last executing test programs: 13.370982944s ago: executing program 3 (id=256): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x1e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x82c, 0x2, 0x1}}, @wrmsr={0x65, 0x20, {0x40000002, 0x3f}}], 0x50}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000180)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb26d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) openat$rdma_cm(0xffffff9c, &(0x7f0000003740), 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r7, r7, r7, 0x1) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 13.086449654s ago: executing program 0 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x2000007, 0x1010, r2, 0x9e19000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) execveat$binfmt(r5, 0x0, &(0x7f00000004c0)={[0x0, &(0x7f0000000300)='/dev/\xff\am\x00', &(0x7f0000000340)='#+#&-+}!*\\-$+[\xd0\x00']}, &(0x7f0000000600)={[&(0x7f0000000500)=']$:[\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/kvm\x00']}, 0x1000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setattr(r8, &(0x7f0000000140)={0x38, 0x0, 0x15, 0x0, 0x200, 0x1, 0x80000001, 0x3, 0x9, 0x3ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r9, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000440)="c4e1eb11c40f015ce700c4e18958ef0f09decbb987030000b84a000000ba000000000f30c4c1c5f3bb8b00000066ba2100ec66baf80cb894017681ef66bafc0cb808000000eff2f4", 0x48}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11.290996054s ago: executing program 3 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x2000007, 0x1010, r2, 0x9e19000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) execveat$binfmt(r5, 0x0, &(0x7f00000004c0)={[0x0, &(0x7f0000000300)='/dev/\xff\am\x00', &(0x7f0000000340)='#+#&-+}!*\\-$+[\xd0\x00']}, &(0x7f0000000600)={[&(0x7f0000000500)=']$:[\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/kvm\x00']}, 0x1000) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setattr(r8, &(0x7f0000000140)={0x38, 0x0, 0x15, 0x0, 0x200, 0x1, 0x80000001, 0x3, 0x9, 0x3ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r9, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000440)="c4e1eb11c40f015ce700c4e18958ef0f09decbb987030000b84a000000ba000000000f30c4c1c5f3bb8b00000066ba2100ec66baf80cb894017681ef66bafc0cb808000000eff2f4", 0x48}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.523459338s ago: executing program 0 (id=262): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendmmsg$inet(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)="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", 0x441}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)="d18b4763c2e7", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001f80)="8c6399b8527f", 0x6}], 0x1}}], 0x3, 0x5) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bae000/0x400000)=nil) fadvise64(r0, 0x1, 0x8, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r4) mbind(&(0x7f0000420000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x9, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x88, 0x24, 0x9, 0x870bd27, 0x0, {0xa}, [@generic="e3094de0683099da8f956ed76bfecb1010c620674c5ac33dd4d08fce6974da9342fe52904ceec791b2566e32d7d10831bcbeab3d3d88780557f113d2483c3cef3d038bf3bc74b0228f4f2d18770f41f43ba9cdfc0f9fd5f0bd657ff4a091a700973cfc92a4cb922631d7dce1766f05efd8a7"]}, 0x88}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 9.063986023s ago: executing program 1 (id=264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r9], 0x1, r7, r8, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.978242536s ago: executing program 3 (id=265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r9], 0x1, r7, r8, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.779574656s ago: executing program 4 (id=266): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) msgsnd(r6, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r9, 0x80000001}, 0x8) 8.507883479s ago: executing program 0 (id=267): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x3, 0x0, 0x10, 0x1002, 0x0, 0x80000001, 0xffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x2, 0x400, 0x4, 0x2540229}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x10000006, 0x180107}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 7.880329621s ago: executing program 2 (id=268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x3, 0x0, 0x10, 0x1002, 0x0, 0x80000001, 0xffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x2, 0x400, 0x4, 0x2540229}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x10000006, 0x180107}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xa}}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) open(0x0, 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 7.370745527s ago: executing program 4 (id=269): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000100)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000003700)='default_permissions', &(0x7f0000003740)="8c", 0x1) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0x440}) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = dup(r5) write$binfmt_elf32(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000003000000fe03200001000700080007000000000003000000ffffff7f0200"], 0x79) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) gettid() r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x5}}}}, @TCA_STAB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1a, &(0x7f0000000200)=[{0xcdcf, 0x9, 0x2, 0x6}]}) 7.115495554s ago: executing program 1 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x2000007, 0x1010, r2, 0x9e19000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) execveat$binfmt(r5, 0x0, &(0x7f00000004c0)={[0x0, &(0x7f0000000300)='/dev/\xff\am\x00', &(0x7f0000000340)='#+#&-+}!*\\-$+[\xd0\x00']}, &(0x7f0000000600)={[&(0x7f0000000500)=']$:[\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/kvm\x00']}, 0x1000) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setattr(r8, &(0x7f0000000140)={0x38, 0x0, 0x15, 0x0, 0x200, 0x1, 0x80000001, 0x3, 0x9, 0x3ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r9, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000440)="c4e1eb11c40f015ce700c4e18958ef0f09decbb987030000b84a000000ba000000000f30c4c1c5f3bb8b00000066ba2100ec66baf80cb894017681ef66bafc0cb808000000eff2f4", 0x48}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.753959501s ago: executing program 3 (id=271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r9], 0x1, r7, r8, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.324476171s ago: executing program 4 (id=272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r8], 0x1, r6, r7, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.176676292s ago: executing program 0 (id=273): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendmmsg$inet(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)="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", 0x441}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)="d18b4763c2e7", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001f80)="8c6399b8527f", 0x6}], 0x1}}], 0x3, 0x5) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bae000/0x400000)=nil) fadvise64(r0, 0x1, 0x8, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r4) mbind(&(0x7f0000420000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x9, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) lseek(0xffffffffffffffff, 0x1000000, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x88, 0x24, 0x9, 0x870bd27, 0x0, {0xa}, [@generic="e3094de0683099da8f956ed76bfecb1010c620674c5ac33dd4d08fce6974da9342fe52904ceec791b2566e32d7d10831bcbeab3d3d88780557f113d2483c3cef3d038bf3bc74b0228f4f2d18770f41f43ba9cdfc0f9fd5f0bd657ff4a091a700973cfc92a4cb922631d7dce1766f05efd8a7"]}, 0x88}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.188295762s ago: executing program 2 (id=274): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x3, 0x0, 0x10, 0x1002, 0x0, 0x80000001, 0xffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x10000006, 0x180107}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xa}}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 4.609882841s ago: executing program 3 (id=275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x3, 0x0, 0x10, 0x1002, 0x0, 0x80000001, 0xffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x14000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x2, 0x400, 0x4, 0x2540229}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x10000006, 0x180107}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xa}}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 4.411673613s ago: executing program 1 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200004, 0x0, 0x6, 0xfffffffd, 0x8003}}}}]}, 0x4c}}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x400, 0x103) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'dummy0\x00', @broadcast}) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtclass={0x38, 0x28, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {0x8, 0xf}, {0x4, 0xfff2}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x38}}, 0x40050) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xdfe5) writev(r5, &(0x7f0000003400)=[{0x0}, {&(0x7f00000020c0)="2890d1b12fb7c5b4948a84bcd5a8b830d9080624d863f59c3b96f5ce6e82cee8bdd5a507bab894f9f234c59bc9c790ad6ab7ff835cf35c5637db6427708bfa97c858251d3e85e5c4", 0x48}, {&(0x7f0000002180)}, {0x0}, {&(0x7f00000022c0)="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", 0x768}], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x894, &(0x7f0000000000)={0xa, 0x4e02, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[], 0x0) 4.236192774s ago: executing program 4 (id=277): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendmmsg$inet(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)="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", 0x441}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)="d18b4763c2e7", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001f80)="8c6399b8527f", 0x6}], 0x1}}], 0x3, 0x5) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bae000/0x400000)=nil) fadvise64(r0, 0x1, 0x8, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r4) mbind(&(0x7f0000420000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x9, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x1000000, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x88, 0x24, 0x9, 0x870bd27, 0x0, {0xa}, [@generic="e3094de0683099da8f956ed76bfecb1010c620674c5ac33dd4d08fce6974da9342fe52904ceec791b2566e32d7d10831bcbeab3d3d88780557f113d2483c3cef3d038bf3bc74b0228f4f2d18770f41f43ba9cdfc0f9fd5f0bd657ff4a091a700973cfc92a4cb922631d7dce1766f05efd8a7"]}, 0x88}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.053257681s ago: executing program 1 (id=278): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)}], 0x1, 0x4000080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000180)) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000080)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000280)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000002c0)=0xb38900, 0x4) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) getresuid(&(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000140)) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60e2fa080020065d31e3aac2d38cee0000000000000000bbfe8000000000000000000000000000aa0000400179d18514ee212f63850823da5de48daa3d97180766b794545dd8dc94ddbb8b96239b3307b05e44dd241f6531b7140b6a3d35f5ce2ab2b5cc83c86a3f0839a61264b7649d3da9bd280d2a76244604b6699cdae4cb099136b38bb2b06e44c09cbf73d63b6233c3997522ab1ff39809bbb2aee02e29705a38e360abe988cc4489b842787f5541d1e1d0cc19a56e3f766cfe2da877e7cb4062fafec8a4d4863b64bfc807aec0d1830e133d690173c095681807143916def1a0f8b7463c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2000090780000fe0cdcd75ebedc1a426b8a17"], 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040ac052302400001020301090224000101fff0060904000d01030102"], 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000a40)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000180)={0x10, 0x0, r9}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x3, r9, 0x0, 0x2000001004000, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 3.221493366s ago: executing program 0 (id=279): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000a00)={r5}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r7 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x201e, 0x221e, 0xffffffd6, 0xc251, 0x7ffffffe, 0x1}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) 2.990292319s ago: executing program 2 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200004, 0x0, 0x6, 0xfffffffd, 0x8003}}}}]}, 0x4c}}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x400, 0x103) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'dummy0\x00', @broadcast}) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtclass={0x38, 0x28, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {0x8, 0xf}, {0x4, 0xfff2}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x38}}, 0x40050) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xdfe5) writev(r5, &(0x7f0000003400)=[{0x0}, {&(0x7f00000020c0)="2890d1b12fb7c5b4948a84bcd5a8b830d9080624d863f59c3b96f5ce6e82cee8bdd5a507bab894f9f234c59bc9c790ad6ab7ff835cf35c5637db6427708bfa97c858251d3e85e5c4", 0x48}, {&(0x7f0000002180)}, {0x0}, {&(0x7f00000022c0)="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", 0x768}], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x894, &(0x7f0000000000)={0xa, 0x4e02, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[], 0x0) 2.674216151s ago: executing program 2 (id=281): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, &(0x7f00000002c0)) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000a00)={r6}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r8 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x201e, 0x221e, 0xffffffd6, 0xc251, 0x7ffffffe, 0x1}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) 2.247916893s ago: executing program 3 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000a00)={r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r7 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x201e, 0x221e, 0xffffffd6, 0xc251, 0x7ffffffe, 0x1}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) 2.100166439s ago: executing program 1 (id=283): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) connect(r2, &(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r4 = userfaultfd(0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/240, 0xf0}], 0x1}, 0xa5f}], 0x2, 0x40000163, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) 1.911274977s ago: executing program 2 (id=284): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) msgsnd(r6, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696", 0xb9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r9, 0x80000001}, 0x8) 1.693757144s ago: executing program 4 (id=285): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)="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", 0x441}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)="d18b4763c2e7", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001f80)="8c6399b8527f", 0x6}], 0x1}}], 0x3, 0x5) 1.557236827s ago: executing program 4 (id=286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r9], 0x1, r7, r8, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.143715137s ago: executing program 1 (id=287): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/240, 0xf0}], 0x1}, 0xa5f}], 0x2, 0x40000163, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) 630.242014ms ago: executing program 2 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x2000007, 0x1010, r2, 0x9e19000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) execveat$binfmt(r5, 0x0, &(0x7f00000004c0)={[0x0, &(0x7f0000000300)='/dev/\xff\am\x00', &(0x7f0000000340)='#+#&-+}!