last executing test programs: 14.594819035s ago: executing program 4 (id=533): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000240)=""/251, 0xfb}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x7f) 13.727468376s ago: executing program 0 (id=535): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x3e8, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) (fail_nth: 6) 12.800829149s ago: executing program 0 (id=538): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a05d00000000000000109022400010000000009040000010300000009213600000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000) r3 = syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x22, 0x2000, @fd_index=0x4, 0x5, &(0x7f0000000240)}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) sysfs$2(0x2, 0x3, &(0x7f0000000580)=""/131) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r8, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x11, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x4, "e555b07b"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000640)={0x20, 0x7, 0x18, {0x18, 0xd, "1eb76bb0e2a3c78b5a3260aa686236bdd3b46b5b22b1"}}, &(0x7f0000000640)=ANY=[]}, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x0, 0x15, 0x50, "7edc0738c12fa2b40129471faca5164f28a94950900978521499479a92b1b160d0d933e04ef6190565191ebb13b12927779a36bc7de63374f7efd262acdac84a92ceab68bb20a355f42c39cd7831d752"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x14, {0x12, "01385724153400816c1faa3115822ae596bd"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x8}}) 11.447360431s ago: executing program 1 (id=540): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000090002"], 0x108}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1, 0x800000, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x8000003, 0xffffffff}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)="c4bd82aa81f475903f01887cab347715f9112e190f0b86bf7b649d3adac0880583888924938979e245bd1e9947ee2c34bc03c9f6e113b52257789073fc8747c18102b067c5f11e2ed996f7ba3b23d3a4c6b5096359a7ed1fa6216799664225f72d49a3c4dde0c723af41ede13b475995fd146241da6334b66f836777c5569eb7a45afe8084bac5c027bf6b8e63b5405904ab4d9265f4908eae86bbbcad0e0ff975e531bbfe627152ae322db7fbef9ec2047510f0be164ef4fd47244b961d4167942330", 0xc3}, {&(0x7f00000004c0)="f4d0e862b3cd137dc4e861567d98a1668ad9551c93d638e9d8bbdb59bd9c2213173fa0b4541ae7878e576345444d70a2a700aa164d", 0x35}, {&(0x7f00000008c0)="e49496dce8d6a1cb564175b5b44291bd3c461943ff37b4d50080c9bac3f60bc660c3057bd92cc3c7d2935e96cabeb004beb29f5b04bde6bc4273bae7682405fae44c4025a6931d8f347751059e4458ba75eb5976d5634c77a02746773733c140e559888eac4c6dea49a654034786c178db520861c24c1ea0bb0a22eb6a3cc59ec38c3fefd9bfe7ce11946aa4d6b98e3030e3071a4ff2d09ba21bc975fc2ada231543d9c673eaf54f86272ec859154e1cd9c1fe22fc99c702803ee36b154b732e154b6b0728981c8409", 0xc9}], 0x3, 0x0, 0x0, 0x40}}], 0x1, 0x40811) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socket$nl_route(0x10, 0x3, 0x0) 11.166120489s ago: executing program 4 (id=541): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000002040)='./bus\x00', 0x4b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x1) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(r0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)='./file0\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r6, &(0x7f00000004c0)='./bus\x00', r4, &(0x7f0000000500)='./file0\x00', 0x0) 9.919335477s ago: executing program 1 (id=542): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x1, 0x0, 0x9}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001540)=""/4096, 0x1000) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x1c4, 0x318, 0x0, 0xec, 0x0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@mcast2, @local, [0x0, 0x0, 0xffffffff], [0xff000000], 'macvlan1\x00', 'virt_wifi0\x00', {}, {}, 0x3c, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, 'syzkaller0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 9.581257999s ago: executing program 2 (id=544): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x20000084) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026090909140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 9.411973923s ago: executing program 4 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000000240)={0x0, 0x2c, 0x2c000000, 0x2c, 0x0, 0x2c}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x44, r9, 0xf01, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x8c0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xc0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x38, 0x43, 0x10, 0x70bd2a, 0x25dfdbfc, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x7b}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_THRESH2={0x8, 0x3, 0xfd53}, @NDTA_THRESH3={0x8, 0x4, 0xfffffffd}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_on}, {@xino_auto}]}) 7.923502214s ago: executing program 2 (id=547): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) lseek(r0, 0x100, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="23000000010006", 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r4, 0x3a5, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x8000000a}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) move_mount(r5, &(0x7f0000001340)='./file0/../file0\x00', r5, &(0x7f0000000300)='./file0\x00', 0x201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r2, r1, &(0x7f0000000180)=0xfffffffffffffff9, 0x8) 7.656165458s ago: executing program 1 (id=548): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010002104ffff000000000073650000", @ANYRES32=0x0, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00aa00"], 0x40}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x2}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESHEX=r3], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) 7.655503445s ago: executing program 2 (id=549): openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$evdev(0x0, 0x0, 0x101000) ioctl$EVIOCGUNIQ(r1, 0x80404508, 0x0) semctl$SETVAL(0x0, 0xff7f, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x1, @multicast}, 0x41, {0x2, 0x4e22, @remote}, 'veth1_to_batadv\x00'}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b0800e209058da203002a000009050505000000000009058b428d"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000d40)={{}, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={0x0, 0x6, 0x9, 0x8, 0x0, [], [0x4], [0x0, 0x0, 0x100, 0xd], [0x4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=0x2fb, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x20, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0]}, 0x40) 6.635701133s ago: executing program 0 (id=551): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000a0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000000)={0x14}) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000080)=0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r8, 0x88, 0x64, 0x0, &(0x7f0000000040)) ioctl$TCSETA(r5, 0x4b6a, &(0x7f0000000340)={0x200b, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0x69, {0x69, 0x12, "9c41302a60bde09b0d96378ca16d365215048f681409e163a3b22c79111f5481e93e76b0118a470f0283604f17371d234c74978de8558cd75d988ae2b5baf61c577a6ac1006335f607ae02e0a963d91e14d99e5f33f1a934001af4f732987788aa7d57c92bf5b6"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x16, 0xaa, "e41aecadfe8b0b626a62fd8baa695d3958c96fd9fe73f186f8bbc89042f6a252daad831a78939f3fb00f088bcbdfb5b8c2683e06db80f1f559824cb9805cefbf9eeb3e0d196c38a78a1505e1c7a9d9d7fbec3543354bafed32a6a448bf67117820a6b0c8aa8fd558436d8926edb69c7d140eac3c796430114875aae10e6ca1a7aa3bfed76d73cbc4cebc29dddb6b0eba9b5348507811ae8acb57891f0ae387d64684cda5fedd0ab64aa3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f0000000140)=""/94}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) 6.386095334s ago: executing program 3 (id=552): syz_init_net_socket$rose(0xb, 0x5, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x1000, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x10) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380), 0x0, 0xfffffffffffffffa) 6.17795396s ago: executing program 4 (id=553): openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xf) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0xc08e}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@cache_readahead}]}}) 5.633680972s ago: executing program 1 (id=554): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioperm(0x0, 0x1, 0x1) futex(0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) syz_clone3(&(0x7f0000000580)={0x101002080, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.576984118s ago: executing program 4 (id=555): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 4.154706193s ago: executing program 2 (id=556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0xc, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000180)=[@ioring_restriction_sqe_flags_required={0x3, 0x1}, @ioring_restriction_sqe_op={0x1, 0x13}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000003200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000340)) fcntl$lock(r2, 0x26, &(0x7f0000000080)) fcntl$lock(r2, 0x6, &(0x7f0000000000)) syz_io_uring_setup(0x2575, &(0x7f0000000240)={0x0, 0xc32b, 0x0, 0x2, 0x2bc, 0x0, r1}, &(0x7f0000000000), &(0x7f00000002c0)) syz_emit_ethernet(0x17b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0303000000ba49040e2001"], 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000001006907864010101ac1414aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e5c314eaa69672e28e259e1e992540b4059612066e11205851e990029c85d69c6c4ff59239f6f9e6258d70b9d3025d7867860d41c825c8940e07d8b9d8cade2257aaad53460ca43ea67fec17184a6d13403ad88a014064b92f94a36136283bf8a415d2b4b9dbc5e0af2843593c8a"], 0x0) 4.096027709s ago: executing program 1 (id=557): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41c040, 0x0, 0x38}, 0x18) faccessat2(r1, &(0x7f0000000100)='./file0\x00', 0x10, 0x300) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000003340), 0x8100) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000900)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0}) 3.89268739s ago: executing program 3 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000740)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x75f, 0x1a142) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001"], 0x108}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x800000, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x8000003, 0xffffffff}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)="c4bd82aa81f475903f01887cab347715f9112e190f0b86bf7b649d3adac0880583888924938979e245bd1e9947ee2c34bc03c9f6e113b52257789073fc8747c18102b067c5f11e2ed996f7ba3b23d3a4c6b5096359a7ed1fa6216799664225f72d49a3c4dde0c723af41ede13b475995fd146241da6334b66f836777c5569eb7a45afe8084bac5c027bf6b8e63b5405904ab4d9265f4908eae86bbbcad0e0ff975e531bbfe627152ae322db7fbef9ec2047510f0be164ef4fd47244b961d4167942330", 0xc3}, {&(0x7f00000004c0)="f4d0e862b3cd137dc4e861567d98a1668ad9551c93d638e9d8bbdb59bd9c2213173fa0b4541ae7878e576345444d70a2a700aa164d", 0x35}, {&(0x7f00000008c0)="e49496dce8d6a1cb564175b5b44291bd3c461943ff37b4d50080c9bac3f60bc660c3057bd92cc3c7d2935e96cabeb004beb29f5b04bde6bc4273bae7682405fae44c4025a6931d8f347751059e4458ba75eb5976d5634c77a02746773733c140e559888eac4c6dea49a654034786c178db520861c24c1ea0bb0a22eb6a3cc59ec38c3fefd9bfe7ce11946aa4d6b98e3030e3071a4ff2d09ba21bc975fc2ada231543d9c673eaf54f86272ec859154e1cd9c1fe22fc99c702803ee36b154b732e154b6b0728981c8409", 0xc9}], 0x3, 0x0, 0x0, 0x40}}], 0x1, 0x40811) ioctl$LOOP_CLR_FD(r4, 0x4c01) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000008001500000000000500"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 2.98104352s ago: executing program 0 (id=559): socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltclass={0x7c, 0x29, 0xf971232cbc7d3904, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x0, 0x6}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x10, 0xfb}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xf7, 0xd0}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1b36) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') (async) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000201050000000000000000000200000806001240000300000400108008000c4000000002efff0f80"], 0x2c}, 0x1, 0x0, 0x0, 0x24048400}, 0x0) (async, rerun: 64) keyctl$setperm(0x5, 0x0, 0x10200000) (async, rerun: 64) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000001700)={0x0, 0x5e, &(0x7f0000001680)={&(0x7f0000000540)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) futex(&(0x7f000000cffc), 0xc, 0x2, &(0x7f0000000000), &(0x7f0000048000), 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) 2.935853934s ago: executing program 2 (id=560): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="8701000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d3ab2b71d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) lseek(r0, 0x100, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="23000000010006", 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r4, 0x3a5, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x8000000a}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r2, r1, &(0x7f0000000180)=0xfffffffffffffff9, 0x8) 2.911443244s ago: executing program 3 (id=561): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$loop(0x0, 0x75f, 0x1a142) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000"], 0x108}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000008140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x40811) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket$nl_route(0x10, 0x3, 0x0) 2.057748813s ago: executing program 3 (id=562): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB="9feb010018000000000000007e0000007e00000007000000030000005fa5bb965e55c6510000001202000000040000000700000f020000000308000000000000030000000500000000000080050000000400000008000000bf00000004000000ffffff7f000400000100000001"], &(0x7f00000024c0)=""/223, 0x9f, 0xdf, 0x1, 0x3, 0x10000, @value}, 0x28) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000000c0)={0x0, "9048d8d5d59be87d48b421df09030b734bbd3767161ed499223689aa39646fd5"}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000001100)={0x0, 0x7, 0x2010, 0x1}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 1.919807238s ago: executing program 2 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000000240)={0x0, 0x2c, 0x2c000000, 0x2c, 0x0, 0x2c}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x44, r9, 0xf01, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x8c0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xc0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@setneightbl={0x38, 0x43, 0x10, 0x70bd2a, 0x25dfdbfc, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x7b}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_THRESH2={0x8, 0x3, 0xfd53}, @NDTA_THRESH3={0x8, 0x4, 0xfffffffd}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_on}, {@xino_auto}]}) 1.3061128s ago: executing program 3 (id=564): r0 = socket(0x6, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x9815}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x9815}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x5c, 0x0, 0xb}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000002c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x1a, &(0x7f0000000300)={0x0}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="08000a00ffffffff140006000000000601f0ffff0000000000000000140001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="08000a00ffffffff140006000000000601f0ffff0000000000000000140001"], 0x48}}, 0x0) 1.108685031s ago: executing program 0 (id=565): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) sync_file_range(r3, 0x2000000, 0x0, 0x2) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063011b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x0, '\x00', '\x00', '\x00', 0x6, 0x1, 0x0, 0x40, "57d4915b52cdfd588ea56ed6c1ca719a"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 203.966899ms ago: executing program 3 (id=566): openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$evdev(0x0, 0x0, 0x101000) ioctl$EVIOCGUNIQ(r1, 0x80404508, 0x0) semctl$SETVAL(0x0, 0xff7f, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x1, @multicast}, 0x41, {0x2, 0x4e22, @remote}, 'veth1_to_batadv\x00'}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b0800e209058da203002a000009050505000000000009058b428d"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000d40)={{}, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={0x0, 