last executing test programs: 6m35.380570813s ago: executing program 4 (id=915): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x64, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r10, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x64}}, 0x40) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r14, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4008040) 6m34.518447968s ago: executing program 4 (id=922): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) 6m33.618743172s ago: executing program 4 (id=926): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xf}, &(0x7f0000000180)=0x8) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x1) 6m33.452226941s ago: executing program 4 (id=927): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) 6m33.25294065s ago: executing program 4 (id=928): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400004600fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 6m32.749596605s ago: executing program 4 (id=934): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f00007d5000/0x3000)=nil, 0x3000}}) 6m32.291071157s ago: executing program 32 (id=934): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f00007d5000/0x3000)=nil, 0x3000}}) 5m24.165505089s ago: executing program 2 (id=1320): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b21000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 5m22.341390053s ago: executing program 2 (id=1328): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x1135010, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x2}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000b0000030000000900010073797a300000000050000000030a0300000000000000000003000000c6b1030073797a31000000000900010073797a30000000001400048008000240000000000800014000000000100008800c0001400000000800000000000000001100010000000000000000000700000a"], 0x98}}, 0x0) 5m20.895552957s ago: executing program 2 (id=1339): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m20.505591274s ago: executing program 2 (id=1344): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) 5m19.544078423s ago: executing program 2 (id=1351): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4532, 0x10100, 0xfffffffd, 0x24c, 0x0, r1}, &(0x7f0000000680), &(0x7f0000000280), &(0x7f0000000000)=0x0) io_uring_enter(r2, 0x3677, 0x9a6d, 0x7, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) syz_clone3(&(0x7f0000000600)={0x44000080, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)=0x0, {0x34}, &(0x7f00000004c0)=""/54, 0x36, &(0x7f0000000500)=""/142, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x3, r5}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=r4, @ANYBLOB="4c7b40509f934d671e6b7964942f7f8de08eb7d1224f4e6c1b9ed0178d852ccc2c3ead58bf0764b4850d6fb966b5334d1f3611dec35630ded7ba4fd1", @ANYRES16=r3, @ANYRESOCT, @ANYRESOCT=r4], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) writev(0xffffffffffffffff, 0x0, 0x0) 5m19.169016915s ago: executing program 2 (id=1353): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',g']) r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 5m18.678531711s ago: executing program 33 (id=1353): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',g']) r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 4m43.526510695s ago: executing program 6 (id=1525): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0xfff, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x6], [0x2, 0x20000, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0xff, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xcc61, 0x6, 0xfffffffc, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x80000000, 0x4, 0x91a, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x15, &(0x7f00000005c0), 0x2, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4166}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x3}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m43.37126826s ago: executing program 6 (id=1526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000d3166a893caea6bd5d9e1388ebd342d974e798f4b5d90d9a94c900159cd126a3db7f"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x84, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x3c, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x6, 0x80) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000004c0)=0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce0000"], &(0x7f0000000040)='GPL\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r10, &(0x7f0000000480)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)="c7934c2b8cb65b8c23a498c85d99e9882c0d3f090eb7b6464a188a6ca1063ebadb5174c27bc50eb4371c14763aa6c0f112a8cc72189a784b87bae2d958275336903661a0a591032beaf89091f5891cdfd0665e179b3314318cc59e9cfb071cc1d619147383bf86365e5983ca5d62e9ce64e72b100f3b2da44e33f9a23e71824a9d61afa13b6047a6a58eb2941cab19beefc368799df927217159207eb522fac33985454af74673e3e7fc20c6d29fc50e0723f9e0b9", 0xb5}, {&(0x7f00000001c0)="e7d80a430bd1407c7af58bfe09ff3e85b5409b1a718914c0196bb94b10e8b9f51a09dffd38f7e180465edefc1f68c436536dfee9b29796cf256dd33da3ad9417e5551481a27d31b24ea84362356695bf37b4d85ad1124b", 0x57}, {&(0x7f00000003c0)="96b773bf2015cb898f690deabd19147918e364b75cf349916c1331ff5f4e6600ba6aaca9d6f0f69db5b97b272c1c55c7695fe4b5ec690f81c7a0997697d8c23dbdbc1c5f2575232acda013c3b2b6ee882444320d55ca0f6abc658a45cb337d6bb30075f74264164ead3f221e8f3b27de07c069aa2a603d0e7f4c1ac409df32545f098a69336155b1a06d5e85ed39030a3f5155723b9d0c4a683eae1a54d482bdb971274f496d7543d72bfb046c14fb66b2251ecfa3f8cd4730df3064", 0xbc}], 0x4, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 4m41.878312234s ago: executing program 6 (id=1531): timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x3938700}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0, 0x27}], 0x4b, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008091, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) 4m41.62942747s ago: executing program 6 (id=1534): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) 4m41.619227424s ago: executing program 6 (id=1535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x8}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3) 4m41.376931705s ago: executing program 6 (id=1538): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0xff07}, 0x2000000) 4m40.837201138s ago: executing program 34 (id=1538): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0xff07}, 0x2000000) 7.799716012s ago: executing program 7 (id=2487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001800"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) 7.608602306s ago: executing program 7 (id=2488): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={r8, r8}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000004340)={0x18, 0x0, r7, {0x200}}, 0x18) sendmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc020) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x90020, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 6.804905473s ago: executing program 5 (id=2492): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="000000ea3c7d", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.592554313s ago: executing program 5 (id=2494): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000440)=""/76, 0x0) unshare(0xe060400) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x200d3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) syz_io_uring_setup(0x4005dd8, &(0x7f0000003a40)={0x0, 0x84b7, 0x40, 0x3, 0x238, 0x0, r3}, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x5, 0x77f87502}}) 6.478025509s ago: executing program 3 (id=2496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) 6.328329278s ago: executing program 1 (id=2498): quotactl$Q_SYNC(0xffffffff800000ff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x2b2080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x5, 0x8, 0xfa11, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0xffffffff, 0x1}, 0xffffff1b) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x59a, 0x4) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x4}, 0x18, 0x0}}], 0x1, 0x40040c5) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES16=r1, @ANYRES8], 0x50) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat$cgroup(r3, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a8edc5a73c2fea9eb9b263215bb2b06ab1c199cdfe91f9cd4aa15a22e4fe87d9f41fbaa4ec812973307a5904e9909d43a06437ec16e3c62ed461e191099eaaa20f43a72d984e2b2511568559e3d417851448de2519125b2108ab300c9d73d2a0a308edc5947a16e8a86bba1612ed4c25bef7fb28283e5389709f156bc7293d6bcf94b73370c513a8a95aa3b6f2a52a12dd00b5d21a8e3726fb574a0d9711541fe6f49d7718432cab8db4720cd6a8a13d7265cb091a48bebc487c23b110203005b9f66f6c17585535365453ea5d15d", @ANYRES32=0x0, @ANYBLOB="c387b7f600000000140012800b0001006261746164760000040002800a003f00bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) r5 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000140)='FREEZING\x00', 0x9) sendfile(r5, r5, 0x0, 0x8000002) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') 6.258087291s ago: executing program 3 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f50008021100000000000500f6001000000008009e"], 0x70}}, 0x0) 6.037268564s ago: executing program 3 (id=2501): fanotify_init(0x200, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xb, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208340, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x1, 0x2c, 0x2, 0x0, 0x3}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syncfs(r5) socket(0xa, 0x5, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x20000023896) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 5.828574095s ago: executing program 0 (id=2503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4000009d, 0xbc9faef6, 0xc2}]}) 5.50760192s ago: executing program 0 (id=2504): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) 5.296564511s ago: executing program 7 (id=2505): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) unshare(0xe060400) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x200d3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) syz_io_uring_setup(0x4005dd8, &(0x7f0000003a40)={0x0, 0x84b7, 0x40, 0x3, 0x238, 0x0, r3}, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x5, 0x77f87502}}) 5.122998195s ago: executing program 0 (id=2506): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 4.872041534s ago: executing program 1 (id=2507): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4532, 0x10100, 0xfffffffd, 0x24c, 0x0, r1}, &(0x7f0000000680), &(0x7f0000000280), &(0x7f0000000000)=0x0) io_uring_enter(r2, 0x3677, 0x9a6d, 0x7, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) syz_clone3(&(0x7f0000000600)={0x44000080, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)=0x0, {0x34}, &(0x7f00000004c0)=""/54, 0x36, &(0x7f0000000500)=""/142, &(0x7f00000005c0), 0x0, {r1}}, 0x58) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x3, r5}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=r4, @ANYBLOB="4c7b40509f934d671e6b7964942f7f8de08eb7d1224f4e6c1b9ed0178d852ccc2c3ead58bf0764b4850d6fb966b5334d1f3611dec35630ded7ba4fd1", @ANYRES16=r3, @ANYRESOCT, @ANYRESOCT=r4], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) writev(0xffffffffffffffff, 0x0, 0x0) 4.656827005s ago: executing program 0 (id=2508): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x5, 0x1200, 0x0, 0x0}], 0x1}) 4.630800079s ago: executing program 5 (id=2509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.550775141s ago: executing program 5 (id=2510): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x4) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffc) 4.32143303s ago: executing program 5 (id=2511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000d3166a893caea6bd5d9e1388ebd342d974e798f4b5d90d9a94c900159cd126a3db7f"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x80) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000004c0)=0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce0000"], &(0x7f0000000040)='GPL\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r10, &(0x7f0000000480)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)="c7934c2b8cb65b8c23a498c85d99e9882c0d3f090eb7b6464a188a6ca1063ebadb5174c27bc50eb4371c14763aa6c0f112a8cc72189a784b87bae2d958275336903661a0a591032beaf89091f5891cdfd0665e179b3314318cc59e9cfb071cc1d619147383bf86365e5983ca5d62e9ce64e72b100f3b2da44e33f9a23e71824a9d61afa13b6047a6a58eb2941cab19beefc368799df927217159207eb522fac33985454af74673e3e7fc20c6d29fc50e0723f9e0b9", 0xb5}, {&(0x7f00000001c0)="e7d80a430bd1407c7af58bfe09ff3e85b5409b1a718914c0196bb94b10e8b9f51a09dffd38f7e180465edefc1f68c436536dfee9b29796cf256dd33da3ad9417e5551481a27d31b24ea84362356695bf37b4d85ad1124b", 0x57}, {&(0x7f00000003c0)="96b773bf2015cb898f690deabd19147918e364b75cf349916c1331ff5f4e6600ba6aaca9d6f0f69db5b97b272c1c55c7695fe4b5ec690f81c7a0997697d8c23dbdbc1c5f2575232acda013c3b2b6ee882444320d55ca0f6abc658a45cb337d6bb30075f74264164ead3f221e8f3b27de07c069aa2a603d0e7f4c1ac409df32545f098a69336155b1a06d5e85ed39030a3f5155723b9d0c4a683eae1a54d482bdb971274f496d7543d72bfb046c14fb66b2251ecfa3f8cd4730df3064", 0xbc}], 0x4, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 3.452500711s ago: executing program 3 (id=2512): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_getres(0xfffffffffffffff2, 0x0) 3.175233184s ago: executing program 7 (id=2513): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3.021557113s ago: executing program 0 (id=2514): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.959554282s ago: executing program 1 (id=2515): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={r8, r8}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000004340)={0x18, 0x0, r7, {0x200}}, 0x18) sendmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc020) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x90020, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 2.617698945s ago: executing program 3 (id=2516): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000440)=""/76, 0x0) unshare(0xe060400) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x200d3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) syz_io_uring_setup(0x4005dd8, &(0x7f0000003a40)={0x0, 0x84b7, 0x40, 0x3, 0x238, 0x0, r3}, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x5, 0x77f87502}}) 2.209733077s ago: executing program 5 (id=2517): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 1.624814174s ago: executing program 7 (id=2518): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x2003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'dummy0\x00', @link_local}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='vegas\x00', 0x6) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x4f98, 0x40100) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$loop(&(0x7f0000000300), 0xc000000000000001, 0x168081) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x1, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x9]}}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x14, 0x9, 0x7, 0x6, 0x31, 0x5, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xc, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.10896473s ago: executing program 0 (id=2519): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000440)=""/76, 0x0) unshare(0xe060400) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x200d3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) syz_io_uring_setup(0x4005dd8, &(0x7f0000003a40)={0x0, 0x84b7, 0x40, 0x3, 0x238, 0x0, r3}, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x5, 0x77f87502}}) 629.462576ms ago: executing program 1 (id=2520): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) 465.48477ms ago: executing program 1 (id=2521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 390.360834ms ago: executing program 1 (id=2522): syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac2900000001090224"], 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x1, [@generic={0x34, 0x10, 0x2, "c0bd0f5325508737ec942fa00f394786e22b91fa43bf34f0fd3c3fe8332f19ccb69c31ebca5907c274b5dbb05cbae6cab0"}]}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="900000000b06010100000000000000000600000805000100070000000800094000000c4a0900020073797a3100000000340007800a00"], 0x90}, 0x1, 0x0, 0x0, 0x20080c1}, 0x8000) 307.754617ms ago: executing program 3 (id=2523): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) unshare(0xe060400) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x200d3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) syz_io_uring_setup(0x4005dd8, &(0x7f0000003a40)={0x0, 0x84b7, 0x40, 0x3, 0x238, 0x0, r3}, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x5, 0x77f87502}}) 0s ago: executing program 7 (id=2524): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0xfffffe0c) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 432.062559][T12182] syzkaller0: entered promiscuous mode [ 432.074759][T12182] syzkaller0: entered allmulticast mode [ 432.090615][T12182] simple: c 5´^UUY}-dÙƒÉÏh~®qd2ÂñÁ_2 [ 432.701015][ T5630] gspca_ov534_9: reg_r err -71 [ 432.921888][ T5630] gspca_ov534_9: Unknown sensor 0000 [ 432.921993][ T5630] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 432.979598][ T5630] usb 6-1: USB disconnect, device number 21 [ 433.582065][ T5630] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 433.650456][T12205] input: syz0 as /devices/virtual/input/input40 [ 433.786363][ T5630] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 433.856691][ T5630] usb 6-1: config 0 interface 0 has no altsetting 0 [ 433.881478][ T5630] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 433.900516][ T5630] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 433.927186][ T5630] usb 6-1: Product: syz [ 433.945407][ T5630] usb 6-1: Manufacturer: syz [ 433.955857][ T5630] usb 6-1: SerialNumber: syz [ 433.977414][ T5630] usb 6-1: config 0 descriptor?? [ 434.007573][T12201] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 434.052975][ T5630] usb 6-1: selecting invalid altsetting 0 [ 434.475716][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1937'. [ 434.477973][T12213] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 434.983847][T12224] tipc: Enabled bearer , priority 0 [ 434.999169][T12224] syzkaller0: entered promiscuous mode [ 435.013600][T12224] syzkaller0: entered allmulticast mode [ 435.114074][T12224] tipc: Resetting bearer [ 435.129675][T12226] tipc: Enabled bearer , priority 0 [ 435.143484][T12223] tipc: Resetting bearer [ 435.173490][T12223] tipc: Disabling bearer [ 435.203219][T12226] syzkaller0: entered promiscuous mode [ 435.241508][T12226] syzkaller0: entered allmulticast mode [ 435.350864][T12227] tipc: Resetting bearer [ 435.371530][T12229] tipc: Enabled bearer , priority 0 [ 435.383876][T12225] tipc: Resetting bearer [ 435.442826][T12225] tipc: Disabling bearer [ 435.471762][T12229] syzkaller0: entered promiscuous mode [ 435.482199][T12229] syzkaller0: entered allmulticast mode [ 435.554666][T12229] tipc: Resetting bearer [ 435.574822][T12228] tipc: Resetting bearer [ 435.621367][T12228] tipc: Disabling bearer [ 435.892351][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 436.120156][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.152703][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.209541][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.305080][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.343543][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.406063][ T9] usb 1-1: config 0 descriptor?? [ 436.834966][ T9] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 436.895529][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 436.897884][T12253] kvm: pic: non byte read [ 436.961406][ T30] audit: type=1326 audit(1778717424.228:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.1.1954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe62bd9ce59 code=0x0 [ 436.985873][T12253] kvm: pic: non byte read [ 437.108031][T11139] usb 1-1: USB disconnect, device number 45 [ 437.271798][T12254] fido_id[12254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 437.972047][T11137] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 438.142044][T11137] usb 1-1: Using ep0 maxpacket: 8 [ 438.151555][T11137] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.164606][T11137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.177314][T11137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.189451][T11137] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.203249][T11137] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.215348][T11137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.279607][T12201] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 438.288759][ T9] usb 6-1: USB disconnect, device number 22 [ 438.458148][T11137] usb 1-1: GET_CAPABILITIES returned 0 [ 438.476650][T11137] usbtmc 1-1:16.0: can't read capabilities [ 438.701349][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.716605][T11137] usb 1-1: USB disconnect, device number 46 [ 438.791964][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 438.951918][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 438.964752][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.984245][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.010605][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 439.029051][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 439.046321][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.061396][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 439.072219][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 439.080313][ T9] usb 6-1: Manufacturer: syz [ 439.095909][ T9] usb 6-1: config 0 descriptor?? [ 439.102308][T11139] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 439.261907][T11139] usb 4-1: Using ep0 maxpacket: 32 [ 439.275536][T11139] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 439.301883][T11139] usb 4-1: config 0 has no interface number 0 [ 439.310424][T11139] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.342317][T11139] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.363175][T11139] usb 4-1: config 0 interface 85 has no altsetting 0 [ 439.386623][T11139] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 439.391937][ T9] rc_core: IR keymap rc-hauppauge not found [ 439.396230][T11139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.411724][T11139] usb 4-1: Product: syz [ 439.416231][ T9] Registered IR keymap rc-empty [ 439.416373][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.430182][T11139] usb 4-1: Manufacturer: syz [ 439.432998][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.443267][T11139] usb 4-1: SerialNumber: syz [ 439.455354][T11139] usb 4-1: config 0 descriptor?? [ 439.463985][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 439.480336][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input42 [ 439.496637][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.529804][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.554280][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.582242][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.602699][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.622050][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.642169][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.672019][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.693581][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.712015][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 439.735447][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 439.746353][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 439.816333][T11137] usb 6-1: USB disconnect, device number 23 [ 439.844065][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.851065][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.954338][T11139] appletouch 4-1:0.85: Failed to request geyser raw mode [ 439.964719][T11139] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 439.983705][T11139] usb 4-1: USB disconnect, device number 43 [ 440.185696][T12293] TC_ACT_REPEAT abuse ? [ 440.439298][T12295] kvm: kvm [12294]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000011d8 [ 440.451425][T12295] kvm: kvm [12294]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x58b9 [ 440.465868][T12295] kvm_intel: kvm [12294]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x513f [ 440.482732][T12295] kvm: kvm [12294]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3109 [ 440.632150][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 440.817443][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 440.838561][ T9] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 440.860138][ T9] usb 6-1: Product: syz [ 440.907092][ T9] usb 6-1: config 0 descriptor?? [ 440.927807][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 440.948394][ T9] usb 6-1: Detected FT232H [ 441.251227][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 441.270702][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 441.291074][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 441.311198][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 441.345420][ T9] usb 6-1: USB disconnect, device number 24 [ 441.379442][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 441.402669][ T9] ftdi_sio 6-1:0.0: device disconnected [ 442.409336][T12333] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 442.409336][T12333] The task syz.3.1975 (12333) triggered the difference, watch for misbehavior. [ 442.610820][T12340] fuse: Unknown parameter '0x00000000000000050x0000000000000005' [ 442.982154][T11139] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 443.163060][T11139] usb 1-1: Using ep0 maxpacket: 32 [ 443.180649][T11139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.210244][T11139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.236255][T11139] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 443.255533][T11139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.289453][T11139] usb 1-1: config 0 descriptor?? [ 443.731354][T11139] hid_parser_main: 5 callbacks suppressed [ 443.731377][T11139] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 443.780633][T11139] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 443.805622][T12344] syz.1.1978 (12344): drop_caches: 2 [ 443.853914][T11137] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 443.919827][T11139] ft260 0003:0403:6030.0027: chip code: 0000 0000 [ 444.013403][T11137] usb 6-1: Using ep0 maxpacket: 16 [ 444.025128][T11137] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.071785][T11137] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.090866][T11137] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 444.110817][T11137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.163985][T11137] usb 6-1: config 0 descriptor?? [ 444.433332][T11137] usbhid 6-1:0.0: can't add hid device: -71 [ 444.442356][T11137] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 444.507189][T11137] usb 6-1: USB disconnect, device number 25 [ 445.252813][T11142] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 445.421986][T11138] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 445.447969][T11142] usb 2-1: config 0 has no interfaces? [ 445.468788][T11142] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 445.515178][T11142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.568168][T11142] usb 2-1: config 0 descriptor?? [ 445.623822][T11138] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 445.641563][T11138] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 445.658990][T11138] usb 6-1: Product: syz [ 445.663591][T11138] usb 6-1: SerialNumber: syz [ 445.689285][T11138] usb 6-1: config 0 descriptor?? [ 445.772061][T11139] ft260 0003:0403:6030.0027: failed to retrieve system status [ 445.804158][T11139] ft260 0003:0403:6030.0027: probe with driver ft260 failed with error -71 [ 445.857333][ T5630] usb 2-1: USB disconnect, device number 44 [ 445.859618][T11139] usb 1-1: USB disconnect, device number 47 [ 445.923068][T11138] hso 6-1:0.0: Can't find BULK endpoints [ 446.068530][T12383] syzkaller0: entered promiscuous mode [ 446.074859][T12383] syzkaller0: entered allmulticast mode [ 446.149270][T12379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.386031][T11139] usb 6-1: USB disconnect, device number 26 [ 446.396065][T12393] vivid-000: disconnect [ 446.411334][T12393] vivid-000: reconnect [ 446.818562][ T30] audit: type=1326 audit(1778717434.088:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 446.889157][ T30] audit: type=1326 audit(1778717434.118:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 446.938987][ T30] audit: type=1326 audit(1778717434.118:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 446.947536][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x352e76650000 [ 447.014505][ T30] audit: type=1326 audit(1778717434.118:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 447.052306][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x602876650000 [ 447.088192][ T30] audit: type=1326 audit(1778717434.118:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 447.112544][T11139] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 447.120780][ T30] audit: type=1326 audit(1778717434.118:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe69539e6c7 code=0x7ffc0000 [ 447.165788][ T30] audit: type=1326 audit(1778717434.118:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe69535d68e code=0x7ffc0000 [ 447.196470][ T30] audit: type=1326 audit(1778717434.118:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe69535d68e code=0x7ffc0000 [ 447.222051][ T30] audit: type=1326 audit(1778717434.118:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe69535d68e code=0x7ffc0000 [ 447.225255][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7f4076650000 [ 447.275746][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x343576650000 [ 447.303124][T11139] usb 1-1: Using ep0 maxpacket: 16 [ 447.313767][T11139] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.330142][T11139] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.341340][ T30] audit: type=1326 audit(1778717434.118:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1994" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe69535d68e code=0x7ffc0000 [ 447.371099][T11139] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 447.380747][T11139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.391253][T11139] usb 1-1: Product: syz [ 447.397282][T11139] usb 1-1: Manufacturer: syz [ 447.404383][T11139] usb 1-1: SerialNumber: syz [ 447.429957][T12397] kvm: kvm [12396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x184f76650000 [ 447.465660][T12406] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1997'. [ 447.670106][T12399] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1994'. [ 448.123301][ T5630] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 448.317794][ T5630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 448.345721][ T5630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24844, setting to 1024 [ 448.361077][ T5630] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 448.389591][ T5630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.421260][ T5630] usb 6-1: config 0 descriptor?? [ 448.864436][ T5630] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 448.885585][ T5630] cm6533_jd 0003:0D8C:0022.0028: item fetching failed at offset 4/5 [ 448.919866][ T5630] cm6533_jd 0003:0D8C:0022.0028: parse failed [ 448.949093][ T5630] cm6533_jd 0003:0D8C:0022.0028: probe with driver cm6533_jd failed with error -22 [ 449.970535][T11139] usb 1-1: USB disconnect, device number 48 [ 450.385173][ T5630] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 450.468251][T12386] syz.7.1989 (12386) used greatest stack depth: 18112 bytes left [ 450.561982][ T5630] usb 2-1: Using ep0 maxpacket: 32 [ 450.568632][ T5630] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 450.579091][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.589261][ T5630] usb 2-1: config 0 descriptor?? [ 450.597984][ T5630] gspca_main: sunplus-2.14.0 probing 041e:400b [ 450.762326][ T9] usb 6-1: USB disconnect, device number 27 [ 450.958387][T12452] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2010'. [ 451.392769][T12455] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 451.404887][T12455] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 451.624470][ T5630] gspca_sunplus: reg_w_riv err -71 [ 451.638838][ T5630] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 451.683947][ T5630] usb 2-1: USB disconnect, device number 45 [ 452.799970][T12468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2014'. [ 453.047209][T12479] : renamed from veth0_to_bond [ 453.278260][T12484] loop5: detected capacity change from 0 to 2640 [ 453.299486][T12484] Buffer I/O error on dev loop5, logical block 0, async page read [ 453.317007][T12484] Buffer I/O error on dev loop5, logical block 0, async page read [ 453.397180][T12484] Buffer I/O error on dev loop5, logical block 1, async page read [ 453.435742][T12487] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 453.505001][T12484] Dev loop5: unable to read RDB block 8 [ 453.532592][T12484] loop5: unable to read partition table [ 453.548920][T12486] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 453.563947][T12484] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 453.591547][T12486] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 453.622442][T12486] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 453.732420][T12486] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 453.767066][ T4993] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 453.798999][T12486] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 453.878316][ T4993] ldm_validate_partition_table(): Disk read failed. [ 453.888643][ T4993] Dev loop5: unable to read RDB block 0 [ 453.905019][ T4993] loop5: unable to read partition table [ 454.071928][T11139] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 454.096187][T12499] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2023'. [ 454.255989][T11139] usb 6-1: Using ep0 maxpacket: 16 [ 454.281027][T11139] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.312424][T12505] sg_write: data in/out 491487/32 bytes for SCSI command 0x0-- guessing data in; [ 454.312424][T12505] program syz.3.2024 not setting count and/or reply_len properly [ 454.314634][T11139] usb 6-1: config 0 interface 0 has no altsetting 0 [ 454.386421][T11139] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 454.401942][T11139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.447454][T12505] xt_hashlimit: size too large, truncated to 1048576 [ 454.499582][T12509] –: renamed from vxcan1 [ 454.504953][T11139] usb 6-1: config 0 descriptor?? [ 454.911252][ T5630] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 455.045227][T11139] nzxt-smart2 0003:1E71:2009.0029: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 455.131443][ T5630] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 455.161750][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.186087][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.206208][ T5630] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 455.238628][ T5630] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 455.284152][ T5630] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 455.339225][ T5630] usb 2-1: Manufacturer: syz [ 455.368987][ T5630] usb 2-1: config 0 descriptor?? [ 455.976882][T12523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2027'. [ 456.516107][T11137] usb 6-1: USB disconnect, device number 28 [ 457.359498][T12542] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 457.433931][T12545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2032'. [ 457.521628][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'. [ 457.571424][T12542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.650846][T12542] macvlan2: entered promiscuous mode [ 457.671957][T12542] macvlan2: entered allmulticast mode [ 457.694379][T12542] bond2: entered promiscuous mode [ 457.736117][T12542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 457.813310][T12542] bond2: left promiscuous mode [ 457.896349][ T5630] usbhid 2-1:0.0: can't add hid device: -71 [ 457.910181][ T5630] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 457.953590][T12544] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2031'. [ 457.967649][ T5630] usb 2-1: USB disconnect, device number 46 [ 458.882170][ T5630] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 459.063962][ T5630] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.107242][ T5630] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.153898][ T5630] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 459.178340][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.241996][ T5630] usb 4-1: config 0 descriptor?? [ 459.687965][T12573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2039'. [ 460.162257][T11139] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 460.294425][T12583] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 460.311928][T11139] usb 1-1: Using ep0 maxpacket: 8 [ 460.318932][T11139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.331759][T11139] usb 1-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 460.342902][T11139] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.354785][T11139] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.364966][T11139] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 460.389456][T11139] usb 1-1: config 0 interface 0 has no altsetting 0 [ 460.407152][T11139] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 460.425446][T11139] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 460.445228][T11139] usb 1-1: Manufacturer: syz [ 460.458544][T11139] usb 1-1: config 0 descriptor?? [ 460.673167][T12593] fuse: Bad value for 'fd' [ 460.681329][T12593] mmap: syz.1.2045 (12593) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 460.886781][T11139] itetech 0003:06CB:73F5.002A: unbalanced collection at end of report description [ 460.903201][T11139] itetech 0003:06CB:73F5.002A: probe with driver itetech failed with error -22 [ 460.931929][T11138] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 461.090992][T12580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.100190][T11138] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 461.110331][T11138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.129094][T11138] usb-storage 2-1:32.0: USB Mass Storage device detected [ 461.140461][T11138] usb-storage 2-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 461.335415][ T9] usb 2-1: USB disconnect, device number 47 [ 461.493758][T12598] SET target dimension over the limit! [ 461.619396][T11139] usb 4-1: USB disconnect, device number 44 [ 461.673606][T11138] usb 1-1: USB disconnect, device number 49 [ 462.665040][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 462.845085][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 462.863193][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 462.900701][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.941748][ T9] usb 6-1: Product: syz [ 462.955783][ T9] usb 6-1: Manufacturer: syz [ 462.982373][ T9] usb 6-1: SerialNumber: syz [ 463.012664][ T9] usb 6-1: config 0 descriptor?? [ 463.039909][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 463.079711][T12622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2053'. [ 463.787425][T12633] IPVS: set_ctl: invalid protocol: 18591 172.20.20.48:20001 [ 463.871944][ T5630] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 464.045349][ T5630] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.071973][T11138] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 464.073915][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 464.101473][ T5630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 464.136322][ T5630] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 464.151513][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.166518][ T5630] usb 2-1: Product: syz [ 464.180280][ T5630] usb 2-1: Manufacturer: syz [ 464.193779][ T5630] usb 2-1: SerialNumber: syz [ 464.229392][ T5630] usb 2-1: config 0 descriptor?? [ 464.249671][ T5630] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 464.281917][T11138] usb 1-1: Using ep0 maxpacket: 16 [ 464.296470][T11138] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 464.326451][T11138] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 464.359649][T11138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.395750][T11138] usb 1-1: config 0 descriptor?? [ 464.869512][T11138] usbhid 1-1:0.0: can't add hid device: -71 [ 464.875677][T11138] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 464.889113][T11138] usb 1-1: USB disconnect, device number 50 [ 465.322232][T11139] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 465.514084][T11139] usb 4-1: Using ep0 maxpacket: 16 [ 465.535663][T11139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 465.593258][T11139] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 465.631909][T11139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.663951][T11139] usb 4-1: Product: syz [ 465.668225][T11139] usb 4-1: Manufacturer: syz [ 465.672981][T11139] usb 4-1: SerialNumber: syz [ 465.675283][ T5630] usb 2-1: USB disconnect, device number 48 [ 465.704095][T11139] usb 4-1: config 0 descriptor?? [ 465.718827][T11139] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 465.752113][T11139] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 466.221936][T11137] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 466.338468][T11139] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 466.405037][T11137] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 466.427728][T11137] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 466.448767][T11137] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 466.472589][ T9] gspca_sonixj: reg_w1 err -71 [ 466.481049][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 466.482678][T11137] usb 2-1: config 220 has no interface number 2 [ 466.492867][ T9] usb 6-1: USB disconnect, device number 29 [ 466.515361][T11137] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 466.548588][T11137] usb 2-1: config 220 interface 0 has no altsetting 0 [ 466.574857][T11137] usb 2-1: config 220 interface 76 has no altsetting 0 [ 466.599974][T11137] usb 2-1: config 220 interface 1 has no altsetting 0 [ 466.631778][T11137] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 466.662048][T11137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.675799][T11137] usb 2-1: Product: syz [ 466.682096][T11137] usb 2-1: Manufacturer: syz [ 466.694788][T11137] usb 2-1: SerialNumber: syz [ 467.012808][T11137] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 467.020580][T11137] uvcvideo 2-1:220.0: No valid video chain found. [ 467.027881][T11137] usb 2-1: selecting invalid altsetting 0 [ 467.055275][T11142] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 467.069690][T11137] usb 2-1: selecting invalid altsetting 0 [ 467.082226][T11137] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 467.102511][T11137] usb 2-1: USB disconnect, device number 49 [ 467.182998][T12665] tipc: Enabled bearer , priority 0 [ 467.190744][T12665] syzkaller0: entered promiscuous mode [ 467.197595][T12665] syzkaller0: entered allmulticast mode [ 467.228117][T11142] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 467.237507][T12665] tipc: Resetting bearer [ 467.245384][T11142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.254219][T11142] usb 1-1: Product: syz [ 467.258628][T11142] usb 1-1: Manufacturer: syz [ 467.264328][T12664] tipc: Resetting bearer [ 467.264335][T11142] usb 1-1: SerialNumber: syz [ 467.288543][T11139] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 467.298486][T11139] em28xx 4-1:0.0: board has no eeprom [ 467.314081][T12664] tipc: Disabling bearer [ 467.371891][T11139] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 467.380088][T11139] em28xx 4-1:0.0: dvb set to bulk mode. [ 467.396388][T11137] em28xx 4-1:0.0: Binding DVB extension [ 467.417307][T11139] usb 4-1: USB disconnect, device number 45 [ 467.456703][T11139] em28xx 4-1:0.0: Disconnecting em28xx [ 467.506421][T11137] em28xx 4-1:0.0: Registering input extension [ 467.514494][T11139] em28xx 4-1:0.0: Closing input extension [ 467.522033][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 467.570397][T11139] em28xx 4-1:0.0: Freeing device [ 467.692879][T11142] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 467.719052][T11142] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 468.485595][T12680] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 469.354598][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.377122][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.395559][T11139] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 469.425246][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2073'. [ 469.448508][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2073'. [ 469.575057][T11139] usb 2-1: Using ep0 maxpacket: 16 [ 469.606641][T11139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 469.639890][T11139] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.659473][T11139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.692184][T11139] usb 2-1: Product: syz [ 469.707764][T11139] usb 2-1: Manufacturer: syz [ 469.716032][T12694] tipc: Enabled bearer , priority 0 [ 469.726474][T11139] usb 2-1: SerialNumber: syz [ 469.736424][T12694] syzkaller0: entered promiscuous mode [ 469.749938][T11139] usb 2-1: config 0 descriptor?? [ 469.768676][T12694] syzkaller0: entered allmulticast mode [ 469.895583][T12694] tipc: Resetting bearer [ 469.923302][T12694] tipc: Resetting bearer [ 469.942646][T12693] tipc: Resetting bearer [ 469.984867][T12693] tipc: Disabling bearer [ 470.026349][ T9] usb 2-1: USB disconnect, device number 50 [ 470.150365][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2076'. [ 470.166324][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2076'. [ 470.323222][T11142] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 470.349143][T11142] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 470.376446][T11142] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 470.387251][T11142] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 470.400900][T11142] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 470.435100][T11142] usb 1-1: USB disconnect, device number 51 [ 470.848429][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2077'. [ 