last executing test programs: 5m54.166234357s ago: executing program 0 (id=102): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x1804, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000084}, 0x0) listen(r0, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0xa, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0xc, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3f, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x1, 0xc, "df32d6a743bfaf1fb7af"}, {0x5, 0x9, "7fd356cec23675"}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x7, [0x1, 0x1, 0x3, 0x401]}]}}}}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m53.60141745s ago: executing program 0 (id=105): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m49.901868171s ago: executing program 0 (id=120): open(0x0, 0x100, 0x123) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendto$inet(r2, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 5m48.854485215s ago: executing program 0 (id=125): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sched_getaffinity(0x0, 0x8, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read(r4, &(0x7f0000000240)=""/205, 0xcd) lseek(r4, 0x0, 0x2) 5m47.944626783s ago: executing program 0 (id=130): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c", 0x1d}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 5m47.488447933s ago: executing program 0 (id=133): r0 = openat$tun(0xffffff9c, &(0x7f0000001300), 0x80000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x8, 0x100000000, 0xca8, 0x400000000}, {0x0, 0x0, 0x0, 0x9}, 0xfffffffd, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x33}, 0x0, @in6=@remote, 0x3501, 0x5, 0x2, 0x3, 0x0, 0xfffffffc}]}]}, 0xf8}}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001380)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000100)={0x4, [[0x6265, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4b79f128], [0x800, 0x4, 0x7aa, 0x0, 0xa7, 0xfffffffd, 0x0, 0x2], [0xffffffff, 0x0, 0x2, 0x8, 0xfffffffd, 0x800]], '\x00', [{0x0, 0xc278}, {0x0, 0x0, 0x0, 0x1}, {0xfffffc00, 0x0, 0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x2700}, {0x1, 0xc}], '\x00', 0x6b0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8b02, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r7, @ANYBLOB="00000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001811000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000000f000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x1e, 0x1, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc0f8565c, &(0x7f0000000100)={0xb9, 0x7f, 0x6, {0x0, @sliced={0xc8, [0xeaa, 0x1, 0x1, 0xa62d, 0x8, 0x3, 0x6, 0x2, 0x401, 0x9, 0x8, 0x0, 0x1, 0x7fff, 0xb, 0x3, 0x1, 0x6, 0x1000, 0x8, 0xfff7, 0x2, 0x4e2, 0xda5, 0x401, 0x8, 0x4, 0x7, 0x1, 0xd, 0x7, 0x80, 0x5, 0xefb7, 0x7, 0xffff, 0x0, 0x3b, 0x0, 0xe9ca, 0x4, 0x9, 0x5, 0x3, 0xc9, 0x9, 0x9, 0x5], 0x8}}, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 5m32.334368299s ago: executing program 32 (id=133): r0 = openat$tun(0xffffff9c, &(0x7f0000001300), 0x80000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x8, 0x100000000, 0xca8, 0x400000000}, {0x0, 0x0, 0x0, 0x9}, 0xfffffffd, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x33}, 0x0, @in6=@remote, 0x3501, 0x5, 0x2, 0x3, 0x0, 0xfffffffc}]}]}, 0xf8}}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001380)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000100)={0x4, [[0x6265, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4b79f128], [0x800, 0x4, 0x7aa, 0x0, 0xa7, 0xfffffffd, 0x0, 0x2], [0xffffffff, 0x0, 0x2, 0x8, 0xfffffffd, 0x800]], '\x00', [{0x0, 0xc278}, {0x0, 0x0, 0x0, 0x1}, {0xfffffc00, 0x0, 0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x2700}, {0x1, 0xc}], '\x00', 0x6b0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8b02, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r7, @ANYBLOB="00000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001811000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000000f000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x1e, 0x1, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc0f8565c, &(0x7f0000000100)={0xb9, 0x7f, 0x6, {0x0, @sliced={0xc8, [0xeaa, 0x1, 0x1, 0xa62d, 0x8, 0x3, 0x6, 0x2, 0x401, 0x9, 0x8, 0x0, 0x1, 0x7fff, 0xb, 0x3, 0x1, 0x6, 0x1000, 0x8, 0xfff7, 0x2, 0x4e2, 0xda5, 0x401, 0x8, 0x4, 0x7, 0x1, 0xd, 0x7, 0x80, 0x5, 0xefb7, 0x7, 0xffff, 0x0, 0x3b, 0x0, 0xe9ca, 0x4, 0x9, 0x5, 0x3, 0xc9, 0x9, 0x9, 0x5], 0x8}}, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 17.531277178s ago: executing program 1 (id=1651): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x10, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket(0x29, 0x1, 0x6) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x5, 0x82, 0x3}, {0x3ff, 0x9, 0xfd, 0xfc1}]}, 0x10) r4 = timerfd_create(0x7, 0x80800) read(r4, 0x0, 0x53) write(r2, &(0x7f0000000380)='200000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) unshare(0x40000000) 16.603696744s ago: executing program 1 (id=1653): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x400) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x401, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x4], [0x6, 0x40a, 0x3ff, 0x5, 0x846f, 0x100, 0x4, 0x9, 0x1, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x1, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, 0x0, 0x0) 11.905303177s ago: executing program 1 (id=1663): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x10, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket(0x29, 0x1, 0x6) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x5, 0x82, 0x3}, {0x3ff, 0x9, 0xfd, 0xfc1}]}, 0x10) r4 = timerfd_create(0x7, 0x80800) read(r4, 0x0, 0x53) write(r2, &(0x7f0000000380)='200000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) unshare(0x40000000) 9.491206279s ago: executing program 3 (id=1667): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66df5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x929b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x85434d09f3f6babb, 0x1, 0x2, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, @generic={0xfa, 0x5, 0x4, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0xfffffffffffffd98, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r12, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x8d0) recvmsg(r11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80) 8.343843287s ago: executing program 4 (id=1670): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.302740288s ago: executing program 3 (id=1671): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES8], 0x44}}, 0x2000800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x5, 0x5, 0x37, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x91, 0x5, 0x22, @loopback, @empty, 0x8, 0x7, 0x7, 0x5}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, 0x0, 0x0) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x248, 0x0, 0x204, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x248}}, 0x20048001) mount$overlay(0x0, 0x0, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = inotify_init1(0x80000) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000020ec130600000000000001090224000100ed863509218100030122280009058103080003be080000000000000100000200a270f67ea81aff7d75ca98364dcfbf443c079ce372ee54dec461006540c4402c388888aaec2c00"/105], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0x8, 0x29, {0x29, 0x2, "eba922135db4d6656aa0311f1fee3960a516578ab6e8a0ee86602df414848bc8bca8f7d53c351f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x80, 0x0) 8.218996743s ago: executing program 1 (id=1672): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000c014}, 0x8000804) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendto$inet(r3, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 7.284306748s ago: executing program 2 (id=1676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x10, 0x2, 0x158}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xd6ff, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 6.923666136s ago: executing program 1 (id=1678): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.988121777s ago: executing program 3 (id=1680): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)=ANY=[]) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 5.987572241s ago: executing program 4 (id=1681): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = timerfd_create(0x3, 0x800) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001800000000", 0x39}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) 5.564686419s ago: executing program 3 (id=1682): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x10, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket(0x29, 0x1, 0x6) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x5, 0x82, 0x3}, {0x3ff, 0x9, 0xfd, 0xfc1}]}, 0x10) r4 = timerfd_create(0x7, 0x80800) read(r4, 0x0, 0x53) write(r2, &(0x7f0000000380)='200000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) unshare(0x40000000) 5.433519663s ago: executing program 4 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b70300000000000085", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) 4.64528877s ago: executing program 2 (id=1684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.466549178s ago: executing program 5 (id=1685): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x600000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 4.078286094s ago: executing program 2 (id=1686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b70300000000000085", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) 4.023241727s ago: executing program 5 (id=1687): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x30}], 0x1}, 0xb}], 0x1, 0x40000182, 0x0) close(r1) 3.517898209s ago: executing program 3 (id=1688): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000c014}, 0x8000804) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendto$inet(r3, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 3.448947323s ago: executing program 4 (id=1689): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4403, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x3f7, 0x200, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.493926131s ago: executing program 1 (id=1690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b70300000000000085", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) 2.470534808s ago: executing program 2 (id=1691): r0 = syz_clone(0x81006800, &(0x7f0000000080)="58d6492be7bf3c0ab54eb33449b8b4bc12a6c8c87d71854adb1eb3d21f8d4c156661f909812ba546a767cf82c7fb2013f5fa9c4c13f7568e74a8b684e34333cb803407191ac708f80fa521b28d52b922209aacdf44919fb4ce53698820934f7ded960f202a9604ccdb40945aac32cb3ebae14c800999b18fa9429f95b953968e3b294124f124fa3a74c02a2d18abb7f715c4bca4752cdf1388c647b42888d1930b41", 0xa2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0x6, 0x1, @dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}}}}}}}}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000380)={0x9, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000041c0)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611844000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x10ae0, 0x5, 0x5, 0x3, 0xdc}, 0x18, 0x100) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) writev(r3, &(0x7f0000001bc0)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000b80)="bd3fcafd842c3b130465", 0xa}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.383426339s ago: executing program 4 (id=1692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="948bfa", 0x3}], 0x1}, 0x8040) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 2.240079852s ago: executing program 5 (id=1693): socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff8]}, 0x8, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x1d1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='L', 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.224146584s ago: executing program 3 (id=1694): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) syz_usb_control_io$lan78xx(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)=ANY=[], 0x0}, 0x0) 2.133088492s ago: executing program 5 (id=1695): mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000440)=0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) 1.879365442s ago: executing program 5 (id=1696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.876581748s ago: executing program 2 (id=1697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x133, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x1f, 0x4, 0x1, 0x0, 0x125, 0x66, 0x0, 0x4, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0x20, 0x2f, 0x0, 0x6, [0x2, 0x0, 0x80, 0x8, 0x2, 0x8000, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8e, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0}, {@private=0xa010101, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xfffffc01}, {@multicast2, 0x3}]}]}}, "05c5ad966ad3754e7574b0497d06a1abf9bbc831d7e7c55ce40d023eff36d3866be7425172a93798b71288bc310b67c02abc3c464d23d431681021d0696dbc86997b9ed3fa3e2ae6e72bc8b86e7ad92a793497e21ce4e23f99086450b7c6ee206fb369a2b9f9a6febf992ee4c0bcece0619d711d0aca7078ee7cc43ffebe29ca3fef112f6a7568bac68da87c06bb0e113c08e0950c8df2fae7bb1ce19ed33b0b5769d78d0687dcdc82"}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) sendto$packet(r2, &(0x7f0000000000)="114353012008ba00000037510800", 0x22, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, 0x0, 0x1, 0x7}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000002fc0)={&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ec0), 0x9a}, 0x804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) 515.603556ms ago: executing program 4 (id=1698): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x10, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket(0x29, 0x1, 0x6) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x5, 0x82, 0x3}, {0x3ff, 0x9, 0xfd, 0xfc1}]}, 0x10) r4 = timerfd_create(0x7, 0x80800) read(r4, 0x0, 0x53) write(r2, &(0x7f0000000380)='200000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) unshare(0x40000000) 285.392625ms ago: executing program 5 (id=1699): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000380)=0x4) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4403, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r5 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) 0s ago: executing program 2 (id=1700): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x815, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 23] usb 5-1: SerialNumber: syz [ 311.574424][ T8649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.637968][ T5323] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 311.641265][ T6075] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.648617][ T5323] dvb-usb: bulk message failed: -22 (3/0) [ 311.670283][ T5323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.673328][ T5323] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 311.673388][ T5323] usb 5-1: media controller created [ 311.742741][ T5323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.793524][ T5602] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 311.872855][ T5778] airspy 4-1:0.0: Board ID: 00 [ 311.872879][ T5778] airspy 4-1:0.0: Firmware version: [ 311.928014][ T5323] DVB: Unable to find symbol mt352_attach() [ 311.928033][ T5323] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 311.932242][ T5323] dvb-usb: bulk message failed: -22 (3/0) [ 311.959314][ T5323] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 312.036639][ T5323] usb 5-1: USB disconnect, device number 15 [ 312.047140][ T6075] usb 3-1: USB disconnect, device number 18 [ 312.115933][ T8685] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 312.116027][ T8685] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 312.189975][ T8685] tipc: Started in network mode [ 312.190010][ T8685] tipc: Node identity 080211, cluster identity 4711 [ 312.190200][ T8685] tipc: Enabled bearer , priority 0 [ 312.234552][ T5323] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 312.501187][ T8666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.808436][ T8666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.844380][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.268394][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.413234][ T5323] tipc: Node number set to 134353152 [ 313.575628][ T5778] airspy 4-1:0.0: usb_control_msg() failed -110 request 11 [ 313.760126][ T5778] airspy 4-1:0.0: Registered as swradio24 [ 313.760153][ T5778] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 314.547487][ T8713] vhci_hcd vhci_hcd.0: port 0 already used [ 314.665935][ T1239] usb 4-1: USB disconnect, device number 12 [ 315.223894][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.295970][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.309284][ T1239] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 315.309443][ T6075] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 315.470454][ T6075] usb 3-1: Using ep0 maxpacket: 32 [ 315.471283][ T6075] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 315.473345][ T6075] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.473369][ T6075] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 315.473406][ T6075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.476669][ T1239] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.478410][ T1239] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.478444][ T1239] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.478483][ T1239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.532932][ T8724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.549015][ T6075] usb 3-1: config 0 descriptor?? [ 315.659781][ T1239] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.745572][ T5602] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 315.800087][ T6075] usb 3-1: USB disconnect, device number 19 [ 315.979863][ T8738] vhci_hcd vhci_hcd.0: port 0 already used [ 316.137389][ T8740] syz.2.913 (8740) used greatest stack depth: 18568 bytes left [ 316.148037][ T1239] usb 5-1: USB disconnect, device number 16 [ 317.176226][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.176300][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.613975][ T8758] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 317.614040][ T8758] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 318.510695][ T5778] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 318.659696][ T5778] usb 6-1: Using ep0 maxpacket: 32 [ 318.663093][ T5778] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 318.686700][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.686732][ T5778] usb 6-1: Product: syz [ 318.686748][ T5778] usb 6-1: Manufacturer: syz [ 318.686764][ T5778] usb 6-1: SerialNumber: syz [ 318.726457][ T5778] usb 6-1: config 0 descriptor?? [ 318.889320][ T998] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 319.039230][ T998] usb 3-1: Using ep0 maxpacket: 32 [ 319.591928][ T998] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 319.639590][ T998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.639620][ T998] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.640858][ T998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.791866][ T998] usb 3-1: config 0 descriptor?? [ 319.847007][ T5778] airspy 6-1:0.0: Board ID: 00 [ 319.847032][ T5778] airspy 6-1:0.0: Firmware version: [ 320.272179][ T8763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.272781][ T8763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.513981][ T5778] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 320.520486][ T5778] airspy 6-1:0.0: Registered as swradio24 [ 320.520510][ T5778] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 320.548658][ T5778] usb 6-1: USB disconnect, device number 4 [ 321.340598][ T6075] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 321.459356][ T5778] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 321.490847][ T6075] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 321.493299][ T6075] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 321.497398][ T6075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.497427][ T6075] usb 5-1: Product: syz [ 321.497445][ T6075] usb 5-1: Manufacturer: syz [ 321.497459][ T6075] usb 5-1: SerialNumber: syz [ 321.556821][ T6075] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 321.556892][ T6075] dvb-usb: bulk message failed: -22 (3/0) [ 321.585580][ T6075] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.586274][ T6075] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 321.586308][ T6075] usb 5-1: media controller created [ 321.610189][ T5778] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.611683][ T5778] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.611710][ T5778] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.611729][ T5778] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.611778][ T5778] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.614002][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.614028][ T5778] usb 6-1: Product: syz [ 321.614042][ T5778] usb 6-1: Manufacturer: syz [ 321.638800][ T5778] cdc_wdm 6-1:1.0: skipping garbage [ 321.639856][ T5778] cdc_wdm 6-1:1.0: skipping garbage [ 321.705694][ T6075] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.705814][ T5778] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 321.705850][ T5778] cdc_wdm 6-1:1.0: Unknown control protocol [ 321.738115][ T10] usb 3-1: USB disconnect, device number 20 [ 321.840756][ T6075] DVB: Unable to find symbol mt352_attach() [ 321.840775][ T6075] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 321.841628][ T6075] dvb-usb: bulk message failed: -22 (3/0) [ 321.869374][ T6075] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 321.878961][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.898669][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.917564][ T6075] usb 5-1: USB disconnect, device number 17 [ 321.997560][ T6075] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 322.084644][ T8809] vhci_hcd vhci_hcd.0: port 0 already used [ 322.116789][ T5323] usb 6-1: USB disconnect, device number 5 [ 322.822898][ T8841] vhci_hcd vhci_hcd.0: port 0 already used [ 322.929618][ T5323] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 323.132526][ T5323] usb 4-1: Using ep0 maxpacket: 32 [ 323.342648][ T5323] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 323.598677][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.598707][ T5323] usb 4-1: Product: syz [ 323.598723][ T5323] usb 4-1: Manufacturer: syz [ 323.598738][ T5323] usb 4-1: SerialNumber: syz [ 323.674936][ T5323] usb 4-1: config 0 descriptor?? [ 324.084169][ T5323] airspy 4-1:0.0: Board ID: 00 [ 324.084194][ T5323] airspy 4-1:0.0: Firmware version: [ 324.159245][ T6075] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 324.168072][ T8864] binder: 8861:8864 ioctl c0306201 200000000680 returned -14 [ 324.332638][ T6075] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 324.335643][ T6075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.353457][ T8871] vhci_hcd vhci_hcd.0: port 0 already used [ 324.378702][ T6075] usb 6-1: config 0 descriptor?? [ 324.397999][ T6075] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 324.452359][ T8830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.458835][ T8830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.481523][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.484344][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.611226][ T6075] gp8psk: usb in 128 operation failed. [ 325.658033][ T5323] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 325.690519][ T6075] gp8psk: usb in 137 operation failed. [ 325.690542][ T6075] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 325.690580][ T6075] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 325.754864][ T5323] airspy 4-1:0.0: Registered as swradio24 [ 325.754889][ T5323] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 325.777484][ T5323] usb 4-1: USB disconnect, device number 13 [ 325.796013][ T8817] udevd[8817]: setting owner of /dev/bus/usb/004/013 to uid=0, gid=0 failed: No such file or directory [ 326.720067][ T8912] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 326.720104][ T8912] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 326.975880][ T998] usb 6-1: USB disconnect, device number 6 [ 329.090670][ T1239] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 329.560001][ T1239] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.561727][ T1239] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.561764][ T1239] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.561798][ T1239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.379777][ T8931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.412686][ T1239] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.719277][ T7339] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 330.743332][ T1239] usb 4-1: USB disconnect, device number 14 [ 330.770249][ T8961] vhci_hcd vhci_hcd.0: port 0 already used [ 330.870180][ T7339] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 330.878058][ T7339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.907595][ T7339] usb 5-1: config 0 descriptor?? [ 330.929574][ T7339] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 331.238659][ T7339] gp8psk: usb in 128 operation failed. [ 331.508334][ T7339] gp8psk: usb in 146 operation failed. [ 331.508355][ T7339] gp8psk: failed to get FW version [ 331.510608][ T8984] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 331.510662][ T8984] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 331.539404][ T7339] gp8psk: FPGA Version = 133 [ 332.283902][ T9000] vhci_hcd vhci_hcd.0: port 0 already used [ 332.351796][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 332.351867][ T9004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1009'. [ 332.437078][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 332.437125][ T9005] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1009'. [ 332.608848][ T9007] Bluetooth: MGMT ver 1.23 [ 333.359963][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 333.515898][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.520607][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.520642][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.520684][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.594082][ T9012] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 333.651573][ T7339] gp8psk: usb in 138 operation failed. [ 333.651596][ T7339] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 333.651635][ T7339] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 333.709815][ T7339] usb 5-1: USB disconnect, device number 18 [ 333.755121][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.001012][ T9024] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 334.001071][ T9024] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 334.509232][ T10] usb 4-1: USB disconnect, device number 15 [ 334.694528][ T36] audit: type=1804 audit(1790600870.880:148): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1018" name=2020736C20206C6F63616C5F616464726573732072656D5F6164647265737320202073742074785F71756575652072785F717565756520747220746D2D3E7768656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=23926 res=1 errno=0 [ 334.774176][ T9038] vhci_hcd vhci_hcd.0: port 0 already used [ 335.289473][ T6075] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 335.459198][ T6075] usb 5-1: Using ep0 maxpacket: 32 [ 335.460035][ T6075] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 335.464331][ T6075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.464360][ T6075] usb 5-1: Product: syz [ 335.464375][ T6075] usb 5-1: Manufacturer: syz [ 335.464390][ T6075] usb 5-1: SerialNumber: syz [ 335.506193][ T6075] usb 5-1: config 0 descriptor?? [ 335.749217][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 335.836809][ T9069] vhci_hcd vhci_hcd.0: port 0 already used [ 335.904378][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.911984][ T6075] airspy 5-1:0.0: Board ID: 00 [ 335.912008][ T6075] airspy 5-1:0.0: Firmware version: [ 335.917069][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.917104][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.917286][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.966239][ T9064] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 335.989436][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.320698][ T10] usb 6-1: USB disconnect, device number 7 [ 336.576137][ T9074] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.585523][ T9050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.596818][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.597415][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.852890][ T6075] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 337.030905][ T6075] airspy 5-1:0.0: Registered as swradio24 [ 337.030930][ T6075] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 337.067363][ T6075] usb 5-1: USB disconnect, device number 19 [ 337.261473][ T9083] tipc: Started in network mode [ 337.261492][ T9083] tipc: Node identity , cluster identity 4711 [ 337.261520][ T9083] tipc: Failed to obtain node identity [ 337.261547][ T9083] tipc: Enabling of bearer rejected, failed to enable media [ 337.491585][ T9083] syzkaller0: entered promiscuous mode [ 337.491614][ T9083] syzkaller0: entered allmulticast mode [ 338.437256][ T9116] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 338.437317][ T9116] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 338.834993][ T36] audit: type=1326 audit(1790600875.060:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9136 comm="syz.5.1058" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fcdce159 code=0x0 [ 339.221073][ T9151] vhci_hcd vhci_hcd.0: port 0 already used [ 339.877778][ T9164] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 339.877836][ T9164] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 340.602820][ T9181] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 340.602887][ T9181] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 341.745078][ T9203] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 341.745136][ T9203] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 342.332441][ T36] audit: type=1326 audit(1790600878.540:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.5.1083" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fcdce159 code=0x0 [ 343.002292][ T9228] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 343.002660][ T9228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.052140][ T9259] binder: 9258:9259 ioctl c0306201 200000000080 returned -14 [ 345.066724][ T7339] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 345.231786][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 345.272285][ T7339] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 345.275224][ T7339] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 345.300778][ T7339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.300803][ T7339] usb 3-1: Product: syz [ 345.300812][ T7339] usb 3-1: Manufacturer: syz [ 345.300820][ T7339] usb 3-1: SerialNumber: syz [ 345.342137][ T7339] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 345.342195][ T7339] dvb-usb: bulk message failed: -22 (3/0) [ 345.343810][ T36] audit: type=1326 audit(1790600881.570:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.4.1103" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde0441e159 code=0x0 [ 