0x6, 0x9, 0x8, 0x0, [], [0x4], [0x0, 0x0, 0x100, 0xd], [0x4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=0x2fb, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x20, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0]}, 0x40) 74.919661ms ago: executing program 4 (id=567): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, 0x0, 0xfffffd3e) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x80184132, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') mkdir(&(0x7f00000003c0)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0), 0x8, &(0x7f0000002b40)={[{@inode32}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0xb6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x4, 0xe, 0x5, 0xf000, 0x40, 0x8}) 24.862398ms ago: executing program 0 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r3 = syz_open_pts(r2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000007100)={0x0, 0x0, &(0x7f00000070c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000120a00040000000000000000000000000400048020000000000a01040000000000000000030000000900010073797a300000000030000000160a0101000000000000000003000000040003800900020073797a31000000000900010073797a30"], 0x90}}, 0x40840) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x1, 0xfffffffe, 0x2c, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x20}}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r6, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) read(r3, 0x0, 0x2006) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0x8, [@multicast2, @remote, @multicast2]}, @ssrr={0x89, 0x3, 0xd7}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x848000000015, 0x805, 0x0) bind$alg(r9, &(0x7f0000002080)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x128, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}]}, 0x128}, 0x1, 0x0, 0x0, 0x11}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=569): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x21, &(0x7f00000000c0)=ANY=[@ANYRES16=r0]}]}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f00000000c0)=[{r1, 0x40}], 0x1, 0x9d) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000001c}) kernel console output (not intermixed with test programs): 69] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 102.061716][ T5869] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input6 [ 102.678877][ T5869] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 102.866391][ T6133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.877594][ T6133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.923892][ T5869] usb 3-1: USB disconnect, device number 4 [ 103.018776][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.197140][ T46] usb 1-1: device descriptor read/64, error -71 [ 103.246983][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.396894][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 103.408521][ T5870] usb 4-1: config 2 has an invalid interface number: 114 but max is 0 [ 103.427024][ T5870] usb 4-1: config 2 has no interface number 0 [ 103.439128][ T5870] usb 4-1: config 2 interface 114 has no altsetting 0 [ 103.447130][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.458612][ T5870] usb 4-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 103.476980][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.485275][ T5870] usb 4-1: Product: syz [ 103.494485][ T5870] usb 4-1: Manufacturer: syz [ 103.516957][ T5870] usb 4-1: SerialNumber: syz [ 103.587537][ T46] usb 1-1: device descriptor read/64, error -71 [ 103.711021][ T46] usb usb1-port1: attempt power cycle [ 103.765488][ T5870] usb 4-1: USB disconnect, device number 3 [ 103.798848][ T5900] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.991147][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.033462][ T5900] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 104.076138][ T5900] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 104.087087][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.118889][ T46] usb 1-1: device descriptor read/8, error -71 [ 104.137056][ T5900] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 104.146219][ T5900] usb 3-1: config 13 has no interface number 0 [ 104.152899][ T5900] usb 3-1: config 13 interface 50 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 104.166604][ T5900] usb 3-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.180733][ T5900] usb 3-1: config 13 interface 50 has no altsetting 0 [ 104.196982][ T5900] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 104.206389][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.215766][ T5900] usb 3-1: Product: syz [ 104.220106][ T5900] usb 3-1: Manufacturer: syz [ 104.224850][ T5900] usb 3-1: SerialNumber: syz [ 104.367262][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.402257][ T46] usb 1-1: device descriptor read/8, error -71 [ 104.567520][ T46] usb usb1-port1: unable to enumerate USB device [ 104.619790][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 104.647218][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 104.829575][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 105.111277][ T5900] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 105.255929][ T3010] usb 3-1: Failed to submit usb control message: -71 [ 105.553155][ T5900] usb 3-1: USB disconnect, device number 5 [ 105.559577][ T3010] usb 3-1: unable to send the bmi data to the device: -71 [ 105.567285][ T3010] usb 3-1: unable to get target info from device [ 105.577390][ T5870] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.597467][ T3010] usb 3-1: could not get target info (-71) [ 105.611436][ T3010] usb 3-1: could not probe fw (-71) [ 105.850764][ T5870] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 105.865776][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.906487][ T5870] usb 2-1: Product: syz [ 105.934112][ T5870] usb 2-1: Manufacturer: syz [ 105.974836][ T5870] usb 2-1: SerialNumber: syz [ 106.001282][ T6204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87'. [ 106.005466][ T5870] usb 2-1: config 0 descriptor?? [ 106.010251][ T6204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87'. [ 106.010304][ T6204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87'. [ 106.835674][ T5870] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 107.039020][ T5870] gspca_sunplus: reg_r err -71 [ 107.062787][ T5870] usb 2-1: USB disconnect, device number 3 [ 107.474750][ T6226] 9pnet_fd: Insufficient options for proto=fd [ 107.515520][ T5900] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.998332][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.009395][ T5900] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.019251][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.047937][ T5900] usb 5-1: config 0 descriptor?? [ 108.084162][ T6229] netem: change failed [ 108.202591][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 108.245482][ T6236] xt_TCPMSS: Only works on TCP SYN packets [ 108.477325][ T5871] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.605338][ T5900] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 108.689609][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 108.715104][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 108.774195][ T5871] usb 3-1: config 2 has an invalid interface number: 114 but max is 0 [ 108.776552][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input7 [ 108.800128][ T5871] usb 3-1: config 2 has no interface number 0 [ 108.840602][ T5871] usb 3-1: config 2 interface 114 has no altsetting 0 [ 108.889911][ T5871] usb 3-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 108.927761][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.039487][ T5871] usb 3-1: Product: syz [ 109.068774][ T5871] usb 3-1: Manufacturer: syz [ 109.071231][ T5900] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 109.085799][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.124120][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.142189][ T5871] usb 3-1: SerialNumber: syz [ 109.471272][ T5869] usb 5-1: USB disconnect, device number 7 [ 109.488913][ T5871] usb 3-1: USB disconnect, device number 6 [ 109.757561][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.887079][ T5901] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 109.916432][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 109.947968][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 109.960526][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 110.004644][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 110.051683][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 110.062482][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 110.096092][ T5901] usb 1-1: config 2 has an invalid interface number: 114 but max is 0 [ 110.126759][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 110.153654][ T5901] usb 1-1: config 2 has no interface number 0 [ 110.205021][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.215452][ T5901] usb 1-1: config 2 interface 114 has no altsetting 0 [ 110.234355][ T5901] usb 1-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 110.247349][ T5900] usb 4-1: config 0 descriptor?? [ 110.252446][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.270173][ T6251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.277940][ T6251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.291215][ T5901] usb 1-1: Product: syz [ 110.295654][ T5901] usb 1-1: Manufacturer: syz [ 110.307692][ T5901] usb 1-1: SerialNumber: syz [ 112.155427][ T6251] QAT: Device 5 not found [ 112.209152][ T5901] usb 1-1: USB disconnect, device number 9 [ 112.888928][ T6277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.104'. [ 113.597854][ T5900] usb 4-1: string descriptor 0 read error: -71 [ 113.667716][ T5900] usb 4-1: USB disconnect, device number 4 [ 113.858122][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.108'. [ 113.965920][ T5869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.436935][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 114.451200][ T5869] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 114.471875][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.489010][ T5869] usb 1-1: Product: syz [ 114.503336][ T5869] usb 1-1: Manufacturer: syz [ 114.514049][ T5869] usb 1-1: SerialNumber: syz [ 114.529679][ T5869] usb 1-1: config 0 descriptor?? [ 114.677124][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.848657][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 114.911656][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.975001][ T46] usb 3-1: config 2 has an invalid interface number: 114 but max is 0 [ 114.989949][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 115.014739][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.023559][ T46] usb 3-1: config 2 has no interface number 0 [ 115.058225][ T46] usb 3-1: config 2 interface 114 has no altsetting 0 [ 115.080295][ T5869] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 115.084781][ T46] usb 3-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 115.136121][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.556955][ T46] usb 3-1: Product: syz [ 115.561184][ T46] usb 3-1: Manufacturer: syz [ 115.567205][ T46] usb 3-1: SerialNumber: syz [ 115.790379][ T46] usb 3-1: USB disconnect, device number 7 [ 116.003613][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 117.171178][ T5869] gspca_sunplus: reg_w_riv err -71 [ 117.176921][ T5869] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 117.188501][ T5869] usb 1-1: USB disconnect, device number 10 [ 118.313813][ T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.262918][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.317944][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.377009][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.386956][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 119.487953][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 119.955588][ T46] usb 4-1: config 0 descriptor?? [ 120.650485][ T46] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 120.687740][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input8 [ 121.249148][ T46] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 121.397897][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.441528][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.501923][ T5869] usb 4-1: USB disconnect, device number 5 [ 122.667598][ T6364] FAULT_INJECTION: forcing a failure. [ 122.667598][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.733347][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.4.129 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 122.744007][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.754105][ T6364] Call Trace: [ 122.757410][ T6364] [ 122.760361][ T6364] dump_stack_lvl+0x241/0x360 [ 122.765160][ T6364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.770472][ T6364] ? __pfx__printk+0x10/0x10 [ 122.775115][ T6364] ? __pfx_lock_release+0x10/0x10 [ 122.780170][ T6364] should_fail_ex+0x3b0/0x4e0 [ 122.784882][ T6364] _copy_from_iter+0x1e9/0x1c20 [ 122.789850][ T6364] ? __virt_addr_valid+0x183/0x530 [ 122.795041][ T6364] ? __alloc_skb+0x28f/0x440 [ 122.799659][ T6364] ? __pfx__copy_from_iter+0x10/0x10 [ 122.805059][ T6364] ? __virt_addr_valid+0x183/0x530 [ 122.810293][ T6364] ? __virt_addr_valid+0x183/0x530 [ 122.815421][ T6364] ? __virt_addr_valid+0x45f/0x530 [ 122.820554][ T6364] ? __phys_addr_symbol+0x2f/0x70 [ 122.825619][ T6364] ? __check_object_size+0x47a/0x730 [ 122.830938][ T6364] netlink_sendmsg+0x73d/0xcb0 [ 122.835747][ T6364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.841081][ T6364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.846413][ T6364] __sock_sendmsg+0x221/0x270 [ 122.851134][ T6364] ____sys_sendmsg+0x52a/0x7e0 [ 122.855976][ T6364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.861319][ T6364] ? __fget_files+0x2a/0x410 [ 122.865935][ T6364] ? __fget_files+0x2a/0x410 [ 122.871167][ T6364] __sys_sendmsg+0x269/0x350 [ 122.875821][ T6364] ? __pfx_lock_release+0x10/0x10 [ 122.881498][ T6364] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.886746][ T6364] ? __pfx_vfs_write+0x10/0x10 [ 122.891658][ T6364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.898026][ T6364] ? do_syscall_64+0x100/0x230 [ 122.903013][ T6364] ? do_syscall_64+0xb6/0x230 [ 122.907732][ T6364] do_syscall_64+0xf3/0x230 [ 122.912261][ T6364] ? clear_bhb_loop+0x35/0x90 [ 122.916963][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.922918][ T6364] RIP: 0033:0x7fa5aa385d29 [ 122.927443][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.947343][ T6364] RSP: 002b:00007fa5ab1d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.955793][ T6364] RAX: ffffffffffffffda RBX: 00007fa5aa575fa0 RCX: 00007fa5aa385d29 [ 122.964143][ T6364] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 122.972147][ T6364] RBP: 00007fa5ab1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.980149][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.988144][ T6364] R13: 0000000000000000 R14: 00007fa5aa575fa0 R15: 00007ffea0c8c6e8 [ 122.996162][ T6364] [ 123.517034][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.715881][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.832576][ T5869] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.080894][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.318358][ T5869] usb 4-1: config 0 descriptor?? [ 124.560489][ T6391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.135'. [ 125.829894][ T5869] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 125.954596][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.025990][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.048702][ T5869] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input9 [ 126.210461][ T5869] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 126.799815][ T5899] usb 4-1: USB disconnect, device number 6 [ 127.002893][ T6409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.134'. [ 127.013208][ T6409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.134'. [ 128.142400][ T29] audit: type=1326 audit(1737361649.272:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 128.166791][ T6431] FAULT_INJECTION: forcing a failure. [ 128.166791][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.176489][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 128.195086][ T29] audit: type=1326 