471.464782][T11142] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 471.656122][T11142] usb 6-1: Using ep0 maxpacket: 8 [ 471.681776][T11142] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 471.713634][T11142] usb 6-1: config 0 has no interface number 0 [ 471.736362][T11142] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 471.775359][T11142] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 471.822198][T11142] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.855242][T11142] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.904313][T11142] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 471.942788][T11142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.980696][T11142] usb 6-1: config 0 descriptor?? [ 472.037591][T11142] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 472.427372][ T5630] usb 6-1: USB disconnect, device number 30 [ 472.427473][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 472.501107][ T5630] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 472.510803][T12724] ldusb: No device or device unplugged -19 [ 472.621923][ T9] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 472.811383][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 472.849190][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.881191][ T9] usb 2-1: Product: syz [ 472.899010][ T9] usb 2-1: Manufacturer: syz [ 472.916512][ T9] usb 2-1: SerialNumber: syz [ 472.938806][ T9] usb 2-1: config 0 descriptor?? [ 473.173666][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 473.489474][T12747] xt_bpf: check failed: parse error [ 473.762488][ T5630] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 473.931931][ T5630] usb 6-1: Invalid ep0 maxpacket: 64 [ 474.071939][ T5630] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 474.242870][ T5630] usb 6-1: Invalid ep0 maxpacket: 64 [ 474.261584][ T5630] usb usb6-port1: attempt power cycle [ 474.342592][ T5688] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 474.502751][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 474.513461][ T5688] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.531628][ T5688] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 474.556042][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 474.574214][ T5688] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.595224][ T5688] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 474.608065][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.619703][ T5688] usb 4-1: Product: syz [ 474.624004][ T5630] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 474.633588][ T5688] usb 4-1: Manufacturer: syz [ 474.640827][ T5688] usb 4-1: SerialNumber: syz [ 474.653830][ T5688] usb 4-1: config 0 descriptor?? [ 474.659648][ T5630] usb 6-1: Invalid ep0 maxpacket: 64 [ 474.674021][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 474.683123][ T5688] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 474.792072][ T5630] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 474.823287][ T5630] usb 6-1: Invalid ep0 maxpacket: 64 [ 474.830476][ T5630] usb usb6-port1: unable to enumerate USB device [ 475.054031][ T5688] imon:send_packet: packet tx failed (-71) [ 475.081924][ T5688] imon 4-1:0.0: panel buttons/knobs setup failed [ 475.151909][ T5688] rc_core: IR keymap rc-imon-pad not found [ 475.162719][ T5688] Registered IR keymap rc-empty [ 475.167762][ T5688] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 475.182046][ T5688] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 475.193773][ T5688] imon:send_packet: packet tx failed (-71) [ 475.212184][ T5688] imon 4-1:0.0: remote input dev register failed [ 475.218879][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 475.230397][ T5688] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 475.245855][ T9] usb 2-1: USB disconnect, device number 51 [ 475.278294][ T5688] imon 4-1:0.0: unable to initialize intf0, err 0 [ 475.286968][ T5688] imon:imon_probe: failed to initialize context! [ 475.293408][ T5688] imon 4-1:0.0: unable to register, err -19 [ 475.309122][ T5688] usb 4-1: USB disconnect, device number 46 [ 475.951962][T11139] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 476.114958][T11139] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.130369][T11139] usb 4-1: not running at top speed; connect to a high speed hub [ 476.145445][T11139] usb 4-1: config 12 has an invalid interface number: 231 but max is 0 [ 476.160233][T11139] usb 4-1: config 12 has no interface number 0 [ 476.168016][T11139] usb 4-1: config 12 interface 231 has no altsetting 0 [ 476.179905][T11139] usb 4-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 476.190636][T11139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.199524][T11139] usb 4-1: Product: syz [ 476.205010][T11139] usb 4-1: Manufacturer: syz [ 476.212894][T11139] usb 4-1: SerialNumber: syz [ 476.429931][T12768] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 476.465504][T12768] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2093'. [ 476.494559][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.511323][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.546334][T12776] IPVS: Error connecting to the multicast addr [ 476.570073][T12776] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2095'. [ 476.722383][T11139] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 476.826105][T11139] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 476.856738][T11139] dib0700: firmware download failed at 7 with -71 [ 476.874993][T11139] usb 4-1: USB disconnect, device number 47 [ 477.082105][ T5688] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 477.112801][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 477.255541][ T5688] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 477.282410][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.296571][ T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 477.313932][ T5688] usb 2-1: Product: syz [ 477.323665][ T9] usb 6-1: config 1 has no interface number 0 [ 477.334831][ T5688] usb 2-1: Manufacturer: syz [ 477.343806][ T9] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 477.358184][ T5688] usb 2-1: SerialNumber: syz [ 477.386200][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 477.421068][ T9] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.462325][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 477.486328][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.499570][ T9] usb 6-1: Product: syz [ 477.509396][ T9] usb 6-1: Manufacturer: syz [ 477.514113][ T9] usb 6-1: SerialNumber: syz [ 477.529175][T12784] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 477.565228][T12794] openvswitch: netlink: Flow actions attr not present in new flow. [ 477.607351][ T5688] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 477.644269][ T5688] usb 2-1: USB disconnect, device number 52 [ 477.947730][T12784] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 478.255693][T12796] netlink: 'syz.3.2102': attribute type 2 has an invalid length. [ 478.263848][T12796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2102'. [ 478.276508][T12796] netlink: 'syz.3.2102': attribute type 2 has an invalid length. [ 478.284615][T12796] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2102'. [ 478.338896][ T9] usb 6-1: Incompatible driver and firmware versions [ 478.369476][ T9] usb 6-1: USB disconnect, device number 35 [ 478.543390][T12799] input: syz0 as /devices/virtual/input/input48 [ 478.761967][T11139] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 478.863618][T12806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2105'. [ 478.955507][T11139] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.970232][T11139] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.985333][T11139] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.995259][T11139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 479.007704][T11139] usb 2-1: SerialNumber: syz [ 479.340649][T12808] netlink: 'syz.1.2106': attribute type 16 has an invalid length. [ 479.360707][T12808] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2106'. [ 479.705878][T12819] vivid-002: disconnect [ 479.743546][T12818] vivid-002: reconnect [ 480.057189][T11139] usb 2-1: cannot find UAC_HEADER [ 480.170008][T11139] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 480.191503][T11139] usb 2-1: USB disconnect, device number 53 [ 480.214437][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.279449][T12821] tipc: Enabled bearer , priority 0 [ 480.315210][T12821] syzkaller0: entered promiscuous mode [ 480.333897][T12821] syzkaller0: entered allmulticast mode [ 480.419888][T12821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2109'. [ 480.493266][T12821] tipc: Resetting bearer [ 480.521026][T12826] QAT: failed to copy from user. [ 480.530452][T12820] tipc: Resetting bearer [ 480.559329][T12820] tipc: Disabling bearer [ 481.001943][T11142] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 481.071947][T11139] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 481.172164][T11142] usb 1-1: Using ep0 maxpacket: 32 [ 481.188793][T11142] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 481.208563][T11142] usb 1-1: config 0 has no interface number 0 [ 481.251931][T11139] usb 2-1: Using ep0 maxpacket: 8 [ 481.262212][T11142] usb 1-1: config 0 interface 12 has no altsetting 0 [ 481.283870][T11142] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 481.319087][T11142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.372397][T11142] usb 1-1: Product: syz [ 481.387006][T11142] usb 1-1: Manufacturer: syz [ 481.400893][T11142] usb 1-1: SerialNumber: syz [ 481.411228][T11139] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 481.424527][T11142] usb 1-1: config 0 descriptor?? [ 481.433537][T11139] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 481.478272][T11139] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.513897][T11139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.540959][T11139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.658675][T11139] usbtmc 2-1:16.0: bulk endpoints not found [ 482.099004][T12846] vivid-000: disconnect [ 482.114004][T12846] vivid-000: reconnect [ 482.531904][ T9] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 482.697862][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.726888][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.740619][ T9] usb 4-1: Product: syz [ 482.756350][ T9] usb 4-1: Manufacturer: syz [ 482.768525][ T9] usb 4-1: SerialNumber: syz [ 482.805908][ T9] usb 4-1: config 0 descriptor?? [ 483.033482][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 483.123932][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2118'. [ 483.789219][T11137] usb 2-1: USB disconnect, device number 54 [ 483.877288][T11142] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 483.887348][T11142] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 483.901588][T11142] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 483.912527][T11142] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 483.935438][T11142] usb 1-1: USB disconnect, device number 52 [ 484.791974][ T5688] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 484.980542][ T5688] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 485.009407][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.035903][ T5688] usb 6-1: Product: syz [ 485.050675][ T5688] usb 6-1: Manufacturer: syz [ 485.063042][ T5688] usb 6-1: SerialNumber: syz [ 485.085556][ T5688] usb 6-1: config 0 descriptor?? [ 485.095962][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 485.128135][ T5688] hub 6-1:0.0: bad descriptor, ignoring hub [ 485.136945][ T9] usb 4-1: USB disconnect, device number 48 [ 485.160877][ T5688] hub 6-1:0.0: probe with driver hub failed with error -5 [ 485.369452][ T5688] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 485.399181][ T5688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.432122][ T5688] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 485.446780][ T5688] usb 6-1: media controller created [ 485.473519][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.550496][ T5688] DVB: Unable to find symbol dib7000p_attach() [ 485.558337][ T5688] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 485.722097][ T5688] rc_core: IR keymap rc-dib0700-rc5 not found [ 485.734764][ T5688] Registered IR keymap rc-empty [ 485.752915][ T5688] dvb-usb: could not initialize remote control. [ 485.761171][ T5688] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 486.372177][ T5688] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 486.547755][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 486.568473][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 486.580273][T12893] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 486.588629][T12893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 486.607849][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.628791][ T5688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.656377][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 486.677014][ T5688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 486.695301][ T5688] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 486.715150][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.736622][ T5688] usb 4-1: config 0 descriptor?? [ 486.762942][T12880] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.803582][T12893] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 486.994252][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.006092][ T5627] Bluetooth: hci5: unexpected event 0x2c length: 0 < 17 [ 487.013295][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.020134][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.027100][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.033973][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.040808][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.056615][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.075885][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.083592][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.090519][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.098064][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.105128][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.117093][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.124271][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.131130][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 487.268759][T11142] usb 4-1: USB disconnect, device number 49 [ 487.279293][ T5625] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 487.780973][ T5688] usb 6-1: USB disconnect, device number 36 [ 487.901336][ T5688] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 488.245691][T12900] vivid-002: disconnect [ 488.262735][ T5688] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 488.281713][T12900] vivid-002: reconnect [ 488.441893][ T5688] usb 6-1: Using ep0 maxpacket: 32 [ 488.455125][ T5688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.480581][ T5688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.512984][ T5688] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 488.537667][ T5688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.572681][ T5688] usb 6-1: config 0 descriptor?? [ 488.603144][ T5688] hub 6-1:0.0: USB hub found [ 488.746437][T12903] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 488.805315][ T5688] hub 6-1:0.0: 1 port detected [ 488.929664][T12905] --map-set