345.380811][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 345.380872][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.382472][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 345.382503][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.382539][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 345.382561][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.382584][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 345.382605][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.442313][ T10] usb 6-1: string descriptor 0 read error: -22 [ 345.442450][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.502555][ T7339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.507089][ T7339] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 345.507148][ T7339] usb 3-1: media controller created [ 345.520857][ T5778] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 345.566995][ T7339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.795879][ T10] cdc_ncm 6-1:1.0: bind() failure [ 345.860401][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 345.860453][ T10] cdc_ncm 6-1:1.1: bind() failure [ 345.879272][ T10] usb 6-1: USB disconnect, device number 8 [ 346.050907][ T7339] DVB: Unable to find symbol mt352_attach() [ 346.050931][ T7339] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 346.053269][ T7339] dvb-usb: bulk message failed: -22 (3/0) [ 346.064398][ T5778] usb 4-1: unable to get BOS descriptor or descriptor too short [ 346.064458][ T5778] usb 4-1: New USB device found, idVendor=1235, idProduct=820b, bcdDevice= 0.40 [ 346.066151][ T5778] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.066176][ T5778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.089933][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.089974][ T5778] usb 4-1: Product: syz [ 346.089989][ T5778] usb 4-1: Manufacturer: syz [ 346.090003][ T5778] usb 4-1: SerialNumber: syz [ 346.118426][ T7339] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 346.164420][ T7339] usb 3-1: USB disconnect, device number 21 [ 346.363297][ T5778] usb 4-1: 0:1 : does not exist [ 346.363393][ T5778] usb 4-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820b); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 346.363463][ T5778] usb 4-1: Error initialising Clarett+ Mixer Driver: -22 [ 346.453541][ T7339] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 346.731591][ T5778] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 346.838896][ T8817] udevd[8817]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.973664][ T9289] binder: 9288:9289 ioctl c0306201 200000000080 returned -14 [ 348.149733][ T5778] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 348.316290][ T5778] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 348.329399][ T5778] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 348.350418][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.350446][ T5778] usb 5-1: Product: syz [ 348.350461][ T5778] usb 5-1: Manufacturer: syz [ 348.350474][ T5778] usb 5-1: SerialNumber: syz [ 348.409229][ T10] usb 4-1: USB disconnect, device number 16 [ 348.414675][ T5778] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 348.414707][ T5778] dvb-usb: bulk message failed: -22 (3/0) [ 348.541886][ T5778] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.545776][ T5778] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 348.545843][ T5778] usb 5-1: media controller created [ 348.781456][ T5778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.045961][ T9317] binder: 9315:9317 ioctl 4018620d 0 returned -22 [ 349.066595][ T9317] binder: 9315:9317 ioctl c0306201 200000000080 returned -14 [ 349.185757][ T5778] DVB: Unable to find symbol mt352_attach() [ 349.185775][ T5778] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 349.195687][ T5778] dvb-usb: bulk message failed: -22 (3/0) [ 349.209310][ T5778] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 349.226864][ T5778] usb 5-1: USB disconnect, device number 20 [ 349.628537][ T5778] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 350.716075][ T9348] binder: 9346:9348 ioctl 4018620d 0 returned -22 [ 350.716818][ T9348] binder: 9346:9348 ioctl c0306201 200000000080 returned -14 [ 350.908044][ T9357] vhci_hcd vhci_hcd.0: port 0 already used [ 351.029204][ T7339] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 352.017605][ T7339] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 352.019438][ T7339] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 352.046955][ T7339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.046982][ T7339] usb 3-1: Product: syz [ 352.046996][ T7339] usb 3-1: Manufacturer: syz [ 352.047010][ T7339] usb 3-1: SerialNumber: syz [ 352.162549][ T7339] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 352.162595][ T7339] dvb-usb: bulk message failed: -22 (3/0) [ 352.181012][ T9377] binder: 9376:9377 ioctl 4018620d 0 returned -22 [ 352.186602][ T9377] binder: 9376:9377 ioctl c0306201 200000000080 returned -14 [ 352.204269][ T7339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.205877][ T7339] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 352.205934][ T7339] usb 3-1: media controller created [ 352.249708][ T7339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.349065][ T7339] DVB: Unable to find symbol mt352_attach() [ 352.349296][ T7339] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 352.350153][ T7339] dvb-usb: bulk message failed: -22 (3/0) [ 352.379833][ T7339] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 352.387671][ T7339] usb 3-1: USB disconnect, device number 22 [ 352.441316][ T7339] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 353.858748][ T9408] binder: BINDER_SET_CONTEXT_MGR already set [ 353.858766][ T9408] binder: 9407:9408 ioctl 4018620d 200000000040 returned -16 [ 354.483373][ T9442] binder: BINDER_SET_CONTEXT_MGR already set [ 354.483384][ T9442] binder: 9441:9442 ioctl 4018620d 200000000040 returned -16 [ 354.699348][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 354.885167][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.896495][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.896532][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 354.896573][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.922219][ T9438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.942950][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.249228][ T5778] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 355.250078][ T9466] binder: BINDER_SET_CONTEXT_MGR already set [ 355.250092][ T9466] binder: 9465:9466 ioctl 4018620d 200000000040 returned -16 [ 355.272546][ T10] usb 3-1: USB disconnect, device number 23 [ 355.405273][ T5778] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 355.406977][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.420271][ T5778] usb 2-1: config 0 descriptor?? [ 355.440259][ T5778] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 355.611963][ T5602] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 355.665585][ T5778] gp8psk: usb in 128 operation failed. [ 356.547409][ T5778] gp8psk: usb in 137 operation failed. [ 356.547432][ T5778] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 356.547472][ T5778] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 357.283871][ T5602] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 357.389920][ T7339] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 357.540347][ T7339] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.541659][ T7339] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.541680][ T7339] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 357.541702][ T7339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.547145][ T9517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 357.602261][ T7339] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.773055][ T7339] usb 5-1: USB disconnect, device number 21 [ 357.850107][ T9525] binder: 9524:9525 ioctl c0306201 0 returned -14 [ 358.073800][ T9535] binder_alloc: 9532: binder_alloc_buf, no vma [ 358.100796][ T1239] usb 2-1: USB disconnect, device number 20 [ 358.692752][ T5602] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 358.952704][ T9556] binder: 9555:9556 ioctl c0306201 0 returned -14 [ 359.439379][ T5778] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 359.633392][ T5602] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 359.633808][ T5602] Bluetooth: hci5: Injecting HCI hardware error event [ 359.635204][ T4906] Bluetooth: hci5: hardware error 0x00 [ 359.649327][ T7339] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 359.832700][ T9580] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 359.833244][ T9580] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 360.421513][ T7339] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.463163][ T7339] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.463200][ T7339] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.463241][ T7339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.484419][ T5778] usb 4-1: Using ep0 maxpacket: 32 [ 360.500045][ T5778] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 360.504598][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.504625][ T5778] usb 4-1: Product: syz [ 360.504641][ T5778] usb 4-1: Manufacturer: syz [ 360.504655][ T5778] usb 4-1: SerialNumber: syz [ 360.880281][ T5778] usb 4-1: config 0 descriptor?? [ 360.883420][ T9569] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 360.918796][ T9590] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 360.918842][ T9590] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 360.920309][ T9586] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 360.920344][ T9586] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 360.920667][ T9586] tipc: Resetting bearer [ 360.960182][ T7339] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.310279][ T5602] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 361.316250][ T5602] Bluetooth: hci3: Injecting HCI hardware error event [ 361.324651][ T5602] Bluetooth: hci3: hardware error 0x00 [ 361.377588][ T5778] airspy 4-1:0.0: Board ID: 00 [ 361.377613][ T5778] airspy 4-1:0.0: Firmware version: [ 361.407915][ T7339] usb 3-1: USB disconnect, device number 24 [ 361.719618][ T998] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 361.872817][ T998] usb 6-1: Using ep0 maxpacket: 32 [ 361.874059][ T998] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 361.876198][ T998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.000602][ T9599] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.687462][ T5778] airspy 4-1:0.0: usb_control_msg() failed -110 request 11 [ 362.753140][ T998] usb 6-1: config 0 descriptor?? [ 362.771374][ T5778] airspy 4-1:0.0: Registered as swradio24 [ 362.771400][ T5778] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 362.861980][ T5605] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 362.862354][ T5605] Bluetooth: hci4: Injecting HCI hardware error event [ 362.866307][ T5605] Bluetooth: hci4: hardware error 0x00 [ 363.004237][ T998] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 363.079445][ T4906] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 363.155779][ T4906] Bluetooth: hci2: unexpected event for opcode 0x0007 [ 363.252185][ T10] usb 4-1: USB disconnect, device number 17 [ 363.285461][ T998] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 363.285498][ T998] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 363.749377][ T7339] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 363.794639][ T5602] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 363.915206][ T7339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.915254][ T7339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.942389][ T7339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.942425][ T7339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.942459][ T7339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 363.942480][ T7339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 363.942512][ T7339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 363.942532][ T7339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.016081][ T7339] usb 3-1: string descriptor 0 read error: -22 [ 364.016182][ T7339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.245273][ T7339] cdc_ncm 3-1:1.0: bind() failure [ 364.309603][ T7339] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 364.309654][ T7339] cdc_ncm 3-1:1.1: bind() failure [ 364.344956][ T7339] usb 3-1: USB disconnect, device number 25 [ 365.020629][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 365.349199][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 365.350128][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 365.351652][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.388356][ T9] usb 5-1: config 0 descriptor?? [ 365.434943][ T5605] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 365.611768][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 365.959286][ T5778] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 366.031268][ T1239] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 366.109264][ T5778] usb 3-1: Using ep0 maxpacket: 32 [ 366.110134][ T5778] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 366.111657][ T5778] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 366.115866][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.115891][ T5778] usb 3-1: Product: syz [ 366.115906][ T5778] usb 3-1: Manufacturer: syz [ 366.115921][ T5778] usb 3-1: SerialNumber: syz [ 366.174756][ T5778] usb 3-1: config 0 descriptor?? [ 366.192679][ T5778] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 366.210992][ T5778] dvb-usb: bulk message failed: -22 (2/0) [ 366.229983][ T5778] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.230777][ T5778] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 366.230834][ T5778] usb 3-1: media controller created [ 366.285475][ T5778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.309835][ T5778] usb 3-1: selecting invalid altsetting 7 [ 366.309859][ T5778] cxusb: set interface failed [ 366.309872][ T5778] dvb-usb: bulk message failed: -22 (1/0) [ 366.339915][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 366.761419][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 366.811420][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.922703][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.922742][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.922781][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 366.922805][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 366.922828][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 366.922850][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.990828][ T10] usb 2-1: string descriptor 0 read error: -22 [ 366.990970][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.169234][ T1239] usb 4-1: Using ep0 maxpacket: 32 [ 367.171955][ T1239] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 367.205729][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.205759][ T1239] usb 4-1: Product: syz [ 367.205774][ T1239] usb 4-1: Manufacturer: syz [ 367.205798][ T1239] usb 4-1: SerialNumber: syz [ 367.232152][ T5778] DVB: Unable to find symbol lgdt330x_attach() [ 367.232168][ T5778] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 367.251762][ T1239] usb 4-1: config 0 descriptor?? [ 367.263951][ T10] cdc_ncm 2-1:1.0: bind() failure [ 367.304075][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 367.304124][ T10] cdc_ncm 2-1:1.1: bind() failure [ 367.338821][ T10] usb 2-1: USB disconnect, device number 21 [ 367.372941][ T9677] veth1_to_bond: entered allmulticast mode [ 367.375571][ T9677] veth1_to_bond: entered promiscuous