audit(1737361649.292:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5aa384690 code=0x7ffc0000 [ 128.241450][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.4.145 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 128.252380][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 128.262880][ T6431] Call Trace: [ 128.266181][ T6431] [ 128.269132][ T6431] dump_stack_lvl+0x241/0x360 [ 128.273820][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.279050][ T6431] ? __pfx__printk+0x10/0x10 [ 128.283731][ T6431] ? snprintf+0xda/0x120 [ 128.288084][ T6431] should_fail_ex+0x3b0/0x4e0 [ 128.292817][ T6431] _copy_to_user+0x31/0xb0 [ 128.297287][ T6431] simple_read_from_buffer+0xca/0x150 [ 128.302788][ T6431] proc_fail_nth_read+0x1e9/0x250 [ 128.307868][ T6431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.313507][ T6431] ? rw_verify_area+0x55e/0x6f0 [ 128.318371][ T6431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.323926][ T6431] vfs_read+0x1fc/0xb70 [ 128.328175][ T6431] ? __pfx___mutex_lock+0x10/0x10 [ 128.333315][ T6431] ? __pfx_vfs_read+0x10/0x10 [ 128.338080][ T6431] ? __fget_files+0x2a/0x410 [ 128.342783][ T6431] ? __fget_files+0x395/0x410 [ 128.347566][ T6431] ? __fget_files+0x2a/0x410 [ 128.352269][ T6431] ksys_read+0x18f/0x2b0 [ 128.356555][ T6431] ? __pfx_ksys_read+0x10/0x10 [ 128.361320][ T6431] ? __secure_computing+0x125/0x370 [ 128.366530][ T6431] do_syscall_64+0xf3/0x230 [ 128.371051][ T6431] ? clear_bhb_loop+0x35/0x90 [ 128.375729][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.381628][ T6431] RIP: 0033:0x7fa5aa38473c [ 128.386060][ T6431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.405779][ T6431] RSP: 002b:00007fa5ab1d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.414241][ T6431] RAX: ffffffffffffffda RBX: 00007fa5aa575fa0 RCX: 00007fa5aa38473c [ 128.422233][ T6431] RDX: 000000000000000f RSI: 00007fa5ab1d70a0 RDI: 0000000000000003 [ 128.430364][ T6431] RBP: 00007fa5ab1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.438361][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.446515][ T6431] R13: 0000000000000000 R14: 00007fa5aa575fa0 R15: 00007ffea0c8c6e8 [ 128.454543][ T6431] [ 128.515377][ T29] audit: type=1326 audit(1737361649.292:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 128.580174][ T29] audit: type=1326 audit(1737361649.292:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5aa384690 code=0x7ffc0000 [ 128.645930][ T29] audit: type=1326 audit(1737361649.292:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5aa3847df code=0x7ffc0000 [ 128.724857][ T29] audit: type=1326 audit(1737361649.292:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 128.755236][ T29] audit: type=1326 audit(1737361649.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5aa38473c code=0x7ffc0000 [ 128.805260][ T29] audit: type=1326 audit(1737361649.672:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5aa3847df code=0x7ffc0000 [ 128.854589][ T6436] xt_CT: No such helper "snmp" [ 128.879954][ T29] audit: type=1326 audit(1737361649.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5aa3847df code=0x7ffc0000 [ 128.911831][ T29] audit: type=1326 audit(1737361649.672:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 128.951571][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 129.372787][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 129.670454][ T5899] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.953397][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.965847][ T5899] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.003659][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.026558][ T5899] usb 3-1: config 0 descriptor?? [ 131.287605][ T5899] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 131.337578][ T5899] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input10 [ 131.387562][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.466689][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.684839][ T5899] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 132.104995][ T5899] usb 3-1: USB disconnect, device number 8 [ 133.350773][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.367365][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.618093][ T6496] netlink: 32 bytes leftover after parsing attributes in process `syz.3.162'. [ 134.548982][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 135.111343][ T6510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.161'. [ 135.223537][ T6512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.161'. [ 135.915388][ T6515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.167'. [ 136.112117][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 136.248538][ T5868] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 136.492201][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 136.598834][ T5868] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 136.650774][ T5868] usb 1-1: config 150 has no interface number 0 [ 136.665790][ T5868] usb 1-1: config 150 interface 204 has no altsetting 0 [ 136.686024][ T5868] usb 1-1: config 150 interface 1 has no altsetting 0 [ 136.710916][ T5868] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 136.730917][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.742136][ T5868] usb 1-1: Product: syz [ 136.746432][ T5868] usb 1-1: Manufacturer: syz [ 136.755355][ T5868] usb 1-1: SerialNumber: syz [ 137.010284][ T5868] xr_serial 1-1:150.204: xr_serial converter detected [ 137.021921][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 137.707733][ T5899] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.878996][ T5899] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 137.919038][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.518712][ T5899] usb 3-1: config 0 descriptor?? [ 138.655317][ T6539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.174'. [ 138.680427][ T5868] usb 1-1: xr_serial converter now attached to ttyUSB0 [ 139.226463][ T5899] wacom 0003:056A:002A.0008: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 139.226625][ T5868] usb 1-1: USB disconnect, device number 11 [ 139.306558][ T5899] wacom 0003:056A:002A.0008: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.2-1/input0 [ 139.349278][ T5899] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:002A.0008/input/input11 [ 139.467385][ T5868] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 139.476731][ T5868] xr_serial 1-1:150.204: device disconnected [ 140.287286][ T5899] usb 3-1: USB disconnect, device number 9 [ 140.328739][ T6549] FAULT_INJECTION: forcing a failure. [ 140.328739][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.380117][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.2.176 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 140.390861][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.400944][ T6549] Call Trace: [ 140.404252][ T6549] [ 140.407207][ T6549] dump_stack_lvl+0x241/0x360 [ 140.412029][ T6549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.417275][ T6549] ? __pfx__printk+0x10/0x10 [ 140.421896][ T6549] ? vfs_write+0x730/0xd30 [ 140.426352][ T6549] should_fail_ex+0x3b0/0x4e0 [ 140.431060][ T6549] _copy_from_user+0x2f/0xc0 [ 140.435659][ T6549] move_addr_to_kernel+0x82/0x150 [ 140.440689][ T6549] __sys_connect+0xb6/0x2d0 [ 140.445190][ T6549] ? __fget_files+0x2a/0x410 [ 140.449777][ T6549] ? __pfx___sys_connect+0x10/0x10 [ 140.454890][ T6549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.461231][ T6549] ? do_syscall_64+0x100/0x230 [ 140.466000][ T6549] __x64_sys_connect+0x7a/0x90 [ 140.470764][ T6549] do_syscall_64+0xf3/0x230 [ 140.475266][ T6549] ? clear_bhb_loop+0x35/0x90 [ 140.479943][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.485836][ T6549] RIP: 0033:0x7f58adf85d29 [ 140.490257][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.509862][ T6549] RSP: 002b:00007f58aed89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 140.518275][ T6549] RAX: ffffffffffffffda RBX: 00007f58ae175fa0 RCX: 00007f58adf85d29 [ 140.526243][ T6549] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 140.534208][ T6549] RBP: 00007f58aed89090 R08: 0000000000000000 R09: 0000000000000000 [ 140.542281][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.550431][ T6549] R13: 0000000000000000 R14: 00007f58ae175fa0 R15: 00007ffc50b475f8 [ 140.558411][ T6549] [ 140.598370][ T6551] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 140.627871][ T6551] tipc: Enabling of bearer rejected, failed to enable media [ 141.277038][ T6564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.180'. [ 142.909027][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'. [ 143.557157][ T5868] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 144.234782][ T5868] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 144.256147][ T5868] usb 4-1: config 0 has no interface number 0 [ 144.267522][ T5868] usb 4-1: config 0 interface 211 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 144.321729][ T5868] usb 4-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice=33.06 [ 144.347246][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.372763][ T5868] usb 4-1: Product: syz [ 144.417109][ T5868] usb 4-1: Manufacturer: syz [ 144.437094][ T5868] usb 4-1: SerialNumber: syz [ 144.473923][ T5868] usb 4-1: config 0 descriptor?? [ 144.493895][ T6578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.511832][ T5868] ftdi_sio 4-1:0.211: FTDI USB Serial Device converter detected [ 144.571868][ T5868] ftdi_sio ttyUSB0: unknown device type: 0x3306 [ 144.580384][ T6592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.189'. [ 144.701896][ T6597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.183'. [ 144.719014][ T6597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'. [ 146.143249][ T5868] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.213938][ T5869] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.377092][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 146.397146][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 146.416434][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.428487][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.446645][ T5869] usb 5-1: config 2 has an invalid interface number: 114 but max is 0 [ 146.457177][ T5869] usb 5-1: config 2 has no interface number 0 [ 146.464305][ T5869] usb 5-1: config 2 interface 114 has no altsetting 0 [ 146.472451][ T5868] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 146.483948][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.504266][ T5869] usb 5-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 146.515582][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.557217][ T5868] usb 2-1: config 0 descriptor?? [ 146.569556][ T5869] usb 5-1: Product: syz [ 146.574476][ T5869] usb 5-1: Manufacturer: syz [ 146.600552][ T5869] usb 5-1: SerialNumber: syz [ 146.808146][ T6610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'. [ 146.894045][ T5869] usb 5-1: USB disconnect, device number 8 [ 146.947938][ T25] usb 4-1: USB disconnect, device number 7 [ 146.955391][ T25] ftdi_sio 4-1:0.211: device disconnected [ 147.057415][ T5868] wacom 0003:056A:00D0.0009: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 147.128986][ T5868] wacom 0003:056A:00D0.0009: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 147.447186][ T5899] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.579377][ T5868] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.0009/input/input14 [ 148.067357][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 148.139855][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.308620][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.528391][ T5868] usb 2-1: USB disconnect, device number 4 [ 148.559054][ T5899] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.637073][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.670691][ T5899] usb 1-1: SerialNumber: syz [ 148.675739][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 149.777162][ T5917] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 149.828500][ T6640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.202'. [ 149.917263][ T5899] usb 1-1: 0:2 : does not exist [ 150.349545][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.856373][ T5917] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.867421][ T5899] usb 1-1: USB disconnect, device number 12 [ 150.908989][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.086051][ T6649] netlink: 'syz.3.205': attribute type 29 has an invalid length. [ 151.096174][ T6649] netlink: 'syz.3.205': attribute type 29 has an invalid length. [ 151.117931][ T5917] usb 3-1: config 0 descriptor?? [ 151.152178][ T6649] netlink: 'syz.3.205': attribute type 29 has an invalid length. [ 152.204898][ T5917] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 152.221621][ T5917] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input17 [ 152.274333][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.482597][ T5917] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 152.763338][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.799772][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.867640][ T6665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.206'. [ 152.877831][ T6665] netlink: 44 bytes leftover after parsing attributes in process `syz.1.206'. [ 153.054360][ T5871] usb 3-1: USB disconnect, device number 10 [ 153.204494][ T5869] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.887087][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 153.914809][ T5869] usb 5-1: config 2 has an invalid interface number: 114 but max is 0 [ 153.970634][ T5869] usb 5-1: config 2 has no interface number 0 [ 154.019575][ T5869] usb 5-1: config 2 interface 114 has no altsetting 0 [ 154.072301][ T5869] usb 5-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 154.108277][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.133018][ T5869] usb 5-1: Product: syz [ 154.148579][ T5869] usb 5-1: Manufacturer: syz [ 154.166769][ T5869] usb 5-1: SerialNumber: syz [ 154.388607][ T5870] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.419968][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 154.451066][ T5869] usb 5-1: USB disconnect, device number 9 [ 155.272342][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 155.576938][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 155.841016][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.874940][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.885266][ T5870] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 155.894703][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.937832][ T5870] usb 1-1: config 0 descriptor?? [ 156.029769][ T6685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.216'. [ 157.073692][ T5870] wacom 0003:056A:00D0.000B: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 157.101916][ T5870] wacom 0003:056A:00D0.000B: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 157.153714][ T5870] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.000B/input/input18 [ 157.358691][ T5870] usb 1-1: USB disconnect, device number 13 [ 157.477120][ T5869] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.513499][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 157.709836][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 157.823651][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 157.990391][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 158.100438][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 158.110759][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 158.181894][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.226663][ T5869] usb 4-1: config 0 descriptor?? [ 158.248684][ T6694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.256180][ T6694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.405545][ T6711] netlink: 'syz.0.224': attribute type 3 has an invalid length. [ 158.541548][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 158.583542][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.666990][ T5870] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.919382][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 158.976418][ T5870] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 158.995047][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.021844][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.051331][ T5899] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.062782][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.132584][ T6717] QAT: Device 5 not found [ 159.146894][ T5870] usb 3-1: config 0 has no interface number 0 [ 159.179005][ T5899] usb 5-1: config 0 descriptor?? [ 159.235318][ T5870] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.436497][ T5870] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 159.664270][ T5870] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 159.694063][ T5870] usb 3-1: config 0 interface 146 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.711040][ T6720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.228'. [ 159.953591][ T5899] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 160.253231][ T5870] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 160.267119][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.273999][ T5899] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000C/input/input21 [ 160.276178][ T5870] usb 3-1: Product: syz [ 160.297877][ T5870] usb 3-1: Manufacturer: syz [ 160.304885][ T5870] usb 3-1: SerialNumber: syz [ 160.348035][ T5870] usb 3-1: config 0 descriptor?? [ 160.424800][ T5870] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 160.439826][ T5899] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 160.448858][ T5869] usb 4-1: string descriptor 0 read error: -71 [ 160.527362][ T5869] usb 4-1: USB disconnect, device number 8 [ 160.575308][ T5870] usb 3-1: USB disconnect, device number 11 [ 160.603771][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.653525][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 161.198782][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.348731][ T5899] usb 5-1: USB disconnect, device number 10 [ 161.428128][ T6738] overlayfs: missing 'workdir' [ 162.705805][ T6752] netlink: 'syz.4.238': attribute type 3 has an invalid length. [ 162.753103][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 162.918157][ T5899] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.323791][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.239'. [ 163.347406][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 163.796386][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.867448][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.966902][ T5899] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 163.976437][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.016492][ T5899] usb 4-1: config 0 descriptor?? [ 164.736655][ T5899] wacom 0003:056A:00D0.000D: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 165.528517][ T5899] wacom 0003:056A:00D0.000D: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 165.604927][ T5899] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.000D/input/input22 [ 165.704402][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 166.219674][ T6783] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.268110][ T5899] usb 4-1: USB disconnect, device number 9 [ 166.394917][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.4.248'. [ 166.517049][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.686977][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 166.697836][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.709171][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.721160][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.747467][ T5869] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 166.757181][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.767814][ T5869] usb 1-1: config 0 descriptor?? [ 167.228726][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 167.687315][ T5869] wacom 0003:056A:0084.000E: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.0-1/input0 [ 167.827727][ T6797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'. [ 168.050320][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.381845][ T5869] usb 1-1: USB disconnect, device number 14 [ 168.527842][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 168.549798][ T25] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 168.568421][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.645037][ T25] usb 2-1: config 0 descriptor?? [ 168.703214][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 169.320560][ T25] gspca_nw80x: reg_w err -110 [ 169.325836][ T25] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 171.571836][ T5899] usb 2-1: USB disconnect, device number 5 [ 171.961963][ T6822] QAT: Device 5 not found [ 172.767586][ T5869] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 173.117558][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 173.138967][ T5869] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 173.167115][ T5869] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.221413][ T5869] usb 1-1: config 1 interface 0 has no altsetting 0 [ 173.239094][ T5869] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 173.257417][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.299768][ T5869] usb 1-1: Product: syz [ 173.303999][ T5869] usb 1-1: Manufacturer: syz [ 173.317388][ T5869] usb 1-1: SerialNumber: syz [ 173.597255][ T5871] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.741506][ T6836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.259'. [ 173.752378][ T6836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.259'. [ 174.220574][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 174.233229][ T5871] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 174.246159][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.266754][ T5871] usb 3-1: config 0 has no interface number 0 [ 174.273435][ T5871] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.285527][ T5871] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 174.299554][ T5871] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.311550][ T5871] usb 3-1: config 0 interface 146 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.329819][ T5871] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 174.339873][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.348979][ T5871] usb 3-1: Product: syz [ 174.353369][ T5871] usb 3-1: Manufacturer: syz [ 174.359269][ T5871] usb 3-1: SerialNumber: syz [ 174.371254][ T5871] usb 3-1: config 0 descriptor?? [ 174.387991][ T5871] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 174.424426][ T6838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.263'. [ 174.647534][ T5869] usbhid 1-1:1.0: can't add hid device: -71 [ 174.671132][ T5869] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 174.674466][ T5899] usb 3-1: USB disconnect, device number 12 [ 174.691788][ T5869] usb 1-1: USB disconnect, device number 15 [ 176.902643][ T6853] fuse: Unknown parameter '0xffffffffffffffff' [ 178.621440][ T6862] QAT: Device 5 not found [ 178.916876][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.067123][ T5899] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 179.176909][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.547550][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 179.567651][ T5899] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 179.585677][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.596966][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 179.614603][ T25] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 179.662748][ T5899] usb 4-1: config 0 descriptor?? [ 179.670160][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.688382][ T5899] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 179.694964][ T25] usb 2-1: Product: syz [ 179.701346][ T25] usb 2-1: Manufacturer: syz [ 179.751886][ T25] usb 2-1: SerialNumber: syz [ 179.814213][ T25] usb 2-1: config 0 descriptor?? [ 179.907111][ T5901] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.957739][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 180.127151][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 180.255216][ T5901] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 180.417821][ T5901] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.525219][ T6868] tipc: Started in network mode [ 180.537348][ T5901] usb 3-1: config 1 interface 0 has no altsetting 0 [ 180.558225][ T6868] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 180.563095][ T5901] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 180.597896][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 180.656986][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.661955][ T6868] tipc: Enabling of bearer rejected, failed to enable media [ 180.686063][ T5901] usb 3-1: Product: syz [ 180.695038][ T5901] usb 3-1: Manufacturer: syz [ 180.729126][ T5901] usb 3-1: SerialNumber: syz [ 180.785864][ T1767] usb 4-1: USB disconnect, device number 11 [ 180.811291][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.825315][ T5917] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.835352][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.840021][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.848738][ T5917] usb 1-1: config 0 descriptor?? [ 181.007223][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 181.014433][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.026094][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.036484][ T5871] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 181.045984][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.061981][ T5871] usb 5-1: config 0 descriptor?? [ 181.310311][ T5917] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 181.614639][ T5917] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input28 [ 181.630987][ T25] gspca_se401: read req failed req 0x06 error -19 [ 182.612185][ T25] usb 2-1: USB disconnect, device number 6 [ 182.625478][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.662114][ T5871] wacom 0003:056A:00D0.0010: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 182.893268][ T5901] usbhid 3-1:1.0: can't add hid device: -71 [ 182.907174][ T5901] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 182.941311][ T5871] wacom 0003:056A:00D0.0010: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 182.958641][ T5871] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0010/input/input29 [ 182.977389][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.014922][ T5901] usb 3-1: USB disconnect, device number 13 [ 183.253090][ T5917] keytouch 0003:0926:3333.000F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 183.449956][ T5917] usb 1-1: USB disconnect, device number 16 [ 183.610343][ T5871] usb 5-1: USB disconnect, device number 11 [ 184.613067][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.285'. [ 185.319127][ T6919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.282'. [ 185.329705][ T6919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.282'. [ 185.681505][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.667724][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.827069][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 186.971315][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 187.296802][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.314512][ T9] usb 5-1: Product: syz [ 187.325234][ T9] usb 5-1: Manufacturer: syz [ 187.333227][ T9] usb 5-1: SerialNumber: syz [ 187.353284][ T9] usb 5-1: config 0 descriptor?? [ 187.381697][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 187.582613][ T6921] tipc: Started in network mode [ 188.668040][ T6921] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 188.682826][ T6921] tipc: Enabling of bearer rejected, failed to enable media [ 188.727221][ T9] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 189.067053][ T5871] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 189.226931][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 189.247720][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.281605][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.309337][ T5871] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 189.328499][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.344196][ T5871] usb 3-1: config 0 descriptor?? [ 189.367149][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.615608][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 189.667310][ T9] gspca_se401: read req failed req 0x06 error -19 [ 189.717094][ T5869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 189.946986][ T9] usb 5-1: USB disconnect, device number 12 [ 189.962743][ T5871] wacom 0003:056A:00D0.0011: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 189.976380][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 190.006901][ T5869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 190.022704][ T5871] wacom 0003:056A:00D0.0011: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 190.047245][ T5869] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 190.059055][ T5871] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0011/input/input32 [ 190.081777][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.136564][ T5869] usb 2-1: config 0 descriptor?? [ 190.150112][ T6943] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 190.157722][ T6943] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 190.343740][ T5871] usb 3-1: USB disconnect, device number 14 [ 192.420652][ T6960] QAT: Device 5 not found [ 195.693274][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.778897][ T5869] usb 2-1: string descriptor 0 read error: -71 [ 195.798424][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.064711][ T5869] usb 2-1: USB disconnect, device number 7 [ 196.159445][ T6963] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 196.194179][ T6963] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 196.228389][ T6963] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 197.663023][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.860473][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 197.860520][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 197.866580][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 197.877081][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 197.879056][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 197.947024][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.135135][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 198.205438][ T25] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 198.252677][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.278373][ T25] usb 2-1: Product: syz [ 198.282687][ T25] usb 2-1: Manufacturer: syz [ 198.293378][ T25] usb 2-1: SerialNumber: syz [ 198.398748][ T25] usb 2-1: config 0 descriptor?? [ 198.495255][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 198.707028][ T6989] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.730434][ T6983] tipc: Enabling of bearer rejected, failed to enable media [ 199.412293][ T1767] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 199.660150][ T25] gspca_se401: read req failed req 0x06 error -19 [ 199.667892][ T1767] usb 5-1: Using ep0 maxpacket: 8 [ 199.691993][ T1767] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 199.762952][ T25] usb 2-1: USB disconnect, device number 8 [ 199.832868][ T1767] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.857585][ T5899] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 200.040800][ T1767] usb 5-1: config 1 interface 0 has no altsetting 0 [ 200.106585][ T1767] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 200.147468][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 200.173165][ T1767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.211114][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.241626][ T1767] usb 5-1: Product: syz [ 200.245837][ T1767] usb 5-1: Manufacturer: syz [ 200.246080][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 200.257400][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.276302][ T1767] usb 5-1: SerialNumber: syz [ 200.297713][ T5899] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 200.313466][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.345567][ T5899] usb 4-1: config 0 descriptor?? [ 200.622573][ T7013] netlink: 'syz.2.316': attribute type 29 has an invalid length. [ 201.678880][ T7018] netlink: 'syz.2.316': attribute type 29 has an invalid length. [ 201.710563][ T5899] wacom 0003:056A:00D0.0012: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 201.724264][ T5899] wacom 0003:056A:00D0.0012: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 201.765696][ T5899] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0012/input/input35 [ 202.035256][ T1767] usbhid 5-1:1.0: can't add hid device: -71 [ 202.105409][ T1767] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 202.587005][ T1767] usb 5-1: USB disconnect, device number 14 [ 202.658847][ T5899] usb 4-1: USB disconnect, device number 12 [ 203.247149][ T1767] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 203.678591][ T1767] usb 1-1: Using ep0 maxpacket: 32 [ 203.810342][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 203.829918][ T1767] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 203.878336][ T1767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.901797][ T1767] usb 1-1: config 0 descriptor?? [ 203.926039][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 204.047464][ T1767] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 204.537212][ T5899] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 204.807193][ T5871] usb 1-1: USB disconnect, device number 17 [ 205.743252][ T7044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 206.379500][ T5871] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.469010][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 206.494869][ T5899] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 206.517090][ T5899] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.538371][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.547104][ T5899] usb 4-1: config 1 interface 0 has no altsetting 0 [ 206.558129][ T5899] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 206.577014][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.585053][ T5899] usb 4-1: Product: syz [ 206.617034][ T5899] usb 4-1: Manufacturer: syz [ 206.622046][ T5899] usb 4-1: SerialNumber: syz [ 206.679360][ T7050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'. [ 206.697122][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 206.733941][ T5871] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 206.786558][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.882708][ T5871] usb 5-1: Product: syz [ 206.935824][ T5871] usb 5-1: Manufacturer: syz [ 206.979869][ T5871] usb 5-1: SerialNumber: syz [ 207.018558][ T5871] usb 5-1: config 0 descriptor?? [ 207.072998][ T5871] gspca_main: se401-2.14.0 probing 047d:5003 [ 207.175418][ T7059] netlink: 'syz.0.330': attribute type 29 has an invalid length. [ 207.250289][ T7060] netlink: 'syz.0.330': attribute type 29 has an invalid length. [ 207.324451][ T7059] netlink: 'syz.0.330': attribute type 29 has an invalid length. [ 207.923477][ T5899] usbhid 4-1:1.0: can't add hid device: -71 [ 207.939545][ T5899] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 207.969585][ T5899] usb 4-1: USB disconnect, device number 13 [ 208.148255][ T5871] gspca_se401: read req failed req 0x06 error -19 [ 208.187468][ T5871] usb 5-1: USB disconnect, device number 15 [ 208.846986][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 208.996938][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 209.004025][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.025768][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.053213][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 209.096389][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.177813][ T9] usb 4-1: config 0 descriptor?? [ 209.369509][ T7083] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 209.449805][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.587094][ T5917] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.664741][ T9] wacom 0003:056A:00D0.0013: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 209.778143][ T5899] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 209.967295][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 209.967743][ T9] wacom 0003:056A:00D0.0013: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 210.057266][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 210.075764][ T5917] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 210.121847][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.134536][ T5899] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 210.135880][ T9] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0013/input/input38 [ 210.159328][ T5917] usb 2-1: config 0 descriptor?? [ 210.170279][ T5917] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 210.184658][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.235083][ T5899] usb 1-1: Product: syz [ 210.252957][ T9] usb 4-1: USB disconnect, device number 14 [ 210.260413][ T5899] usb 1-1: Manufacturer: syz [ 210.285729][ T5899] usb 1-1: SerialNumber: syz [ 210.326579][ T5899] usb 1-1: config 0 descriptor?? [ 210.373725][ T5899] gspca_main: se401-2.14.0 probing 047d:5003 [ 210.449362][ T7096] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 210.462883][ T7096] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 210.473211][ T7096] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 210.576043][ T7089] tipc: Started in network mode [ 210.582266][ T7089] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 210.642545][ T7089] tipc: Enabling of bearer rejected, failed to enable media [ 210.783079][ T5917] usb 2-1: USB disconnect, device number 9 [ 210.872570][ T7100] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 211.503440][ T5899] gspca_se401: read req failed req 0x06 error -19 [ 211.628189][ T5899] usb 1-1: USB disconnect, device number 18 [ 211.727221][ T7123] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 212.091666][ T7128] FAULT_INJECTION: forcing a failure. [ 212.091666][ T7128] name failslab, interval 1, probability 0, space 0, times 0 [ 212.104931][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.0.352 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 212.115554][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.125613][ T7128] Call Trace: [ 212.128891][ T7128] [ 212.131820][ T7128] dump_stack_lvl+0x241/0x360 [ 212.136501][ T7128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.141698][ T7128] ? __pfx__printk+0x10/0x10 [ 212.146288][ T7128] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 212.152265][ T7128] ? __pfx___might_resched+0x10/0x10 [ 212.157554][ T7128] ? kasan_save_track+0x51/0x80 [ 212.162403][ T7128] ? kasan_save_free_info+0x40/0x50 [ 212.167600][ T7128] should_fail_ex+0x3b0/0x4e0 [ 212.172283][ T7128] should_failslab+0xac/0x100 [ 212.176964][ T7128] kmem_cache_alloc_node_noprof+0x77/0x380 [ 212.182765][ T7128] ? __alloc_skb+0x1c3/0x440 [ 212.187359][ T7128] __alloc_skb+0x1c3/0x440 [ 212.191779][ T7128] ? __pfx___alloc_skb+0x10/0x10 [ 212.196717][ T7128] ? netlink_ack_tlv_len+0x6e/0x200 [ 212.201914][ T7128] netlink_ack+0x145/0xa50 [ 212.206329][ T7128] ? lockdep_hardirqs_on+0x99/0x150 [ 212.211529][ T7128] ? nfnetlink_rcv+0x27ad/0x2ab0 [ 212.216473][ T7128] ? nfnetlink_rcv+0x27ad/0x2ab0 [ 212.221412][ T7128] nfnetlink_rcv+0x26bd/0x2ab0 [ 212.226199][ T7128] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 212.231340][ T7128] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.236554][ T7128] ? skb_clone+0x240/0x390 [ 212.240995][ T7128] ? __pfx_lock_release+0x10/0x10 [ 212.246062][ T7128] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.251270][ T7128] netlink_unicast+0x7f6/0x990 [ 212.256039][ T7128] ? __pfx_netlink_unicast+0x10/0x10 [ 212.261328][ T7128] ? __virt_addr_valid+0x45f/0x530 [ 212.266451][ T7128] ? __phys_addr_symbol+0x2f/0x70 [ 212.271472][ T7128] ? __check_object_size+0x47a/0x730 [ 212.276766][ T7128] netlink_sendmsg+0x8e4/0xcb0 [ 212.281628][ T7128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.286927][ T7128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.292319][ T7128] __sock_sendmsg+0x221/0x270 [ 212.297027][ T7128] ____sys_sendmsg+0x52a/0x7e0 [ 212.301843][ T7128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.307129][ T7128] ? __fget_files+0x2a/0x410 [ 212.311728][ T7128] ? __fget_files+0x2a/0x410 [ 212.316316][ T7128] __sys_sendmsg+0x269/0x350 [ 212.320910][ T7128] ? __pfx_lock_release+0x10/0x10 [ 212.325938][ T7128] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.331052][ T7128] ? __pfx_vfs_write+0x10/0x10 [ 212.335854][ T7128] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.342184][ T7128] ? do_syscall_64+0x100/0x230 [ 212.346955][ T7128] ? do_syscall_64+0xb6/0x230 [ 212.351636][ T7128] do_syscall_64+0xf3/0x230 [ 212.356138][ T7128] ? clear_bhb_loop+0x35/0x90 [ 212.360819][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.366731][ T7128] RIP: 0033:0x7fec45585d29 [ 212.371145][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.390752][ T7128] RSP: 002b:00007fec46303038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.399231][ T7128] RAX: ffffffffffffffda RBX: 00007fec45775fa0 RCX: 00007fec45585d29 [ 212.407203][ T7128] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 212.415177][ T7128] RBP: 00007fec46303090 R08: 0000000000000000 R09: 0000000000000000 [ 212.423201][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.431211][ T7128] R13: 0000000000000000 R14: 00007fec45775fa0 R15: 00007ffc23e337a8 [ 212.439206][ T7128] [ 212.987379][ T5917] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 213.117312][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 213.197541][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 213.247259][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 213.272115][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 213.299215][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 213.307119][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 213.309372][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 213.325484][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.333079][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.342055][ T5917] usb 4-1: config 0 descriptor?? [ 213.375914][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.402926][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 213.416459][ T7124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.424301][ T7124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.480521][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.559087][ T9] usb 2-1: config 0 descriptor?? [ 215.616673][ T7143] QAT: Device 5 not found [ 219.196401][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 219.331080][ T5917] usb 4-1: string descriptor 0 read error: -32 [ 219.590096][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 219.676165][ T9] usb 2-1: USB disconnect, device number 10 [ 219.703921][ T5917] usb 4-1: USB disconnect, device number 15 [ 221.667548][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 221.837314][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 222.455069][ T9] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 222.497559][ T9] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.510844][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 222.522472][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 222.534280][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.632756][ T9] usb 2-1: Product: syz [ 222.669815][ T9] usb 2-1: Manufacturer: syz [ 222.674487][ T9] usb 2-1: SerialNumber: syz [ 223.309983][ T9] usb 2-1: can't set config #1, error -71 [ 223.342331][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.381008][ T9] usb 2-1: USB disconnect, device number 11 [ 223.460036][ T7172] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 223.591589][ T7178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'. [ 223.646980][ T5868] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 223.850039][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 223.883153][ T5868] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 223.894806][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.905300][ T5868] usb 1-1: Product: syz [ 223.910753][ T5868] usb 1-1: Manufacturer: syz [ 223.916780][ T5868] usb 1-1: SerialNumber: syz [ 223.931892][ T5868] usb 1-1: config 0 descriptor?? [ 223.946963][ T838] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 223.967516][ T5868] gspca_main: se401-2.14.0 probing 047d:5003 [ 224.151990][ T7168] tipc: Enabling of bearer rejected, failed to enable media [ 224.160922][ T838] usb 4-1: Using ep0 maxpacket: 8 [ 224.186255][ T838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 224.207694][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 224.242939][ T838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 224.259099][ T838] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 224.278565][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.305055][ T838] usb 4-1: config 0 descriptor?? [ 224.313166][ T7184] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 224.321255][ T7184] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 224.549043][ T5917] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.097134][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 225.117823][ T5917] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 225.126044][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.151409][ T7184] QAT: Device 5 not found [ 225.181574][ T838] usb 4-1: string descriptor 0 read error: -71 [ 225.191488][ T5917] usb 5-1: config 0 has no interface number 0 [ 225.197943][ T5917] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.211962][ T5917] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 225.257052][ T5917] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 225.266491][ T838] usb 4-1: USB disconnect, device number 16 [ 225.287755][ T5917] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 225.301972][ T5917] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 225.363449][ T5917] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.406903][ T5917] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 225.439050][ T5917] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 225.456924][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.464976][ T5917] usb 5-1: Product: syz [ 225.514628][ T5917] usb 5-1: Manufacturer: syz [ 225.575840][ T5917] usb 5-1: SerialNumber: syz [ 226.207501][ T5868] gspca_se401: read req failed req 0x06 error -19 [ 226.229594][ T5868] usb 1-1: USB disconnect, device number 19 [ 226.260842][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.322123][ T5917] usb 5-1: config 0 descriptor?? [ 226.338624][ T7188] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 226.622598][ T5917] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 226.807740][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 226.820989][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.833500][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.843660][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 226.853248][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.863851][ T9] usb 2-1: config 0 descriptor?? [ 226.941129][ T5917] usb 5-1: USB disconnect, device number 16 [ 227.272896][ T5871] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 227.539266][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 227.545294][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 227.555541][ T9] usb 2-1: USB disconnect, device number 12 [ 227.609491][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.627128][ T5871] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 227.636262][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.643993][ T7216] process 'syz.0.382' launched '/dev/fd/5' with NULL argv: empty string added [ 227.672259][ T5871] usb 3-1: config 0 descriptor?? [ 228.561319][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.602298][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.721948][ T29] audit: type=1326 audit(1737361749.852:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7237 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 228.783139][ T29] audit: type=1326 audit(1737361749.852:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7237 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 228.843107][ T29] audit: type=1326 audit(1737361749.852:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7237 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 228.880440][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 228.880456][ T5917] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 228.895581][ T29] audit: type=1326 audit(1737361749.852:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7237 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa385d29 code=0x7ffc0000 [ 229.046517][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.050507][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.066903][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 