*\\-$+[\xd0\x00']}, &(0x7f0000000600)={[&(0x7f0000000500)=']$:[\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/kvm\x00']}, 0x1000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setattr(r8, &(0x7f0000000140)={0x38, 0x0, 0x15, 0x0, 0x200, 0x1, 0x80000001, 0x3, 0x9, 0x3ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r9, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000440)="c4e1eb11c40f015ce700c4e18958ef0f09decbb987030000b84a000000ba000000000f30c4c1c5f3bb8b00000066ba2100ec66baf80cb894017681ef66bafc0cb808000000eff2f4", 0x48}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 0 (id=289): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) kernel console output (not intermixed with test programs): fig 1 has 1 interface, different from the descriptor's value: 66 [ 102.094143][ T5623] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.095638][ T5955] kAFS: unable to lookup cell 'ÿ' [ 102.178343][ T5623] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.213666][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.243916][ T5623] usb 1-1: Product: syz [ 102.260403][ T5623] usb 1-1: Manufacturer: syz [ 102.301592][ T5623] cdc_wdm 1-1:1.0: skipping garbage [ 102.323696][ T5623] cdc_wdm 1-1:1.0: skipping garbage [ 102.342810][ T5623] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 102.511157][ T5623] usb 1-1: USB disconnect, device number 6 [ 102.528082][ T808] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.688108][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 102.695926][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.720408][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.739421][ T5944] vhci_hcd: connection reset by peer [ 102.758324][ T35] vhci_hcd vhci_hcd.0: stop threads [ 102.763973][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.796821][ T35] vhci_hcd vhci_hcd.0: release socket [ 102.813302][ T35] vhci_hcd vhci_hcd.0: disconnect device [ 102.838955][ T808] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.863789][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.891028][ T808] usb 4-1: config 0 descriptor?? [ 103.659491][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.716492][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.729872][ T808] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input8 [ 103.878259][ T5644] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 103.883540][ T5966] overlayfs: missing 'lowerdir' [ 104.106705][ T808] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 104.289495][ T5623] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.483334][ T5623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 104.512995][ T5623] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 104.539658][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.602161][ T5623] usb 5-1: config 0 descriptor?? [ 104.621310][ T5973] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 104.863949][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.895284][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.980041][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.004186][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.080948][ T5973] loop4: detected capacity change from 0 to 7 [ 105.138837][ T5973] loop4: [ 105.144493][ T5973] loop4: partition table partially beyond EOD, truncated [ 105.185228][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.245459][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.341484][ T5620] usb 4-1: USB disconnect, device number 4 [ 105.518322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 105.573935][ T5623] usbhid 5-1:0.0: can't add hid device: -71 [ 105.650806][ T5623] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.673665][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 105.713835][ T5623] usb 5-1: USB disconnect, device number 6 [ 106.286778][ T5681] hid_parser_main: 5 callbacks suppressed [ 106.286795][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.324446][ T5996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.332299][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.349375][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.379569][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.389790][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.425668][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.463946][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.497047][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.515590][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.545118][ T5681] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 106.607843][ T5681] hid-generic 00A0:0006:0003.0005: hidraw0: HID v0.05 Device [syz0] on syz0 [ 106.621211][ T5710] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.789803][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.819770][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 106.828693][ T5710] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.878484][ T6008] kAFS: unable to lookup cell 'ÿ' [ 106.886417][ T5710] usb 3-1: config 1 interface 0 has no altsetting 0 [ 106.913101][ T5710] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 106.937053][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.982672][ T5710] usb 3-1: Product: syz [ 106.989043][ T5710] usb 3-1: Manufacturer: syz [ 107.003553][ T5710] usb 3-1: SerialNumber: syz [ 107.492392][ T5710] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 107.606239][ T4976] bcm5974 3-1:1.0: could not read from device [ 107.616022][ T4976] bcm5974 3-1:1.0: could not read from device [ 107.653458][ T6012] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 107.660020][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.689648][ T5710] usb 3-1: USB disconnect, device number 4 [ 107.701717][ T4976] bcm5974 3-1:1.0: could not read from device [ 107.735138][ T4976] bcm5974 3-1:1.0: could not read from device [ 107.755665][ T6015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.58'. [ 107.777610][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 108.078087][ T10] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 108.098584][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.263101][ T6017] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 108.282039][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.302422][ T9] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 108.346038][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.396328][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.465445][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.509555][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.535110][ T9] usb 1-1: Product: syz [ 108.551742][ T9] usb 1-1: Manufacturer: syz [ 108.600214][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 108.612641][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 108.618225][ T5681] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.646091][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 108.780477][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.808167][ T9] usb 1-1: USB disconnect, device number 7 [ 108.821939][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.900142][ T5681] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.976987][ T5681] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 109.028339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.033529][ T6013] vhci_hcd: connection reset by peer [ 109.057247][ T5681] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 109.106356][ T12] vhci_hcd vhci_hcd.0: stop threads [ 109.117766][ T5681] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.133483][ T12] vhci_hcd vhci_hcd.0: release socket [ 109.143901][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 109.153611][ T5681] usb 3-1: config 1 interface 1 has no altsetting 0 [ 109.218772][ T5681] usb 3-1: string descriptor 0 read error: -22 [ 109.249426][ T5681] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 109.312383][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.882809][ T5681] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 109.913004][ T5681] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 109.937839][ T5681] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 110.009098][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.033074][ T5681] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 110.097173][ T5681] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 110.155199][ T5681] usb 3-1: USB disconnect, device number 5 [ 110.189803][ T9] usb 1-1: device descriptor read/64, error -71 [ 110.498300][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.680131][ T9] usb 1-1: device descriptor read/64, error -71 [ 110.828339][ T9] usb usb1-port1: attempt power cycle [ 111.188460][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.229850][ T9] usb 1-1: device descriptor read/8, error -71 [ 111.482882][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 111.538181][ T9] usb 1-1: device descriptor read/8, error -71 [ 111.668104][ T9] usb usb1-port1: unable to enumerate USB device [ 112.847941][ T808] hid_parser_main: 5 callbacks suppressed [ 112.865164][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.892148][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 112.948149][ T5681] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.966812][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.006335][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.020377][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.033307][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.060518][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.076592][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.094079][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.126331][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.142316][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 113.157061][ T808] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 113.178173][ T5681] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 113.181551][ T5623] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 113.202434][ T6069] kAFS: unable to lookup cell 'ÿ' [ 113.213937][ T808] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz0] on syz0 [ 113.239917][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 113.246511][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.322317][ T5681] usb 3-1: config 0 descriptor?? [ 113.363294][ T6062] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.471458][ T5623] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.509995][ T5623] usb 1-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.538472][ T5623] usb 1-1: config 1 interface 0 has no altsetting 0 [ 113.571902][ T5623] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 113.598467][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.628339][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.641055][ T5623] usb 1-1: Product: syz [ 113.657427][ T5623] usb 1-1: Manufacturer: syz [ 113.670036][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.677879][ T5623] usb 1-1: SerialNumber: syz [ 113.792078][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.831877][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.929141][ T6062] loop4: detected capacity change from 0 to 7 [ 113.977312][ T6062] loop4: [ 113.981478][ T5623] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 113.993738][ T6062] loop4: partition table partially beyond EOD, truncated [ 114.023223][ T4976] bcm5974 1-1:1.0: could not read from device [ 114.047133][ T4976] bcm5974 1-1:1.0: could not read from device [ 114.057177][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.098142][ T5620] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.113439][ T4976] bcm5974 1-1:1.0: could not read from device [ 114.113896][ T5623] usb 1-1: USB disconnect, device number 12 [ 114.167474][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.212201][ T6077] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 114.218863][ T6077] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.286713][ T6077] vhci_hcd vhci_hcd.0: Device attached [ 114.314779][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 114.349408][ T6077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.73'. [ 114.354341][ T5620] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 114.378683][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.405155][ T5681] usbhid 3-1:0.0: can't add hid device: -71 [ 114.414494][ T5620] usb 4-1: config 0 descriptor?? [ 114.436882][ T5681] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.438544][ T6074] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 114.480302][ T5681] usb 3-1: USB disconnect, device number 6 [ 114.539162][ T10] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 114.598184][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.703880][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.720165][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.770663][ T808] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.792026][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.806521][ T808] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 114.814677][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.853520][ T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.861327][ T6074] loop4: detected capacity change from 0 to 7 [ 114.874599][ T6074] loop4: [ 114.877663][ T6074] loop4: partition table partially beyond EOD, truncated [ 114.898167][ T808] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.939976][ T808] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.971281][ T808] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.000830][ T808] usb 2-1: Product: syz [ 115.028324][ T808] usb 2-1: Manufacturer: syz [ 115.040773][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.048683][ T808] cdc_wdm 2-1:1.0: skipping garbage [ 115.055638][ T808] cdc_wdm 2-1:1.0: skipping garbage [ 115.063703][ T808] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 115.087196][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.191643][ T6091] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 115.215292][ T5620] usbhid 4-1:0.0: can't add hid device: -71 [ 115.235497][ T5620] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 115.258438][ T5623] usb 2-1: USB disconnect, device number 2 [ 115.290017][ T5620] usb 4-1: USB disconnect, device number 5 [ 115.466908][ T6079] vhci_hcd: connection reset by peer [ 115.474903][ T35] vhci_hcd vhci_hcd.1: stop threads [ 115.481132][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.489513][ T35] vhci_hcd vhci_hcd.1: release socket [ 115.497908][ T35] vhci_hcd vhci_hcd.1: disconnect device [ 115.643262][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.657456][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.668157][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.687056][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 115.698717][ T9] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 115.713865][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 115.729869][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 115.750697][ T9] usb 5-1: string descriptor 0 read error: -22 [ 115.762790][ T9] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 115.786018][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.029216][ T6101] kAFS: unable to lookup cell 'ÿ' [ 116.080518][ T6091] kvm: user requested TSC rate below hardware speed [ 116.288287][ T5681] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 116.326654][ T29] audit: type=1326 audit(1782740035.611:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f871ff9ce59 code=0x0 [ 116.497074][ T6110] bond1: entered promiscuous mode [ 116.528709][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 116.543640][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 116.564491][ T5681] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 116.575990][ T6115] netlink: 'syz.4.76': attribute type 10 has an invalid length. [ 116.595946][ T5681] usb 1-1: config 0 has no interface number 0 [ 116.608101][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.76'. [ 116.632898][ T5681] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.679969][ T5681] usb 1-1: config 0 interface 89 has no altsetting 0 [ 116.708663][ T5681] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 116.732408][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.762275][ T5681] usb 1-1: Product: syz [ 116.791827][ T5681] usb 1-1: Manufacturer: syz [ 116.814357][ T5681] usb 1-1: SerialNumber: syz [ 116.846322][ T5681] usb 1-1: config 0 descriptor?? [ 116.857539][ T6113] bond2: entered promiscuous mode [ 116.857775][ T5681] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 116.893140][ T5681] em28xx 1-1:0.89: Video interface 89 found: [ 116.920837][ T6115] dummy0: entered promiscuous mode [ 117.150083][ T9] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 117.264562][ T9] usb 5-1: USB disconnect, device number 7 [ 117.408837][ T29] audit: type=1326 audit(1782740036.691:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f871ff9ce59 code=0x0 [ 117.470591][ T5681] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 117.545434][ T6132] bond3: entered promiscuous mode [ 117.657509][ T6138] kAFS: unable to lookup cell 'ÿ' [ 117.746003][ T6136] bond4: entered