only usable from mangle table [ 489.191943][T11137] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 489.363810][T11137] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.374331][T11137] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.387719][T11137] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 489.397627][T11137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.409105][T11137] usb 4-1: config 0 descriptor?? [ 489.452174][ T9] usb 6-1: USB disconnect, device number 37 [ 489.458253][ T5688] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 489.571896][T11148] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 489.735650][T11148] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 489.745593][T11148] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 489.753760][T11148] usb 2-1: Product: syz [ 489.757931][T11148] usb 2-1: Manufacturer: syz [ 489.763331][T11148] usb 2-1: SerialNumber: syz [ 489.775582][T11148] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 489.914164][T11137] usb 4-1: string descriptor 0 read error: -71 [ 489.925443][T11137] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 489.936796][T11137] usb 4-1: USB disconnect, device number 50 [ 490.202849][T11148] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 490.217759][T11148] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 490.424005][T12918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.443380][T12918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.474729][T11137] usb 2-1: USB disconnect, device number 55 [ 490.490101][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2136'. [ 491.762267][T11139] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 491.889076][T12954] netlink: 'syz.5.2143': attribute type 1 has an invalid length. [ 491.930939][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2143'. [ 491.940872][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 491.949069][T11139] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 491.966940][T12952] vivid-000: disconnect [ 491.981894][T11139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.990359][T12952] vivid-000: reconnect [ 491.998078][T11139] usb 2-1: Product: syz [ 492.006512][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2143'. [ 492.009236][T11139] usb 2-1: Manufacturer: syz [ 492.017736][T12954] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.038127][T11139] usb 2-1: SerialNumber: syz [ 492.067171][T12954] macvlan2: entered promiscuous mode [ 492.072833][T12954] macvlan2: entered allmulticast mode [ 492.079671][T12954] bond5: entered promiscuous mode [ 492.085965][T12954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.095788][T12954] bond5: left promiscuous mode [ 492.102424][T11148] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 492.263962][T11148] usb 1-1: unable to get BOS descriptor or descriptor too short [ 492.273054][T11148] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 492.289261][T11148] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 492.337787][T11148] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.372179][T11148] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 492.386257][T11148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.401907][T11148] usb 1-1: Product: syz [ 492.407923][T11148] usb 1-1: Manufacturer: syz [ 492.417974][T11148] usb 1-1: SerialNumber: syz [ 492.440580][T11148] usb 1-1: selecting invalid altsetting 1 [ 492.454242][T11139] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 492.466220][T11148] usb 1-1: unit 6 not found! [ 492.475464][T11139] usb 2-1: USB disconnect, device number 56 [ 492.496171][T11139] usblp0: removed [ 492.839340][T11148] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 492.864501][T11148] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 492.906436][T11148] usb 1-1: selecting invalid altsetting 1 [ 492.922088][T11137] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 492.941019][T11148] usb 1-1: unit 6 not found! [ 493.091896][T11137] usb 4-1: Using ep0 maxpacket: 8 [ 493.178326][T11137] usb 4-1: unable to get BOS descriptor or descriptor too short [ 493.217991][T11137] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 493.237430][T11137] usb 4-1: config 0 has no interface number 0 [ 493.258570][T11137] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 493.279286][T11148] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 493.302680][T11137] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 493.347862][T11137] usb 4-1: config 0 interface 88 has no altsetting 0 [ 493.520934][T11148] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 493.535206][T11137] usb 4-1: string descriptor 0 read error: -22 [ 493.555457][T11137] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 493.575749][T11137] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 493.597764][T11137] usb 4-1: config 0 descriptor?? [ 493.631026][T11148] usb 1-1: USB disconnect, device number 53 [ 493.666382][T11137] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input50 [ 493.769102][ T6379] udevd[6379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.996182][ T6379] udevd[6379]: Error opening device "/dev/input/event4": Input/output error [ 494.013449][ T6379] udevd[6379]: Unable to EVIOCGABS device "/dev/input/event4" [ 494.029168][ T6379] udevd[6379]: Unable to EVIOCGABS device "/dev/input/event4" [ 494.072072][T11137] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 494.232859][T11137] usb 2-1: Using ep0 maxpacket: 32 [ 494.245580][T11137] usb 2-1: config 0 has no interfaces? [ 494.253496][T11137] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 494.287454][T11137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.291901][ T5688] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 494.330697][T11137] usb 2-1: config 0 descriptor?? [ 494.415891][T12984] QAT: failed to copy from user. [ 494.483598][ T5688] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.506920][ T5688] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.526689][ T5688] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 494.536419][ T5688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 494.555792][ T5688] usb 6-1: SerialNumber: syz [ 494.581744][T11148] usb 2-1: USB disconnect, device number 57 [ 495.424930][ T5688] usb 6-1: cannot find UAC_HEADER [ 495.592944][ T5688] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 495.653565][ T5688] usb 6-1: USB disconnect, device number 38 [ 495.734733][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.072695][ T5688] usb 4-1: USB disconnect, device number 51 [ 496.162078][T11139] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 496.363607][T11139] usb 2-1: Using ep0 maxpacket: 32 [ 496.461904][T11139] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 496.482703][T11139] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 496.531206][T11139] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.586942][T11139] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 496.636978][T11139] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 496.716547][T11139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.739388][T13016] vivid-002: disconnect [ 496.756220][T13015] vivid-002: reconnect [ 496.849606][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2153'. [ 497.661963][T11139] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 497.771515][ T5688] usb 2-1: USB disconnect, device number 58 [ 497.853077][T11139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.882254][T11139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.923825][T11139] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.970620][T11139] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.021016][T11139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.065273][T11139] usb 4-1: config 0 descriptor?? [ 498.312378][ T5688] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 498.485851][ T5688] usb 1-1: Using ep0 maxpacket: 16 [ 498.501103][ T5688] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 498.513573][T11139] plantronics 0003:047F:FFFF.002B: item fetching failed at offset 6/15 [ 498.540738][T11139] plantronics 0003:047F:FFFF.002B: parse failed [ 498.564830][T11139] plantronics 0003:047F:FFFF.002B: probe with driver plantronics failed with error -22 [ 498.587852][ T5688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.638579][ T5688] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 498.658142][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.701216][ T5688] usb 1-1: Product: syz [ 498.706398][ T5688] usb 1-1: Manufacturer: syz [ 498.719059][ T5688] usb 1-1: SerialNumber: syz [ 498.751698][ T5688] usb 1-1: config 0 descriptor?? [ 498.762212][ T5688] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 498.782298][ T5688] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 498.809308][T11139] usb 4-1: USB disconnect, device number 52 [ 499.028439][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2160'. [ 499.379992][ T5688] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 499.387792][ T5688] em28xx 1-1:0.0: Config register raw data: 0x00 [ 500.178501][T13046] QAT: failed to copy from user. [ 501.107169][ T5630] usb 1-1: USB disconnect, device number 54 [ 501.159556][ T5630] em28xx 1-1:0.0: Disconnecting em28xx [ 501.203050][ T5630] em28xx 1-1:0.0: Freeing device [ 501.263518][T13060] vivid-001: disconnect [ 501.297277][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.305544][T13058] vivid-001: reconnect [ 501.305695][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.406168][T13065] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 502.250662][T13071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2168'. [ 502.470837][ T5630] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 502.643572][ T5630] usb 4-1: Using ep0 maxpacket: 32 [ 502.659200][ T5630] usb 4-1: unable to get BOS descriptor or descriptor too short [ 502.674476][ T5630] usb 4-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 502.692926][ T5630] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 502.748168][ T5630] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 502.770966][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.803104][ T5630] usb 4-1: Product: syz [ 502.816754][ T5630] usb 4-1: Manufacturer: syz [ 502.836972][ T5630] usb 4-1: SerialNumber: syz [ 503.167448][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 503.167464][ T30] audit: type=1326 audit(1778717490.438:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.306680][ T30] audit: type=1326 audit(1778717490.468:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.341139][ T30] audit: type=1326 audit(1778717490.478:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.370270][ T30] audit: type=1326 audit(1778717490.478:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.398183][ T30] audit: type=1326 audit(1778717490.478:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.423301][ T30] audit: type=1326 audit(1778717490.478:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.452385][ T30] audit: type=1326 audit(1778717490.478:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.477547][ T30] audit: type=1326 audit(1778717490.478:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.503307][ T30] audit: type=1326 audit(1778717490.478:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 503.530337][ T30] audit: type=1326 audit(1778717490.478:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13087 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 505.122375][T11148] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 505.251887][T11148] usb 1-1: device descriptor read/64, error -71 [ 505.327080][ T5630] usb 4-1: unit 4 not found! [ 505.333949][ T5630] usb 4-1: unit 0 not found! [ 505.370723][ T5630] snd-usb-audio 4-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 505.407441][ T5630] usb 4-1: unit 4 not found! [ 505.429842][ T5630] usb 4-1: unit 0 not found! [ 505.457918][T13115] vivid-002: disconnect [ 505.466917][T13114] vivid-002: reconnect [ 505.511888][T11148] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 505.587179][ T5630] snd-usb-audio 4-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 505.610048][ T5630] usb 4-1: USB disconnect, device number 53 [ 505.644923][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.666151][T11148] usb 1-1: device descriptor read/64, error -71 [ 505.783845][T11148] usb usb1-port1: attempt power cycle [ 506.048304][ T5688] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 506.141988][T11148] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 506.172667][T11148] usb 1-1: device descriptor read/8, error -71 [ 506.221934][ T5688] usb 6-1: Using ep0 maxpacket: 32 [ 506.235537][ T5688] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.250056][ T5688] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.266503][ T5688] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.305996][ T5688] usb 6-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 506.327484][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.345634][ T5688] usb 6-1: Product: syz [ 506.354975][ T5688] usb 6-1: Manufacturer: syz [ 506.365404][ T5688] usb 6-1: SerialNumber: syz [ 506.451993][T11148] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 506.497141][T11148] usb 1-1: device descriptor read/8, error -71 [ 506.612179][T11148] usb usb1-port1: unable to enumerate USB device [ 506.622505][ T5688] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 506.659595][ T5688] usb 6-1: USB disconnect, device number 39 [ 507.494998][T13141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.307541][T13171] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 509.511862][T11139] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 509.562167][ T5688] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 509.691892][T11139] usb 2-1: Using ep0 maxpacket: 8 [ 509.704389][T11139] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 509.723038][ T5688] usb 1-1: Using ep0 maxpacket: 32 [ 509.729592][T11139] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 509.743117][ T5688] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 509.781342][ T5688] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 509.801078][T11139] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.801104][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 509.828293][T11139] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.859066][ T5688] usb 1-1: Product: syz [ 509.872537][T11139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 509.893240][T11139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.927039][ T5688] usb 1-1: Manufacturer: syz [ 509.945190][ T5688] usb 1-1: SerialNumber: syz [ 509.964389][ T5688] usb 1-1: config 0 descriptor?? [ 509.990713][T13171] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 510.131981][T11139] usb 2-1: GET_CAPABILITIES returned 0 [ 510.144526][T11139] usbtmc 2-1:16.0: can't read capabilities [ 510.498513][ T5688] usb 2-1: USB disconnect, device number 59 [ 510.602912][T13180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.770266][T11139] IPVS: starting estimator thread 0... [ 510.781628][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 510.781644][ T30] audit: type=1326 audit(1778717498.048:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 510.869599][ T30] audit: type=1326 audit(1778717498.068:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9550f5d68e code=0x7ffc0000 [ 