229.077566][ T5917] usb 1-1: not running at top speed; connect to a high speed hub [ 229.078086][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.109595][ T9] usb 2-1: config 0 descriptor?? [ 229.123778][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.157399][ T5870] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 229.161188][ T5917] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 229.260417][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.287783][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.295906][ T5917] usb 1-1: Product: syz [ 229.299416][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 229.305441][ T5917] usb 1-1: Manufacturer: syz [ 229.334013][ T5917] usb 1-1: SerialNumber: syz [ 229.342392][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.360777][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 229.374377][ T7232] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 229.387116][ T5870] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 229.408949][ T5871] usb 3-1: USB disconnect, device number 15 [ 229.416989][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.434026][ T5870] usb 5-1: Product: syz [ 229.447992][ T5870] usb 5-1: Manufacturer: syz [ 229.473117][ T5870] usb 5-1: SerialNumber: syz [ 229.480924][ T5870] usb 5-1: config 0 descriptor?? [ 229.508689][ T5870] gspca_main: sq930x-2.14.0 probing 2770:930c [ 229.593175][ T9] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 229.635863][ T5917] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 229.678606][ T5917] cdc_ncm 1-1:1.0: bind() failure [ 229.842751][ T5917] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 229.849697][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0014/input/input41 [ 229.882266][ T5917] cdc_ncm 1-1:1.1: bind() failure [ 229.941796][ T5917] usb 1-1: USB disconnect, device number 20 [ 229.994078][ T5870] gspca_sq930x: ucbus_write failed -71 [ 230.006856][ T5871] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 230.142345][ T9] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 230.146942][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.174255][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.227891][ T9] usb 2-1: USB disconnect, device number 13 [ 230.246934][ T5870] gspca_sq930x: Sensor ov9630 not yet treated [ 230.253121][ T5870] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 230.277146][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 230.300027][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 230.315047][ T5870] usb 5-1: USB disconnect, device number 17 [ 230.324296][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 230.344422][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 230.355611][ T5871] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 230.866895][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.895703][ T5871] usb 3-1: config 0 descriptor?? [ 230.929485][ T7246] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.937470][ T7246] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 231.105649][ T7262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.397'. [ 231.288720][ T7264] QAT: Device 5 not found [ 231.540279][ T5870] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.651599][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 231.848821][ T5870] usb 5-1: device descriptor read/64, error -32 [ 232.160731][ T5871] usb 3-1: string descriptor 0 read error: -71 [ 232.184922][ T5871] usb 3-1: USB disconnect, device number 16 [ 232.247999][ T5870] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 232.338523][ T7270] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 232.352024][ T7270] overlayfs: conflicting options: userxattr,redirect_dir=on [ 232.397293][ T5868] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 232.406947][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 232.418430][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.449265][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.479228][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.489697][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.502930][ T5870] usb 5-1: Product: syz [ 232.510074][ T5870] usb 5-1: Manufacturer: syz [ 232.514823][ T5870] usb 5-1: SerialNumber: syz [ 232.567060][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 232.574884][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 232.583907][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.594297][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.610114][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.623172][ T5868] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.632901][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.641555][ T5868] usb 1-1: Product: syz [ 232.645999][ T5868] usb 1-1: Manufacturer: syz [ 232.651991][ T5868] usb 1-1: SerialNumber: syz [ 232.729721][ T9] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 232.752103][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 232.795324][ T9] usb 2-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 232.830696][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.839789][ T5870] usb 5-1: 0:2 : does not exist [ 232.859705][ T5870] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 232.901208][ T9] usb 2-1: config 0 descriptor?? [ 233.423751][ T9] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 233.509107][ T5870] usb 5-1: USB disconnect, device number 19 [ 233.625864][ T5868] usb 1-1: 0:7 : does not exist [ 233.843602][ T5868] usb 1-1: USB disconnect, device number 21 [ 233.916366][ T7272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.948269][ T6734] udevd[6734]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.999743][ T7272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.166920][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 234.204452][ T5868] usb 2-1: USB disconnect, device number 14 [ 234.348826][ T7305] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 235.804868][ T7311] Zero length message leads to an empty skb [ 236.030984][ T7317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.408'. [ 236.371169][ T5868] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 236.571808][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.698265][ T5868] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.828891][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.871281][ T5868] usb 5-1: config 0 descriptor?? [ 238.257615][ T5917] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 238.659826][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 238.800989][ T5917] usb 1-1: descriptor type invalid, skip [ 238.806687][ T5917] usb 1-1: descriptor type invalid, skip [ 238.813070][ T5917] usb 1-1: descriptor type invalid, skip [ 238.822885][ T5917] usb 1-1: descriptor type invalid, skip [ 238.831678][ T5917] usb 1-1: descriptor type invalid, skip [ 238.898453][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 238.906491][ T5917] usb 1-1: can't read configurations, error -71 [ 239.150473][ T5868] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 239.567288][ T5900] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.829613][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.859606][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 239.943339][ T5900] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 239.969387][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.988700][ T1767] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.084985][ T5868] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0015/input/input42 [ 241.149929][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 241.184451][ T5900] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.260174][ T5868] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 241.273504][ T5900] usb 4-1: config 1 interface 0 has no altsetting 0 [ 241.324412][ T5900] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 241.338105][ T1767] usb 3-1: Using ep0 maxpacket: 32 [ 241.360432][ T1767] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 241.362483][ T5868] usb 5-1: USB disconnect, device number 20 [ 241.391077][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.417816][ T1767] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.440796][ T5900] usb 4-1: Product: syz [ 241.445016][ T5900] usb 4-1: Manufacturer: syz [ 241.469627][ T1767] usb 3-1: config 0 has no interface number 0 [ 241.487743][ T5900] usb 4-1: SerialNumber: syz [ 241.505124][ T1767] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.552060][ T1767] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 241.577336][ T5901] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.605383][ T1767] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 241.640566][ T1767] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 241.676228][ T1767] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 241.748558][ T1767] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.777859][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 241.793260][ T1767] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.807064][ T5901] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 241.844091][ T1767] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 241.871358][ T5901] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.897131][ T1767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.027697][ T1767] usb 3-1: Product: syz [ 242.032276][ T5901] usb 1-1: config 1 interface 0 has no altsetting 0 [ 242.045036][ T1767] usb 3-1: Manufacturer: syz [ 242.684864][ T1767] usb 3-1: SerialNumber: syz [ 242.805411][ T5900] usbhid 4-1:1.0: can't add hid device: -71 [ 242.817014][ T5900] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 242.837264][ T5900] usb 4-1: USB disconnect, device number 17 [ 242.854351][ T1767] usb 3-1: config 0 descriptor?? [ 242.919123][ T1767] usb 3-1: can't set config #0, error -71 [ 242.945665][ T1767] usb 3-1: USB disconnect, device number 17 [ 243.242764][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 243.306477][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 244.630956][ T7374] overlayfs: failed to clone lowerpath [ 244.973282][ T5901] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 244.984581][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.017060][ T1767] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 245.029741][ T5901] usb 1-1: can't set config #1, error -71 [ 245.068495][ T5901] usb 1-1: USB disconnect, device number 24 [ 245.166973][ T5900] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 245.187019][ T1767] usb 5-1: Using ep0 maxpacket: 32 [ 245.194464][ T1767] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 245.204268][ T1767] usb 5-1: config 0 has no interface number 0 [ 245.212057][ T1767] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.225119][ T1767] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 245.238201][ T1767] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 245.249706][ T1767] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 245.270987][ T1767] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 245.293180][ T1767] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.305994][ T1767] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.318765][ T1767] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 245.329559][ T1767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.343467][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.356174][ T5900] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.366451][ T1767] usb 5-1: Product: syz [ 245.371942][ T1767] usb 5-1: Manufacturer: syz [ 245.376648][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.384821][ T1767] usb 5-1: SerialNumber: syz [ 245.391810][ T1767] usb 5-1: config 0 descriptor?? [ 245.400286][ T5900] usb 2-1: config 0 descriptor?? [ 245.407825][ T7379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.420964][ T1767] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 245.692430][ T5870] usb 5-1: USB disconnect, device number 21 [ 246.147820][ T5870] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 246.390845][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 246.503500][ T5870] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 246.537008][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.546336][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.665590][ T5900] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 246.703575][ T5870] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.729580][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0016/input/input43 [ 246.762647][ T5870] usb 1-1: config 1 interface 0 has no altsetting 0 [ 246.821710][ T5870] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 246.911802][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.975262][ T5870] usb 1-1: Product: syz [ 247.010643][ T5870] usb 1-1: Manufacturer: syz [ 247.015303][ T5870] usb 1-1: SerialNumber: syz [ 247.251586][ T5900] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 247.594339][ T7408] FAULT_INJECTION: forcing a failure. [ 247.594339][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 247.660181][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 248.033030][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 248.063035][ T7408] CPU: 0 UID: 0 PID: 7408 Comm: syz.4.433 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 248.073785][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 248.083861][ T7408] Call Trace: [ 248.087159][ T7408] [ 248.090102][ T7408] dump_stack_lvl+0x241/0x360 [ 248.094805][ T7408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.100112][ T7408] ? __pfx__printk+0x10/0x10 [ 248.104729][ T7408] ? fs_reclaim_acquire+0x93/0x130 [ 248.109863][ T7408] ? __pfx___might_resched+0x10/0x10 [ 248.115265][ T7408] should_fail_ex+0x3b0/0x4e0 [ 248.119975][ T7408] should_failslab+0xac/0x100 [ 248.124680][ T7408] __kmalloc_noprof+0xdd/0x4c0 [ 248.129469][ T7408] ? kstrtouint_from_user+0x128/0x190 [ 248.134866][ T7408] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 248.140751][ T7408] tomoyo_realpath_from_path+0xcf/0x5e0 [ 248.146609][ T7408] tomoyo_path_number_perm+0x236/0x860 [ 248.152102][ T7408] ? __lock_acquire+0x1397/0x2100 [ 248.157152][ T7408] ? tomoyo_path_number_perm+0x206/0x860 [ 248.162813][ T7408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.168848][ T7408] ? __fget_files+0x2a/0x410 [ 248.173460][ T7408] ? __fget_files+0x2a/0x410 [ 248.178073][ T7408] security_file_ioctl+0xc6/0x2a0 [ 248.183117][ T7408] __se_sys_ioctl+0x46/0x170 [ 248.187731][ T7408] do_syscall_64+0xf3/0x230 [ 248.192255][ T7408] ? clear_bhb_loop+0x35/0x90 [ 248.196951][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.202867][ T7408] RIP: 0033:0x7fa5aa385d29 [ 248.207302][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.226932][ T7408] RSP: 002b:00007fa5ab1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.235386][ T7408] RAX: ffffffffffffffda RBX: 00007fa5aa575fa0 RCX: 00007fa5aa385d29 [ 248.243388][ T7408] RDX: 0000000020000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 248.251384][ T7408] RBP: 00007fa5ab1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.259364][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.267529][ T7408] R13: 0000000000000000 R14: 00007fa5aa575fa0 R15: 00007ffea0c8c6e8 [ 248.275524][ T7408] [ 248.292842][ T5899] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 248.311574][ T9] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 248.313076][ T7408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.360103][ T5871] usb 2-1: USB disconnect, device number 15 [ 248.370047][ T9] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.403027][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 248.445659][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 248.458089][ T5899] usb 3-1: device descriptor read/64, error -71 [ 248.465870][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.493087][ T9] usb 4-1: Product: syz [ 248.507115][ T9] usb 4-1: Manufacturer: syz [ 248.513573][ T9] usb 4-1: SerialNumber: syz [ 248.565107][ T5870] usbhid 1-1:1.0: can't add hid device: -71 [ 248.576579][ T5870] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 248.618410][ T5870] usb 1-1: USB disconnect, device number 25 [ 248.778057][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.017892][ T5899] usb 3-1: device descriptor read/64, error -71 [ 249.130704][ T5899] usb usb3-port1: attempt power cycle [ 249.599939][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 249.782114][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 250.128083][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 250.167645][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 250.197373][ T9] usb 4-1: USB disconnect, device number 18 [ 250.420288][ T5899] usb 3-1: device descriptor read/8, error -71 [ 250.561970][ T7427] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 250.758468][ T7427] netlink: 'syz.4.436': attribute type 3 has an invalid length. [ 250.984349][ T7427] netlink: 224 bytes leftover after parsing attributes in process `syz.4.436'. [ 251.830511][ T7437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.441'. [ 252.765561][ T5871] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 253.288437][ T5899] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 253.937715][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 254.054102][ T5899] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 254.264461][ T5899] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.443491][ T5899] usb 4-1: config 1 interface 0 has no altsetting 0 [ 254.462208][ T5899] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 254.497423][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.511672][ T5899] usb 4-1: Product: syz [ 254.516626][ T5899] usb 4-1: Manufacturer: syz [ 254.533283][ T5899] usb 4-1: SerialNumber: syz [ 254.950014][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 254.960269][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.978360][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.992199][ T5871] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.006568][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.038162][ T5871] usb 1-1: config 0 descriptor?? [ 255.165107][ T7459] netlink: 'syz.4.447': attribute type 2 has an invalid length. [ 255.317272][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 255.461666][ T5871] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 255.483509][ T5871] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 255.498833][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.511873][ T5871] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 255.530207][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.547585][ T5871] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 255.567336][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.575494][ T5871] microsoft 0003:045E:07DA.0017: no inputs found [ 255.589811][ T9] usb 3-1: config 0 descriptor?? [ 255.597823][ T5871] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 255.866999][ T7481] No source specified [ 255.868788][ T7481] overlayfs: failed to resolve './file1': -2 [ 256.310110][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.325084][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.641480][ T5871] usb 1-1: USB disconnect, device number 26 [ 256.651078][ T9] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 256.680255][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0018/input/input45 [ 256.712358][ T5899] usbhid 4-1:1.0: can't add hid device: -71 [ 256.727138][ T5899] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 256.766302][ T5899] usb 4-1: USB disconnect, device number 19 [ 256.850431][ T9] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 256.904027][ T7483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.454'. [ 257.242628][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.257022][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.433166][ T5870] usb 3-1: USB disconnect, device number 22 [ 258.968938][ T7505] can0: slcan on ttyS3. [ 259.013643][ T5870] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 259.037789][ T7507] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 259.045660][ T7507] netlink: 'syz.2.460': attribute type 3 has an invalid length. [ 259.054864][ T7507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.460'. [ 259.067662][ T7505] can0 (unregistered): slcan off ttyS3. [ 259.336937][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 259.441383][ T5870] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 259.461033][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.482571][ T5870] usb 1-1: Product: syz [ 259.487175][ T5870] usb 1-1: Manufacturer: syz [ 259.491964][ T5870] usb 1-1: SerialNumber: syz [ 259.528592][ T5870] usb 1-1: config 0 descriptor?? [ 259.548984][ T5870] gspca_main: se401-2.14.0 probing 047d:5003 [ 260.368297][ T7497] tipc: Enabling of bearer rejected, failed to enable media [ 260.849066][ T29] audit: type=1326 audit(1737361781.962:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7526 comm="syz.1.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c185d29 code=0x0 [ 261.051132][ T5871] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 261.236626][ T5870] gspca_se401: read req failed req 0x06 error -19 [ 261.371724][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 261.385721][ T5870] usb 1-1: USB disconnect, device number 27 [ 261.392778][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 261.416609][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 261.435951][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 261.454837][ T5871] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 261.593366][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.054023][ T5871] usb 5-1: config 0 descriptor?? [ 262.067204][ T7525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.074642][ T7525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.176530][ T5900] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 262.429668][ T7541] overlay: Unknown parameter '/' [ 262.671611][ T7542] QAT: Device 5 not found [ 263.062347][ T5871] usb 5-1: string descriptor 0 read error: -71 [ 263.073060][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.220313][ T5900] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.230205][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.250364][ T5900] usb 1-1: config 0 descriptor?? [ 263.285181][ T5871] usb 5-1: USB disconnect, device number 22 [ 263.721824][ T5900] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 263.760111][ T5900] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0019/input/input46 [ 263.869020][ T5900] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 263.937239][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.110094][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 264.134946][ T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 264.177111][ T9] usb 2-1: config 0 has no interface number 0 [ 264.200659][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.239483][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 264.270809][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 264.286252][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 264.297330][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.305952][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.327291][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 264.327329][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.327350][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 264.375877][ T5870] usb 1-1: USB disconnect, device number 28 [ 264.386143][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.398839][ T9] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.439107][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 264.452532][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.462275][ T9] usb 2-1: Product: syz [ 264.466702][ T9] usb 2-1: Manufacturer: syz [ 264.472405][ T9] usb 2-1: SerialNumber: syz [ 264.494340][ T9] usb 2-1: config 0 descriptor?? [ 264.507998][ T7548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.528376][ T9] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 264.902920][ T5899] usb 2-1: USB disconnect, device number 16 [ 265.069174][ T7573] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 265.287103][ T5900] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 265.648888][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 265.669196][ T5900] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55 [ 265.729566][ T7588] ip6t_srh: unknown srh invflags 7D00 [ 265.861276][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.903178][ T5900] usb 3-1: config 0 descriptor?? [ 265.939400][ T5900] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 265.959294][ T5900] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 266.146405][ T9] usb 3-1: USB disconnect, device number 23 [ 266.287347][ T5900] usb 5-1: new high-speed USB device number 23 using dummy_hcd Stopping sshd: [ 266.457469][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 266.471464][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 266.499788][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 266.528624][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 266.566898][ T5900] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 266.592633][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.697655][ T5900] usb 5-1: config 0 descriptor?? [ 266.737594][ T7592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 266.745061][ T7592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.564783][ T5900] usb 5-1: string descriptor 0 read error: -71 [ 267.582695][ T5900] usb 5-1: USB disconnect, device number 23 Unknown signal 33 OK [ 267.903402][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5487) Stopping network: [ 268.261545][ T7630] can0: slcan on ttyS3. [ 268.369729][ T7630] can0 (unregistered): slcan off ttyS3. [ 268.660897][ T5870] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 270.207019][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 270.219119][ T5870] usb 3-1: config 2 has an invalid interface number: 114 but max is 0 [ 270.356918][ T5870] usb 3-1: config 2 has no interface number 0 [ 270.363526][ T5870] usb 3-1: config 2 interface 114 has no altsetting 0 [ 270.379071][ T5870] usb 3-1: New USB device found, idVendor=0586, idProduct=343e, bcdDevice=36.25 [ 270.416927][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.424979][ T5870] usb 3-1: Product: syz [ 270.456898][ T5870] usb 3-1: Manufacturer: syz [ 270.461840][ T5870] usb 3-1: SerialNumber: syz [ 270.722157][ T5870] usb 3-1: USB disconnect, device number 24 OK [ 270.927450][ T5871] usb 5-1: new high-speed USB device number 24 using dummy_hcd Stopping iptables: OK [ 271.087918][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 271.103301][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.138056][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.167046][ T5871] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 Stopping system message bus: [ 271.201432][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.237523][ T5900] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 271.247789][ T5871] usb 5-1: config 0 descriptor?? [ 271.437462][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 271.495594][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 271.525662][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 271.618221][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 271.652599][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 271.697106][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.717917][ T5900] usb 4-1: config 0 descriptor?? [ 271.723562][ T7677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.731175][ T7677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.807988][ T1767] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 271.890654][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 271.912190][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 271.937324][ T5871] usb 5-1: USB disconnect, device number 24 [ 271.997523][ T1767] usb 3-1: Using ep0 maxpacket: 8 [ 272.040534][ T1767] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 272.673110][ T7695] overlayfs: failed to resolve './file1': -2 [ 277.160699][ T5900] usb 4-1: string descriptor 0 read error: -71 [ 277.276231][ T5900] usb 4-1: USB disconnect, device number 20 [ 277.290395][ T1767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.356979][ T1767] usb 3-1: Product: syz [ 277.371113][ T1767] usb 3-1: Manufacturer: syz [ 277.375773][ T1767] usb 3-1: SerialNumber: syz done [ 277.431844][ T1767] usb 3-1: config 0 descriptor?? [ 277.457176][ T1767] usb 3-1: can't set config #0, error -71 [ 277.716140][ T1767] usb 3-1: USB disconnect, device number 25 [ 277.836868][ T7709] fuse: Unknown parameter 'fƒ¯?±àö€0x000000000000000b' [ 279.386676][ T7717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.515'. [ 279.420525][ T7717] netlink: 72 bytes leftover after parsing attributes in process `syz.1.515'. [ 279.478311][ T7717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.515'. [ 279.527139][ T7717] netlink: 72 bytes leftover after parsing attributes in process `syz.1.515'. [ 281.357105][ T5870] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.580848][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 281.685839][ T5870] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 281.857526][ T1767] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 282.233495][ T7750] netlink: 'syz.2.522': attribute type 4 has an invalid length. [ 282.468732][ T1767] usb 5-1: Using ep0 maxpacket: 8 [ 282.500068][ T1767] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 282.517091][ T1767] usb 5-1: config 0 has no interface number 1 [ 282.523258][ T1767] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 282.561124][ T5870] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.574130][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 282.590093][ T5870] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 282.601613][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.610419][ T5870] usb 4-1: Product: syz [ 282.614618][ T5870] usb 4-1: Manufacturer: syz [ 282.623134][ T1767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 282.639576][ T5870] usb 4-1: SerialNumber: syz [ 282.681336][ T1767] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 282.698385][ T1767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.718219][ T1767] usb 5-1: Product: syz [ 282.722443][ T1767] usb 5-1: Manufacturer: syz [ 282.745376][ T1767] usb 5-1: SerialNumber: syz [ 282.763647][ T1767] usb 5-1: config 0 descriptor?? [ 282.784733][ T1767] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx killall: can't kill pid 5828: No such process killall: can't kill pid 6054: No such process [ 283.141895][ T7763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.171466][ T7759] bridge: RTM_NEWNEIGH with invalid ether address [ 283.218227][ T7763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.420794][ T1767] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 283.433914][ T2340] pvrusb2: Failed to submit write-control URB status=-2 [ 283.439382][ T1767] usb 5-1: USB disconnect, device number 25 [ 283.465605][ T2340] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 283.477938][ T2340] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 283.498501][ T7767] overlayfs: failed to get index nlink (file1/file0, err=-61) Stopping klogd: OK Stopping acpid: [ 284.233063][ T5870] usbhid 4-1:1.0: can't add hid device: -71 [ 284.374195][ T5870] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 284.594531][ T5870] usb 4-1: USB disconnect, device number 21 [ 284.699474][ T7787] can0: slcan on ttyS3. [ 285.239800][ T7791] can0 (unregistered): slcan off ttyS3. [ 285.680258][ T29] audit: type=1326 audit(1737361806.812:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 286.027041][ T7813] serio: Serial port ptm0 [ 286.596396][ T29] audit: type=1326 audit(1737361806.812:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 OK [ 286.864897][ T29] audit: type=1326 audit(1737361806.812:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 287.796153][ T29] audit: type=1326 audit(1737361806.812:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 287.874141][ T29] audit: type=1326 audit(1737361806.812:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 287.934441][ T5870] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 287.970091][ T29] audit: type=1326 audit(1737361806.812:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 288.223257][ T29] audit: type=1326 audit(1737361806.812:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 288.250385][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 