promiscuous mode [ 118.194386][ T5681] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 118.272723][ T5681] em28xx 1-1:0.89: board has no eeprom [ 118.359763][ T5681] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 118.375115][ T5681] em28xx 1-1:0.89: analog set to bulk mode. [ 118.390768][ T808] em28xx 1-1:0.89: Registering V4L2 extension [ 118.408410][ T5681] usb 1-1: USB disconnect, device number 13 [ 118.462167][ T5681] em28xx 1-1:0.89: Disconnecting em28xx [ 118.489894][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.527630][ T6156] kAFS: unable to lookup cell 'ÿ' [ 118.551011][ T808] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 118.572310][ T808] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 118.608593][ T808] em28xx 1-1:0.89: No AC97 audio processor [ 118.657017][ T808] usb 1-1: Decoder not found [ 118.672376][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 118.701839][ T808] em28xx 1-1:0.89: failed to create media graph [ 118.723407][ T808] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 118.733994][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 118.764453][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.783468][ T808] em28xx 1-1:0.89: Registering snapshot button... [ 118.833524][ T9] usb 2-1: config 0 descriptor?? [ 118.845391][ T5623] hid_parser_main: 5 callbacks suppressed [ 118.845413][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 118.847080][ T808] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input11 [ 118.896187][ T6158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.904378][ T6150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.913456][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 118.939792][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 118.967254][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 118.988645][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 119.020819][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 119.041398][ T808] em28xx 1-1:0.89: Remote control support is not available for this card. [ 119.059612][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 119.072682][ T5681] em28xx 1-1:0.89: Closing input extension [ 119.100783][ T5681] em28xx 1-1:0.89: Deregistering snapshot button [ 119.120823][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 119.163113][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 119.184449][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.196165][ T5623] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 119.249931][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.286472][ T5623] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz0] on syz0 [ 119.371061][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.420825][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.434393][ T5681] em28xx 1-1:0.89: Freeing device [ 119.520265][ T6150] loop4: detected capacity change from 0 to 7 [ 119.558545][ T6150] loop4: [ 119.576784][ T6150] loop4: partition table partially beyond EOD, truncated [ 119.625729][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.700393][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.732124][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 119.803403][ T5681] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 119.944173][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 119.970808][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.989872][ T5681] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.028278][ T5681] usb 1-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.068093][ T5681] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.068124][ T9] usb 2-1: USB disconnect, device number 3 [ 120.117862][ T5681] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 120.150390][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.176701][ T5681] usb 1-1: Product: syz [ 120.209509][ T5681] usb 1-1: Manufacturer: syz [ 120.224620][ T5681] usb 1-1: SerialNumber: syz [ 120.488384][ T5681] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 120.536235][ T4976] bcm5974 1-1:1.0: could not read from device [ 120.593604][ T5681] usb 1-1: USB disconnect, device number 14 [ 120.614312][ T4976] bcm5974 1-1:1.0: could not read from device [ 120.816178][ T6172] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 120.822740][ T6172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.857142][ T6172] vhci_hcd vhci_hcd.0: Device attached [ 120.870579][ T6177] netlink: 60 bytes leftover after parsing attributes in process `syz.4.89'. [ 121.109535][ T5710] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 121.168613][ T5681] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.341845][ T5681] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.355876][ T5681] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 121.436047][ T5681] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.445272][ T29] audit: type=1326 audit(1782740040.721:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.0.91" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fbfb9ce59 code=0x0 [ 121.484496][ T5681] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.566416][ T5681] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.598371][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.660279][ T5681] usb 5-1: Product: syz [ 121.670798][ T5681] usb 5-1: Manufacturer: syz [ 121.686364][ T5681] cdc_wdm 5-1:1.0: skipping garbage [ 121.719166][ T5681] cdc_wdm 5-1:1.0: skipping garbage [ 121.745452][ T5681] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 121.792127][ T6189] bond1: entered promiscuous mode [ 121.892591][ T5681] usb 5-1: USB disconnect, device number 8 [ 121.984416][ T6191] bond2: entered promiscuous mode [ 122.097764][ T6173] vhci_hcd: connection reset by peer [ 122.120235][ T144] vhci_hcd vhci_hcd.4: stop threads [ 122.144659][ T144] vhci_hcd vhci_hcd.4: release socket [ 122.172509][ T144] vhci_hcd vhci_hcd.4: disconnect device [ 122.793093][ T6205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.807315][ T9] hid-generic 00A0:0006:0003.0008: hidraw0: HID v0.05 Device [syz0] on syz0 [ 123.018085][ T808] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.088425][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.210483][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 123.248630][ T808] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.280880][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.299961][ T808] usb 5-1: config 0 has no interface number 0 [ 123.307500][ T10] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.340776][ T808] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.367389][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 123.368472][ T808] usb 5-1: config 0 interface 89 has no altsetting 0 [ 123.394765][ T5681] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.414225][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 123.434620][ T808] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.454662][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.469837][ T808] usb 5-1: Product: syz [ 123.470942][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.479723][ T808] usb 5-1: Manufacturer: syz [ 123.494036][ T808] usb 5-1: SerialNumber: syz [ 123.525573][ T808] usb 5-1: config 0 descriptor?? [ 123.540069][ T10] usb 4-1: Product: syz [ 123.556141][ T808] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 123.557828][ T10] usb 4-1: Manufacturer: syz [ 123.567302][ T808] em28xx 5-1:0.89: Video interface 89 found: [ 123.583971][ T10] usb 4-1: SerialNumber: syz [ 123.598109][ T5620] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.599617][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 123.634054][ T5681] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 123.646632][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.671806][ T5681] usb 3-1: config 0 descriptor?? [ 123.677892][ T6213] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 123.778089][ T5620] usb 2-1: Using ep0 maxpacket: 32 [ 123.788998][ T5620] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 123.805074][ T5620] usb 2-1: config 0 has no interface number 0 [ 123.819410][ T5620] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.836104][ T6205] macsec1: entered promiscuous mode [ 123.846298][ T6205] macsec1: entered allmulticast mode [ 123.855730][ T5620] usb 2-1: config 0 interface 89 has no altsetting 0 [ 123.871465][ T5620] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 123.900448][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.902508][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.921284][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 123.935989][ T5620] usb 2-1: Product: syz [ 123.941410][ T5620] usb 2-1: Manufacturer: syz [ 123.950102][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.952629][ T5620] usb 2-1: SerialNumber: syz [ 123.981493][ T4976] bcm5974 4-1:1.0: could not read from device [ 123.989846][ T10] usb 4-1: USB disconnect, device number 6 [ 123.999357][ T5620] usb 2-1: config 0 descriptor?? [ 124.012001][ T4976] bcm5974 4-1:1.0: could not read from device [ 124.018943][ T5620] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 124.048071][ T5620] em28xx 2-1:0.89: Video interface 89 found: [ 124.108385][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.129937][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.142776][ T808] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 124.218845][ T6213] loop4: detected capacity change from 0 to 7 [ 124.239004][ T6213] loop4: [ 124.250083][ T6213] loop4: partition table partially beyond EOD, truncated [ 124.304698][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.333216][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.403836][ T5681] usbhid 3-1:0.0: can't add hid device: -71 [ 124.423144][ T5681] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 124.453633][ T5681] usb 3-1: USB disconnect, device number 7 [ 124.612721][ T5620] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 124.721953][ T9] hid_parser_main: 20 callbacks suppressed [ 124.721976][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.756558][ T6217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.768432][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.780316][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.807170][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.822357][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.839235][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.853260][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.863379][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.873046][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.882259][ T9] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 124.894708][ T9] hid-generic 00A0:0006:0003.0009: hidraw0: HID v0.05 Device [syz0] on syz0 [ 125.030306][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 125.039522][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.168605][ T808] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 125.178468][ T808] em28xx 5-1:0.89: board has no eeprom [ 125.209654][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.223976][ T10] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.239475][ T808] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 125.243306][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 125.252991][ T808] em28xx 5-1:0.89: analog set to bulk mode. [ 125.258186][ T5620] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 125.259569][ T42] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.271893][ T5620] em28xx 2-1:0.89: board has no eeprom [ 125.285737][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 125.297473][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.301521][ T808] usb 5-1: USB disconnect, device number 9 [ 125.325350][ T5681] em28xx 5-1:0.89: Registering V4L2 extension [ 125.338331][ T5620] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 125.357061][ T10] usb 4-1: Product: syz [ 125.361682][ T5620] em28xx 2-1:0.89: analog set to bulk mode. [ 125.376856][ T10] usb 4-1: Manufacturer: syz [ 125.392282][ T808] em28xx 5-1:0.89: Disconnecting em28xx [ 125.393564][ T10] usb 4-1: SerialNumber: syz [ 125.413927][ T5620] usb 2-1: USB disconnect, device number 4 [ 125.447298][ T5681] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 125.461523][ T5620] em28xx 2-1:0.89: Disconnecting em28xx [ 125.472494][ T5681] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 125.494001][ T5681] em28xx 5-1:0.89: No AC97 audio processor [ 125.500378][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 125.511616][ T42] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 125.522840][ T5681] usb 5-1: Decoder not found [ 125.529019][ T42] usb 1-1: config 0 has no interface number 0 [ 125.535371][ T5681] em28xx 5-1:0.89: failed to create media graph [ 125.544664][ T42] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.555219][ T5681] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 125.562289][ T42] usb 1-1: config 0 interface 89 has no altsetting 0 [ 125.575010][ T5681] em28xx 5-1:0.89: Registering snapshot button... [ 125.588288][ T42] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 125.600831][ T5681] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input14 [ 125.612168][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.627760][ T42] usb 1-1: Product: syz [ 125.634608][ T5681] em28xx 5-1:0.89: Remote control support is not available for this card. [ 125.643802][ T42] usb 1-1: Manufacturer: syz [ 125.651942][ T42] usb 1-1: SerialNumber: syz [ 125.657766][ T5623] em28xx 2-1:0.89: Registering V4L2 extension [ 125.668417][ T42] usb 1-1: config 0 descriptor?? [ 125.700455][ T42] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 125.718871][ T42] em28xx 1-1:0.89: Video interface 89 found: [ 125.830398][ T5623] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 125.840435][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 125.854806][ T5623] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 125.879433][ T4976] bcm5974 4-1:1.0: could not read from device [ 125.896916][ T5623] em28xx 2-1:0.89: No AC97 audio processor [ 125.924841][ T5623] usb 2-1: Decoder not found [ 125.943301][ T4976] bcm5974 4-1:1.0: could not read from device [ 125.943920][ T10] usb 4-1: USB disconnect, device number 7 [ 125.959522][ T5623] em28xx 2-1:0.89: failed to create media graph [ 125.999118][ T4976] bcm5974 4-1:1.0: could not read from device [ 126.020418][ T5623] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 126.031095][ T4976] bcm5974 4-1:1.0: could not read from device [ 126.095359][ T5623] em28xx 2-1:0.89: Registering snapshot button... [ 126.134545][ T5623] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input16 [ 126.201935][ T5623] em28xx 2-1:0.89: Remote control support is not available for this card. [ 126.237853][ T5620] em28xx 2-1:0.89: Closing input extension [ 126.268364][ T5710] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 126.277653][ T5620] em28xx 2-1:0.89: Deregistering snapshot button [ 126.313902][ T42] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 126.326382][ T808] em28xx 5-1:0.89: Closing input extension [ 126.350818][ T808] em28xx 5-1:0.89: Deregistering snapshot button [ 126.415618][ T808] em28xx 5-1:0.89: Freeing device [ 126.415614][ T5620] em28xx 2-1:0.89: Freeing device [ 126.956341][ T42] em28xx 1-1:0.89: board has no eeprom [ 127.245164][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 127.478686][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.489644][ T6255] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 127.496178][ T6255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.528179][ T42] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 127.540932][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.105'. [ 127.561798][ T42] em28xx 1-1:0.89: analog set to bulk mode. [ 127.569031][ T6255] vhci_hcd vhci_hcd.0: Device attached [ 127.578582][ T5710] em28xx 1-1:0.89: Registering V4L2 extension [ 127.601865][ T42] usb 1-1: USB disconnect, device number 15 [ 127.621796][ T6253] overlayfs: missing 'lowerdir' [ 127.635838][ T42] em28xx 1-1:0.89: Disconnecting em28xx [ 127.676482][ T5710] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 127.692303][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 127.722516][ T5710] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 127.722925][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 127.761237][ T5710] em28xx 1-1:0.89: No AC97 audio processor [ 127.772786][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.783696][ T5710] usb 1-1: Decoder not found [ 127.789498][ T5710] em28xx 1-1:0.89: failed to create media graph [ 127.799553][ T5710] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 127.825271][ T10] usb 3-1: config 0 descriptor?? [ 127.830699][ T5710] em28xx 1-1:0.89: Registering snapshot button... [ 127.831387][ T5620] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 127.846768][ T6248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.875235][ T5710] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input17 [ 127.898167][ T5719] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.937874][ T5710] em28xx 1-1:0.89: Remote control support is not available for this card. [ 127.947339][ T42] em28xx 1-1:0.89: Closing input extension [ 127.954475][ T42] em28xx 1-1:0.89: Deregistering snapshot button [ 128.013611][ T42] em28xx 1-1:0.89: Freeing device [ 128.050613][ T5719] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.073885][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.089511][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.115766][ T5719] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 128.145604][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.223789][ T5719] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.259303][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.290758][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.292114][ T5719] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.328522][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.383414][ T5719] usb 2-1: Product: syz [ 128.392459][ T6248] loop4: detected capacity change from 0 to 7 [ 128.402848][ T5719] usb 2-1: Manufacturer: syz [ 128.412672][ T6248] loop4: [ 128.426004][ T6248] loop4: partition table partially beyond EOD, truncated [ 128.461067][ T5719] cdc_wdm 2-1:1.0: skipping garbage [ 128.470929][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.484688][ T5719] cdc_wdm 2-1:1.0: skipping garbage [ 128.511325][ T5719] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 128.521898][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.665481][ T5719] usb 2-1: USB disconnect, device number 5 [ 128.754817][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 128.772096][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.807728][ T10] usb 3-1: USB disconnect, device number 8 [ 128.876442][ T6256] vhci_hcd: connection reset by peer [ 128.891674][ T35] vhci_hcd vhci_hcd.1: stop threads [ 128.909953][ T35] vhci_hcd vhci_hcd.1: release socket [ 128.928992][ T35] vhci_hcd vhci_hcd.1: disconnect device [ 129.396498][ T6278] kAFS: unable to lookup cell 'ÿ' [ 129.531523][ T6280] overlayfs: missing 'lowerdir' [ 129.981600][ T29] audit: type=1326 audit(1782740049.271:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.2.112" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce8679ce59 code=0x0 [ 130.024802][ T6294] kAFS: unable to lookup cell 'ÿ' [ 130.205115][ T6295] bond3: entered promiscuous mode [ 130.403439][ T6300] bond4: entered promiscuous mode [ 131.399873][ T29] audit: type=1326 audit(1782740050.691:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fbfb9ce59 code=0x0 [ 131.695416][ T6317] bond3: entered promiscuous mode [ 131.951663][ T6320] bond4: entered promiscuous mode [ 132.590926][ T5644] hid_parser_main: 5 callbacks suppressed [ 132.590943][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.632371][ T6337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.646936][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.671198][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.709536][ T6335] overlayfs: missing 'lowerdir' [ 132.714735][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.738224][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.760087][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.799808][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.827057][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.858549][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.878061][ T5644] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 132.953499][ T5644] hid-generic 00A0:0006:0003.000A: hidraw0: HID v0.05 Device [syz0] on syz0 [ 132.958116][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.993691][ T5620] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 133.076267][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.086588][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.214550][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.271214][ T10] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.360808][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 133.384118][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 133.416247][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.436729][ T10] usb 4-1: Product: syz [ 133.456748][ T10] usb 4-1: Manufacturer: syz [ 133.463709][ T6347] kAFS: unable to lookup cell 'ÿ' [ 133.475618][ T10] usb 4-1: SerialNumber: syz [ 133.489231][ T6342] netlink: 116 bytes leftover after parsing attributes in process `syz.4.115'. [ 133.553053][ T29] audit: type=1800 audit(1782740052.831:10): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.115" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 133.829049][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input18 [ 133.860567][ T4976] bcm5974 4-1:1.0: could not read from device [ 133.921706][ T4976] bcm5974 4-1:1.0: could not read from device [ 133.932754][ T10] usb 4-1: USB disconnect, device number 8 [ 134.712711][ T6351] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 134.719262][ T6351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.811269][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz.3.120'. [ 134.830371][ T6351] vhci_hcd vhci_hcd.0: Device attached [ 134.947088][ T29] audit: type=1800 audit(1782740054.231:11): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.121" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 135.088163][ T10] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 135.208133][ T5710] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.370777][ T5710] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.389344][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.403883][ T5710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.415922][ T5710] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.434092][ T5710] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.450295][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.475271][ T5710] usb 4-1: Product: syz [ 135.487943][ T5710] usb 4-1: Manufacturer: syz [ 135.514790][ T5710] cdc_wdm 4-1:1.0: skipping garbage [ 135.538079][ T5710] cdc_wdm 4-1:1.0: skipping garbage [ 135.555796][ T5710] cdc_wdm 4-1:1.0: skipping garbage [ 135.567205][ T5710] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 135.715878][ T5710] usb 4-1: USB disconnect, device number 9 [ 135.740684][ T6369] netlink: 'syz.2.124': attribute type 1 has an invalid length. [ 135.845353][ T6369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.925142][ T6352] vhci_hcd: connection reset by peer [ 135.952937][ T144] vhci_hcd vhci_hcd.3: stop threads [ 135.982503][ T144] vhci_hcd vhci_hcd.3: release socket [ 136.005570][ T144] vhci_hcd vhci_hcd.3: disconnect device [ 136.071889][ T5620] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.132945][ T29] audit: type=1326 audit(1782740055.421:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.1.126" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f871ff9ce59 code=0x0 [ 136.240338][ T5620] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.274485][ T6384] bond5: entered promiscuous mode [ 136.295195][ T5620] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.312715][ T6388] kAFS: unable to lookup cell 'ÿ' [ 136.351399][ T5620] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.399749][ T5620] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 136.447305][ T5620] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 136.468274][ T5620] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 136.486937][ T6387] bond6: entered promiscuous mode [ 136.505210][ T5620] usb 3-1: config 1 interface 1 has no altsetting 0 [ 136.569821][ T5620] usb 3-1: string descriptor 0 read error: -22 [ 136.602008][ T5620] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 136.646247][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.174544][ T6369] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 137.189996][ T80] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.252300][ T5620] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 137.262171][ T5620] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 137.290936][ T5620] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 137.320162][ T80] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.349225][ T5710] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.371427][ T5620] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 137.392438][ T5620] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 137.415851][ T5620] usb 3-1: USB disconnect, device number 9 [ 137.539111][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 137.547783][ T5710] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 137.562110][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.616391][ T5710] usb 2-1: config 0 has no interface number 0 [ 137.640184][ T5710] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.689249][ T6404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.697596][ T5620] hid_parser_main: 5 callbacks suppressed [ 137.697614][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.728067][ T5710] usb 2-1: config 0 interface 89 has no altsetting 0 [ 137.738320][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.754367][ T5710] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 137.777786][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.786312][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.804119][ T5710] usb 2-1: Product: syz [ 137.822634][ T5710] usb 2-1: Manufacturer: syz [ 137.833071][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.843245][ T5710] usb 2-1: SerialNumber: syz [ 137.867710][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.907124][ T5710] usb 2-1: config 0 descriptor?? [ 137.918848][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.935733][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.946501][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 137.958378][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.980174][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 138.011951][ T5620] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 138.053194][ T6408] kAFS: unable to lookup cell 'ÿ' [ 138.060568][ T5620] hid-generic 00A0:0006:0003.000B: hidraw0: HID v0.05 Device [syz0] on syz0 [ 138.140433][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.169756][ T42] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.236298][ T42] usb 4-1: config 1 interface 0 has no altsetting 0 [ 138.277381][ T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 138.309252][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.340428][ T42] usb 4-1: Product: syz [ 138.361918][ T42] usb 4-1: Manufacturer: syz [ 138.391528][ T42] usb 4-1: SerialNumber: syz [ 138.809827][ T42] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19 [ 138.842919][ T4976] bcm5974 4-1:1.0: could not read from device [ 138.853692][ T4976] bcm5974 4-1:1.0: could not read from device [ 138.863845][ T4976] bcm5974 4-1:1.0: could not read from device [ 138.872651][ T4976] bcm5974 4-1:1.0: could not read from device [ 138.896737][ T42] usb 4-1: USB disconnect, device number 10 [ 139.653994][ T29] audit: type=1326 audit(1782740058.941:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb77579ce59 code=0x0 [ 139.795852][ T6435] bond3: entered promiscuous mode [ 139.838724][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.893897][ T6443] bond4: entered promiscuous mode [ 140.010923][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 140.034227][ T42] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 140.075136][ T42] usb 4-1: config 0 has no interface number 0 [ 140.081829][ T5644] usb 2-1: USB disconnect, device number 6 [ 140.131594][ T42] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.185069][ T42] usb 4-1: config 0 interface 89 has no altsetting 0 [ 140.224179][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 140.245281][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.245301][ T6452] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 140.259821][ T6452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.268661][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 140.291501][ T42] usb 4-1: Product: syz [ 140.300915][ T42] usb 4-1: Manufacturer: syz [ 140.311797][ T42] usb 4-1: SerialNumber: syz [ 140.328464][ T6452] vhci_hcd vhci_hcd.0: Device attached [ 140.341703][ T42] usb 4-1: config 0 descriptor?? [ 140.360901][ T42] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 140.373504][ T6455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.138'. [ 140.393421][ T42] em28xx 4-1:0.89: Video interface 89 found: [ 140.568111][ T5695] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 140.679638][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.849997][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.870505][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.899632][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.923206][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.960916][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.969412][ T42] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 140.996991][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.013558][ T9] usb 2-1: Product: syz [ 141.024864][ T9] usb 2-1: Manufacturer: syz [ 141.056747][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 141.078233][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 141.095404][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 141.117699][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 141.253524][ T9] usb 2-1: USB disconnect, device number 7 [ 141.463336][ T6453] vhci_hcd: connection reset by peer [ 141.486481][ T3345] vhci_hcd vhci_hcd.1: stop threads [ 141.510514][ T3345] vhci_hcd vhci_hcd.1: release socket [ 141.535288][ T3345] vhci_hcd vhci_hcd.1: disconnect device [ 141.608145][ T42] em28xx 4-1:0.89: board has no eeprom [ 141.904123][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 142.188216][ T42] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 142.203865][ T6469] overlayfs: missing 'lowerdir' [ 142.234386][ T42] em28xx 4-1:0.89: analog set to bulk mode. [ 142.250677][ T5644] em28xx 4-1:0.89: Registering V4L2 extension [ 142.314677][ T42] usb 4-1: USB disconnect, device number 11 [ 142.399285][ T42] em28xx 4-1:0.89: Disconnecting em28xx [ 142.436341][ T5644] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 142.467830][ T5644] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 142.494966][ T5644] em28xx 4-1:0.89: No AC97 audio processor [ 142.582722][ T5644] usb 4-1: Decoder not found [ 142.594681][ T5644] em28xx 4-1:0.89: failed to create media graph [ 142.613709][ T5644] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 142.638525][ T5644] em28xx 4-1:0.89: Registering snapshot button... [ 142.666263][ T5644] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input20 [ 142.701792][ T6479] overlayfs: missing 'lowerdir' [ 142.733390][ T5644] em28xx 4-1:0.89: Remote control support is not available for this card. [ 142.770641][ T42] em28xx 4-1:0.89: Closing input extension [ 142.815453][ T42] em28xx 4-1:0.89: Deregistering snapshot button [ 142.935911][ T42] em28xx 4-1:0.89: Freeing device [ 143.310529][ T42] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.479894][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 143.522224][ T42] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 143.561033][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.615971][ T42] usb 4-1: config 0 descriptor?? [ 143.647755][ T6485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.918462][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.939167][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.960438][ T5681] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 143.964115][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.979292][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.047826][ T6485] loop4: detected capacity change from 0 to 7 [ 144.070955][ T6485] loop4: [ 144.088498][ T6485] loop4: partition table partially beyond EOD, truncated [ 