mode [ 367.376057][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1270'. [ 367.417069][ T9677] veth1_to_bond (unregistering): left allmulticast mode [ 367.417122][ T9677] veth1_to_bond (unregistering): left promiscuous mode [ 367.519184][ T5778] rc_core: IR keymap rc-dvico-portable not found [ 367.519206][ T5778] Registered IR keymap rc-empty [ 367.552302][ T5778] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 367.557471][ T5778] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 367.584815][ T5778] dvb-usb: schedule remote query interval to 100 msecs. [ 367.584842][ T5778] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 367.606952][ T5778] usb 3-1: USB disconnect, device number 26 [ 367.673658][ T1239] airspy 4-1:0.0: Board ID: 00 [ 367.673674][ T1239] airspy 4-1:0.0: Firmware version: [ 367.796246][ T5778] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 368.091812][ T9655] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.375996][ T1239] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 368.408230][ T1239] airspy 4-1:0.0: Registered as swradio24 [ 368.408257][ T1239] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 368.418987][ T1239] usb 4-1: USB disconnect, device number 18 [ 368.624239][ T5605] Bluetooth: hci2: unexpected event for opcode 0x0007 [ 369.765478][ T9705] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 369.765532][ T9705] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 370.168632][ T9719] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 370.168665][ T9719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 370.539193][ T5778] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 370.689206][ T5778] usb 3-1: Using ep0 maxpacket: 16 [ 370.689871][ T5778] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 370.690500][ T5778] usb 3-1: config 0 has no interfaces? [ 370.692778][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.692803][ T5778] usb 3-1: Product: syz [ 370.692817][ T5778] usb 3-1: Manufacturer: syz [ 370.692832][ T5778] usb 3-1: SerialNumber: syz [ 370.697104][ T5778] usb 3-1: config 0 descriptor?? [ 371.155128][ T36] audit: type=1326 audit(1790600907.380:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.1.1296" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bd920e159 code=0x0 [ 372.863863][ T9777] netlink: 'syz.3.1308': attribute type 23 has an invalid length. [ 373.387642][ T1239] usb 3-1: USB disconnect, device number 27 [ 373.939221][ T1239] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 374.119945][ T1239] usb 3-1: Using ep0 maxpacket: 32 [ 374.124314][ T1239] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 374.127657][ T1239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.179688][ T1239] usb 3-1: config 0 descriptor?? [ 374.487974][ T1239] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 374.861045][ T9807] sit0: entered promiscuous mode [ 374.877888][ T9807] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 374.877913][ T9807] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1319'. [ 376.245083][ T9839] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 376.245128][ T9839] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 376.280586][ T9839] tipc: Enabled bearer , priority 0 [ 376.753688][ T9853] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 376.753747][ T9853] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 378.562371][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.562449][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.838584][ T9902] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 379.838642][ T9902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 380.899226][ T5323] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 381.054510][ T5323] usb 4-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 381.075214][ T5323] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.075258][ T5323] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.075286][ T5323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.075320][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.126175][ T5323] usb 4-1: config 0 descriptor?? [ 381.607072][ T5323] hid-penmount 0003:14E1:6000.0002: unknown main item tag 0x0 [ 381.607114][ T5323] hid-penmount 0003:14E1:6000.0002: unbalanced collection at end of report description [ 381.610558][ T5323] hid-penmount 0003:14E1:6000.0002: probe with driver hid-penmount failed with error -22 [ 381.766374][ T9920] binder_alloc: 9918: pid 9918 spamming oneway? 1 buffers allocated for a total size of 4096 [ 381.767639][ T9920] binder_alloc: 9918: pid 9918 spamming oneway? 2 buffers allocated for a total size of 5120 [ 381.773487][ T5323] usb 4-1: USB disconnect, device number 19 [ 382.101463][ T9945] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 382.101941][ T9945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 383.126055][ T9957] fuse: Bad value for 'fd' [ 383.934121][ T9979] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1370'. [ 384.026973][ T9980] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 384.027455][ T9980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 386.193663][T10025] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 386.194221][T10025] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.029247][ T5790] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 387.179211][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 387.180062][ T5790] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 387.181192][ T5790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 387.183342][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.183366][ T5790] usb 4-1: Product: syz [ 387.183380][ T5790] usb 4-1: Manufacturer: syz [ 387.183395][ T5790] usb 4-1: SerialNumber: syz [ 387.187062][ T5790] usb 4-1: config 0 descriptor?? [ 387.375759][T10030] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 387.376210][T10030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 388.236631][ T5790] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 388.236669][ T5790] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 388.483964][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1389'. [ 388.535888][ T5790] em28xx 4-1:0.0: chip ID is em2765 [ 389.152136][ T5790] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 389.152176][ T5790] em28xx 4-1:0.0: board has no eeprom [ 389.515559][T10060] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 389.515593][T10060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 389.539295][ T5790] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 389.539398][ T5790] em28xx 4-1:0.0: dvb set to bulk mode. [ 389.539824][ T5778] em28xx 4-1:0.0: Binding DVB extension [ 389.711545][ T5323] usb 4-1: USB disconnect, device number 20 [ 389.715620][ T5323] em28xx 4-1:0.0: Disconnecting em28xx [ 389.801630][ T5778] em28xx 4-1:0.0: Registering input extension [ 389.838023][ T5323] em28xx 4-1:0.0: Closing input extension [ 389.915052][ T5323] em28xx: Freeing device [ 390.302233][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'. [ 390.302261][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'. [ 390.302275][T10075] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 390.302329][T10075] iwpm_mapping_info_cb: Unable to parse nlmsg [ 390.658827][T10079] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 390.659338][T10079] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 391.259349][ T5778] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 391.368154][T10084] loop0: detected capacity change from 0 to 32768 [ 391.386097][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'. [ 391.433373][ T5778] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.433430][ T5778] usb 2-1: New USB device found, idVendor=1235, idProduct=820b, bcdDevice= 0.40 [ 391.436286][ T5778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.436314][ T5778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.477345][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.477373][ T5778] usb 2-1: Product: syz [ 391.477388][ T5778] usb 2-1: Manufacturer: syz [ 391.477402][ T5778] usb 2-1: SerialNumber: syz [ 391.538585][ T5778] usb 2-1: 0:1 : does not exist [ 391.538680][ T5778] usb 2-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820b); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 391.538743][ T5778] usb 2-1: Error initialising Clarett+ Mixer Driver: -22 [ 391.707338][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1403'. [ 391.764379][ T5778] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 391.874355][ T7202] udevd[7202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.009498][ T36] audit: type=1326 audit(1790600928.240:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e25e2e159 code=0x0 [ 393.267411][T10114] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 393.267446][T10114] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 393.433903][ T6075] usb 2-1: USB disconnect, device number 22 [ 394.125758][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1412'. [ 394.125776][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1412'. [ 394.125784][T10121] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 394.125793][T10121] iwpm_mapping_info_cb: Unable to parse nlmsg [ 395.038956][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 395.506679][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'. [ 395.959380][ T5323] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 396.113609][ T5323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 396.113652][ T5323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.116433][ T5323] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.116453][ T5323] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.116473][ T5323] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 396.116484][ T5323] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.116496][ T5323] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 396.116508][ T5323] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 396.120181][ T5323] usb 4-1: string descriptor 0 read error: -22 [ 396.120313][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.189214][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 396.373746][ T5323] cdc_ncm 4-1:1.0: bind() failure [ 396.444492][ T5323] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 396.444536][ T5323] cdc_ncm 4-1:1.1: bind() failure [ 396.446178][ T36] audit: type=1326 audit(1790600932.670:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.1.1420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bd920e159 code=0x0 [ 396.492440][ T5323] usb 4-1: USB disconnect, device number 21 [ 397.195151][T10152] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 397.748274][T10163] loop0: detected capacity change from 0 to 32768 [ 397.856851][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 398.797199][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'. [ 398.797216][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'. [ 398.797223][T10182] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 398.797232][T10182] iwpm_mapping_info_cb: Unable to parse nlmsg [ 398.827013][T10163] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 399.059234][T10190] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 399.859856][T10163] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 399.873638][T10163] device-mapper: ioctl: error adding target to table [ 401.195996][ T36] audit: type=1326 audit(1790600937.420:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.2.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f406e76e159 code=0x0 [ 401.227066][T10217] syzkaller0: entered promiscuous mode [ 401.234688][T10217] syzkaller0: entered allmulticast mode [ 401.399244][ T5778] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 401.551474][ T5778] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.554287][ T5778] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.554326][ T5778] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 401.554367][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.613916][T10218] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 401.629288][ T5778] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.994097][ T5778] usb 2-1: USB disconnect, device number 23 [ 402.068169][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'. [ 402.068210][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'. [ 402.068231][T10226] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 402.068248][T10226] iwpm_mapping_info_cb: Unable to parse nlmsg [ 402.425454][ T5602] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 402.519557][T10233] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 404.839250][ T5790] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 405.032177][ T5790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.032218][ T5790] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.033431][ T5790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.033464][ T5790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.033501][ T5790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 405.033524][ T5790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 405.033545][ T5790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 405.033557][ T5790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 405.037862][ T5790] usb 2-1: string descriptor 0 read error: -22 [ 405.037947][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.317001][ T5790] cdc_ncm 2-1:1.0: bind() failure [ 405.342690][ T5790] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 405.342740][ T5790] cdc_ncm 2-1:1.1: bind() failure [ 405.367815][ T5790] usb 2-1: USB disconnect, device number 24 [ 406.086252][T10263] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 406.086309][T10263] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 407.292909][T10285] fuse: Bad value for 'fd' [ 408.430650][T10295] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 408.430715][T10295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 410.811617][T10316] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 410.811675][T10316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 411.088097][T10323] fuse: Bad value for 'fd' [ 411.419254][ T5778] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 411.584563][ T36] audit: type=1326 audit(1790600947.810:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10330 comm="syz.5.1484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fcdce159 code=0x0 [ 411.629228][ T5778] usb 2-1: Using ep0 maxpacket: 16 [ 411.630153][ T5778] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 411.631361][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.631413][ T5778] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.633620][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.633646][ T5778] usb 2-1: Product: syz [ 411.633662][ T5778] usb 2-1: Manufacturer: syz [ 411.633676][ T5778] usb 2-1: SerialNumber: syz [ 411.638352][ T5778] usb 2-1: config 0 descriptor?? [ 415.314569][ T5790] usb 2-1: USB disconnect, device number 25 [ 415.721353][ T5961] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 415.874148][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 415.874208][ T5961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.876341][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.876376][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.876414][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 415.876437][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.876461][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 415.876484][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 415.960788][ T5961] usb 4-1: string descriptor 0 read error: -22 [ 