288.263845][ T29] audit: type=1326 audit(1737361806.812:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 288.264646][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd Stopping syslogd: [ 288.308399][ T7822] block device autoloading is deprecated and will be removed. [ 288.399165][ T5870] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 288.403166][ T29] audit: type=1326 audit(1737361806.812:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 288.459400][ T5870] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.460040][ T29] audit: type=1326 audit(1737361806.812:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58adf85d29 code=0x7ffc0000 [ 288.519336][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 288.551624][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 288.551697][ T5870] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 288.599271][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.667714][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 289.101062][ T5870] usb 4-1: Product: syz [ 289.504771][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.593942][ T5870] usb 4-1: Manufacturer: syz [ 289.598902][ T5870] usb 4-1: SerialNumber: syz [ 289.605562][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.630553][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 289.640048][ T5870] usb 4-1: can't set config #1, error -71 [ 289.647492][ T5870] usb 4-1: USB disconnect, device number 22 [ 289.656193][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.678410][ T9] usb 1-1: config 0 descriptor?? OK [ 289.755053][ T7835] ======================================================= [ 289.755053][ T7835] WARNING: The mand mount option has been deprecated and [ 289.755053][ T7835] and is ignored by this kernel. Remove the mand [ 289.755053][ T7835] option from the mount to silence this warning. [ 289.755053][ T7835] ======================================================= [ 289.800338][ T7838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 290.410396][ T7850] ax25_connect(): syz.3.545 uses autobind, please contact jreuter@yaina.de [ 291.328679][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 291.335853][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 291.355206][ T9] usb 1-1: USB disconnect, device number 29 umount: can't remount debugfs read-only [ 291.802326][ T7860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.548'. [ 292.140556][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 292.535437][ T7857] random: crng reseeded on system resumption [ 292.833434][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 292.840192][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 292.859658][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 292.870924][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 141 [ 292.884066][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 292.894778][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.933053][ T9] usb 3-1: config 0 descriptor?? [ 292.962707][ T7858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.970224][ T7858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.208541][ T5870] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 293.383182][ T7872] QAT: Device 5 not found [ 294.078063][ T9] usb 3-1: string descriptor 0 read error: -71 [ 294.107901][ T9] usb 3-1: USB disconnect, device number 26 [ 294.116923][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 294.139372][ T5870] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 294.148962][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.163267][ T5870] usb 1-1: Product: syz [ 294.171911][ T5870] usb 1-1: Manufacturer: syz [ 294.180214][ T5870] usb 1-1: SerialNumber: syz [ 294.627539][ T5870] usb 1-1: config 0 descriptor?? [ 295.302693][ T5870] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 295.524434][ T5870] usb 1-1: USB disconnect, device number 30 [ 296.376998][ T5871] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 296.737278][ T5871] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 296.746440][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.803676][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 297.214800][ T5871] usb 2-1: config 0 descriptor?? [ 297.283789][ T5871] gspca_main: spca508-2.14.0 probing 8086:0110 [ 297.596354][ T7910] can0: slcan on ttyS3. [ 297.634988][ T5871] gspca_spca508: reg_read err -32 [ 297.680575][ T5871] gspca_spca508: reg_read err -32 [ 297.778036][ T7910] can0 (unregistered): slcan off ttyS3. [ 297.999151][ T5871] gspca_spca508: reg_read err -71 [ 298.005495][ T5871] gspca_spca508: reg_read err -71 [ 298.129695][ T5871] gspca_spca508: reg write: error -71 [ 298.137113][ T5871] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 298.150915][ T5871] usb 2-1: USB disconnect, device number 17 [ 299.363029][ T54] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 299.374474][ T7926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 299.447450][ T5871] usb 4-1: new high-speed USB device number 23 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 299.746912][ T5871] usb 4-1: Using ep0 maxpacket: 8 Sent SIGTERM to all processes Connection to 10.128.0.70 closed by remote host. [ 299.962263][ T5871] usb 4-1: device descriptor read/all, error -71 [ 300.925417][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.055215][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.056006][ T5816] syz-executor (5816) used greatest stack depth: 18672 bytes left [ 301.121519][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.186077][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 301.285034][ T35] bridge_slave_1: left allmulticast mode [ 301.291218][ T35] bridge_slave_1: left promiscuous mode [ 301.298670][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.311680][ T35] bridge_slave_0: left allmulticast mode [ 301.319067][ T35] bridge_slave_0: left promiscuous mode [ 301.324800][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.679179][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.693943][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.704005][ T35] bond0 (unregistering): Released all slaves [ 301.784945][ T35] tipc: Left network mode [ 302.006580][ T35] hsr_slave_0: left promiscuous mode [ 302.012686][ T35] hsr_slave_1: left promiscuous mode [ 302.019853][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.027619][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.036785][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.044745][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.063148][ T35] veth1_macvtap: left promiscuous mode [ 302.069299][ T35] veth0_macvtap: left promiscuous mode [ 302.074853][ T35] veth1_vlan: left promiscuous mode [ 302.080654][ T35] veth0_vlan: left promiscuous mode [ 302.250351][ T2340] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 302.270758][ T2340] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 302.290975][ T2340] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 302.309562][ T2340] pvrusb2: Failure uploading firmware1 [ 302.317772][ T2340] pvrusb2: Device initialization was not successful. [ 302.324496][ T2340] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 302.341533][ T2340] pvrusb2: Failed to submit write-control URB status=-19 [ 302.348934][ T1767] pvrusb2: Device being rendered inoperable [ 302.365061][ T2340] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 302.374948][ T2340] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 302.393027][ T2340] ------------[ cut here ]------------ [ 302.398825][ T2340] WARNING: CPU: 1 PID: 2340 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x782/0x9e0 [ 302.411463][ T2340] Modules linked in: [ 302.415409][ T2340] CPU: 1 UID: 0 PID: 2340 Comm: pvrusb2-context Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 302.427285][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 302.437860][ T2340] RIP: 0010:firmware_fallback_sysfs+0x782/0x9e0 [ 302.444133][ T2340] Code: 1c 24 e9 4d fc ff ff e8 cc 9e 9d fb c6 05 6a ff 00 0a 01 48 c7 c7 80 6f 85 8c e8 89 39 05 fb e9 72 fc ff ff e8 af 9e 9d fb 90 <0f> 0b 90 48 89 df 48 c7 c6 60 70 85 8c 4c 89 ea e8 29 9d 07 fb e9 [ 302.463902][ T2340] RSP: 0018:ffffc90005d27730 EFLAGS: 00010293 [ 302.470128][ T2340] RAX: ffffffff8601c8c1 RBX: ffff8880356890a8 RCX: ffff88802a991e00 [ 302.478394][ T2340] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 302.486391][ T2340] RBP: 000000000000003c R08: ffffffff8601c2d0 R09: 1ffffffff284ef3d [ 302.494486][ T2340] R10: dffffc0000000000 R11: fffffbfff284ef3e R12: 00000000fffffff5 [ 302.502648][ T2340] R13: ffffffff8cdce9e0 R14: 0000000000000001 R15: 0000000000001770 [ 302.511374][ T2340] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 302.521031][ T2340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.527893][ T2340] CR2: 00000000fffffc40 CR3: 000000000e736000 CR4: 00000000003526f0 [ 302.535884][ T2340] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.544042][ T2340] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.552198][ T2340] Call Trace: [ 302.555480][ T2340] [ 302.558625][ T2340] ? __warn+0x165/0x4d0 [ 302.562815][ T2340] ? firmware_fallback_sysfs+0x782/0x9e0 [ 302.568683][ T2340] ? report_bug+0x2b3/0x500 [ 302.573202][ T2340] ? firmware_fallback_sysfs+0x782/0x9e0 [ 302.578937][ T2340] ? handle_bug+0x60/0x90 [ 302.583256][ T2340] ? exc_invalid_op+0x1a/0x50 [ 302.588162][ T2340] ? asm_exc_invalid_op+0x1a/0x20 [ 302.593210][ T2340] ? firmware_fallback_sysfs+0x190/0x9e0 [ 302.599065][ T2340] ? firmware_fallback_sysfs+0x781/0x9e0 [ 302.604738][ T2340] ? firmware_fallback_sysfs+0x782/0x9e0 [ 302.611150][ T2340] ? _request_firmware+0xd5a/0x13b0 [ 302.616377][ T2340] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 302.622779][ T2340] ? _request_firmware+0xd5a/0x13b0 [ 302.628201][ T2340] _request_firmware+0xdf7/0x13b0 [ 302.633301][ T2340] ? __pfx__request_firmware+0x10/0x10 [ 302.638849][ T2340] ? pvr2_hdw_initialize+0x33e/0x3d10 [ 302.644254][ T2340] ? __pfx_lock_release+0x10/0x10 [ 302.649338][ T2340] ? pvr2_send_request_ex+0x1a4d/0x22a0 [ 302.654883][ T2340] request_firmware+0x36/0x50 [ 302.659773][ T2340] pvr2_locate_firmware+0xb1/0x500 [ 302.664907][ T2340] pvr2_upload_firmware1+0x1c6/0x950 [ 302.670228][ T2340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.676247][ T2340] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 302.682125][ T2340] pvr2_hdw_initialize+0x411/0x3d10 [ 302.687398][ T2340] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 302.693059][ T2340] ? pvr2_context_thread_func+0x220/0xb50 [ 302.698865][ T2340] ? __pfx_lock_release+0x10/0x10 [ 302.703905][ T2340] ? rcu_is_watching+0x15/0xb0 [ 302.709239][ T2340] ? trace_contention_end+0x3c/0x120 [ 302.714556][ T2340] ? __mutex_lock+0x37f/0xee0 [ 302.719816][ T2340] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 302.725825][ T2340] ? __mutex_unlock_slowpath+0x21e/0x790 [ 302.731602][ T2340] ? __pfx___mutex_lock+0x10/0x10 [ 302.736635][ T2340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.742730][ T2340] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 302.749453][ T2340] ? finish_wait+0xd4/0x1e0 [ 302.753991][ T2340] pvr2_context_thread_func+0x4b3/0xb50 [ 302.759602][ T2340] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 302.765550][ T2340] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 302.771776][ T2340] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.777746][ T2340] ? __pfx_autoremove_wake_function+0x10/0x10 [ 302.784005][ T2340] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.790032][ T2340] ? __kthread_parkme+0x169/0x1d0 [ 302.795055][ T2340] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 302.801188][ T2340] kthread+0x2f0/0x390 [ 302.805267][ T2340] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 302.811806][ T2340] ? __pfx_kthread+0x10/0x10 [ 302.816420][ T2340] ret_from_fork+0x4b/0x80 [ 302.821375][ T2340] ? __pfx_kthread+0x10/0x10 [ 302.826025][ T2340] ret_from_fork_asm+0x1a/0x30 [ 302.830872][ T2340] [ 302.833896][ T2340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 302.841196][ T2340] CPU: 1 UID: 0 PID: 2340 Comm: pvrusb2-context Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 302.852305][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 302.862405][ T2340] Call Trace: [ 302.865779][ T2340] [ 302.868712][ T2340] dump_stack_lvl+0x241/0x360 [ 302.873416][ T2340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.878619][ T2340] ? __pfx__printk+0x10/0x10 [ 302.883238][ T2340] ? vscnprintf+0x5d/0x90 [ 302.887592][ T2340] panic+0x349/0x880 [ 302.891521][ T2340] ? __warn+0x174/0x4d0 [ 302.895716][ T2340] ? __pfx_panic+0x10/0x10 [ 302.900153][ T2340] ? ret_from_fork_asm+0x1a/0x30 [ 302.905129][ T2340] __warn+0x344/0x4d0 [ 302.909116][ T2340] ? firmware_fallback_sysfs+0x782/0x9e0 [ 302.914759][ T2340] report_bug+0x2b3/0x500 [ 302.919096][ T2340] ? firmware_fallback_sysfs+0x782/0x9e0 [ 302.924738][ T2340] handle_bug+0x60/0x90 [ 302.928897][ T2340] exc_invalid_op+0x1a/0x50 [ 302.933404][ T2340] asm_exc_invalid_op+0x1a/0x20 [ 302.938258][ T2340] RIP: 0010:firmware_fallback_sysfs+0x782/0x9e0 [ 302.944587][ T2340] Code: 1c 24 e9 4d fc ff ff e8 cc 9e 9d fb c6 05 6a ff 00 0a 01 48 c7 c7 80 6f 85 8c e8 89 39 05 fb e9 72 fc ff ff e8 af 9e 9d fb 90 <0f> 0b 90 48 89 df 48 c7 c6 60 70 85 8c 4c 89 ea e8 29 9d 07 fb e9 [ 302.964367][ T2340] RSP: 0018:ffffc90005d27730 EFLAGS: 00010293 [ 302.970449][ T2340] RAX: ffffffff8601c8c1 RBX: ffff8880356890a8 RCX: ffff88802a991e00 [ 302.978422][ T2340] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 302.986398][ T2340] RBP: 000000000000003c R08: ffffffff8601c2d0 R09: 1ffffffff284ef3d [ 302.994367][ T2340] R10: dffffc0000000000 R11: fffffbfff284ef3e R12: 00000000fffffff5 [ 303.002333][ T2340] R13: ffffffff8cdce9e0 R14: 0000000000000001 R15: 0000000000001770 [ 303.010316][ T2340] ? firmware_fallback_sysfs+0x190/0x9e0 [ 303.015955][ T2340] ? firmware_fallback_sysfs+0x781/0x9e0 [ 303.021599][ T2340] ? _request_firmware+0xd5a/0x13b0 [ 303.026802][ T2340] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 303.032432][ T2340] ? _request_firmware+0xd5a/0x13b0 [ 303.037636][ T2340] _request_firmware+0xdf7/0x13b0 [ 303.042669][ T2340] ? __pfx__request_firmware+0x10/0x10 [ 303.048127][ T2340] ? pvr2_hdw_initialize+0x33e/0x3d10 [ 303.053493][ T2340] ? __pfx_lock_release+0x10/0x10 [ 303.058514][ T2340] ? pvr2_send_request_ex+0x1a4d/0x22a0 [ 303.064060][ T2340] request_firmware+0x36/0x50 [ 303.068736][ T2340] pvr2_locate_firmware+0xb1/0x500 [ 303.073846][ T2340] pvr2_upload_firmware1+0x1c6/0x950 [ 303.079158][ T2340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.085142][ T2340] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 303.090958][ T2340] pvr2_hdw_initialize+0x411/0x3d10 [ 303.096166][ T2340] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 303.101798][ T2340] ? pvr2_context_thread_func+0x220/0xb50 [ 303.107601][ T2340] ? __pfx_lock_release+0x10/0x10 [ 303.112621][ T2340] ? rcu_is_watching+0x15/0xb0 [ 303.117384][ T2340] ? trace_contention_end+0x3c/0x120 [ 303.122670][ T2340] ? __mutex_lock+0x37f/0xee0 [ 303.127357][ T2340] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 303.133336][ T2340] ? __mutex_unlock_slowpath+0x21e/0x790 [ 303.138993][ T2340] ? __pfx___mutex_lock+0x10/0x10 [ 303.144055][ T2340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.150058][ T2340] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 303.156408][ T2340] ? finish_wait+0xd4/0x1e0 [ 303.160919][ T2340] pvr2_context_thread_func+0x4b3/0xb50 [ 303.166495][ T2340] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 303.172514][ T2340] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 303.178617][ T2340] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 303.184518][ T2340] ? __pfx_autoremove_wake_function+0x10/0x10 [ 303.190619][ T2340] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 303.196524][ T2340] ? __kthread_parkme+0x169/0x1d0 [ 303.201546][ T2340] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 303.207618][ T2340] kthread+0x2f0/0x390 [ 303.211687][ T2340] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 303.217752][ T2340] ? __pfx_kthread+0x10/0x10 [ 303.222341][ T2340] ret_from_fork+0x4b/0x80 [ 303.226758][ T2340] ? __pfx_kthread+0x10/0x10 [ 303.231347][ T2340] ret_from_fork_asm+0x1a/0x30 [ 303.236124][ T2340] [ 303.239458][ T2340] Kernel Offset: disabled [ 303.243840][ T2340] Rebooting in 86400 seconds..