510.900055][T13185] IPVS: using max 34 ests per chain, 81600 per kthread [ 510.956386][ T30] audit: type=1326 audit(1778717498.068:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 511.070105][ T30] audit: type=1326 audit(1778717498.068:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 511.179789][ T30] audit: type=1326 audit(1778717498.068:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 511.228812][ T30] audit: type=1326 audit(1778717498.068:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 511.270663][ T30] audit: type=1326 audit(1778717498.068:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 511.306124][ T30] audit: type=1326 audit(1778717498.068:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9550f5d68e code=0x7ffc0000 [ 511.421710][ T30] audit: type=1326 audit(1778717498.068:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 511.591950][ T30] audit: type=1326 audit(1778717498.068:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.3.2195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9550f9ce59 code=0x7ffc0000 [ 512.334435][ T5688] usb 1-1: USB disconnect, device number 59 [ 512.576340][T11148] IPVS: starting estimator thread 0... [ 512.722628][T13213] IPVS: using max 31 ests per chain, 74400 per kthread [ 512.880235][T13215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2199'. [ 514.176364][T13222] netlink: 'syz.5.2202': attribute type 10 has an invalid length. [ 514.236206][T13223] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2202'. [ 514.252924][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.320692][T13222] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 514.414759][T13223] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 514.471674][T13223] bond0 (unregistering): Released all slaves [ 515.277829][T13239] vivid-000: disconnect [ 515.297452][T13239] vivid-000: reconnect [ 516.112030][ T5688] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 516.294332][ T5688] usb 1-1: Using ep0 maxpacket: 32 [ 516.303478][ T5688] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 516.317587][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.328760][ T5688] usb 1-1: Product: syz [ 516.338371][ T5688] usb 1-1: Manufacturer: syz [ 516.348455][ T5688] usb 1-1: SerialNumber: syz [ 516.360394][ T5688] usb 1-1: config 0 descriptor?? [ 516.384828][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 516.384843][ T30] audit: type=1326 audit(1778717503.658:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.7.2210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 516.424186][T13260] unsupported nlmsg_type 40 [ 516.636398][ T5688] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 060 [ 516.882110][ T30] audit: type=1326 audit(1778717503.768:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.7.2210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 516.993676][ T30] audit: type=1326 audit(1778717504.148:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.7.2210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 517.051374][ T30] audit: type=1326 audit(1778717504.148:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.7.2210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 517.374266][T13248] i2c i2c-1: failure reading status [ 517.586645][ T5688] IPVS: starting estimator thread 0... [ 517.607426][ T5688] usb 1-1: USB disconnect, device number 60 [ 517.692105][T13275] IPVS: using max 48 ests per chain, 115200 per kthread [ 520.157387][T13309] vivid-003: disconnect [ 520.164315][T13309] vivid-003: reconnect [ 521.002813][ T5688] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 521.192542][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 521.223525][ T5688] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 521.282413][ T5688] usb 4-1: config 0 has no interface number 0 [ 521.371498][ T5688] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 521.405907][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.457167][ T5688] usb 4-1: Product: syz [ 521.466863][ T5688] usb 4-1: Manufacturer: syz [ 521.494335][ T5688] usb 4-1: SerialNumber: syz [ 521.522351][ T5688] usb 4-1: config 0 descriptor?? [ 522.242118][T13342] program syz.5.2226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.283666][T13342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 523.160738][T13351] program syz.1.2228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.246125][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 523.263423][T13351] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 523.285594][T13351] openvswitch: netlink: Message has 16 unknown bytes. [ 524.233147][ T5688] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 524.266961][ T5688] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 524.316983][ T5688] uvcvideo 4-1:0.31: Failed to create links for entity 5 [ 524.355353][ T5688] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 524.405561][ T5688] usb 4-1: USB disconnect, device number 54 [ 525.458189][T13368] syzkaller0: entered promiscuous mode [ 525.477831][T13368] syzkaller0: entered allmulticast mode [ 525.742003][T13378] kAFS: unable to lookup cell 'ÿ' [ 527.624654][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 527.792344][T13411] netlink: 'syz.0.2240': attribute type 8 has an invalid length. [ 527.821850][T13408] No such timeout policy "syz1" [ 530.246315][T13431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.264373][T13431] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 530.287478][T13431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 530.311331][T13431] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 530.653647][T13436] QAT: failed to copy from user. [ 532.292023][T11137] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 532.481918][T11137] usb 6-1: Using ep0 maxpacket: 16 [ 532.502592][T11137] usb 6-1: config 0 has no interfaces? [ 532.511431][T11137] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.526898][T11137] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.545215][T11137] usb 6-1: Manufacturer: syz [ 532.557188][T11137] usb 6-1: config 0 descriptor?? [ 532.911867][T11137] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 533.061863][T11137] usb 4-1: Using ep0 maxpacket: 16 [ 533.115915][T11137] usb 4-1: config 0 has no interfaces? [ 533.129767][T11137] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 533.150100][T11137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.208161][T11137] usb 4-1: config 0 descriptor?? [ 535.212959][T13482] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2254'. [ 535.437774][ T5630] usb 4-1: USB disconnect, device number 55 [ 535.668267][T11137] usb 6-1: USB disconnect, device number 40 [ 535.952092][ T5630] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 536.132822][ T5630] usb 4-1: Using ep0 maxpacket: 8 [ 536.157848][ T5630] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 536.185185][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.219534][ T5630] usb 4-1: Product: syz [ 536.231853][ T5630] usb 4-1: Manufacturer: syz [ 536.244980][ T5630] usb 4-1: SerialNumber: syz [ 536.264879][ T5630] usb 4-1: config 0 descriptor?? [ 536.297826][ T5630] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 537.137383][T13501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2258'. [ 537.216899][T13507] QAT: failed to copy from user. [ 537.646709][T13514] xfrm1: entered allmulticast mode [ 538.463962][T13519] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 538.470918][T13519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 538.505827][T13519] vhci_hcd vhci_hcd.0: Device attached [ 538.652525][T11137] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 538.755165][T13523] vhci_hcd: connection closed [ 538.761889][ T1158] vhci_hcd vhci_hcd.5: stop threads [ 538.794761][T11139] usb 44-1: SetAddress Request (2) to port 0 [ 538.811606][T11139] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 538.821996][T11137] usb 2-1: Using ep0 maxpacket: 32 [ 538.836226][ T1158] vhci_hcd vhci_hcd.5: release socket [ 538.852621][ T1158] vhci_hcd vhci_hcd.5: disconnect device [ 538.879529][T11137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.932596][T11137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.946728][T11139] usb 44-1: enqueue for inactive port 0 [ 538.968118][ T5630] gspca_sonixj: reg_w1 err -71 [ 539.032002][ T5630] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 539.054154][T11137] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 539.070387][ T5630] usb 4-1: USB disconnect, device number 56 [ 539.227255][T11137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.549250][T11137] usb 2-1: config 0 descriptor?? [ 539.604941][T11137] hub 2-1:0.0: USB hub found [ 539.675907][T11139] usb usb44-port1: attempt power cycle [ 539.883713][T11137] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 540.051953][T11142] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 540.221983][T11142] usb 6-1: Using ep0 maxpacket: 8 [ 540.232059][T11142] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 540.241376][T11142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.257195][T11142] usb 6-1: Product: syz [ 540.263001][T11139] usb usb44-port1: unable to enumerate USB device [ 540.277578][T11142] usb 6-1: Manufacturer: syz [ 540.287575][T11142] usb 6-1: SerialNumber: syz [ 540.297540][T11137] hid-generic 0003:046D:C31C.002C: unknown main item tag 0x0 [ 540.308337][T11142] usb 6-1: config 0 descriptor?? [ 540.319628][T11142] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 540.335362][T13542] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2267'. [ 540.372670][T11137] hid-generic 0003:046D:C31C.002C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 540.997185][T13547] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 541.046846][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2268'. [ 541.057284][T13547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 541.073367][T13547] macvlan2: entered promiscuous mode [ 541.078693][T13547] macvlan2: entered allmulticast mode [ 541.085144][T13547] bond4: entered promiscuous mode [ 541.093355][T13547] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 541.103428][T13547] bond4: left promiscuous mode [ 541.297142][T13521] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 541.678724][T13521] usbhid 2-1:0.0: reset_resume error -1 [ 541.896480][T11138] usb 2-1: USB disconnect, device number 60 [ 541.956389][T13560] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 541.975900][T13560] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 542.045547][T13560] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 542.331993][T11137] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 542.544168][T11137] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 542.572717][T11142] gspca_sonixj: reg_w1 err -71 [ 542.578518][T11137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.600977][T11137] usb 4-1: config 0 descriptor?? [ 542.617183][T11142] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 542.714185][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2270'. [ 542.724387][T11137] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 542.735356][T11142] usb 6-1: USB disconnect, device number 41 [ 543.087052][T11137] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 543.285298][T11137] gspca_cpia1: usb_control_msg 01, error -32 [ 543.409989][T13577] syzkaller0: entered promiscuous mode [ 543.464107][T13577] syzkaller0: entered allmulticast mode [ 544.073176][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2273'. [ 544.322239][T11137] gspca_cpia1: usb_control_msg 01, error -110 [ 544.337465][T11137] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 544.669214][T13589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.425588][T11137] usb 4-1: USB disconnect, device number 57 [ 545.771083][T13606] syz.0.2278 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 546.224692][T13603] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2277'. [ 548.283127][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2281'. [ 549.020014][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 549.548075][T13650] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2286'. [ 550.219481][ T30] audit: type=1326 audit(1778717537.488:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 550.304162][ T30] audit: type=1326 audit(1778717537.488:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe69535d68e code=0x7ffc0000 [ 550.448321][ T30] audit: type=1326 audit(1778717537.488:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 550.584397][ T30] audit: type=1326 audit(1778717537.488:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 550.738258][ T30] audit: type=1326 audit(1778717537.488:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 550.879725][ T30] audit: type=1326 audit(1778717537.488:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 551.071592][ T30] audit: type=1326 audit(1778717537.488:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 551.166488][ T30] audit: type=1326 audit(1778717537.488:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe69535d68e code=0x7ffc0000 [ 551.300677][ T30] audit: type=1326 audit(1778717537.488:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 551.410655][ T30] audit: type=1326 audit(1778717537.488:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.0.2288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe69539ce59 code=0x7ffc0000 [ 551.678369][T13673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2292'. [ 552.471910][T11148] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 553.055478][T11148] usb 1-1: config 0 has no interfaces? [ 553.198609][T11148] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 553.249562][T11148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 553.303405][T11148] usb 1-1: Product: syz [ 553.324904][T11148] usb 1-1: Manufacturer: syz [ 553.356643][T11148] usb 1-1: SerialNumber: syz [ 553.403148][T11148] usb 1-1: config 0 descriptor?? [ 554.849544][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 555.105628][T13710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2298'. [ 556.189959][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 556.189977][ T30] audit: type=1326 audit(1778717543.458:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 556.408227][T11137] usb 1-1: USB disconnect, device number 61 [ 556.461101][ T30] audit: type=1326 audit(1778717543.468:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 556.578868][ T30] audit: type=1326 audit(1778717543.468:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 556.648567][ T30] audit: type=1326 audit(1778717543.468:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 556.736088][ T30] audit: type=1326 audit(1778717543.468:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 556.846186][ T30] audit: type=1326 audit(1778717543.468:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 556.896314][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 556.994644][ T30] audit: type=1326 audit(1778717543.468:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 557.119481][ T30] audit: type=1326 audit(1778717543.468:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 557.149379][ T30] audit: type=1326 audit(1778717543.468:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 557.228533][ T30] audit: type=1326 audit(1778717543.468:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.7.2300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0079ce59 