415.960934][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.219519][ T5961] cdc_ncm 4-1:1.0: bind() failure [ 416.254423][ T5961] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 416.254473][ T5961] cdc_ncm 4-1:1.1: bind() failure [ 416.365298][ T5961] usb 4-1: USB disconnect, device number 22 [ 417.949231][ T5961] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 418.099442][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 418.100302][ T5961] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 418.104489][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.104543][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.107218][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.107244][ T5961] usb 4-1: Product: syz [ 418.107259][ T5961] usb 4-1: Manufacturer: syz [ 418.107274][ T5961] usb 4-1: SerialNumber: syz [ 418.116752][ T5961] usb 4-1: config 0 descriptor?? [ 418.392887][T10413] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 420.615522][T10431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1518'. [ 420.615789][T10431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1518'. [ 420.932237][ T5961] usb 4-1: USB disconnect, device number 23 [ 421.263562][T10452] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 423.655610][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 423.973574][T10475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1533'. [ 423.973684][T10475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1533'. [ 424.409233][ T5961] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 424.560776][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 424.561212][ T5961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.564018][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 424.564050][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.564072][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 424.564084][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.564097][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 424.564108][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 424.602190][ T8302] vhci_hcd: sendmsg failed!, ret=-110 for 48 [ 424.623605][ T5961] usb 4-1: string descriptor 0 read error: -22 [ 424.624822][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.641388][ T8301] vhci_hcd: xmit failed -107 [ 424.710439][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 424.710528][ T9] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 424.717525][ T9] usb 5-1: USB disconnect, device number 22 [ 424.770017][ T1239] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 424.776136][ T1239] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 424.883684][ T1239] usb 3-1: USB disconnect, device number 28 [ 424.938624][ T998] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 424.938708][ T998] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 425.010421][ T998] usb 6-1: USB disconnect, device number 9 [ 425.114707][ T5961] cdc_ncm 4-1:1.0: bind() failure [ 425.141584][ T50] vhci_hcd vhci_hcd.0: stop threads [ 425.143377][ T50] vhci_hcd vhci_hcd.0: release socket [ 425.267971][ T5961] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 425.268018][ T5961] cdc_ncm 4-1:1.1: bind() failure [ 425.357828][ T5961] usb 4-1: USB disconnect, device number 24 [ 425.395152][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 425.559267][ T1239] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 425.719951][ T1239] usb 3-1: Using ep0 maxpacket: 16 [ 425.720769][ T1239] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 425.724701][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 425.730893][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.730920][ T1239] usb 3-1: Product: syz [ 425.730935][ T1239] usb 3-1: Manufacturer: syz [ 425.730949][ T1239] usb 3-1: SerialNumber: syz [ 425.769760][ T1239] usb 3-1: config 0 descriptor?? [ 425.841652][ T1239] usb 3-1: can't set config #0, error -71 [ 425.861512][ T1239] usb 3-1: USB disconnect, device number 29 [ 426.222469][ T36] audit: type=1326 audit(1790600962.450:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10497 comm="syz.2.1542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f406e76e159 code=0x0 [ 426.742204][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 427.079893][T10510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1545'. [ 427.080147][T10510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1545'. [ 428.799293][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 429.010050][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 429.015997][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.026220][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 429.037918][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.037950][ T9] usb 3-1: Product: syz [ 429.037965][ T9] usb 3-1: Manufacturer: syz [ 429.037979][ T9] usb 3-1: SerialNumber: syz [ 429.076070][ T9] usb 3-1: config 0 descriptor?? [ 429.134332][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 429.134357][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 429.886935][ T9] em28xx 3-1:0.0: chip ID is em2765 [ 430.576392][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 430.576415][ T9] em28xx 3-1:0.0: board has no eeprom [ 430.849294][ T5724] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 430.868489][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 430.999392][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 430.999414][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 430.999758][ T5790] em28xx 3-1:0.0: Binding DVB extension [ 431.029258][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 431.030569][ T5724] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 431.067180][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.067270][ T5724] usb 5-1: Product: syz [ 431.067286][ T5724] usb 5-1: Manufacturer: syz [ 431.067302][ T5724] usb 5-1: SerialNumber: syz [ 431.259605][ T5724] usb 5-1: config 0 descriptor?? [ 431.266890][ T9] usb 3-1: USB disconnect, device number 30 [ 431.438044][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 431.588679][ T36] audit: type=1804 audit(1790600967.810:158): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1557" name=2020736C20206C6F63616C5F616464726573732072656D5F6164647265737320202073742074785F71756575652072785F717565756520747220746D2D3E7768656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=30602 res=1 errno=0 [ 431.639268][ T5790] em28xx 3-1:0.0: Registering input extension [ 431.640636][ T9] em28xx 3-1:0.0: Closing input extension [ 431.687167][ T5724] airspy 5-1:0.0: Board ID: 00 [ 431.687192][ T5724] airspy 5-1:0.0: Firmware version: [ 432.669021][ T36] audit: type=1326 audit(1790600968.890:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10559 comm="syz.2.1560" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f406e76e159 code=0x0 [ 432.807674][ T5724] airspy 5-1:0.0: usb_control_msg() failed -110 request 11 [ 433.585483][ T5724] airspy 5-1:0.0: Registered as swradio24 [ 433.585508][ T5724] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 433.624235][ T9] em28xx: Freeing device [ 433.808608][ T1239] usb 5-1: USB disconnect, device number 23 [ 434.390068][ T1239] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 434.560085][ T1239] usb 5-1: Using ep0 maxpacket: 32 [ 434.560844][ T1239] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 434.564714][ T1239] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 434.564748][ T1239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 434.564775][ T1239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 434.564799][ T1239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 434.564826][ T1239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 434.650555][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.650573][ T1239] usb 5-1: Product: syz [ 434.650581][ T1239] usb 5-1: Manufacturer: syz [ 434.650589][ T1239] usb 5-1: SerialNumber: syz [ 434.967480][ T1239] usb 5-1: config 0 descriptor?? [ 435.260309][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 435.430612][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 435.431937][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 435.433061][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 435.697435][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.705819][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.707948][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.721457][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.724901][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.725397][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.748668][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.755652][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.756141][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.756588][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.758175][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.785796][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.797603][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.805515][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.807678][ T1239] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.807794][ T1239] input input15: Timeout waiting for response from device. [ 435.883587][ T1239] usb 5-1: USB disconnect, device number 24 [ 435.899114][ T38] oom_reaper: reaped process 10553 (syz.5.1558), now anon-rss:0kB, file-rss:22664kB, shmem-rss:0kB [ 436.027526][ T36] audit: type=1804 audit(1790600972.250:160): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1569" name=2020736C20206C6F63616C5F616464726573732072656D5F6164647265737320202073742074785F71756575652072785F717565756520747220746D2D3E7768656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=29571 res=1 errno=0 [ 436.309353][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 437.192740][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 437.194562][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.194594][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.194634][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.211230][ T9] usb 4-1: config 0 descriptor?? [ 437.673799][ T36] audit: type=1326 audit(1790600973.900:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.4.1575" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde0441e159 code=0x0 [ 437.689607][ T1239] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 437.723664][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 437.723704][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 437.723737][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 437.723765][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 437.723794][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 437.723821][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 437.723849][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 437.796577][ T9] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 437.859880][ T1239] usb 6-1: Using ep0 maxpacket: 32 [ 437.863839][ T1239] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 437.869810][ T1239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.869837][ T1239] usb 6-1: Product: syz [ 437.869850][ T1239] usb 6-1: Manufacturer: syz [ 437.869864][ T1239] usb 6-1: SerialNumber: syz [ 438.003042][ T1239] usb 6-1: config 0 descriptor?? [ 438.046127][ T9] cp2112 0003:10C4:EA90.0003: error requesting version [ 438.181284][ T9] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 438.225199][ T9] usb 4-1: USB disconnect, device number 25 [ 438.413094][ T1239] airspy 6-1:0.0: Board ID: 00 [ 438.413111][ T1239] airspy 6-1:0.0: Firmware version: [ 439.657237][ T1239] airspy 6-1:0.0: usb_control_msg() failed -110 request 11 [ 440.133517][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.133560][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.292969][ T1239] airspy 6-1:0.0: Registered as swradio24 [ 440.292994][ T1239] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 440.336229][ T1239] usb 6-1: USB disconnect, device number 10 [ 440.460586][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 440.460603][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 440.460611][T10632] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 440.460620][T10632] iwpm_mapping_info_cb: Unable to parse nlmsg [ 441.239925][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1582'. [ 443.439863][T10645] ======================================================= [ 443.439863][T10645] WARNING: The mand mount option has been deprecated and [ 443.439863][T10645] and is ignored by this kernel. Remove the mand [ 443.439863][T10645] option from the mount to silence this warning. [ 443.439863][T10645] ======================================================= [ 444.411461][ T1239] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 444.419347][ T5961] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 444.536650][ T36] audit: type=1326 audit(1790600980.760:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.5.1593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fcdce159 code=0x0 [ 444.559259][ T1239] usb 3-1: Using ep0 maxpacket: 32 [ 444.560139][ T1239] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 444.564161][ T1239] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.564187][ T1239] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 444.564224][ T1239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.569577][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 444.570497][ T5961] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 444.572237][ T5961] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 444.572262][ T5961] usb 4-1: config 0 has no interface number 0 [ 444.575227][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.575251][ T5961] usb 4-1: Product: syz [ 444.575265][ T5961] usb 4-1: Manufacturer: syz [ 444.575280][ T5961] usb 4-1: SerialNumber: syz [ 444.586402][ T5961] usb 4-1: config 0 descriptor?? [ 444.618790][ T1239] usb 3-1: config 0 descriptor?? [ 445.039724][ T1239] usb 3-1: string descriptor 0 read error: -71 [ 445.043851][ T5961] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 445.043881][ T5961] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.069852][ T1239] usb 3-1: USB disconnect, device number 31 [ 445.139278][ T5778] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 445.269229][ T5778] usb 5-1: device descriptor read/64, error -71 [ 445.292230][ T5961] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 445.292548][ T5961] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 445.509936][ T5778] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 445.589513][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 445.639329][ T5778] usb 5-1: device descriptor read/64, error -71 [ 445.749733][ T5778] usb usb5-port1: attempt power cycle [ 446.151257][ T5778] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 446.185679][ T5778] usb 5-1: device descriptor read/8, error -71 [ 446.439348][ T5778] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 446.470073][ T5778] usb 5-1: device descriptor read/8, error -71 [ 446.579963][ T5778] usb usb5-port1: unable to enumerate USB device [ 447.016137][T10710] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 448.247061][ T5778] usb 4-1: USB disconnect, device number 26 [ 448.602738][ T36] audit: type=1326 audit(1790600984.810:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10720 comm="syz.1.