144.158160][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 144.173994][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.204045][ T5681] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 144.225256][ T5681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.249450][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.267204][ T5681] usb 1-1: config 0 has no interface number 0 [ 144.287678][ T5681] usb 1-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.331027][ T4991] loop4: [ 144.339984][ T4991] loop4: partition table partially beyond EOD, truncated [ 144.347269][ T5681] usb 1-1: config 0 interface 89 has no altsetting 0 [ 144.376119][ T5681] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 144.402676][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 144.408733][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.423896][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 144.435197][ T5681] usb 1-1: Product: syz [ 144.454953][ T5681] usb 1-1: Manufacturer: syz [ 144.469805][ T42] usb 4-1: USB disconnect, device number 12 [ 144.477433][ T5681] usb 1-1: SerialNumber: syz [ 144.531041][ T5681] usb 1-1: config 0 descriptor?? [ 144.898297][ T5681] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.057355][ T6504] overlayfs: missing 'lowerdir' [ 145.075929][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 145.107364][ T5681] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 145.138089][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.164066][ T5681] usb 2-1: config 0 descriptor?? [ 145.185307][ T6498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.412618][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.439116][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.487493][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.510524][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.632843][ T6498] loop4: detected capacity change from 0 to 7 [ 145.656168][ T6498] loop4: [ 145.693756][ T6498] loop4: partition table partially beyond EOD, truncated [ 145.738778][ T5695] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 145.759702][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.813663][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.924829][ T5681] usbhid 2-1:0.0: can't add hid device: -71 [ 145.953668][ T5681] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.005247][ T5681] usb 2-1: USB disconnect, device number 8 [ 146.614261][ T6523] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 146.620857][ T6523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.652004][ T6523] vhci_hcd vhci_hcd.0: Device attached [ 146.690028][ T6523] netlink: 60 bytes leftover after parsing attributes in process `syz.2.154'. [ 146.780741][ T5719] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.890191][ T5695] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 146.958512][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.985763][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 147.010726][ T5719] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 147.029371][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.082474][ T5719] usb 2-1: config 0 descriptor?? [ 147.102770][ T6521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.162675][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.182963][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.208622][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.227584][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.266142][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.306135][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.334420][ T10] usb 3-1: Product: syz [ 147.349398][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.372134][ T10] usb 3-1: Manufacturer: syz [ 147.396843][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.404000][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 147.431214][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 147.444524][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.455735][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 147.467709][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 147.491106][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.554596][ T6521] loop4: detected capacity change from 0 to 7 [ 147.573945][ T6521] loop4: [ 147.583674][ T6521] loop4: partition table partially beyond EOD, truncated [ 147.612787][ T10] usb 3-1: USB disconnect, device number 10 [ 147.633159][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.670323][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.751483][ T5719] usbhid 2-1:0.0: can't add hid device: -71 [ 147.796825][ T5644] usb 1-1: USB disconnect, device number 16 [ 147.797733][ T5719] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.837411][ T6524] vhci_hcd: connection reset by peer [ 147.844861][ T5719] usb 2-1: USB disconnect, device number 9 [ 147.857007][ T144] vhci_hcd vhci_hcd.2: stop threads [ 147.876801][ T144] vhci_hcd vhci_hcd.2: release socket [ 147.930719][ T144] vhci_hcd vhci_hcd.2: disconnect device [ 147.950013][ T6536] overlayfs: missing 'lowerdir' [ 148.127083][ T6542] kAFS: unable to lookup cell 'ÿ' [ 148.289161][ T6543] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6544] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6543] [ 148.320172][ T29] audit: type=1800 audit(1782740067.601:14): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 148.453712][ T6545] netlink: 116 bytes leftover after parsing attributes in process `syz.4.155'. [ 148.560920][ T5681] hid_parser_main: 5 callbacks suppressed [ 148.560940][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.578611][ T6547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.632182][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.665800][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.691613][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.750884][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.769952][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.800336][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.854208][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.866364][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.878729][ T5644] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.886716][ T5681] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 148.924117][ T5681] hid-generic 00A0:0006:0003.000C: hidraw0: HID v0.05 Device [syz0] on syz0 [ 149.049907][ T5644] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.119015][ T5644] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.138660][ T5644] usb 2-1: config 1 interface 0 has no altsetting 0 [ 149.210146][ T5644] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 149.238548][ T5644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.266966][ T5644] usb 2-1: Product: syz [ 149.282435][ T5644] usb 2-1: Manufacturer: syz [ 149.300447][ T5644] usb 2-1: SerialNumber: syz [ 149.563433][ T6547] macsec1: entered promiscuous mode [ 149.580657][ T6547] macsec1: entered allmulticast mode [ 149.637034][ T5644] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 149.686698][ T4976] bcm5974 2-1:1.0: could not read from device [ 149.728880][ T4976] bcm5974 2-1:1.0: could not read from device [ 149.760019][ T4976] bcm5974 2-1:1.0: could not read from device [ 149.766364][ T5644] usb 2-1: USB disconnect, device number 10 [ 149.813554][ T4976] bcm5974 2-1:1.0: could not read from device [ 150.103601][ T6556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.111956][ T5644] hid-generic 00A0:0006:0003.000D: hidraw0: HID v0.05 Device [syz0] on syz0 [ 150.286597][ T6552] ptrace attach of ""[6553] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6552] [ 150.381716][ T29] audit: type=1800 audit(1782740069.661:15): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.159" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 150.407553][ T5710] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.587299][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.607767][ T5710] usb 5-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.628343][ T5710] usb 5-1: config 1 interface 0 has no altsetting 0 [ 150.676099][ T5710] usb 5-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 150.700107][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.718295][ T5710] usb 5-1: Product: syz [ 150.732761][ T5710] usb 5-1: Manufacturer: syz [ 150.745974][ T5710] usb 5-1: SerialNumber: syz [ 150.798133][ T5644] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 150.948079][ T5644] usb 1-1: Using ep0 maxpacket: 32 [ 150.964757][ T5644] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 151.006884][ T5710] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input22 [ 151.016270][ T5644] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.050765][ T4976] bcm5974 5-1:1.0: could not read from device [ 151.066765][ T5644] usb 1-1: config 0 has no interface number 0 [ 151.087258][ T5644] usb 1-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.118159][ T4976] bcm5974 5-1:1.0: could not read from device [ 151.135139][ T5644] usb 1-1: config 0 interface 89 has no altsetting 0 [ 151.154069][ T4976] bcm5974 5-1:1.0: could not read from device [ 151.175457][ T5710] usb 5-1: USB disconnect, device number 10 [ 151.194113][ T5644] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 151.213251][ T4976] bcm5974 5-1:1.0: could not read from device [ 151.228212][ T5644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.265094][ T5644] usb 1-1: Product: syz [ 151.284972][ T5644] usb 1-1: Manufacturer: syz [ 151.313941][ T5644] usb 1-1: SerialNumber: syz [ 151.364597][ T5644] usb 1-1: config 0 descriptor?? [ 151.576355][ T29] audit: type=1800 audit(1782740070.861:16): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 151.835434][ T6577] kAFS: unable to lookup cell 'ÿ' [ 152.027674][ T5695] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 154.427992][ T6617] kAFS: unable to lookup cell 'ÿ' [ 154.644664][ T5710] usb 1-1: USB disconnect, device number 17 [ 157.082538][ T6641] overlayfs: missing 'lowerdir' [ 157.210914][ T6645] overlayfs: missing 'lowerdir' [ 158.944769][ T6667] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 159.008179][ T6657] ptrace attach of ""[6661] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6657] [ 159.082673][ T6667] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.153933][ T29] audit: type=1800 audit(1782740078.431:17): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.180" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 159.268198][ T5644] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.278900][ T5710] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.452767][ T5644] usb 3-1: Using ep0 maxpacket: 32 [ 159.468864][ T5644] usb 3-1: config 0 has no interfaces? [ 159.476422][ T5644] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 159.487830][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.498490][ T5644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.514047][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.533667][ T5644] usb 3-1: Product: syz [ 159.545871][ T5644] usb 3-1: Manufacturer: syz [ 159.554784][ T5710] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.569262][ T5644] usb 3-1: SerialNumber: syz [ 159.586836][ T5710] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 159.599445][ T5644] usb 3-1: config 0 descriptor?? [ 159.636945][ T5710] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 159.677522][ T5710] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 159.711348][ T5710] usb 2-1: config 1 interface 1 has no altsetting 0 [ 159.737428][ T5710] usb 2-1: string descriptor 0 read error: -22 [ 159.757692][ T5710] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 159.790576][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.143988][ T6667] kvm: user requested TSC rate below hardware speed [ 160.273951][ T6677] kAFS: unable to lookup cell 'ÿ' [ 160.526763][ T29] audit: type=1326 audit(1782740079.811:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.4.186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb77579ce59 code=0x0 [ 160.692800][ T6684] bond5: entered promiscuous mode [ 160.755194][ T6667] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 160.778813][ T80] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 160.907730][ T6688] bond6: entered promiscuous mode [ 160.961043][ T5710] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 160.981070][ T35] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 161.137118][ T5710] usb 2-1: USB disconnect, device number 11 [ 161.981093][ T5695] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.146618][ T6716] overlayfs: missing 'lowerdir' [ 162.159432][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 162.177356][ T5695] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 162.210027][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.256590][ T5695] usb 2-1: config 0 descriptor?? [ 162.270225][ T6710] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.443609][ T6721] kAFS: unable to lookup cell 'ÿ' [ 162.515956][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.535472][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.592952][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.611559][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.671112][ T6710] loop4: detected capacity change from 0 to 7 [ 162.692368][ T6710] loop4: [ 162.705885][ T6710] loop4: partition table partially beyond EOD, truncated [ 162.751982][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.795342][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.876248][ T5695] usbhid 2-1:0.0: can't add hid device: -71 [ 162.893776][ T5695] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 162.931200][ T5695] usb 2-1: USB disconnect, device number 12 [ 162.953340][ T5710] usb 3-1: USB disconnect, device number 11 [ 163.083223][ T42] hid_parser_main: 20 callbacks suppressed [ 163.083240][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.105168][ T6724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.128472][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.160290][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.177522][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.212449][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.251566][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.278075][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.292052][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.311126][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.334173][ T42] hid-generic 00A0:0006:0003.000E: unknown main item tag 0x0 [ 163.359283][ T42] hid-generic 00A0:0006:0003.000E: hidraw0: HID v0.05 Device [syz0] on syz0 [ 163.492504][ T6727] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 163.504386][ T5710] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 163.659949][ T6727] 8021q: adding VLAN 0 to HW filter on device bond8 [ 163.699250][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.710154][ T5710] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.725149][ T5710] usb 3-1: config 1 interface 0 has no altsetting 0 [ 163.736322][ T5710] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 163.779343][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.808152][ T5710] usb 3-1: Product: syz [ 163.819052][ T5710] usb 3-1: Manufacturer: syz [ 163.835316][ T5710] usb 3-1: SerialNumber: syz [ 163.858110][ T5695] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.031608][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.056916][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.085039][ T5695] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 164.121669][ T5710] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input23 [ 164.155062][ T4976] bcm5974 3-1:1.0: could not read from device [ 164.162143][ T5695] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 164.206137][ T4976] bcm5974 3-1:1.0: could not read from device [ 164.216239][ T5695] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 164.221046][ T5710] usb 3-1: USB disconnect, device number 12 [ 164.266121][ T4976] bcm5974 3-1:1.0: could not read from device [ 164.291052][ T4976] bcm5974 3-1:1.0: could not read from device [ 164.297891][ T5695] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 164.348662][ T5695] usb 2-1: config 1 interface 1 has no altsetting 0 [ 164.348986][ T6011] udevd[6011]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 164.371320][ T6736] kAFS: unable to lookup cell 'ÿ' [ 164.410243][ T5695] usb 2-1: string descriptor 0 read error: -22 [ 164.425555][ T5695] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 164.447316][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.746703][ T6727] kvm: user requested TSC rate below hardware speed [ 165.227899][ T6727] bond7: (slave dummy0): Removing an active aggregator [ 165.295968][ T6727] bond7: (slave dummy0): Releasing backup interface [ 165.398600][ T6727] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 165.458412][ T80] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.616313][ T5695] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 165.638576][ T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.788988][ T5695] usb 2-1: USB disconnect, device number 13 [ 166.015148][ T6755] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6757] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6755] [ 166.128112][ T29] audit: type=1800 audit(1782740085.411:19): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.197" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 166.242019][ T6755] netlink: 116 bytes leftover after parsing attributes in process `syz.2.197'. [ 166.545156][ T6767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 166.551720][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.583344][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 166.606735][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.4.201'. [ 166.818079][ T10] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 166.901142][ T5695] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.090246][ T5695] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.117657][ T5695] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 167.181807][ T5695] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.258187][ T5695] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.306085][ T5695] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.377859][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.407653][ T5695] usb 5-1: Product: syz [ 167.431257][ T5695] usb 5-1: Manufacturer: syz [ 167.480607][ T5695] cdc_wdm 5-1:1.0: skipping garbage [ 167.539176][ T5695] cdc_wdm 5-1:1.0: skipping garbage [ 167.549445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.567128][ T5695] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 167.685104][ T5695] usb 5-1: USB disconnect, device number 11 [ 167.894480][ T6768] vhci_hcd: connection reset by peer [ 167.908248][ T80] vhci_hcd vhci_hcd.4: stop threads [ 167.920082][ T80] vhci_hcd vhci_hcd.4: release socket [ 167.933612][ T80] vhci_hcd vhci_hcd.4: disconnect device [ 167.958104][ T5719] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 168.129668][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 168.147069][ T5719] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 168.183383][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.224910][ T5719] usb 3-1: config 0 descriptor?? [ 168.237089][ T6781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 168.360759][ T6788] ptrace attach of ""[6789] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6788] [ 168.585266][ T29] audit: type=1800 audit(1782740087.871:20): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 168.673521][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.714474][ T6788] netlink: 116 bytes leftover after parsing attributes in process `syz.0.202'. [ 168.779142][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.877705][ T6781] loop4: detected capacity change from 0 to 7 [ 168.931568][ T6781] loop4: [ 168.947725][ T6781] loop4: partition table partially beyond EOD, truncated [ 168.962562][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.012170][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.309014][ T5719] usbhid 3-1:0.0: can't add hid device: -71 [ 169.335587][ T5719] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 169.369921][ T5719] usb 3-1: USB disconnect, device number 13 [ 169.648125][ T5695] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.812010][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 169.828101][ T5695] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 169.841544][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.849205][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.871492][ T5695] usb 4-1: config 0 descriptor?? [ 169.877189][ T6799] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.015158][ T6809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.020115][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 170.022860][ T5681] hid_parser_main: 5 callbacks suppressed [ 170.022881][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.055867][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 170.067088][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.091304][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.112584][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.122759][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.143157][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.151254][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.166011][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.166046][ T9] usb 5-1: config 0 descriptor?? [ 170.199677][ T6802] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 170.214337][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.248640][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.275124][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.300392][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.310245][ T5719] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 170.338400][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.345078][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.371786][ T5681] hid-generic 00A0:0006:0003.000F: unknown main item tag 0x0 [ 170.394094][ T5681] hid-generic 00A0:0006:0003.000F: hidraw0: HID v0.05 Device [syz0] on syz0 [ 170.426940][ T6799] loop4: detected capacity change from 0 to 7 [ 170.449325][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.463501][ T6799] loop4: [ 170.470655][ T6799] loop4: partition table partially beyond EOD, truncated [ 170.478425][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.500589][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.531783][ T5719] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.534208][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.578624][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.612001][ T5719] usb 3-1: config 1 interface 0 has no altsetting 0 [ 170.639658][ T5719] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 170.654893][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.686478][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.709732][ T5719] usb 3-1: Product: syz [ 170.716903][ T5719] usb 3-1: Manufacturer: syz [ 170.717409][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.750854][ T5719] usb 3-1: SerialNumber: syz [ 170.835496][ T5695] usbhid 4-1:0.0: can't add hid device: -71 [ 170.856231][ T5695] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 170.889304][ T5695] usb 4-1: USB disconnect, device number 13 [ 170.934676][ T6802] loop4: detected capacity change from 0 to 7 [ 170.970981][ T6802] loop4: [ 170.977041][ T6802] loop4: partition table partially beyond EOD, truncated [ 171.016149][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.060061][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.189188][ T5719] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input24 [ 171.207544][ T4976] bcm5974 3-1:1.0: could not read from device [ 171.232225][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 171.256395][ T4976] bcm5974 3-1:1.0: could not read from device [ 171.266144][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 171.281486][ T4976] bcm5974 3-1:1.0: could not read from device [ 171.294515][ T5719] usb 3-1: USB disconnect, device number 14 [ 171.309232][ T9] usb 5-1: USB disconnect, device number 12 [ 171.323376][ T4976] bcm5974 3-1:1.0: could not read from device [ 171.938130][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 172.043798][ T6826] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 172.050363][ T6826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.108563][ T6826] vhci_hcd vhci_hcd.0: Device attached [ 172.125128][ T6831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.216'. [ 172.314078][ T5710] hid-generic 00A0:0006:0003.0010: hidraw0: HID v0.05 Device [syz0] on syz0 [ 172.330432][ T6837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.348189][ T42] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 172.405946][ T5681] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 172.525910][ T6830] ptrace attach of ""[6832] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6830] [ 172.574044][ T29] audit: type=1800 audit(1782740091.851:21): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.214" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 172.621675][ T5681] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.652772][ T5681] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 172.672022][ T5681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.681985][ T5644] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 172.726768][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.753503][ T6830] netlink: 116 bytes leftover after parsing attributes in process `syz.3.214'. [ 172.771137][ T5681] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.788026][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.807164][ T5681] usb 3-1: Product: syz [ 172.815719][ T5681] usb 3-1: Manufacturer: syz [ 172.840075][ T5644] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.854691][ T5681] cdc_wdm 3-1:1.0: skipping garbage [ 172.865243][ T5681] cdc_wdm 3-1:1.0: skipping garbage [ 172.882817][ T5644] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.899197][ T5681] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 172.935339][ T5644] usb 2-1: config 1 interface 0 has no altsetting 0 [ 172.968481][ T5644] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 172.985549][ T5644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.004636][ T5644] usb 2-1: Product: syz [ 173.011849][ T5644] usb 2-1: Manufacturer: syz [ 173.020450][ T5644] usb 2-1: SerialNumber: syz [ 173.088633][ T10] usb 3-1: USB disconnect, device number 15 [ 173.286411][ T6828] vhci_hcd: connection reset by peer [ 173.298487][ T80] vhci_hcd vhci_hcd.2: stop threads [ 173.303846][ T80] vhci_hcd vhci_hcd.2: release socket [ 173.315211][ T80] vhci_hcd vhci_hcd.2: disconnect device [ 173.445706][ T5644] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input25 [ 173.492382][ T4976] bcm5974 2-1:1.0: could not read from device [ 173.514775][ T4976] bcm5974 2-1:1.0: could not read from device [ 173.543415][ T4976] bcm5974 2-1:1.0: could not read from device [ 173.577078][ T5644] usb 2-1: USB disconnect, device number 14 [ 173.585491][ T4976] bcm5974 2-1:1.0: could not read from device [ 173.920116][ T6846] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 174.088459][ T6846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.228401][ T5719] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 174.268788][ T6855] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 174.351501][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.392591][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.401627][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.413835][ T5719] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.424258][ T5719] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 174.435408][ T5719] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 174.460684][ T5719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 174.491121][ T5719] usb 3-1: config 1 interface 1 has no altsetting 0 [ 174.506278][ T5719] usb 3-1: string descriptor 0 read error: -22 [ 174.513194][ T5719] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 174.543001][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.588098][ T5644] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 174.760433][ T5644] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.792510][ T5644] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.848483][ T6846] kvm: user requested TSC rate below hardware speed [ 174.865301][ T5644] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.908757][ T5644] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 174.961140][ T5644] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 175.048132][ T5644] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 175.083048][ T5644] usb 4-1: config 1 interface 1 has no altsetting 0 [ 175.121078][ T5644] usb 4-1: string descriptor 0 read error: -22 [ 175.137017][ T5644] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 175.179500][ T5644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.319077][ T6846] bond5: (slave dummy0): Removing an active aggregator [ 175.328803][ T6846] bond5: (slave dummy0): Releasing backup interface [ 175.378989][ T6846] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 175.429053][ T35] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.566551][ T5719] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 175.598161][ T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.711718][ T5719] usb 3-1: USB disconnect, device number 16 [ 175.818428][ T6859] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 175.899287][ T5644] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 175.906915][ T5644] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 175.918695][ T80] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.950551][ T5644] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 176.066189][ T5644] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 176.090649][ T80] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.207233][ T5644] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 176.299270][ T5644] usb 4-1: USB disconnect, device number 14 [ 176.688678][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 177.050954][ T6890] overlayfs: missing 'lowerdir' [ 177.134887][ T6880] ptrace attach of ""[6895] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6880] [ 177.460167][ T42] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 178.778305][ T42] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 178.951650][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 179.038098][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 179.098647][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.135849][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.220352][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 179.250131][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.279144][ T6910] loop4: detected capacity change from 0 to 7 [ 179.298931][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.299794][ T6910] loop4: [ 179.353253][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.354131][ T6910] loop4: partition table partially beyond EOD, truncated [ 179.413432][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.452911][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.521350][ T9] usb 4-1: config 0 descriptor?? [ 179.622980][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.664833][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.821291][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.892261][ T42] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 179.921051][ T42] usb 1-1: can't read configurations, error -71 [ 180.313871][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.328617][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.551202][ T808] hid_parser_main: 20 callbacks suppressed [ 180.551223][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.585099][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.616718][ T6932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.641639][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.666546][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.697174][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.739852][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.777375][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.804499][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.832103][ T808] hid-generic 00A0:0006:0003.0011: unknown main item tag 0x0 [ 180.844895][ T5623] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 180.855231][ T5719] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.874511][ T6937] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 180.886042][ T5623] hid-generic 00A0:0006:0003.0012: hidraw0: HID v0.05 Device [syz0] on syz0 [ 180.903333][ T808] hid-generic 00A0:0006:0003.0011: hidraw1: HID v0.05 Device [syz0] on syz0 [ 180.999878][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 181.028739][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 181.048399][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.086242][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.097969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.137669][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.167512][ T5719] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 181.184073][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 181.196610][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.213104][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.218063][ T42] usb 1-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.272980][ T42] usb 1-1: config 1 interface 0 has no altsetting 0 [ 181.285317][ T5719] usb 2-1: config 0 descriptor?? [ 181.306882][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 181.337455][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.370012][ T42] usb 1-1: Product: syz [ 181.398037][ T42] usb 1-1: Manufacturer: syz [ 181.402386][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.404579][ T42] usb 1-1: SerialNumber: syz [ 181.413827][ T10] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.433046][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 181.443599][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 181.455703][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.479097][ T10] usb 3-1: Product: syz [ 181.486634][ T10] usb 3-1: Manufacturer: syz [ 181.492099][ T10] usb 3-1: SerialNumber: syz [ 181.685419][ T6932] macsec1: entered promiscuous mode [ 181.692181][ T6932] macsec1: entered allmulticast mode [ 181.712045][ T42] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input26 [ 181.726776][ T4976] bcm5974 1-1:1.0: could not read from device [ 181.746083][ T4976] bcm5974 1-1:1.0: could not read from device [ 181.770982][ T42] usb 1-1: USB disconnect, device number 19 [ 181.785356][ T4976] bcm5974 1-1:1.0: could not read from device [ 181.833187][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 181.846316][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.885666][ T9] usb 4-1: USB disconnect, device number 15 [ 181.900257][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input27 [ 181.931507][ T4976] bcm5974 3-1:1.0: could not read from device [ 181.946819][ T4976] bcm5974 3-1:1.0: could not read from device [ 181.962248][ T10] usb 3-1: USB disconnect, device number 17 [ 181.968470][ T4976] bcm5974 3-1:1.0: could not read from device [ 181.981770][ T4976] bcm5974 3-1:1.0: could not read from device [ 182.061222][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.082127][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.214077][ T6948] kAFS: unable to lookup cell 'ÿ' [ 183.609016][ T5719] usbhid 2-1:0.0: can't add hid device: -71 [ 183.630385][ T5719] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.753909][ T5719] usb 2-1: USB disconnect, device number 15 [ 184.211139][ T5719] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.389598][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 184.409470][ T5719] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 184.435172][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.477760][ T5719] usb 2-1: config 0 descriptor?? [ 184.488619][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 184.500278][ T6964] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.525528][ T6974] overlayfs: missing 'lowerdir' [ 184.658188][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 184.674062][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 184.695177][ T10] usb 1-1: config 0 has no interface number 0 [ 184.711954][ T10] usb 1-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.745828][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 184.761866][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 184.771604][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.787258][ T10] usb 1-1: Product: syz [ 184.791735][ T10] usb 1-1: Manufacturer: syz [ 184.797680][ T10] usb 1-1: SerialNumber: syz [ 184.820097][ T10] usb 1-1: config 0 descriptor?? [ 184.837140][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.838141][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 184.887560][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.948565][ T6964] loop4: detected capacity change from 0 to 7 [ 184.979477][ T6964] loop4: [ 184.987208][ T6964] loop4: partition table partially beyond EOD, truncated [ 185.015726][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.032583][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 185.055445][ T9] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 185.055697][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.105218][ T9] usb 3-1: config 0 has no interface number 0 [ 185.126518][ T9] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.151985][ T9] usb 3-1: config 0 interface 89 has no altsetting 0 [ 185.180561][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 185.204857][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.234560][ T9] usb 3-1: Product: syz [ 185.247731][ T9] usb 3-1: Manufacturer: syz [ 185.266676][ T9] usb 3-1: SerialNumber: syz [ 185.303396][ T9] usb 3-1: config 0 descriptor?? [ 185.341247][ T9] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 185.373171][ T9] em28xx 3-1:0.89: Video interface 89 found: [ 185.410418][ T5719] usbhid 2-1:0.0: can't add hid device: -71 [ 185.429330][ T5719] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.464335][ T5719] usb 2-1: USB disconnect, device number 16 [ 185.943536][ T9] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 186.338063][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 186.518811][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 186.634865][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.671511][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.683239][ T6993] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6995] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6993] [ 186.697980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 186.763479][ T29] audit: type=1800 audit(1782740106.051:22): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.250" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 186.797915][ T6989] loop4: detected capacity change from 0 to 7 [ 186.825057][ T6989] loop4: [ 186.832074][ T6989] loop4: partition table partially beyond EOD, truncated [ 186.854036][ T6996] netlink: 116 bytes leftover after parsing attributes in process `syz.3.250'. [ 186.863541][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 186.889784][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.915969][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.056824][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.067324][ T9] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 187.093145][ T9] em28xx 3-1:0.89: board has no eeprom [ 187.113545][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 187.124636][ T10] usb 2-1: can't read configurations, error -71 [ 187.188066][ T9] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 187.195357][ T9] em28xx 3-1:0.89: analog set to bulk mode. [ 187.204422][ T5623] em28xx 3-1:0.89: Registering V4L2 extension [ 187.245087][ T9] usb 3-1: USB disconnect, device number 18 [ 187.296688][ T9] em28xx 3-1:0.89: Disconnecting em28xx [ 187.353624][ T5623] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 187.368440][ T5623] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 187.388045][ T5623] em28xx 3-1:0.89: No AC97 audio processor [ 187.402537][ T5623] usb 3-1: Decoder not found [ 187.411940][ T5623] em28xx 3-1:0.89: failed to create media graph [ 187.428072][ T5623] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 187.450015][ T5623] em28xx 3-1:0.89: Registering snapshot button... [ 187.462514][ T5623] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input28 [ 187.489400][ T5623] em28xx 3-1:0.89: Remote control support is not available for this card. [ 187.500158][ T9] em28xx 3-1:0.89: Closing input extension [ 187.508347][ T9] em28xx 3-1:0.89: Deregistering snapshot button [ 187.542995][ T9] em28xx 3-1:0.89: Freeing device [ 187.635590][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 187.818305][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 187.825153][ T42] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 187.839357][ T42] usb 5-1: config 0 has no interface number 0 [ 187.846804][ T42] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.857600][ T42] usb 5-1: config 0 interface 89 has no altsetting 0 [ 187.869514][ T42] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 187.880348][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.885771][ T7014] kAFS: unable to lookup cell 'ÿ' [ 187.896061][ T42] usb 5-1: Product: syz [ 187.899335][ T9] hid_parser_main: 20 callbacks suppressed [ 187.899356][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 187.901594][ T42] usb 5-1: Manufacturer: syz [ 187.908675][ T7013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.913989][ T42] usb 5-1: SerialNumber: syz [ 187.947538][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 187.974575][ T42] usb 5-1: config 0 descriptor?? [ 187.982053][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 187.997117][ T5644] usb 1-1: USB disconnect, device number 20 [ 188.006707][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 188.016375][ T42] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 188.028543][ T808] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.057072][ T42] em28xx 5-1:0.89: Video interface 89 found: [ 188.073667][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 188.098469][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 188.121457][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 188.132565][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 188.147568][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 188.157681][ T9] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 188.176334][ T9] hid-generic 00A0:0006:0003.0013: hidraw0: HID v0.05 Device [syz0] on syz0 [ 188.208191][ T5623] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 188.210397][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 188.262920][ T808] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 188.291791][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.350571][ T808] usb 4-1: config 0 descriptor?? [ 188.377822][ T7011] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 188.381011][ T5623] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.419517][ T5623] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.458276][ T5623] usb 3-1: config 1 interface 0 has no altsetting 0 [ 188.489344][ T5623] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 188.505923][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.529985][ T5623] usb 3-1: Product: syz [ 188.538178][ T5623] usb 3-1: Manufacturer: syz [ 188.547555][ T5623] usb 3-1: SerialNumber: syz [ 188.617927][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.636155][ T42] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 188.647933][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.793066][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.822285][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.887437][ T7011] loop4: detected capacity change from 0 to 7 [ 188.909947][ T7011] loop4: [ 188.916903][ T7011] loop4: partition table partially beyond EOD, truncated [ 188.967798][ T5623] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input29 [ 189.002267][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.031382][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.044018][ T4976] bcm5974 3-1:1.0: could not read from device [ 189.074522][ T42] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 189.120398][ T42] em28xx 5-1:0.89: board has no eeprom [ 189.133343][ T4976] bcm5974 3-1:1.0: could not read from device [ 189.154965][ T5623] usb 3-1: USB disconnect, device number 19 [ 189.175579][ T4976] bcm5974 3-1:1.0: could not read from device [ 189.195292][ T808] usbhid 4-1:0.0: can't add hid device: -71 [ 189.242546][ T808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 189.328505][ T808] usb 4-1: USB disconnect, device number 16 [ 189.453137][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 189.628174][ T42] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 189.646567][ T42] em28xx 5-1:0.89: analog set to bulk mode. [ 189.653852][ T808] em28xx 5-1:0.89: Registering V4L2 extension [ 189.696114][ T42] usb 5-1: USB disconnect, device number 13 [ 189.735505][ T42] em28xx 5-1:0.89: Disconnecting em28xx [ 189.813806][ T808] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 189.845483][ T808] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 189.882980][ T808] em28xx 5-1:0.89: No AC97 audio processor [ 189.928218][ T808] usb 5-1: Decoder not found [ 189.945118][ T808] em28xx 5-1:0.89: failed to create media graph [ 189.980798][ T808] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 190.006669][ T808] em28xx 5-1:0.89: Registering snapshot button... [ 190.034786][ T808] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input30 [ 190.072841][ T808] em28xx 5-1:0.89: Remote control support is not available for this card. [ 190.107696][ T42] em28xx 5-1:0.89: Closing input extension [ 190.125633][ T42] em28xx 5-1:0.89: Deregistering snapshot button [ 190.205134][ T7037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.236394][ T5623] hid-generic 00A0:0006:0003.0014: hidraw0: HID v0.05 Device [syz0] on syz0 [ 190.286878][ T42] em28xx 5-1:0.89: Freeing device [ 190.519743][ T5623] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 190.613252][ T7045] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 190.628365][ T9] hid-generic 00A0:0006:0003.0015: hidraw1: HID v0.05 Device [syz0] on syz0 [ 190.739881][ T5623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.776168][ T5623] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.824551][ T5623] usb 2-1: config 1 interface 0 has no altsetting 0 [ 190.853351][ T5623] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 190.879390][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.912226][ T5623] usb 2-1: Product: syz [ 190.923469][ T5623] usb 2-1: Manufacturer: syz [ 190.935934][ T5623] usb 2-1: SerialNumber: syz [ 190.947423][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 191.134044][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.173594][ T42] usb 5-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.195265][ T42] usb 5-1: config 1 interface 0 has no altsetting 0 [ 191.214270][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 191.252307][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.281861][ T42] usb 5-1: Product: syz [ 191.292372][ T42] usb 5-1: Manufacturer: syz [ 191.301376][ T42] usb 5-1: SerialNumber: syz [ 191.330554][ T5623] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input31 [ 191.398428][ T4976] bcm5974 2-1:1.0: could not read from device [ 191.424534][ T4976] bcm5974 2-1:1.0: could not read from device [ 191.440924][ T5623] usb 2-1: USB disconnect, device number 19 [ 191.457730][ T4976] bcm5974 2-1:1.0: could not read from device [ 191.522780][ T7054] overlayfs: missing 'lowerdir' [ 191.717522][ T42] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input32 [ 191.752841][ T7055] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[7056] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[7055] [ 191.782861][ T42] usb 5-1: USB disconnect, device number 14 [ 192.005243][ T29] audit: type=1800 audit(1782740111.291:23): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 193.133245][ T7077] overlayfs: missing 'lowerdir' [ 194.512118][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.522028][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.283119][ T7111] overlayfs: missing 'lowerdir' [ 196.426213][ T7105] ptrace attach of ""[7108] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[7105] [ 196.658923][ T7109] netlink: 116 bytes leftover after parsing attributes in process `syz.0.273'. [ 196.919042][ T7115] overlayfs: missing 'lowerdir' [ 197.196928][ T5710] hid_parser_main: 35 callbacks suppressed [ 197.196945][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.253498][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.279994][ T7123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.289962][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.313988][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.334837][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.371894][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.398110][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.431836][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.467051][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.508586][ T5710] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 197.547001][ T5710] hid-generic 00A0:0006:0003.0016: hidraw0: HID v0.05 Device [syz0] on syz0 [ 197.588204][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 197.847374][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.870582][ T10] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.940797][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 197.980596][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 197.999898][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.018035][ T10] usb 2-1: Product: syz [ 198.024231][ T10] usb 2-1: Manufacturer: syz [ 198.043418][ T10] usb 2-1: SerialNumber: syz [ 198.318055][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 198.436092][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input33 [ 198.477018][ T4976] bcm5974 2-1:1.0: could not read from device [ 198.485957][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 198.514571][ T4976] bcm5974 2-1:1.0: could not read from device [ 198.523672][ T7127] netlink: 116 bytes leftover after parsing attributes in process `syz.4.277'. [ 198.535233][ T10] usb 2-1: USB disconnect, device number 20 [ 198.536368][ T42] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 198.566429][ T4976] bcm5974 2-1:1.0: could not read from device [ 198.581053][ T42] usb 1-1: config 0 has no interface number 0 [ 198.603598][ T42] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.616236][ T4976] bcm5974 2-1:1.0: could not read from device [ 198.634024][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 198.655660][ T42] usb 1-1: config 0 interface 89 has no altsetting 0 [ 198.681738][ T42] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 198.748515][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.772450][ T42] usb 1-1: Product: syz [ 198.782376][ T42] usb 1-1: Manufacturer: syz [ 198.795844][ T42] usb 1-1: SerialNumber: syz [ 198.811703][ T42] usb 1-1: config 0 descriptor?? [ 198.830676][ T42] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 198.855554][ T42] em28xx 1-1:0.89: Video interface 89 found: [ 199.165971][ T7141] kAFS: unable to lookup cell 'ÿ' [ 199.182782][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 199.358184][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 199.379919][ T10] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 199.404093][ T10] usb 4-1: config 0 has no interface number 0 [ 199.418383][ T10] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.433336][ T10] usb 4-1: config 0 interface 89 has no altsetting 0 [ 199.442991][ T42] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 199.444043][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 199.484488][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.506329][ T10] usb 4-1: Product: syz [ 199.521228][ T10] usb 4-1: Manufacturer: syz [ 199.529016][ T10] usb 4-1: SerialNumber: syz [ 199.557657][ T10] usb 4-1: config 0 descriptor?? [ 199.576540][ T10] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 199.601016][ T10] em28xx 4-1:0.89: Video interface 89 found: [ 200.091357][ T42] em28xx 1-1:0.89: board has no eeprom [ 200.182135][ T10] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 200.222686][ T7158] kAFS: unable to lookup cell 'ÿ' [ 200.356598][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 200.498555][ T42] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 200.520586][ T42] em28xx 1-1:0.89: analog set to bulk mode. [ 200.537791][ T5644] em28xx 1-1:0.89: Registering V4L2 extension [ 200.563517][ T42] usb 1-1: USB disconnect, device number 21 [ 200.666443][ T42] em28xx 1-1:0.89: Disconnecting em28xx [ 200.711275][ T5644] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 200.748264][ T5644] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 200.774830][ T5644] em28xx 1-1:0.89: No AC97 audio processor [ 200.808852][ T5644] usb 1-1: Decoder not found [ 200.823478][ T5644] em28xx 1-1:0.89: failed to create media graph [ 200.843199][ T10] em28xx 4-1:0.89: board has no eeprom [ 200.850115][ T5644] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 200.869604][ T5644] em28xx 1-1:0.89: Registering snapshot button... [ 200.887080][ T5644] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input34 [ 200.925179][ T5644] em28xx 1-1:0.89: Remote control support is not available for this card. [ 200.964117][ T42] em28xx 1-1:0.89: Closing input extension [ 200.975539][ T42] em28xx 1-1:0.89: Deregistering snapshot button [ 201.148618][ T10] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 201.160877][ T42] em28xx 1-1:0.89: Freeing device [ 201.195379][ T10] em28xx 4-1:0.89: analog set to bulk mode. [ 201.216532][ T9] em28xx 4-1:0.89: Registering V4L2 extension [ 201.293088][ T10] usb 4-1: USB disconnect, device number 17 [ 201.342036][ T10] em28xx 4-1:0.89: Disconnecting em28xx [ 201.399483][ T9] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 201.416930][ T9] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 201.426329][ T9] em28xx 4-1:0.89: No AC97 audio processor [ 201.445713][ T9] usb 4-1: Decoder not found [ 201.472326][ T9] em28xx 4-1:0.89: failed to create media graph [ 201.508067][ T9] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 201.532577][ T7170] ================================================================== [ 201.539822][ T9] em28xx 4-1:0.89: Registering snapshot button... [ 201.540706][ T7170] BUG: KASAN: slab-use-after-free in v4l2_open+0x397/0x3a0 [ 201.554334][ T7170] Read of size 4 at addr ffff8880333fc860 by task v4l_id/7170 [ 201.561810][ T7170] [ 201.564167][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 201.564190][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.564209][ T7170] Call Trace: [ 201.564216][ T7170] [ 201.564225][ T7170] dump_stack_lvl+0xe8/0x150 [ 201.564253][ T7170] print_address_description+0x55/0x1e0 [ 201.564275][ T7170] ? v4l2_open+0x397/0x3a0 [ 201.564301][ T7170] print_report+0x58/0x70 [ 201.564318][ T7170] kasan_report+0x117/0x150 [ 201.564340][ T7170] ? v4l2_open+0x397/0x3a0 [ 201.564368][ T7170] v4l2_open+0x397/0x3a0 [ 201.564394][ T7170] chrdev_open+0x4d9/0x600 [ 201.564419][ T7170] ? __pfx_chrdev_open+0x10/0x10 [ 201.564442][ T7170] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 201.564468][ T7170] ? __pfx_chrdev_open+0x10/0x10 [ 201.564495][ T7170] do_dentry_open+0x816/0x1380 [ 201.564526][ T7170] vfs_open+0x3b/0x340 [ 201.564549][ T7170] ? path_openat+0x2e2d/0x3830 [ 201.564570][ T7170] path_openat+0x2e44/0x3830 [ 201.564593][ T7170] ? kasan_save_track+0x3e/0x80 [ 201.564609][ T7170] ? do_sys_openat2+0xcc/0x200 [ 201.564626][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.564653][ T7170] do_file_open+0x23e/0x4a0 [ 201.564675][ T7170] ? __pfx_do_file_open+0x10/0x10 [ 201.564704][ T7170] ? _raw_spin_unlock+0x28/0x50 [ 201.564722][ T7170] ? alloc_fd+0x651/0x6c0 [ 201.564751][ T7170] do_sys_openat2+0x115/0x200 [ 201.564770][ T7170] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.564786][ T7170] ? exc_page_fault+0x6a/0xc0 [ 201.564807][ T7170] ? do_user_addr_fault+0xc4a/0x1340 [ 201.564828][ T7170] __x64_sys_openat+0x138/0x170 [ 201.564845][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.564863][ T7170] do_syscall_64+0x174/0x580 [ 201.564884][ T7170] ? trace_irq_disable+0x3b/0x140 [ 201.564912][ T7170] ? clear_bhb_loop+0x40/0x90 [ 201.564932][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.564951][ T7170] RIP: 0033:0x7f97ac6a7407 [ 201.564977][ T7170] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 201.564993][ T7170] RSP: 002b:00007ffc285ec280 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 201.565014][ T7170] RAX: ffffffffffffffda RBX: 00007f97acd4f880 RCX: 00007f97ac6a7407 [ 201.565027][ T7170] RDX: 0000000000000000 RSI: 00007ffc285edf1d RDI: ffffffffffffff9c [ 201.565040][ T7170] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 201.565051][ T7170] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 201.565062][ T7170] R13: 00007ffc285ec4d0 R14: 00007f97ace54000 R15: 000055b3cabc54d8 [ 201.565083][ T7170] [ 201.565089][ T7170] [ 201.823227][ T7170] Allocated by task 9: [ 201.827283][ T7170] kasan_save_track+0x3e/0x80 [ 201.831955][ T7170] __kasan_kmalloc+0x93/0xb0 [ 201.836538][ T7170] __kmalloc_cache_noprof+0x32d/0x660 [ 201.841902][ T7170] em28xx_v4l2_init+0x103/0x3300 [ 201.846829][ T7170] em28xx_init_extension+0x120/0x1d0 [ 201.852104][ T7170] process_scheduled_works+0xa8e/0x14e0 [ 201.857643][ T7170] worker_thread+0xa47/0xfb0 [ 201.862232][ T7170] kthread+0x388/0x470 [ 201.866289][ T7170] ret_from_fork+0x514/0xb70 [ 201.870867][ T7170] ret_from_fork_asm+0x1a/0x30 [ 201.875651][ T7170] [ 201.877963][ T7170] Freed by task 9: [ 201.881668][ T7170] kasan_save_track+0x3e/0x80 [ 201.886331][ T7170] kasan_save_free_info+0x40/0x50 [ 201.891344][ T7170] __kasan_slab_free+0x5c/0x80 [ 201.896091][ T7170] kfree+0x1c5/0x640 [ 201.899975][ T7170] em28xx_v4l2_init+0x1919/0x3300 [ 201.904994][ T7170] em28xx_init_extension+0x120/0x1d0 [ 201.910286][ T7170] process_scheduled_works+0xa8e/0x14e0 [ 201.915836][ T7170] worker_thread+0xa47/0xfb0 [ 201.920439][ T7170] kthread+0x388/0x470 [ 201.924510][ T7170] ret_from_fork+0x514/0xb70 [ 201.929089][ T7170] ret_from_fork_asm+0x1a/0x30 [ 201.933857][ T7170] [ 201.936170][ T7170] The buggy address belongs to the object at ffff8880333fc000 [ 201.936170][ T7170] which belongs to the cache kmalloc-8k of size 8192 [ 201.950205][ T7170] The buggy address is located 2144 bytes inside of [ 201.950205][ T7170] freed 8192-byte region [ffff8880333fc000, ffff8880333fe000) [ 201.964158][ T7170] [ 201.966479][ T7170] The buggy address belongs to the physical page: [ 201.972895][ T7170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x333f8 [ 201.981641][ T7170] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 201.990126][ T7170] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 201.997671][ T7170] page_type: f5(slab) [ 202.001639][ T7170] raw: 00fff00000000040 ffff88813fe27280 dead000000000100 dead000000000122 [ 202.010229][ T7170] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 202.018798][ T7170] head: 00fff00000000040 ffff88813fe27280 dead000000000100 dead000000000122 [ 202.027461][ T7170] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 202.036116][ T7170] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 202.044782][ T7170] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 202.053436][ T7170] page dumped because: kasan: bad access detected [ 202.059932][ T7170] page_owner tracks the page as allocated [ 202.065628][ T7170] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7004, tgid 7003 (syz.4.253), ts 189380292042, free_ts 180184438772 [ 202.086287][ T7170] post_alloc_hook+0x1f9/0x250 [ 202.091062][ T7170] get_page_from_freelist+0x21fa/0x2270 [ 202.096596][ T7170] __alloc_frozen_pages_noprof+0x18d/0x380 [ 202.102392][ T7170] allocate_slab+0x79/0x5e0 [ 202.106886][ T7170] refill_objects+0x2d5/0x350 [ 202.111558][ T7170] __pcs_replace_empty_main+0x2bf/0x6b0 [ 202.117093][ T7170] __kmalloc_noprof+0x485/0x720 [ 202.121933][ T7170] batadv_hash_new+0xb9/0x290 [ 202.126604][ T7170] batadv_bla_init+0x4f4/0x7c0 [ 202.131358][ T7170] batadv_mesh_init+0x3ce/0x640 [ 202.136312][ T7170] batadv_meshif_init_late+0x979/0xdd0 [ 202.141758][ T7170] register_netdevice+0x6a1/0x1eb0 [ 202.146869][ T7170] rtnl_newlink_create+0x310/0xb00 [ 202.151975][ T7170] rtnl_newlink+0x167f/0x1bd0 [ 202.156636][ T7170] rtnetlink_rcv_msg+0x802/0xc00 [ 202.161560][ T7170] netlink_rcv_skb+0x226/0x4a0 [ 202.166403][ T7170] page last free pid 6925 tgid 6925 stack trace: [ 202.172724][ T7170] __free_frozen_pages+0xc1e/0xd10 [ 202.177836][ T7170] __slab_free+0x274/0x2c0 [ 202.182235][ T7170] qlist_free_all+0x99/0x100 [ 202.186990][ T7170] kasan_quarantine_reduce+0x148/0x160 [ 202.192444][ T7170] __kasan_slab_alloc+0x22/0x80 [ 202.197284][ T7170] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 202.202732][ T7170] ptlock_alloc+0x20/0x70 [ 202.207054][ T7170] pte_alloc_one+0x7a/0x370 [ 202.211546][ T7170] do_pte_missing+0x13c8/0x34b0 [ 202.216386][ T7170] handle_mm_fault+0x1b36/0x3080 [ 202.221314][ T7170] do_user_addr_fault+0xa4d/0x1340 [ 202.226472][ T7170] exc_page_fault+0x6a/0xc0 [ 202.230974][ T7170] asm_exc_page_fault+0x26/0x30 [ 202.235812][ T7170] [ 202.238125][ T7170] Memory state around the buggy address: [ 202.243765][ T7170] ffff8880333fc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.251838][ T7170] ffff8880333fc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.259895][ T7170] >ffff8880333fc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.267938][ T7170] ^ [ 202.275124][ T7170] ffff8880333fc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.283176][ T7170] ffff8880333fc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.291225][ T7170] ================================================================== [ 202.302517][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input35 [ 202.321661][ T9] em28xx 4-1:0.89: Remote control support is not available for this card. [ 202.365033][ T5635] Bluetooth: hci0: command 0x0406 tx timeout [ 202.380095][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 202.382812][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 202.387620][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 202.392697][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 202.398855][ T7170] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.398870][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 202.398887][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.398896][ T7170] Call Trace: [ 202.398905][ T7170] [ 202.398913][ T7170] vpanic+0x56c/0xa60 [ 202.398938][ T7170] ? __pfx_vpanic+0x10/0x10 [ 202.398957][ T7170] panic+0xc5/0xd0 [ 202.398972][ T7170] ? __pfx_panic+0x10/0x10 [ 202.398987][ T7170] ? preempt_schedule_thunk+0x16/0x40 [ 202.399009][ T7170] ? preempt_schedule_thunk+0x16/0x40 [ 202.399028][ T7170] ? v4l2_open+0x397/0x3a0 [ 202.399048][ T7170] check_panic_on_warn+0x89/0xb0 [ 202.399067][ T7170] ? v4l2_open+0x397/0x3a0 [ 202.399085][ T7170] end_report+0x73/0x170 [ 202.399101][ T7170] ? v4l2_open+0x397/0x3a0 [ 202.399118][ T7170] kasan_report+0x128/0x150 [ 202.399133][ T7170] ? v4l2_open+0x397/0x3a0 [ 202.399154][ T7170] v4l2_open+0x397/0x3a0 [ 202.399173][ T7170] chrdev_open+0x4d9/0x600 [ 202.399192][ T7170] ? __pfx_chrdev_open+0x10/0x10 [ 202.399209][ T7170] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 202.399229][ T7170] ? __pfx_chrdev_open+0x10/0x10 [ 202.399246][ T7170] do_dentry_open+0x816/0x1380 [ 202.399270][ T7170] vfs_open+0x3b/0x340 [ 202.399288][ T7170] ? path_openat+0x2e2d/0x3830 [ 202.399305][ T7170] path_openat+0x2e44/0x3830 [ 202.399322][ T7170] ? kasan_save_track+0x3e/0x80 [ 202.399345][ T7170] ? do_sys_openat2+0xcc/0x200 [ 202.399358][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.399378][ T7170] do_file_open+0x23e/0x4a0 [ 202.399396][ T7170] ? __pfx_do_file_open+0x10/0x10 [ 202.399418][ T7170] ? _raw_spin_unlock+0x28/0x50 [ 202.399432][ T7170] ? alloc_fd+0x651/0x6c0 [ 202.399456][ T7170] do_sys_openat2+0x115/0x200 [ 202.399470][ T7170] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.399484][ T7170] ? exc_page_fault+0x6a/0xc0 [ 202.399500][ T7170] ? do_user_addr_fault+0xc4a/0x1340 [ 202.399518][ T7170] __x64_sys_openat+0x138/0x170 [ 202.399533][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.399548][ T7170] do_syscall_64+0x174/0x580 [ 202.399566][ T7170] ? trace_irq_disable+0x3b/0x140 [ 202.399588][ T7170] ? clear_bhb_loop+0x40/0x90 [ 202.399605][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.399620][ T7170] RIP: 0033:0x7f97ac6a7407 [ 202.399635][ T7170] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 202.399648][ T7170] RSP: 002b:00007ffc285ec280 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 202.399665][ T7170] RAX: ffffffffffffffda RBX: 00007f97acd4f880 RCX: 00007f97ac6a7407 [ 202.399676][ T7170] RDX: 0000000000000000 RSI: 00007ffc285edf1d RDI: ffffffffffffff9c [ 202.399686][ T7170] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 202.399695][ T7170] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 202.399704][ T7170] R13: 00007ffc285ec4d0 R14: 00007f97ace54000 R15: 000055b3cabc54d8 [ 202.399720][ T7170] [ 202.399993][ T7170] Kernel Offset: disabled