code=0x7ffc0000 [ 557.365129][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2302'. [ 557.452387][T13730] openvswitch: netlink: Flow key attr not present in new flow. [ 558.861055][T13750] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 559.199768][T13760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.731207][T13758] overlayfs: missing 'lowerdir' [ 560.068129][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 561.451857][T11142] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 561.641946][T11142] usb 4-1: Using ep0 maxpacket: 16 [ 561.677229][T11142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.699557][T11142] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.717638][T13785] sctp: [Deprecated]: syz.0.2312 (pid 13785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.717638][T13785] Use struct sctp_sack_info instead [ 561.759079][T11142] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 561.792395][T11142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.833180][T11142] usb 4-1: Product: syz [ 561.844355][T11142] usb 4-1: Manufacturer: syz [ 561.899300][T11142] usb 4-1: SerialNumber: syz [ 561.935467][T11142] usb 4-1: config 0 descriptor?? [ 562.342064][T11142] usb 4-1: USB disconnect, device number 58 [ 562.661437][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2311'. [ 562.734192][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.740671][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.791965][T13815] QAT: failed to copy from user. [ 566.288801][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 567.353739][T13848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2326'. [ 568.354115][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2331'. [ 568.793968][T13875] netlink: 'syz.1.2333': attribute type 32 has an invalid length. [ 569.253545][T13880] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 569.425621][T13888] QAT: failed to copy from user. [ 570.655176][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2335'. [ 572.774542][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2346'. [ 572.861884][ T5688] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 573.043779][ T5688] usb 2-1: Using ep0 maxpacket: 8 [ 573.066107][ T5688] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 573.102645][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.128368][ T5688] usb 2-1: Product: syz [ 573.140488][ T5688] usb 2-1: Manufacturer: syz [ 573.156167][ T5688] usb 2-1: SerialNumber: syz [ 573.179649][ T5688] usb 2-1: config 0 descriptor?? [ 573.212604][ T5688] gspca_main: se401-2.14.0 probing 047d:5003 [ 573.645271][ T5688] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 573.665459][ T5688] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 573.704247][ T5688] usb 2-1: USB disconnect, device number 61 [ 574.303562][T13946] block device autoloading is deprecated and will be removed. [ 575.772583][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 576.815459][T13978] QAT: failed to copy from user. [ 577.192313][T11137] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 577.382299][T11137] usb 4-1: Using ep0 maxpacket: 16 [ 577.414714][T11137] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.448732][T13982] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 577.476913][T11137] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 577.543168][T11137] usb 4-1: config 0 interface 0 has no altsetting 0 [ 577.568599][T11137] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 577.590529][T11137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.623917][T11137] usb 4-1: config 0 descriptor?? [ 577.704844][T11137] usbhid 4-1:0.0: can't add hid device: -22 [ 577.723296][T11137] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 577.771903][ T5688] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 577.932993][ T5688] usb 6-1: Using ep0 maxpacket: 32 [ 577.935165][T13983] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 577.967366][ T5688] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.971374][T11137] usb 4-1: USB disconnect, device number 59 [ 577.985781][ T5688] usb 6-1: config 0 has no interface number 0 [ 578.001664][ T5688] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 578.016822][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.025312][ T5688] usb 6-1: Product: syz [ 578.025487][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'. [ 578.029700][ T5688] usb 6-1: Manufacturer: syz [ 578.044532][ T5688] usb 6-1: SerialNumber: syz [ 578.055568][ T5688] usb 6-1: config 0 descriptor?? [ 578.065961][ T5688] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 578.075087][ T5688] usb 6-1: selecting invalid altsetting 1 [ 578.080856][ T5688] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 578.097284][ T5688] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.109679][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2357'. [ 578.131078][ T5688] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 578.140906][ T5688] usb 6-1: media controller created [ 578.158395][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.866027][T13999] netlink: 'syz.0.2360': attribute type 13 has an invalid length. [ 578.904581][T13999] netlink: 'syz.0.2360': attribute type 17 has an invalid length. [ 579.131561][T13999] bridge6: port 1(erspan0) entered blocking state [ 579.138125][T13999] bridge6: port 1(erspan0) entered forwarding state [ 579.282058][ T5688] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 579.313200][ T5688] zl10353_read_register: readreg error (reg=127, ret==-110) [ 579.350713][T14009] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.2361'. [ 579.372653][ T5688] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 579.401378][T13999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.420501][T14010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2359'. [ 579.449988][T13999] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.493337][T14009] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 579.531478][T13999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.544914][ T5688] usb 6-1: USB disconnect, device number 42 [ 579.825710][T13999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.890874][T13999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.975809][T13999] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 580.080731][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.087893][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.209612][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.216808][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.453605][T14019] binder: 14013:14019 ioctl 4018620d 0 returned -22 [ 580.531079][T14019] binder: 14013:14019 ioctl c0306201 0 returned -14 [ 581.374285][T11137] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 581.584422][T11137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 581.601160][T11137] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 581.668484][T11137] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 581.726709][T11137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.803698][T11137] usb 4-1: config 0 descriptor?? [ 582.232657][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.250374][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2364'. [ 582.280375][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.624191][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.670031][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.680678][T14019] syz.7.2362 (14019): drop_caches: 2 [ 582.700128][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.739479][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.781230][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.808234][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.860091][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.885961][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.920659][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.945456][T11137] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 582.970055][T11137] isku 0003:1E7D:319C.002D: item fetching failed at offset 28/36 [ 582.997286][T11137] isku 0003:1E7D:319C.002D: parse failed [ 583.024214][T11137] isku 0003:1E7D:319C.002D: probe with driver isku failed with error -22 [ 583.024256][T14046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2369'. [ 583.080713][T14048] QAT: failed to copy from user. [ 583.097059][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2369'. [ 583.198796][T14051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 583.274423][T11137] usb 4-1: USB disconnect, device number 60 [ 583.769103][T14063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'. [ 583.826133][T14063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'. [ 584.061863][T11137] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 584.241888][T11137] usb 4-1: Using ep0 maxpacket: 32 [ 584.292365][T11137] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 584.345698][T11137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.382000][T11137] usb 4-1: Product: syz [ 584.388579][T11137] usb 4-1: Manufacturer: syz [ 584.394804][T11137] usb 4-1: SerialNumber: syz [ 584.418210][T11137] usb 4-1: config 0 descriptor?? [ 584.882631][T11137] airspy 4-1:0.0: Board ID: 00 [ 584.889323][T11137] airspy 4-1:0.0: Firmware version: [ 585.712190][T14081] tipc: New replicast peer: 255.255.255.255 [ 585.743083][T14081] tipc: Enabled bearer , priority 10 [ 585.793053][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2376'. [ 585.813651][T14082] tipc: Disabling bearer [ 585.834461][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 585.834476][ T30] audit: type=1326 audit(1778717573.108:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 585.871853][ T30] audit: type=1326 audit(1778717573.138:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 585.898145][ T30] audit: type=1326 audit(1778717573.138:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 585.926460][ T30] audit: type=1326 audit(1778717573.138:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 585.929543][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 585.951602][ T30] audit: type=1326 audit(1778717573.138:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 586.022796][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.045295][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.117206][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'. [ 586.153784][ T30] audit: type=1326 audit(1778717573.138:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 586.221696][ T30] audit: type=1326 audit(1778717573.138:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 586.246245][ T30] audit: type=1326 audit(1778717573.138:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 586.271815][ T30] audit: type=1326 audit(1778717573.138:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 586.296326][ T30] audit: type=1326 audit(1778717573.138:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.5.2376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe528d9ce59 code=0x7ffc0000 [ 586.696394][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 586.786509][T14094] No such timeout policy "syz1" [ 586.798200][T14094] netlink: 'syz.1.2377': attribute type 8 has an invalid length. [ 586.917428][T11137] airspy 4-1:0.0: usb_control_msg() failed -110 request 10 [ 587.008396][T11137] airspy 4-1:0.0: Registered as swradio24 [ 587.025916][T11137] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 587.253854][ T5630] usb 4-1: USB disconnect, device number 61 [ 588.817737][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 589.432984][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2384'. [ 589.985548][T14134] QAT: failed to copy from user. [ 590.293322][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 591.368825][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2387'. [ 591.696805][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 591.832962][T14161] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 591.850095][T14157] IPVS: stopping backup sync thread 14161 ... [ 592.681853][ T5630] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 592.780863][T14170] IPVS: stopping backup sync thread 14175 ... [ 592.787438][T14175] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 592.854451][ T5630] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.891706][ T5630] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 592.927137][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.978708][ T5630] usb 1-1: Product: syz [ 593.006225][ T5630] usb 1-1: Manufacturer: syz [ 593.032801][ T5630] usb 1-1: SerialNumber: syz [ 593.067539][ T5630] usb 1-1: config 0 descriptor?? [ 593.365923][T11137] usb 1-1: USB disconnect, device number 62 [ 593.694926][T14181] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2395'. [ 594.003327][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 594.377465][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'. [ 595.525678][T14215] QAT: failed to copy from user. [ 595.558315][T14210] binder: BINDER_SET_CONTEXT_MGR already set [ 595.570312][T14210] binder: 14204:14210 ioctl 4018620d 200000004a80 returned -16 [ 595.672209][ T5630] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 595.706445][T14218] binder: 14204:14218 ioctl c0306201 0 returned -14 [ 595.799741][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 595.909775][ T5630] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 595.965595][ T5630] usb 2-1: config 0 has no interface number 0 [ 596.029373][ T5630] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 596.105934][ T5630] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 596.198097][ T5630] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 596.280245][ T5630] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 596.329751][ T5630] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 596.378201][ T5630] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 596.426072][T14223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2403'. [ 596.466938][ T5630] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 596.495371][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.518219][ T5630] usb 2-1: config 0 descriptor?? [ 596.544051][T14213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 596.572255][T14213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 596.603611][ T5630] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 597.709611][T14237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2406'. [ 597.773855][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2404'. [ 599.349449][ T5630] usb 2-1: USB disconnect, device number 62 [ 599.426523][ T5630] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 599.742591][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2408'. [ 600.161107][T14261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2410'. [ 602.038742][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2413'. [ 602.497939][T14295] QAT: failed to copy from user. [ 602.590476][T14297] netlink: 'syz.5.2417': attribute type 5 has an invalid length. [ 603.534646][T14308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2419'. [ 604.415939][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 604.546979][T14326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2422'. [ 604.583166][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2423'. [ 605.497045][T14333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2425'. [ 