 248.346855][ C0] ? free_pgtables+0x836/0xb70 [ 248.351609][ C0] ? exit_mmap+0x4aa/0x9f0 [ 248.356014][ C0] ? __mmput+0x118/0x420 [ 248.360264][ C0] ? exit_mm+0x18e/0x240 [ 248.364498][ C0] ? do_exit+0x6cd/0x2360 [ 248.368815][ C0] ? do_group_exit+0x22d/0x2f0 [ 248.373575][ C0] ? get_signal+0x121b/0x12c0 [ 248.378273][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 248.383988][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 248.389522][ C0] ? do_syscall_64+0x328/0x520 [ 248.394286][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.400370][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 248.405399][ C0] kasan_save_free_info+0x40/0x50 [ 248.410433][ C0] __kasan_slab_free+0x5c/0x80 [ 248.415221][ C0] kmem_cache_free+0x182/0x650 [ 248.419992][ C0] unlink_anon_vmas+0x35d/0x720 [ 248.424849][ C0] free_pgtables+0x836/0xb70 [ 248.429441][ C0] ? lock_acquire+0x115/0x350 [ 248.434118][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 248.439242][ C0] ? __pfx_down_write+0x10/0x10 [ 248.444092][ C0] exit_mmap+0x4aa/0x9f0 [ 248.448329][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 248.453086][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 248.458377][ C0] ? __pfx_exit_aio+0x10/0x10 [ 248.463079][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 248.468298][ C0] __mmput+0x118/0x420 [ 248.472383][ C0] exit_mm+0x18e/0x240 [ 248.476452][ C0] do_exit+0x6cd/0x2360 [ 248.480630][ C0] ? __pfx_do_exit+0x10/0x10 [ 248.485236][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.490277][ C0] do_group_exit+0x22d/0x2f0 [ 248.494868][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.500072][ C0] get_signal+0x121b/0x12c0 [ 248.504601][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 248.510150][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.516312][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 248.521678][ C0] ? rcu_is_watching+0x16/0xb0 [ 248.526439][ C0] do_syscall_64+0x328/0x520 [ 248.531028][ C0] ? trace_irq_disable+0x3b/0x140 [ 248.536044][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.542103][ C0] ? clear_bhb_loop+0x70/0xc0 [ 248.546775][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.552657][ C0] RIP: 0033:0x7f626339e159 [ 248.557065][ C0] Code: Unable to access opcode bytes at 0x7f626339e12f. [ 248.564068][ C0] RSP: 002b:00007f62642a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 248.572473][ C0] RAX: fffffffffffffe00 RBX: 00007f6263625fa8 RCX: 00007f626339e159 [ 248.580435][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6263625fa8 [ 248.588400][ C0] RBP: 00007f6263625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 248.596364][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.604331][ C0] R13: 00007f6263626038 R14: 00007f626374f960 R15: 00007f626374fa48 [ 248.612306][ C0] [ 248.615317][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.622597][ C0] CPU: 0 UID: 0 PID: 8472 Comm: syz.3.711 Tainted: G W L syzkaller #0 PREEMPT(full) [ 248.633364][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 248.638545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 248.648611][ C0] Call Trace: [ 248.651909][ C0] [ 248.654747][ C0] vpanic+0x56d/0xa60 [ 248.658729][ C0] ? __pfx__printk+0x10/0x10 [ 248.663311][ C0] ? __pfx_vpanic+0x10/0x10 [ 248.667811][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 248.673089][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 248.678286][ C0] panic+0xc5/0xd0 [ 248.682002][ C0] ? __pfx_panic+0x10/0x10 [ 248.686426][ C0] __warn+0x315/0x4c0 [ 248.690411][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 248.695692][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 248.700974][ C0] __report_bug+0x276/0x570 [ 248.705477][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 248.710760][ C0] ? __pfx___report_bug+0x10/0x10 [ 248.715780][ C0] ? __wake_up_klogd+0xf0/0x130 [ 248.720626][ C0] ? vprintk_emit+0x4ee/0x560 [ 248.725298][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 248.730320][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 248.735602][ C0] report_bug+0x16b/0x220 [ 248.739932][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 248.745221][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 248.750502][ C0] handle_bug+0x9c/0x200 [ 248.754746][ C0] exc_invalid_op+0x1a/0x50 [ 248.759239][ C0] asm_exc_invalid_op+0x1a/0x20 [ 248.764088][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 248.769993][ C0] Code: cc cc cc 41 ff c7 44 89 3d 49 10 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 248.789601][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 248.795678][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 935df50bc747c800 [ 248.803644][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 248.811606][ C0] RBP: ffff88802961dde0 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 248.819578][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff8880269318a0 [ 248.827566][ C0] R13: ffff888028d89738 R14: dffffc0000000000 R15: 0000000000000001 [ 248.835557][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 248.840871][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 248.846436][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 248.851454][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 248.856990][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.862029][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.867829][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 248.873369][ C0] ? synchronize_srcu+0x20a/0x260 [ 248.878392][ C0] wakeup_source_unregister+0x129/0x3f0 [ 248.883951][ C0] mmc_host_classdev_release+0x47/0x100 [ 248.889491][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 248.895653][ C0] device_release+0xc4/0x1f0 [ 248.900242][ C0] kobject_put+0x222/0x550 [ 248.904650][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 248.909412][ C0] call_timer_fn+0x18d/0x5f0 [ 248.913994][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.920657][ C0] ? call_timer_fn+0xd5/0x5f0 [ 248.925329][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 248.930437][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.935628][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.942294][ C0] __run_timer_base+0x652/0x8b0 [ 248.947146][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 248.952511][ C0] ? ktime_get+0x1f5/0x220 [ 248.956923][ C0] ? lapic_next_event+0x11/0x20 [ 248.961767][ C0] run_timer_softirq+0xb7/0x170 [ 248.966611][ C0] handle_softirqs+0x226/0x860 [ 248.971372][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 248.976155][ C0] __irq_exit_rcu+0xcb/0x220 [ 248.980759][ C0] irq_exit_rcu+0x9/0x30 [ 248.985023][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 248.990660][ C0] [ 248.993597][ C0] [ 248.996526][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.002529][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 249.007827][ C0] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 249.027428][ C0] RSP: 0018:ffffc9000724f160 EFLAGS: 00000296 [ 249.033492][ C0] RAX: 935df50bc747c800 RBX: 0000000000000000 RCX: 0000000000000046 [ 249.041474][ C0] RDX: 000000003ced1f58 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 249.049455][ C0] RBP: ffff88802961ddc0 R08: ffffffff817811df R09: 0000000000000000 [ 249.057419][ C0] R10: ffffc9000724f298 R11: ffffffff81b2c450 R12: ffffffff8ed5c8a0 [ 249.065384][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 249.073349][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.079498][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.084618][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.090693][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.095797][ C0] unwind_next_frame+0xac/0x2550 [ 249.100726][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.105833][ C0] ? do_syscall_64+0x328/0x520 [ 249.110601][ C0] ? unwind_next_frame+0x8f/0x2550 [ 249.115730][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.121876][ C0] arch_stack_walk+0x11b/0x150 [ 249.126640][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.132700][ C0] stack_trace_save+0xa9/0x100 [ 249.137458][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 249.142824][ C0] ? __lock_acquire+0x747/0x2de0 [ 249.147757][ C0] kasan_save_track+0x3e/0x80 [ 249.152429][ C0] ? kasan_save_track+0x3e/0x80 [ 249.157271][ C0] ? kasan_save_free_info+0x40/0x50 [ 249.162464][ C0] ? __kasan_slab_free+0x5c/0x80 [ 249.167411][ C0] ? kmem_cache_free+0x182/0x650 [ 249.172346][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 249.177361][ C0] ? free_pgtables+0x836/0xb70 [ 249.182116][ C0] ? exit_mmap+0x4aa/0x9f0 [ 249.186521][ C0] ? __mmput+0x118/0x420 [ 249.190767][ C0] ? exit_mm+0x18e/0x240 [ 249.195001][ C0] ? do_exit+0x6cd/0x2360 [ 249.199323][ C0] ? do_group_exit+0x22d/0x2f0 [ 249.204074][ C0] ? get_signal+0x121b/0x12c0 [ 249.208746][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 249.214462][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 249.220002][ C0] ? do_syscall_64+0x328/0x520 [ 249.224763][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.230844][ C0] ? unlink_anon_vmas+0x35d/0x720 [ 249.235857][ C0] kasan_save_free_info+0x40/0x50 [ 249.240882][ C0] __kasan_slab_free+0x5c/0x80 [ 249.245642][ C0] kmem_cache_free+0x182/0x650 [ 249.250400][ C0] unlink_anon_vmas+0x35d/0x720 [ 249.255245][ C0] free_pgtables+0x836/0xb70 [ 249.259829][ C0] ? lock_acquire+0x115/0x350 [ 249.264509][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 249.269635][ C0] ? __pfx_down_write+0x10/0x10 [ 249.274484][ C0] exit_mmap+0x4aa/0x9f0 [ 249.278726][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 249.283494][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 249.288793][ C0] ? __pfx_exit_aio+0x10/0x10 [ 249.293468][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 249.298670][ C0] __mmput+0x118/0x420 [ 249.302735][ C0] exit_mm+0x18e/0x240 [ 249.306800][ C0] do_exit+0x6cd/0x2360 [ 249.310955][ C0] ? __pfx_do_exit+0x10/0x10 [ 249.315565][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.320611][ C0] do_group_exit+0x22d/0x2f0 [ 249.325195][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.330392][ C0] get_signal+0x121b/0x12c0 [ 249.334900][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 249.340448][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 249.346611][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 249.351982][ C0] ? rcu_is_watching+0x16/0xb0 [ 249.356747][ C0] do_syscall_64+0x328/0x520 [ 249.361343][ C0] ? trace_irq_disable+0x3b/0x140 [ 249.366387][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.372459][ C0] ? clear_bhb_loop+0x70/0xc0 [ 249.377144][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.383028][ C0] RIP: 0033:0x7f626339e159 [ 249.387437][ C0] Code: Unable to access opcode bytes at 0x7f626339e12f. [ 249.394445][ C0] RSP: 002b:00007f62642a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.402855][ C0] RAX: fffffffffffffe00 RBX: 00007f6263625fa8 RCX: 00007f626339e159 [ 249.410840][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6263625fa8 [ 249.418808][ C0] RBP: 00007f6263625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 249.426778][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.434752][ C0] R13: 00007f6263626038 R14: 00007f626374f960 R15: 00007f626374fa48 [ 249.442735][ C0] [ 249.445913][ C0] Kernel Offset: disabled [ 249.450239][ C0] Rebooting in 86400 seconds..