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bd920e159 code=0x0 [ 450.787126][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 452.519283][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 452.629251][ T5778] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 453.303001][ T9] usb 2-1: device descriptor read/64, error -71 [ 453.402416][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 453.402475][ T5778] usb 3-1: New USB device found, idVendor=1235, idProduct=820b, bcdDevice= 0.40 [ 453.405465][ T5778] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.405492][ T5778] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.453027][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.453057][ T5778] usb 3-1: Product: syz [ 453.453072][ T5778] usb 3-1: Manufacturer: syz [ 453.453088][ T5778] usb 3-1: SerialNumber: syz [ 453.537400][ T5778] usb 3-1: 0:1 : does not exist [ 453.537496][ T5778] usb 3-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820b); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 453.559251][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 453.572284][ T5778] usb 3-1: Error initialising Clarett+ Mixer Driver: -22 [ 453.669031][ T5778] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 453.699221][ T9] usb 2-1: device descriptor read/64, error -71 [ 453.721542][ T5778] usb 3-1: USB disconnect, device number 32 [ 453.796975][ T8817] udevd[8817]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.817100][ T9] usb usb2-port1: attempt power cycle [ 453.855907][ T36] audit: type=1326 audit(1790600990.080:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.5.1623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fcdce159 code=0x0 [ 454.158680][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 454.179738][ T9] usb 2-1: device descriptor read/8, error -71 [ 454.419795][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 454.455742][ T9] usb 2-1: device descriptor read/8, error -71 [ 454.559595][ T9] usb usb2-port1: unable to enumerate USB device [ 455.311607][T10802] syz.3.1629: vmalloc error: size 8192, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 455.316805][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz.3.1629 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.316837][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.316859][T10802] Call Trace: [ 455.316944][T10802] [ 455.317009][T10802] dump_stack_lvl+0xe8/0x150 [ 455.317194][T10802] warn_alloc+0x24d/0x270 [ 455.317258][T10802] ? __pfx_warn_alloc+0x10/0x10 [ 455.317327][T10802] ? alloc_pages_mpol+0x11b/0x280 [ 455.317362][T10802] ? alloc_pages_noprof+0x17c/0x2f0 [ 455.317388][T10802] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 455.317448][T10802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.317477][T10802] ? lockdep_hardirqs_on+0x7b/0x110 [ 455.317571][T10802] ? rcu_is_watching+0x16/0xb0 [ 455.317624][T10802] ? alloc_netdev_mqs+0xa9/0x12c0 [ 455.317739][T10802] __kvmalloc_node_noprof+0x646/0x890 [ 455.317772][T10802] ? alloc_netdev_mqs+0xa9/0x12c0 [ 455.317802][T10802] ? alloc_netdev_mqs+0xa9/0x12c0 [ 455.317828][T10802] ? alloc_netdev_mqs+0xa9/0x12c0 [ 455.317862][T10802] alloc_netdev_mqs+0xa9/0x12c0 [ 455.317890][T10802] ? __pfx_loopback_setup+0x10/0x10 [ 455.317988][T10802] loopback_net_init+0x3a/0x150 [ 455.318021][T10802] ops_init+0x35d/0x5d0 [ 455.318083][T10802] setup_net+0x118/0x350 [ 455.318117][T10802] ? __pfx_setup_net+0x10/0x10 [ 455.318153][T10802] ? __ns_common_init+0x2fc/0x4a0 [ 455.318198][T10802] copy_net_ns+0x53b/0x780 [ 455.318234][T10802] create_new_namespaces+0x3f0/0x6b0 [ 455.318267][T10802] ? security_capable+0x7e/0x2c0 [ 455.318334][T10802] unshare_nsproxy_namespaces+0x149/0x190 [ 455.318367][T10802] ksys_unshare+0x5a7/0x950 [ 455.318419][T10802] ? __pfx_ksys_unshare+0x10/0x10 [ 455.318450][T10802] ? rcu_is_watching+0x16/0xb0 [ 455.318493][T10802] __x64_sys_unshare+0x38/0x50 [ 455.318524][T10802] do_syscall_64+0x166/0x520 [ 455.318574][T10802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.318611][T10802] ? clear_bhb_loop+0x70/0xc0 [ 455.318637][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.318663][T10802] RIP: 0033:0x7f3e25e2e159 [ 455.318704][T10802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.318722][T10802] RSP: 002b:00007f3e24086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 455.318751][T10802] RAX: ffffffffffffffda RBX: 00007f3e260b5fa0 RCX: 00007f3e25e2e159 [ 455.318768][T10802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 455.318782][T10802] RBP: 00007f3e25ec506b R08: 0000000000000000 R09: 0000000000000000 [ 455.318796][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.318809][T10802] R13: 00007f3e260b6038 R14: 00007f3e260b5fa0 R15: 00007fff3fde64d8 [ 455.318844][T10802] [ 455.318858][T10802] Mem-Info: [ 455.318868][T10802] active_anon:192 inactive_anon:8042 isolated_anon:0 [ 455.318868][T10802] active_file:22236 inactive_file:37993 isolated_file:0 [ 455.318868][T10802] unevictable:0 dirty:169 writeback:0 [ 455.318868][T10802] slab_reclaimable:12294 slab_unreclaimable:104326 [ 455.318868][T10802] mapped:32701 shmem:1542 pagetables:1838 [ 455.318868][T10802] sec_pagetables:0 bounce:0 [ 455.318868][T10802] kernel_misc_reclaimable:0 [ 455.318868][T10802] free:1278365 free_pcp:6608 free_cma:0 [ 455.318932][T10802] Node 0 active_anon:768kB inactive_anon:32168kB active_file:88744kB inactive_file:151972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130804kB dirty:676kB writeback:0kB shmem:6168kB kernel_stack:13692kB pagetables:7192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 455.318989][T10802] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 455.319040][T10802] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.398297][T10802] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 455.398348][T10802] Node 0 DMA32 free:1165888kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:768kB inactive_anon:36368kB active_file:88744kB inactive_file:151972kB unevictable:0kB writepending:676kB zspages:0kB present:3129332kB managed:2559032kB mlocked:0kB bounce:0kB free_pcp:22184kB local_pcp:19192kB free_cma:0kB [ 455.398418][T10802] lowmem_reserve[]: 0 0 1 1 1 [ 455.398456][T10802] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 455.398518][T10802] lowmem_reserve[]: 0 0 0 0 0 [ 455.398557][T10802] Node 1 Normal free:3932212kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.398621][T10802] lowmem_reserve[]: 0 0 0 0 0 [ 455.398656][T10802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 455.398798][T10802] Node 0 DMA32: 130*4kB (ME) 457*8kB (UME) 163*16kB (UME) 516*32kB (UME) 351*64kB (UME) 111*128kB (UME) 70*256kB (UME) 35*512kB (ME) 21*1024kB (ME) 4*2048kB (M) 254*4096kB (UM) = 1165888kB [ 455.398974][T10802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 455.505488][T10802] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 8*16kB (UM) 6*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (M) = 3932212kB [ 455.505653][T10802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.505670][T10802] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 455.505686][T10802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.505703][T10802] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 455.505720][T10802] 63622 total pagecache pages [ 455.676011][T10802] 5 pages in swap cache [ 455.683088][T10802] Free swap = 124976kB [ 455.697991][T10802] Total swap = 124996kB [ 455.718554][T10802] 2097051 pages RAM [ 455.739727][T10802] 0 pages HighMem/MovableOnly [ 455.748562][T10802] 425225 pages reserved [ 455.752048][T10802] 0 pages cma reserved [ 457.683687][T10830] device-mapper: ioctl: name not supplied when creating device [ 457.684228][T10830] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 457.684248][T10830] device-mapper: ioctl: error adding target to table [ 458.113403][ T36] audit: type=1326 audit(1790600994.340:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10843 comm="syz.3.1641" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e25e2e159 code=0x0 [ 458.169254][ T5724] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 458.321112][ T5724] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 458.321182][ T5724] usb 3-1: too many configurations: 102, using maximum allowed: 8 [ 458.357079][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.357097][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.359305][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.359333][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.360721][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.360745][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.393067][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.393092][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.412887][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.412916][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.446610][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.446638][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.476275][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.476305][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.503670][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 458.503700][ T5724] usb 3-1: config 1 has no interface number 0 [ 458.508565][ T5724] usb 3-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 458.508691][ T5724] usb 3-1: Product: syz [ 458.508768][ T5724] usb 3-1: Manufacturer: syz [ 458.508810][ T5724] usb 3-1: SerialNumber: syz [ 458.568622][ T5724] usb 3-1: 3:0 : does not exist [ 458.568647][ T5724] usb 3-1: 3:0 : does not exist [ 459.160841][ T5724] usb 3-1: USB disconnect, device number 33 [ 459.248971][ T8817] udevd[8817]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.347976][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1645'. [ 459.348085][T10870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.348098][T10870] IPv6: NLM_F_CREATE should be set when creating new route [ 459.881674][ T5724] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 460.044366][ T5724] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 460.045546][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.045566][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.045588][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.115712][ T5724] usb 5-1: config 0 descriptor?? [ 460.534860][ T1239] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 460.653856][ T5724] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 460.654158][ T5724] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 460.654188][ T5724] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 460.654214][ T5724] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 460.654239][ T5724] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 460.654267][ T5724] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 460.654294][ T5724] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 460.709241][ T1239] usb 3-1: Using ep0 maxpacket: 32 [ 460.710162][ T1239] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 460.711883][ T1239] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 460.711915][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 460.711941][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 460.711965][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 460.711991][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 460.734212][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.734241][ T1239] usb 3-1: Product: syz [ 460.734259][ T1239] usb 3-1: Manufacturer: syz [ 460.734273][ T1239] usb 3-1: SerialNumber: syz [ 460.755403][ T1239] usb 3-1: config 0 descriptor?? [ 460.826899][ T5724] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 460.880218][ T5724] cp2112 0003:10C4:EA90.0004: error requesting version [ 460.921199][ T5724] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32 [ 460.962000][ T5724] usb 5-1: USB disconnect, device number 29 [ 461.060337][T10887] fido_id[10887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 461.283676][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 461.489367][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.489804][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.491166][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.491748][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.492224][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.517855][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.518949][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.520067][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.520778][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.521252][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.521691][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.522128][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.522664][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.523097][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.523609][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.524056][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.524487][ T1239] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.524528][ T1239] input input16: Timeout waiting for response from device. [ 461.552829][ T1239] usb 3-1: USB disconnect, device number 34 [ 462.089251][ T7339] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 462.259302][ T7339] usb 5-1: Using ep0 maxpacket: 32 [ 462.260087][ T7339] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 462.261824][ T7339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.261849][ T7339] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.261887][ T7339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.276300][ T7339] usb 5-1: config 0 descriptor?? [ 462.489257][ T1239] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 462.680056][ T1239] usb 3-1: Using ep0 maxpacket: 32 [ 462.685093][ T1239] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 462.688774][ T1239] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 462.688793][ T1239] usb 3-1: config 0 has no interface number 0 [ 462.725387][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.725417][ T1239] usb 3-1: Product: syz [ 462.725432][ T1239] usb 3-1: Manufacturer: syz [ 462.725871][ T1239] usb 3-1: SerialNumber: syz [ 462.765884][ T7339] usb 5-1: string descriptor 0 read error: -71 [ 462.784235][ T1239] usb 3-1: config 0 descriptor?? [ 462.838042][ T7339] usb 5-1: USB disconnect, device number 30 [ 463.248481][ T1239] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 463.248514][ T1239] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 463.338674][T10899] syz.3.1655 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 463.338720][T10899] CPU: 0 UID: 0 PID: 10899 Comm: syz.3.1655 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.338745][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.338758][T10899] Call Trace: [ 463.338768][T10899] [ 463.338777][T10899] dump_stack_lvl+0xe8/0x150 [ 463.338821][T10899] dump_header+0xd3/0x4b0 [ 463.338873][T10899] oom_kill_process+0x3ab/0x9e0 [ 463.338907][T10899] out_of_memory+0x1064/0x1480 [ 463.338942][T10899] ? __pfx_out_of_memory+0x10/0x10 [ 463.338963][T10899] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 463.339049][T10899] ? _mutex_lock_killable+0x152/0x1d0 [ 463.339116][T10899] ? try_charge_memcg+0xcc3/0x16f0 [ 463.339152][T10899] try_charge_memcg+0xd82/0x16f0 [ 463.339195][T10899] ? __pfx_try_charge_memcg+0x10/0x10 [ 463.339223][T10899] ? percpu_ref_tryget+0x15/0x180 [ 463.339257][T10899] ? __obj_cgroup_charge+0x36/0x2c0 [ 463.339291][T10899] __obj_cgroup_charge+0x1fd/0x2c0 [ 463.339321][T10899] ? __obj_cgroup_charge+0x36/0x2c0 [ 463.339355][T10899] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 463.339407][T10899] __kmalloc_noprof+0x499/0x790 [ 463.339437][T10899] ? __register_sysctl_table+0x6f/0x1370 [ 463.339484][T10899] ? __register_sysctl_table+0x6f/0x1370 [ 463.339521][T10899] __register_sysctl_table+0x6f/0x1370 [ 463.339554][T10899] ? register_net_sysctl_sz+0x2ba/0x3f0 [ 463.339652][T10899] __addrconf_sysctl_register+0x31c/0x4b0 [ 463.339735][T10899] ? rcu_is_watching+0x16/0xb0 [ 463.339774][T10899] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 463.339803][T10899] ? kmemdup_noprof+0x55/0x70 [ 463.339835][T10899] ? __asan_memcpy+0x40/0x70 [ 463.339867][T10899] addrconf_init_net+0x4f9/0x790 [ 463.339900][T10899] ops_init+0x35d/0x5d0 [ 463.339931][T10899] setup_net+0x118/0x350 [ 463.339964][T10899] ? __pfx_setup_net+0x10/0x10 [ 463.340001][T10899] ? __ns_common_init+0x2fc/0x4a0 [ 463.340036][T10899] copy_net_ns+0x53b/0x780 [ 463.340082][T10899] create_new_namespaces+0x3f0/0x6b0 [ 463.340114][T10899] ? security_capable+0x7e/0x2c0 [ 463.340154][T10899] unshare_nsproxy_namespaces+0x149/0x190 [ 463.340188][T10899] ksys_unshare+0x5a7/0x950 [ 463.340228][T10899] ? __pfx_ksys_unshare+0x10/0x10 [ 463.340258][T10899] ? rcu_is_watching+0x16/0xb0 [ 463.340297][T10899] __x64_sys_unshare+0x38/0x50 [ 463.340323][T10899] do_syscall_64+0x166/0x520 [ 463.340344][T10899] ? trace_irq_disable+0x3b/0x140 [ 463.340393][T10899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.340416][T10899] ? clear_bhb_loop+0x70/0xc0 [ 463.340442][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.340463][T10899] RIP: 0033:0x7f3e25e2e159 [ 463.340483][T10899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.340502][T10899] RSP: 002b:00007f3e24086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 463.340525][T10899] RAX: ffffffffffffffda RBX: 00007f3e260b5fa0 RCX: 00007f3e25e2e159 [ 463.340540][T10899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 463.340553][T10899] RBP: 00007f3e25ec506b R08: 0000000000000000 R09: 0000000000000000 [ 463.340567][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.340580][T10899] R13: 00007f3e260b6038 R14: 00007f3e260b5fa0 R15: 00007fff3fde64d8 [ 463.340612][T10899] [ 463.735595][T10899] memory: usage 184kB, limit 192kB, failcnt 97 [ 463.735620][T10899] memory+swap: usage 184kB, limit 9007199254740988kB, failcnt 0 [ 463.735643][T10899] kmem: usage 184kB, limit 9007199254740988kB, failcnt 0 [ 463.735656][T10899] Memory cgroup stats for /syz3/test: [ 463.961164][T10899] cache 0 [ 463.961810][T10899] rss 0 [ 463.961822][T10899] shmem 0 [ 463.962788][T10899] mapped_file 0 [ 463.962799][T10899] dirty 0 [ 463.962808][T10899] writeback 0 [ 463.962816][T10899] workingset_refault_anon 0 [ 463.962825][T10899] workingset_refault_file 0 [ 463.962833][T10899] swap 0 [ 463.962840][T10899] swapcached 0 [ 463.962846][T10899] pgpgin 0 [ 463.962852][T10899] pgpgout 0 [ 463.962859][T10899] pgfault 11 [ 463.962865][T10899] pgmajfault 0 [ 463.962872][T10899] inactive_anon 0 [ 463.962879][T10899] active_anon 0 [ 463.963153][T10899] inactive_file 0 [ 463.963162][T10899] active_file 0 [ 463.963170][T10899] unevictable 0 [ 463.963177][T10899] hierarchical_memory_limit 196608 [ 463.963185][T10899] hierarchical_memsw_limit 9223372036854771712 [ 463.963194][T10899] total_cache 0 [ 463.963201][T10899] total_rss 0 [ 463.963208][T10899] total_shmem 0 [ 463.964704][T10899] total_mapped_file 0 [ 463.964718][T10899] total_dirty 0 [ 463.964726][T10899] total_writeback 0 [ 463.964734][T10899] total_workingset_refault_anon 0 [ 463.964742][T10899] total_workingset_refault_file 0 [ 463.964750][T10899] total_swap 0 [ 463.964757][T10899] total_swapcached 0 [ 463.964765][T10899] total_pgpgin 0 [ 463.964773][T10899] total_pgpgout 0 [ 463.964781][T10899] total_pgfault 11 [ 463.964789][T10899] total_pgmajfault 0 [ 463.966071][T10899] total_inactive_anon 0 [ 463.966086][T10899] total_active_anon 0 [ 463.966095][T10899] total_inactive_file 0 [ 463.966104][T10899] total_active_file 0 [ 463.966113][T10899] total_unevictable 0 [ 463.966120][T10899] anon_cost 0 [ 463.966128][T10899] file_cost 0 [ 463.966137][T10899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 464.183491][T10902] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 464.365532][T10899] ,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1655,pid=10898,uid=0 [ 464.406945][ T1239] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 464.407262][ T1239] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 465.353244][T10899] Memory cgroup out of memory: Killed process 10898 (syz.3.1655) total-vm:104300kB, anon-rss:1432kB, file-rss:23724kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 465.465186][ T5724] usb 3-1: USB disconnect, device number 35 [ 465.939332][ T5790] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 466.090762][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 466.092987][ T5790] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 466.096610][ T5790] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.145990][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.146009][ T5790] usb 5-1: Product: syz [ 466.146017][ T5790] usb 5-1: Manufacturer: syz [ 466.146025][ T5790] usb 5-1: SerialNumber: syz [ 466.195053][ T5790] usb 5-1: config 0 descriptor?? [ 469.262680][ T9] usb 5-1: USB disconnect, device number 31 [ 469.499494][ T1239] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 469.700070][ T1239] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 469.702664][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.702698][ T1239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.702735][ T1239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.754612][ T1239] usb 3-1: config 0 descriptor?? [ 470.288109][ T1239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 470.288149][ T1239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 470.288177][ T1239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 470.288206][ T1239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 470.288234][ T1239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 470.288262][ T1239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 470.288289][ T1239] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 470.402223][ T1239] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 470.464588][ T1239] cp2112 0003:10C4:EA90.0005: error requesting version [ 470.468135][ T1239] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -5 [ 470.519251][ T7339] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 470.659225][ T5323] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 470.669478][ T7339] usb 5-1: Using ep0 maxpacket: 32 [ 470.670431][ T7339] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 470.677259][ T9] usb 3-1: USB disconnect, device number 36 [ 470.707755][ T7339] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 470.707777][ T7339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 470.707791][ T7339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 470.707803][ T7339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 470.707818][ T7339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 470.773737][ T7339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.773767][ T7339] usb 5-1: Product: syz [ 470.773783][ T7339] usb 5-1: Manufacturer: syz [ 470.773798][ T7339] usb 5-1: SerialNumber: syz [ 470.807351][ T7339] usb 5-1: config 0 descriptor?? [ 470.849221][ T5323] usb 4-1: Using ep0 maxpacket: 32 [ 470.849893][ T5323] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 470.851136][ T5323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.851161][ T5323] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 470.851197][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.856538][ T5323] usb 4-1: config 0 descriptor?? [ 471.233468][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 471.233523][ T7339] input input17: Device does not respond to id packet M [ 471.269913][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 471.269966][ T7339] input input17: Device does not respond to id packet P [ 471.270448][ T5323] usb 4-1: string descriptor 0 read error: -71 [ 471.311457][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.311511][ T7339] input input17: Device does not respond to id packet B [ 471.313557][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.313601][ T7339] input input17: Device does not respond to id packet N [ 471.314106][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.314527][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.315155][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.315600][ T7339] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.386371][ T5323] usb 4-1: USB disconnect, device number 27 [ 472.402704][ T7339] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 472.656103][ T7339] usb 5-1: USB disconnect, device number 32 [ 472.867696][T10982] loop7: detected capacity change from 0 to 7 [ 472.952648][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 473.102309][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 473.103366][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 473.104910][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 473.108018][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.108045][ T9] usb 2-1: Product: syz [ 473.108061][ T9] usb 2-1: Manufacturer: syz [ 473.108075][ T9] usb 2-1: SerialNumber: syz [ 473.166867][ T9] usb 2-1: config 0 descriptor?? [ 473.458899][T10982] Dev loop7: unable to read RDB block 7 [ 473.458962][T10982] loop7: unable to read partition table [ 473.467066][T10982] loop7: partition table beyond EOD, truncated [ 473.467107][T10982] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 473.608956][T10988] syz.4.1683 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 473.608992][T10988] CPU: 0 UID: 0 PID: 10988 Comm: syz.4.1683 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.609016][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.609024][T10988] Call Trace: [ 473.609030][T10988] [ 473.609036][T10988] dump_stack_lvl+0xe8/0x150 [ 473.609062][T10988] dump_header+0xd3/0x4b0 [ 473.609092][T10988] oom_kill_process+0x3ab/0x9e0 [ 473.609117][T10988] out_of_memory+0x1064/0x1480 [ 473.609152][T10988] ? __pfx_out_of_memory+0x10/0x10 [ 473.609171][T10988] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 473.609196][T10988] ? _mutex_lock_killable+0x152/0x1d0 [ 473.609226][T10988] ? try_charge_memcg+0xcc3/0x16f0 [ 473.609240][T10988] try_charge_memcg+0xd82/0x16f0 [ 473.609261][T10988] ? __pfx_try_charge_memcg+0x10/0x10 [ 473.609276][T10988] ? percpu_ref_tryget+0x15/0x180 [ 473.609294][T10988] ? __obj_cgroup_charge+0x36/0x2c0 [ 473.609311][T10988] __obj_cgroup_charge+0x1fd/0x2c0 [ 473.609327][T10988] ? __obj_cgroup_charge+0x36/0x2c0 [ 473.609344][T10988] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 473.609369][T10988] ? sk_prot_alloc+0x57/0x210 [ 473.609451][T10988] kmem_cache_alloc_noprof+0x421/0x690 [ 473.609466][T10988] ? count_configs+0x1a0/0x280 [ 473.609548][T10988] ? sk_prot_alloc+0x57/0x210 [ 473.609559][T10988] ? sk_prot_alloc+0x57/0x210 [ 473.609574][T10988] sk_prot_alloc+0x57/0x210 [ 473.609585][T10988] ? sk_alloc+0x27/0x390 [ 473.609599][T10988] sk_alloc+0x3a/0x390 [ 473.609612][T10988] inet6_create+0x81a/0x1280 [ 473.609650][T10988] ? inet6_create+0x80/0x1280 [ 473.609663][T10988] __sock_create+0x4b3/0x9d0 [ 473.609724][T10988] inet_ctl_sock_create+0xa2/0x220 [ 473.609770][T10988] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 473.609792][T10988] sctp_ctrlsock_init+0x47/0x170 [ 473.609848][T10988] ops_init+0x35d/0x5d0 [ 473.609865][T10988] setup_net+0x118/0x350 [ 473.609884][T10988] ? __pfx_setup_net+0x10/0x10 [ 473.609905][T10988] ? __ns_common_init+0x2fc/0x4a0 [ 473.609926][T10988] copy_net_ns+0x53b/0x780 [ 473.609944][T10988] create_new_namespaces+0x3f0/0x6b0 [ 473.609960][T10988] ? security_capable+0x7e/0x2c0 [ 473.609982][T10988] unshare_nsproxy_namespaces+0x149/0x190 [ 473.609998][T10988] ksys_unshare+0x5a7/0x950 [ 473.610018][T10988] ? __pfx_ksys_unshare+0x10/0x10 [ 473.610035][T10988] ? rcu_is_watching+0x16/0xb0 [ 473.610058][T10988] __x64_sys_unshare+0x38/0x50 [ 473.610074][T10988] do_syscall_64+0x166/0x520 [ 473.610086][T10988] ? trace_irq_disable+0x3b/0x140 [ 473.610100][T10988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.610112][T10988] ? clear_bhb_loop+0x70/0xc0 [ 473.610125][T10988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.610137][T10988] RIP: 0033:0x7fde0441e159 [ 473.610150][T10988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.610160][T10988] RSP: 002b:00007fde02676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 473.610174][T10988] RAX: ffffffffffffffda RBX: 00007fde046a5fa0 RCX: 00007fde0441e159 [ 473.610182][T10988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 473.610189][T10988] RBP: 00007fde044b506b R08: 0000000000000000 R09: 0000000000000000 [ 473.610197][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.610205][T10988] R13: 00007fde046a6038 R14: 00007fde046a5fa0 R15: 00007ffc63b3d308 [ 473.610222][T10988] [ 473.625224][T10988] memory: usage 192kB, limit 192kB, failcnt 93 [ 473.625246][T10988] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 473.625262][T10988] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 473.625275][T10988] Memory cgroup stats for /syz4/test: [ 473.625410][T10988] cache 0 [ 473.625420][T10988] rss 0 [ 473.625427][T10988] shmem 0 [ 473.625435][T10988] mapped_file 0 [ 473.625442][T10988] dirty 0 [ 473.625449][T10988] writeback 0 [ 473.625456][T10988] workingset_refault_anon 0 [ 473.625464][T10988] workingset_refault_file 0 [ 473.625472][T10988] swap 0 [ 473.625478][T10988] swapcached 0 [ 473.625486][T10988] pgpgin 0 [ 473.625493][T10988] pgpgout 0 [ 473.625500][T10988] pgfault 9 [ 473.625507][T10988] pgmajfault 0 [ 473.625514][T10988] inactive_anon 0 [ 473.625522][T10988] active_anon 0 [ 473.625529][T10988] inactive_file 0 [ 473.625536][T10988] active_file 0 [ 473.625543][T10988] unevictable 0 [ 473.625551][T10988] hierarchical_memory_limit 196608 [ 473.625559][T10988] hierarchical_memsw_limit 9223372036854771712 [ 473.625568][T10988] total_cache 0 [ 473.625575][T10988] total_rss 0 [ 473.625582][T10988] total_shmem 0 [ 473.625589][T10988] total_mapped_file 0 [ 473.625596][T10988] total_dirty 0 [ 473.625604][T10988] total_writeback 0 [ 473.625611][T10988] total_workingset_refault_anon 0 [ 473.625619][T10988] total_workingset_refault_file 0 [ 473.625627][T10988] total_swap 0 [ 473.625634][T10988] total_swapcached 0 [ 473.625642][T10988] total_pgpgin 0 [ 473.625649][T10988] total_pgpgout 0 [ 473.625656][T10988] total_pgfault 9 [ 473.625663][T10988] total_pgmajfault 0 [ 473.625670][T10988] total_inactive_anon 0 [ 473.625677][T10988] total_active_anon 0 [ 473.625685][T10988] total_inactive_file 0 [ 473.625693][T10988] total_active_file 0 [ 473.625700][T10988] total_unevictable 0 [ 473.625708][T10988] anon_cost 0 [ 473.625715][T10988] file_cost 0 [ 473.625722][T10988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1683,pid=10987,uid=0 [ 473.657635][T10988] Memory cgroup out of memory: Killed process 10987 (syz.4.1683) total-vm:104300kB, anon-rss:1424kB, file-rss:23708kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 473.899318][T10988] socket: no more sockets [ 473.899333][T10988] sctp: Failed to create the SCTP control socket [ 473.899349][T10988] sctp: Failed to initialize the SCTP control sock [ 473.952657][T10989] syz.3.1682 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 473.952701][T10989] CPU: 0 UID: 0 PID: 10989 Comm: syz.3.1682 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.952727][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.952739][T10989] Call Trace: [ 473.952748][T10989] [ 473.952757][T10989] dump_stack_lvl+0xe8/0x150 [ 473.952795][T10989] dump_header+0xd3/0x4b0 [ 473.952826][T10989] oom_kill_process+0x3ab/0x9e0 [ 473.952853][T10989] out_of_memory+0x1064/0x1480 [ 473.952889][T10989] ? __pfx_out_of_memory+0x10/0x10 [ 473.952911][T10989] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 473.952936][T10989] ? _mutex_lock_killable+0x152/0x1d0 [ 473.952964][T10989] ? try_charge_memcg+0xcc3/0x16f0 [ 473.952989][T10989] try_charge_memcg+0xd82/0x16f0 [ 473.953031][T10989] ? __pfx_try_charge_memcg+0x10/0x10 [ 473.953058][T10989] ? percpu_ref_tryget+0x15/0x180 [ 473.953092][T10989] ? __obj_cgroup_charge+0x36/0x2c0 [ 473.953126][T10989] __obj_cgroup_charge+0x1fd/0x2c0 [ 473.953154][T10989] ? __obj_cgroup_charge+0x36/0x2c0 [ 473.953185][T10989] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 473.953237][T10989] __kmalloc_cache_noprof+0x42e/0x680 [ 473.953267][T10989] ? ipv6_add_dev+0x6e8/0x1400 [ 473.953288][T10989] ? ipv6_add_dev+0x6e8/0x1400 [ 473.953315][T10989] ipv6_add_dev+0x6e8/0x1400 [ 473.953355][T10989] addrconf_notify+0x771/0x1050 [ 473.953387][T10989] notifier_call_chain+0x1a5/0x3d0 [ 473.953419][T10989] register_netdevice+0x18c0/0x1ed0 [ 473.953463][T10989] ? __pfx_register_netdevice+0x10/0x10 [ 473.953499][T10989] ? register_netdev+0x18/0x60 [ 473.953527][T10989] register_netdev+0x40/0x60 [ 473.953553][T10989] loopback_net_init+0x75/0x150 [ 473.953585][T10989] ops_init+0x35d/0x5d0 [ 473.953620][T10989] setup_net+0x118/0x350 [ 473.953654][T10989] ? __pfx_setup_net+0x10/0x10 [ 473.953687][T10989] ? __ns_common_init+0x2fc/0x4a0 [ 473.953721][T10989] copy_net_ns+0x53b/0x780 [ 473.953756][T10989] create_new_namespaces+0x3f0/0x6b0 [ 473.953786][T10989] ? security_capable+0x7e/0x2c0 [ 473.953826][T10989] unshare_nsproxy_namespaces+0x149/0x190 [ 473.953857][T10989] ksys_unshare+0x5a7/0x950 [ 473.953894][T10989] ? __pfx_ksys_unshare+0x10/0x10 [ 473.953924][T10989] ? rcu_is_watching+0x16/0xb0 [ 473.953967][T10989] __x64_sys_unshare+0x38/0x50 [ 473.953997][T10989] do_syscall_64+0x166/0x520 [ 473.954018][T10989] ? trace_irq_disable+0x3b/0x140 [ 473.954045][T10989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.954066][T10989] ? clear_bhb_loop+0x70/0xc0 [ 473.954092][T10989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.954113][T10989] RIP: 0033:0x7f3e25e2e159 [ 473.954133][T10989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.954151][T10989] RSP: 002b:00007f3e24065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 473.954175][T10989] RAX: ffffffffffffffda RBX: 00007f3e260b6090 RCX: 00007f3e25e2e159 [ 473.954192][T10989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 473.954205][T10989] RBP: 00007f3e25ec506b R08: 0000000000000000 R09: 0000000000000000 [ 473.954219][T10989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.954232][T10989] R13: 00007f3e260b6128 R14: 00007f3e260b6090 R15: 00007fff3fde64d8 [ 473.954267][T10989] [ 473.956181][T10989] memory: usage 184kB, limit 192kB, failcnt 141 [ 473.956201][T10989] memory+swap: usage 184kB, limit 9007199254740988kB, failcnt 0 [ 473.956216][T10989] kmem: usage 184kB, limit 9007199254740988kB, failcnt 0 [ 473.956230][T10989] Memory cgroup stats for /syz3/test: [ 473.956435][T10989] cache 0 [ 473.956445][T10989] rss 0 [ 473.956452][T10989] shmem 0 [ 473.956458][T10989] mapped_file 0 [ 473.956466][T10989] dirty 0 [ 473.956473][T10989] writeback 0 [ 473.956480][T10989] workingset_refault_anon 0 [ 473.956489][T10989] workingset_refault_file 0 [ 473.956496][T10989] swap 0 [ 473.956503][T10989] swapcached 0 [ 473.956510][T10989] pgpgin 0 [ 473.956517][T10989] pgpgout 0 [ 473.956524][T10989] pgfault 22 [ 473.956531][T10989] pgmajfault 0 [ 473.956541][T10989] inactive_anon 0 [ 473.957651][T10989] active_anon 0 [ 473.957661][T10989] inactive_file 0 [ 473.957669][T10989] active_file 0 [ 473.957758][T10989] unevictable 0 [ 473.957767][T10989] hierarchical_memory_limit 196608 [ 473.957776][T10989] hierarchical_memsw_limit 9223372036854771712 [ 473.957785][T10989] total_cache 0 [ 473.957793][T10989] total_rss 0 [ 473.957800][T10989] total_shmem 0 [ 473.957807][T10989] total_mapped_file 0 [ 473.957815][T10989] total_dirty 0 [ 473.957822][T10989] total_writeback 0 [ 473.957830][T10989] total_workingset_refault_anon 0 [ 473.957838][T10989] total_workingset_refault_file 0 [ 473.957847][T10989] total_swap 0 [ 473.957854][T10989] total_swapcached 0 [ 473.957861][T10989] total_pgpgin 0 [ 473.957869][T10989] total_pgpgout 0 [ 473.957876][T10989] total_pgfault 22 [ 473.957884][T10989] total_pgmajfault 0 [ 473.957891][T10989] total_inactive_anon 0 [ 473.957899][T10989] total_active_anon 0 [ 473.957906][T10989] total_inactive_file 0 [ 473.957915][T10989] total_active_file 0 [ 473.957922][T10989] total_unevictable 0 [ 473.957930][T10989] anon_cost 0 [ 473.957937][T10989] file_cost 0 [ 473.957944][T10989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1682,pid=10984,uid=0 [ 474.124632][T10989] Memory cgroup out of memory: Killed process 10984 (syz.3.1682) total-vm:102384kB, anon-rss:1440kB, file-rss:23192kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 475.955338][ T9] usb 2-1: USB disconnect, device number 30 [ 476.294913][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1691'. [ 476.514510][T11012] ALSA: mixer_oss: invalid OSS volume '3?,;e' [ 476.626189][ T5724] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 476.628397][T11014] syz.1.1690 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 476.628436][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.1.1690 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 476.628462][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.628476][T11014] Call Trace: [ 476.628486][T11014] [ 476.628497][T11014] dump_stack_lvl+0xe8/0x150 [ 476.628542][T11014] dump_header+0xd3/0x4b0 [ 476.628575][T11014] oom_kill_process+0x3ab/0x9e0 [ 476.628607][T11014] out_of_memory+0x1064/0x1480 [ 476.628644][T11014] ? __pfx_out_of_memory+0x10/0x10 [ 476.628670][T11014] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 476.628695][T11014] ? _mutex_lock_killable+0x152/0x1d0 [ 476.628724][T11014] ? try_charge_memcg+0xcc3/0x16f0 [ 476.628750][T11014] try_charge_memcg+0xd82/0x16f0 [ 476.628802][T11014] ? __pfx_try_charge_memcg+0x10/0x10 [ 476.628835][T11014] ? percpu_ref_tryget+0x15/0x180 [ 476.628869][T11014] ? __obj_cgroup_charge+0x36/0x2c0 [ 476.628904][T11014] __obj_cgroup_charge+0x1fd/0x2c0 [ 476.628934][T11014] ? __obj_cgroup_charge+0x36/0x2c0 [ 476.628966][T11014] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 476.629015][T11014] ? __d_alloc+0x37/0x6f0 [ 476.629075][T11014] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 476.629101][T11014] ? __d_alloc+0x37/0x6f0 [ 476.629125][T11014] ? __d_alloc+0x37/0x6f0 [ 476.629157][T11014] __d_alloc+0x37/0x6f0 [ 476.629189][T11014] d_alloc+0x4b/0x190 [ 476.629212][T11014] ? lookup_one_qstr_excl+0xc4/0x360 [ 476.629240][T11014] lookup_one_qstr_excl+0xd8/0x360 [ 476.629273][T11014] start_dirop+0x5c/0x90 [ 476.629297][T11014] simple_start_creating+0xcc/0x110 [ 476.629325][T11014] ? __pfx_simple_start_creating+0x10/0x10 [ 476.629355][T11014] ? mntput+0x65/0xc0 [ 476.629390][T11014] debugfs_start_creating+0xca/0x1b0 [ 476.629441][T11014] __debugfs_create_file+0x6f/0x400 [ 476.629472][T11014] debugfs_create_file_full+0x3f/0x60 [ 476.629503][T11014] ref_tracker_dir_debugfs+0x19d/0x370 [ 476.629552][T11014] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 476.629609][T11014] ? alloc_netdev_mqs+0xa9/0x12c0 [ 476.629651][T11014] alloc_netdev_mqs+0x27a/0x12c0 [ 476.629680][T11014] ? __pfx_loopback_setup+0x10/0x10 [ 476.629716][T11014] loopback_net_init+0x3a/0x150 [ 476.629749][T11014] ops_init+0x35d/0x5d0 [ 476.629780][T11014] setup_net+0x118/0x350 [ 476.629813][T11014] ? __pfx_setup_net+0x10/0x10 [ 476.629844][T11014] ? __ns_common_init+0x2fc/0x4a0 [ 476.629878][T11014] copy_net_ns+0x53b/0x780 [ 476.629914][T11014] create_new_namespaces+0x3f0/0x6b0 [ 476.629947][T11014] ? security_capable+0x7e/0x2c0 [ 476.629988][T11014] unshare_nsproxy_namespaces+0x149/0x190 [ 476.630020][T11014] ksys_unshare+0x5a7/0x950 [ 476.630067][T11014] ? __pfx_ksys_unshare+0x10/0x10 [ 476.630102][T11014] ? __pfx_kcov_ioctl+0x10/0x10 [ 476.630140][T11014] __x64_sys_unshare+0x38/0x50 [ 476.630172][T11014] do_syscall_64+0x166/0x520 [ 476.630195][T11014] ? trace_irq_disable+0x3b/0x140 [ 476.630223][T11014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.630245][T11014] ? clear_bhb_loop+0x70/0xc0 [ 476.630273][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.630295][T11014] RIP: 0033:0x7f5bd920e159 [ 476.630316][T11014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.630336][T11014] RSP: 002b:00007f5bd7445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 476.630359][T11014] RAX: ffffffffffffffda RBX: 00007f5bd9496090 RCX: 00007f5bd920e159 [ 476.630376][T11014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 476.630391][T11014] RBP: 00007f5bd92a506b R08: 0000000000000000 R09: 0000000000000000 [ 476.630405][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.630418][T11014] R13: 00007f5bd9496128 R14: 00007f5bd9496090 R15: 00007fff9f442db8 [ 476.630455][T11014] [ 476.633866][T11014] memory: usage 192kB, limit 192kB, failcnt 233 [ 476.633887][T11014] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 476.633902][T11014] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 476.633916][T11014] Memory cgroup stats for /syz1/test: [ 476.683083][T11014] cache 0 [ 476.683094][T11014] rss 0 [ 476.683100][T11014] shmem 0 [ 476.683106][T11014] mapped_file 0 [ 476.683113][T11014] dirty 0 [ 476.683119][T11014] writeback 0 [ 476.683125][T11014] workingset_refault_anon 0 [ 476.683132][T11014] workingset_refault_file 0 [ 476.683138][T11014] swap 0 [ 476.683144][T11014] swapcached 0 [ 476.683151][T11014] pgpgin 0 [ 476.683157][T11014] pgpgout 0 [ 476.683163][T11014] pgfault 23 [ 476.683169][T11014] pgmajfault 0 [ 476.683175][T11014] inactive_anon 0 [ 476.683181][T11014] active_anon 0 [ 476.683188][T11014] inactive_file 0 [ 476.683194][T11014] active_file 0 [ 476.683200][T11014] unevictable 0 [ 476.683207][T11014] hierarchical_memory_limit 196608 [ 476.683214][T11014] hierarchical_memsw_limit 9223372036854771712 [ 476.683222][T11014] total_cache 0 [ 476.683229][T11014] total_rss 0 [ 476.683235][T11014] total_shmem 0 [ 476.683242][T11014] total_mapped_file 0 [ 476.683248][T11014] total_dirty 0 [ 476.683255][T11014] total_writeback 0 [ 476.683261][T11014] total_workingset_refault_anon 0 [ 476.683268][T11014] total_workingset_refault_file 0 [ 476.683275][T11014] total_swap 0 [ 476.683282][T11014] total_swapcached 0 [ 476.683288][T11014] total_pgpgin 0 [ 476.683294][T11014] total_pgpgout 0 [ 476.683301][T11014] total_pgfault 23 [ 476.683307][T11014] total_pgmajfault 0 [ 476.683314][T11014] total_inactive_anon 0 [ 476.683320][T11014] total_active_anon 0 [ 476.683327][T11014] total_inactive_file 0 [ 476.683333][T11014] total_active_file 0 [ 476.683340][T11014] total_unevictable 0 [ 476.683347][T11014] anon_cost 0 [ 476.683352][T11014] file_cost 0 [ 476.683380][T11014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.1690,pid=11010,uid=0 [ 476.686835][T11014] Memory cgroup out of memory: Killed process 11010 (syz.1.1690) total-vm:104432kB, anon-rss:1436kB, file-rss:23640kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 476.728816][T11026] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 476.839509][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 476.840496][ T5724] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 476.899598][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 477.925338][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.925368][ T5724] usb 4-1: Product: syz [ 477.925383][ T5724] usb 4-1: Manufacturer: syz [ 477.925397][ T5724] usb 4-1: SerialNumber: syz [ 478.199711][ T5724] usb 4-1: config 0 descriptor?? [ 478.206569][ T5724] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 478.206605][ T5724] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 479.029600][ T5323] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 479.154181][ T38] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 479.154203][ T38] in_atomic(): 0, irqs_disabled(): 0, non_block: 1, pid: 38, name: oom_reaper [ 479.154220][ T38] preempt_count: 0, expected: 0 [ 479.154230][ T38] RCU nest depth: 0, expected: 0 [ 479.196107][ T38] locks held by oom_reaper/38: 4, last CPU#0: [ 479.196462][ T38] #0: ffff888011beb7b8 (&mm->mmap_lock){++++}-{4:4}, at: oom_reaper+0x2b4/0xc10 [ 479.196659][ T38] #1: ffffffff8e30b240 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: zap_vma_for_reaping+0x193/0x380 [ 479.196713][ T38] #2: ffffffff8e30b298 (srcu){.+.+}-{0:0}, at: __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 479.196998][ T38] #3: ffff888062329560 (&kvm->mn_invalidate_lock){+.+.}-{3:3}, at: kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 479.197135][ T38] CPU: 0 UID: 0 PID: 38 Comm: oom_reaper Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.197158][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.197171][ T38] Call Trace: [ 479.197180][ T38] [ 479.197189][ T38] dump_stack_lvl+0xe8/0x150 [ 479.197219][ T38] __might_resched+0x31b/0x470 [ 479.197256][ T38] rt_spin_lock+0xc2/0x400 [ 479.197284][ T38] ? __lock_acquire+0x747/0x2de0 [ 479.197318][ T38] ? __pfx_rt_spin_lock+0x10/0x10 [ 479.197348][ T38] ? __lock_acquire+0x747/0x2de0 [ 479.197385][ T38] kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 479.197430][ T38] ? __pfx_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 479.197473][ T38] __mmu_notifier_invalidate_range_start+0x709/0xb80 [ 479.197510][ T38] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 479.197539][ T38] ? __pfx___mmu_notifier_invalidate_range_start+0x10/0x10 [ 479.197575][ T38] ? zap_vma_for_reaping+0x193/0x380 [ 479.197596][ T38] zap_vma_for_reaping+0x1f7/0x380 [ 479.197621][ T38] ? __pfx_zap_vma_for_reaping+0x10/0x10 [ 479.197677][ T38] oom_reaper+0x519/0xc10 [ 479.197699][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.197735][ T38] ? __pfx_oom_reaper+0x10/0x10 [ 479.197771][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 479.197796][ T38] ? __kthread_parkme+0x71/0x1f0 [ 479.197826][ T38] ? __kthread_parkme+0x199/0x1f0 [ 479.197859][ T38] kthread+0x38b/0x470 [ 479.197880][ T38] ? __pfx_oom_reaper+0x10/0x10 [ 479.197899][ T38] ? __pfx_kthread+0x10/0x10 [ 479.197921][ T38] ret_from_fork+0x514/0xb70 [ 479.197955][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 479.197975][ T38] ? __switch_to+0xc89/0x1420 [ 479.198012][ T38] ? __pfx_kthread+0x10/0x10 [ 479.198034][ T38] ret_from_fork_asm+0x1a/0x30 [ 479.198071][ T38] [ 479.460819][ T38] oom_reaper: reaped process 11010 (syz.1.1690), now anon-rss:0kB, file-rss:22460kB, shmem-rss:0kB [ 479.529251][ T5323] usb 3-1: Using ep0 maxpacket: 8 [ 479.530529][ T5323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 479.532537][ T5323] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 479.532606][ T5323] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.532629][ T5323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.532655][ T5323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.532680][ T5323] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.532721][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.649539][ T5724] em28xx 4-1:0.0: chip ID is em2765 [ 479.777508][ T5323] usb 3-1: GET_CAPABILITIES returned 0 [ 479.777568][ T5323] usbtmc 3-1:16.0: can't read capabilities [ 480.031578][ T5790] usb 3-1: USB disconnect, device number 37 [ 480.262026][ T5724] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 480.262047][ T5724] em28xx 4-1:0.0: board has no eeprom [ 480.539266][ T5724] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 480.539297][ T5724] em28xx 4-1:0.0: dvb set to bulk mode. [ 480.540307][ T5790] em28xx 4-1:0.0: Binding DVB extension [ 480.602646][ T5724] usb 4-1: USB disconnect, device number 28 [ 480.617667][ T5724] em28xx 4-1:0.0: Disconnecting em28xx [ 480.653181][ T5790] em28xx 4-1:0.0: Registering input extension [ 480.653420][ T5724] em28xx 4-1:0.0: Closing input extension [ 480.688672][ T5724] em28xx: Freeing device