605.839883][T14340] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 605.864007][T14340] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 606.572195][ T5630] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 606.772464][ T5630] usb 6-1: Using ep0 maxpacket: 8 [ 606.808489][ T5630] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.851866][ T5630] usb 6-1: config 179 has no interface number 0 [ 606.883343][ T5630] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 606.925769][ T5630] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 606.970965][ T5630] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.017656][ T5630] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 607.046257][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2438'. [ 607.079031][ T5630] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 607.120904][ T5630] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 607.150020][ T5630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.195879][T14356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 607.811801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 607.831807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 608.059747][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'. [ 609.055147][T14399] netlink: 'syz.1.2445': attribute type 10 has an invalid length. [ 609.095433][T14385] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 609.131134][T14399] team0 (unregistering): Port device team_slave_0 removed [ 609.156599][T14399] team0 (unregistering): Port device team_slave_1 removed [ 609.224827][T14399] team0 (unregistering): Port device veth0_to_hsr removed [ 610.315417][T11137] usb 6-1: USB disconnect, device number 43 [ 610.315552][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 610.329897][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 610.542301][T14413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2449'. [ 611.719728][T14447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2461'. [ 612.794890][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2458'. [ 613.023667][T14469] vivid-003: disconnect [ 613.044138][T14469] vivid-003: reconnect [ 613.226876][T14471] netlink: 'syz.5.2470': attribute type 1 has an invalid length. [ 613.277230][T14473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2470'. [ 613.356104][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2470'. [ 613.398025][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.450670][T14471] macvlan2: entered promiscuous mode [ 613.470010][T14471] macvlan2: entered allmulticast mode [ 613.543063][T14471] bond0: entered promiscuous mode [ 613.570983][T14471] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 613.614689][T14471] bond0: left promiscuous mode [ 613.766366][T14481] xt_hashlimit: size too large, truncated to 1048576 [ 613.830653][T14484] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2474'. [ 613.860163][T14484] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2474'. [ 614.155040][T14492] QAT: failed to copy from user. [ 614.736059][T14506] vivid-000: disconnect [ 614.746488][T14506] vivid-000: reconnect [ 614.861820][T11137] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 615.092288][T11137] usb 1-1: Using ep0 maxpacket: 32 [ 615.116827][T11137] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 615.142976][T11137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.218632][T11137] usb 1-1: Product: syz [ 615.273938][T11137] usb 1-1: Manufacturer: syz [ 615.291058][T11137] usb 1-1: SerialNumber: syz [ 615.443565][T14513] usb usb8: usbfs: process 14513 (syz.7.2485) did not claim interface 0 before use [ 615.647759][T11137] usb 1-1: config 0 descriptor?? [ 615.932146][T11137] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 615.940725][T11137] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 616.076876][T11137] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 616.096354][T11137] usb 1-1: USB disconnect, device number 63 [ 616.125830][T14524] wg1: entered promiscuous mode [ 616.139606][T14524] wg1: entered allmulticast mode [ 616.405247][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2484'. [ 616.896660][T14539] QAT: failed to copy from user. [ 617.190390][T14550] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2500'. [ 617.616013][T14564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2498'. [ 618.388681][T14574] QAT: failed to copy from user. [ 618.597910][T14559] use of bytesused == 0 is deprecated and will be removed in the future, [ 618.645400][T14559] use the actual size instead. [ 618.872653][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 619.033184][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.048733][ T9] usb 1-1: config 0 has no interface number 0 [ 619.084793][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 619.118512][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.150549][ T9] usb 1-1: Product: syz [ 619.169105][ T9] usb 1-1: Manufacturer: syz [ 619.202587][ T9] usb 1-1: SerialNumber: syz [ 619.225852][ T9] usb 1-1: config 0 descriptor?? [ 619.445209][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 619.501554][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 619.559155][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 619.591721][ T9] usb 1-1: media controller created [ 619.662335][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.809934][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 620.019136][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 620.057200][ T9] usb 1-1: USB disconnect, device number 64 [ 620.581828][T11138] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 620.777047][T11138] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.799651][T11138] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.850930][T11138] usb 1-1: config 0 interface 0 has no altsetting 0 [ 620.876864][T11138] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 620.919027][T11138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.961619][T14610] QAT: failed to copy from user. [ 620.974186][T11138] usb 1-1: config 0 descriptor?? [ 621.475800][T11138] hid_parser_main: 6 callbacks suppressed [ 621.475815][T11138] hid-steam 0003:28DE:1102.002E: unknown main item tag 0x0 [ 621.525233][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 621.546456][T11138] hid-steam 0003:28DE:1102.002E: unknown main item tag 0x0 [ 621.608436][T11138] hid-steam 0003:28DE:1102.002E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 621.682763][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 621.710098][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 621.721374][ T9] usb 6-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 621.732237][T11138] hid-steam 0003:28DE:1102.002E: Steam Controller 'XXXXXXXXXX' connected [ 621.746345][T11138] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.002E/input/input52 [ 621.786340][ T9] usb 6-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 621.870757][T11138] hid-steam 0003:28DE:1102.002F: unknown main item tag 0x0 [ 621.886703][ T9] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 621.918030][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.948109][T11138] hid-steam 0003:28DE:1102.002F: unknown main item tag 0x0 [ 621.991522][ T9] usb 6-1: Product: syz [ 622.006558][ T9] usb 6-1: Manufacturer: syz [ 622.051214][ T9] usb 6-1: SerialNumber: syz [ 622.320050][ T9] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 622.353270][T11138] hid-steam 0003:28DE:1102.002F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 622.469969][T11138] usb 1-1: USB disconnect, device number 65 [ 622.550463][T14627] QAT: failed to copy from user. [ 622.783654][T11138] hid-steam 0003:28DE:1102.002E: Steam Controller 'XXXXXXXXXX' disconnected [ 623.176582][ T9] usb 6-1: reset high-speed USB device number 44 using dummy_hcd [ 623.232402][T11138] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 623.260937][T14641] QAT: failed to copy from user. [ 623.386243][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 623.417738][ T9] usb 6-1: device firmware changed [ 623.431408][ T9] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 623.443414][ T9] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 623.452220][ T5688] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 623.468556][ T9] usb 6-1: USB disconnect, device number 44 [ 623.478133][ T5688] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 623.512680][T11138] usb 2-1: Using ep0 maxpacket: 8 [ 623.544104][ T5688] ------------[ cut here ]------------ [ 623.551251][ T5688] !atomic_read(&kn->count) [ 623.551277][ T5688] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#0: kworker/0:4/5688 [ 623.565678][ T5688] Modules linked in: [ 623.569973][ T5688] CPU: 0 UID: 0 PID: 5688 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.581093][ T5688] Tainted: [L]=SOFTLOCKUP [ 623.585709][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.596010][ T5688] Workqueue: events request_firmware_work_func [ 623.603230][ T5688] RIP: 0010:kernfs_get+0x72/0x90 [ 623.608206][ T5688] Code: e8 33 c3 55 ff 48 89 df be 04 00 00 00 e8 66 03 c1 ff f0 ff 03 eb 05 e8 1c c3 55 ff 5b 5d c3 cc cc cc cc cc e8 0f c3 55 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 623.627949][ T5688] RSP: 0018:ffffc9000511f660 EFLAGS: 00010293 [ 623.634423][ T5688] RAX: ffffffff826ffec1 RBX: ffff8880269f15a0 RCX: ffff8880584c8000 [ 623.642494][ T5688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.650471][ T5688] RBP: 0000000000000000 R08: ffff8880269f15a3 R09: 1ffff11004d3e2b4 [ 623.658780][ T5688] R10: dffffc0000000000 R11: ffffed1004d3e2b5 R12: ffff888031cb66a8 [ 623.666872][ T5688] R13: 1ffff11006396cd6 R14: ffff888031cb66b0 R15: ffff888031cb6698 [ 623.674882][ T5688] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 623.683922][ T5688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.690515][ T5688] CR2: 0000200000011000 CR3: 000000007d638000 CR4: 00000000003526f0 [ 623.699449][ T5688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 623.707736][ T5688] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 623.715788][ T5688] Call Trace: [ 623.719103][ T5688] [ 623.722091][ T5688] kobject_add_internal+0x6be/0xd00 [ 623.727427][ T5688] kobject_add+0x163/0x240 [ 623.732001][ T5688] ? rcu_is_watching+0x15/0xb0 [ 623.736868][ T5688] ? __pfx_kobject_add+0x10/0x10 [ 623.741945][ T5688] ? __kasan_kmalloc+0x93/0xb0 [ 623.746746][ T5688] ? kobject_init+0x83/0x1e0 [ 623.751334][ T5688] get_device_parent+0x316/0x3a0 [ 623.756363][ T5688] device_add+0x2e1/0xbb0 [ 623.760687][ T5688] firmware_fallback_sysfs+0x2e4/0xa30 [ 623.766173][ T5688] ? kfree+0x1c5/0x640 [ 623.770237][ T5688] _request_firmware+0x1052/0x1780 [ 623.775515][ T5688] ? __pfx__request_firmware+0x10/0x10 [ 623.780971][ T5688] ? process_scheduled_works+0xa70/0x1860 [ 623.787009][ T5688] ? process_scheduled_works+0xa70/0x1860 [ 623.792764][ T5688] request_firmware_work_func+0xaf/0x1c0 [ 623.798405][ T5688] ? process_scheduled_works+0xa70/0x1860 [ 623.804137][ T5688] process_scheduled_works+0xb5d/0x1860 [ 623.809746][ T5688] ? __pfx_process_scheduled_works+0x10/0x10 [ 623.815749][ T5688] ? assign_work+0x3d5/0x5e0 [ 623.820332][ T5688] worker_thread+0xa53/0xfc0 [ 623.824948][ T5688] kthread+0x388/0x470 [ 623.829011][ T5688] ? __pfx_worker_thread+0x10/0x10 [ 623.834142][ T5688] ? __pfx_kthread+0x10/0x10 [ 623.838724][ T5688] ret_from_fork+0x514/0xb70 [ 623.843406][ T5688] ? __pfx_ret_from_fork+0x10/0x10 [ 623.848552][ T5688] ? __switch_to+0xc79/0x1410 [ 623.853292][ T5688] ? __pfx_kthread+0x10/0x10 [ 623.857914][ T5688] ret_from_fork_asm+0x1a/0x30 [ 623.862771][ T5688] [ 623.865838][ T5688] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 623.873121][ T5688] CPU: 0 UID: 0 PID: 5688 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.884037][ T5688] Tainted: [L]=SOFTLOCKUP [ 623.888348][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.898390][ T5688] Workqueue: events request_firmware_work_func [ 623.904538][ T5688] Call Trace: [ 623.907814][ T5688] [ 623.910742][ T5688] vpanic+0x56c/0xa60 [ 623.914770][ T5688] ? __pfx__printk+0x10/0x10 [ 623.919364][ T5688] ? __pfx_vpanic+0x10/0x10 [ 623.923852][ T5688] ? is_bpf_text_address+0x292/0x2b0 [ 623.929127][ T5688] ? is_bpf_text_address+0x26/0x2b0 [ 623.934315][ T5688] panic+0xc5/0xd0 [ 623.938028][ T5688] ? __pfx_panic+0x10/0x10 [ 623.942437][ T5688] ? ret_from_fork_asm+0x1a/0x30 [ 623.947361][ T5688] __warn+0x315/0x4c0 [ 623.951331][ T5688] ? kernfs_get+0x72/0x90 [ 623.955647][ T5688] ? kernfs_get+0x72/0x90 [ 623.959960][ T5688] __report_bug+0x29a/0x540 [ 623.964455][ T5688] ? kernfs_get+0x72/0x90 [ 623.968775][ T5688] ? __pfx___report_bug+0x10/0x10 [ 623.973793][ T5688] ? kernfs_add_one+0x477/0x5c0 [ 623.978640][ T5688] ? up_write+0x1ab/0x410 [ 623.982983][ T5688] ? kernfs_get+0x72/0x90 [ 623.987308][ T5688] report_bug+0x16a/0x220 [ 623.991636][ T5688] ? kernfs_get+0x72/0x90 [ 623.995955][ T5688] ? kernfs_get+0x74/0x90 [ 624.000289][ T5688] handle_bug+0x9c/0x200 [ 624.004521][ T5688] exc_invalid_op+0x1a/0x50 [ 624.009010][ T5688] asm_exc_invalid_op+0x1a/0x20 [ 624.013849][ T5688] RIP: 0010:kernfs_get+0x72/0x90 [ 624.018782][ T5688] Code: e8 33 c3 55 ff 48 89 df be 04 00 00 00 e8 66 03 c1 ff f0 ff 03 eb 05 e8 1c c3 55 ff 5b 5d c3 cc cc cc cc cc e8 0f c3 55 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 624.038397][ T5688] RSP: 0018:ffffc9000511f660 EFLAGS: 00010293 [ 624.044461][ T5688] RAX: ffffffff826ffec1 RBX: ffff8880269f15a0 RCX: ffff8880584c8000 [ 624.052421][ T5688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.060381][ T5688] RBP: 0000000000000000 R08: ffff8880269f15a3 R09: 1ffff11004d3e2b4 [ 624.068337][ T5688] R10: dffffc0000000000 R11: ffffed1004d3e2b5 R12: ffff888031cb66a8 [ 624.076322][ T5688] R13: 1ffff11006396cd6 R14: ffff888031cb66b0 R15: ffff888031cb6698 [ 624.084306][ T5688] ? kernfs_get+0x71/0x90 [ 624.088637][ T5688] kobject_add_internal+0x6be/0xd00 [ 624.093829][ T5688] kobject_add+0x163/0x240 [ 624.098240][ T5688] ? rcu_is_watching+0x15/0xb0 [ 624.102994][ T5688] ? __pfx_kobject_add+0x10/0x10 [ 624.107922][ T5688] ? __kasan_kmalloc+0x93/0xb0 [ 624.112678][ T5688] ? kobject_init+0x83/0x1e0 [ 624.117280][ T5688] get_device_parent+0x316/0x3a0 [ 624.122219][ T5688] device_add+0x2e1/0xbb0 [ 624.126547][ T5688] firmware_fallback_sysfs+0x2e4/0xa30 [ 624.131999][ T5688] ? kfree+0x1c5/0x640 [ 624.136078][ T5688] _request_firmware+0x1052/0x1780 [ 624.141196][ T5688] ? __pfx__request_firmware+0x10/0x10 [ 624.146651][ T5688] ? process_scheduled_works+0xa70/0x1860 [ 624.152358][ T5688] ? process_scheduled_works+0xa70/0x1860 [ 624.158072][ T5688] request_firmware_work_func+0xaf/0x1c0 [ 624.163701][ T5688] ? process_scheduled_works+0xa70/0x1860 [ 624.169425][ T5688] process_scheduled_works+0xb5d/0x1860 [ 624.174975][ T5688] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.180952][ T5688] ? assign_work+0x3d5/0x5e0 [ 624.185548][ T5688] worker_thread+0xa53/0xfc0 [ 624.190147][ T5688] kthread+0x388/0x470 [ 624.194204][ T5688] ? __pfx_worker_thread+0x10/0x10 [ 624.199311][ T5688] ? __pfx_kthread+0x10/0x10 [ 624.203914][ T5688] ret_from_fork+0x514/0xb70 [ 624.208505][ T5688] ? __pfx_ret_from_fork+0x10/0x10 [ 624.213608][ T5688] ? __switch_to+0xc79/0x1410 [ 624.218283][ T5688] ? __pfx_kthread+0x10/0x10 [ 624.222868][ T5688] ret_from_fork_asm+0x1a/0x30 [ 624.227635][ T5688] [ 624.231176][ T5688] Kernel Offset: disabled [ 624.235494][ T5688] Rebooting in 86400 seconds..