last executing test programs: 8m11.118942451s ago: executing program 2 (id=26): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x1, 0x265, &(0x7f00000006c0)="$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") 8m10.821570122s ago: executing program 2 (id=27): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 8m9.940803604s ago: executing program 2 (id=34): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fsync(0xffffffffffffffff) 8m8.251578928s ago: executing program 2 (id=36): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x890b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x40) 8m3.63878297s ago: executing program 2 (id=44): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m2.768022847s ago: executing program 2 (id=46): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000284000/0x1000)=nil, 0x1000, 0x3) landlock_create_ruleset(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x58, 0x12) 7m46.709729194s ago: executing program 32 (id=46): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000284000/0x1000)=nil, 0x1000, 0x3) landlock_create_ruleset(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x58, 0x12) 4m44.349775554s ago: executing program 5 (id=796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x114}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 4m43.909584479s ago: executing program 5 (id=801): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={r2, 0x8, 0x1, 'x'}, 0x9) 4m41.323629611s ago: executing program 5 (id=807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x2) 4m40.37273468s ago: executing program 5 (id=809): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19e0, 0x400, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1f, 0x7fff, 0x10001, 0x80, 0x80, r5, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) 4m39.100532098s ago: executing program 5 (id=814): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 4m38.828311868s ago: executing program 5 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4000000000000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x80) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x168}}, 0xc0) 4m23.663411446s ago: executing program 33 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4000000000000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x80) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x168}}, 0xc0) 11.525737873s ago: executing program 3 (id=2091): ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124020101020000000000000000020d000924030201010001"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000500)='transport=rdma,nqn=nqn.2014-08.org.n', 0x24) 9.898755948s ago: executing program 3 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x20048010) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) 9.633907545s ago: executing program 0 (id=2103): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r5) 9.338994621s ago: executing program 4 (id=2105): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x7, 0x0, 0x1, &(0x7f0000000080)="ce"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.962077909s ago: executing program 3 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 8.46163308s ago: executing program 0 (id=2108): r0 = socket(0x1e, 0x1, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="fb5a0c5a28bff4d1eabc9b5e1b002907e42f898086b6bd3a0e8ac1187bc611911486c8bac2fbe135179cc1af68b7b1b77ef66df43b71636ab0f3e86a90855ff090e2ed7b1f446091934082de9b302cdf509d5038867b833afdd95183930c0ab8ccdc74c131f83b97caa6739b434bdf1c", 0x70, 0xc0, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 8.42920182s ago: executing program 7 (id=2109): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2) socket(0x400000000010, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r4}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 8.268608758s ago: executing program 6 (id=2111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e06", 0xab}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r2, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) close_range(r0, 0xffffffffffffffff, 0x0) 8.267698503s ago: executing program 3 (id=2112): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000040)={0x11, 0x7, r1}, 0x14) write(r2, 0x0, 0x0) 8.114987849s ago: executing program 0 (id=2113): r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x81044804, &(0x7f0000000400)={0x1}) 8.091210146s ago: executing program 7 (id=2114): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[]) 8.037550277s ago: executing program 0 (id=2115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{0x0}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x10, 0x1, 0xa43a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000500)='GPL\x00', 0x7, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, 0x1], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="1d0000001000000000000000", @ANYRES32=r8, @ANYBLOB="27983b", @ANYRES64=r6], 0x20) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r9 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r9, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 7.99577363s ago: executing program 3 (id=2116): syz_open_dev$sg(0x0, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) unshare(0x60000600) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902"], 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_io_uring_setup(0x7a31, &(0x7f0000000080)={0x0, 0x4e36, 0x800, 0x1, 0x2fe}, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/147, 0x93}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000600)=""/14, 0xe}], 0x3, 0x7, 0x10000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x9, 0xfc, 0x3, 0xa9c}]}, 0x10) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0xa020480) socket$inet(0x2, 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 7.995010981s ago: executing program 6 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 6.023694669s ago: executing program 7 (id=2118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x20048010) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) 5.774909203s ago: executing program 1 (id=2119): syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x1ff, 0x0, 0x3, 0xa, 0x4}) 4.897201268s ago: executing program 6 (id=2120): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r5) 4.628587089s ago: executing program 0 (id=2121): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000180)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r5, &(0x7f0000000000)=0x2b00, 0x12) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dummy0\x00', 0x8000}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500"], 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.939050116s ago: executing program 4 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000012c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf251600000018000180140002006e657464657673696d3000000000000005000200400000000500020000000000050004"], 0x44}}, 0x0) 3.894406827s ago: executing program 1 (id=2123): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.855122634s ago: executing program 6 (id=2124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc0010"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003a003200060063"], 0x76) 3.813102388s ago: executing program 4 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 3.658038358s ago: executing program 4 (id=2126): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2) socket(0x400000000010, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r4}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 3.576231009s ago: executing program 1 (id=2127): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = userfaultfd(0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.511108063s ago: executing program 4 (id=2128): r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x81044804, &(0x7f0000000400)={0x1}) 3.507024053s ago: executing program 7 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e0001"], 0x28}}, 0x0) 3.383859954s ago: executing program 1 (id=2130): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x4, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x470, 0xa7, 0x8, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0xf5, 0x0, 0x4, 0x0, 0xd318, 0x2000000000, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x6, 0x800000, 0x0, 0x101, 0x272f, 0xd721, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x4, 0x5, 0x1, 0x4000000, 0x5, 0x0, 0xdc5d, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, 0x0, 0xfdef) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x6, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_open_dev$mtd(&(0x7f0000000240), 0x0, 0x82000) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_clone3(&(0x7f0000000280)={0x84000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x1f}, &(0x7f0000000100)=""/36, 0x24, &(0x7f0000000140)=""/22, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0x4, 0x8, 0x5, 0x2, 0xd, r6}) 3.27562028s ago: executing program 4 (id=2131): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) 3.275296876s ago: executing program 7 (id=2132): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfff4, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.13660914s ago: executing program 7 (id=2133): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c0000000200000000000000000000000000000000000001060000"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 3.033195605s ago: executing program 6 (id=2134): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0xfd, 0xc8e}, {0x16, 0xff, 0x6, 0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000010940)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 2.848277873s ago: executing program 6 (id=2135): syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x1ff, 0x0, 0x3, 0xa, 0x4}) 2.373437445s ago: executing program 3 (id=2136): ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124020101020000000000000000020d000924030201010001"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000500)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress:NVMf:uui', 0x36) 1.681333303s ago: executing program 0 (id=2137): socket$can_raw(0x1d, 0x3, 0x1) socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.586703873s ago: executing program 1 (id=2138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 0s ago: executing program 1 (id=2139): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37d}, {0x0}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500", 0xc}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): : rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 407.265876][T10000] syz.4.1185: attempt to access beyond end of device [ 407.265876][T10000] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 407.270612][T10000] syz.4.1185: attempt to access beyond end of device [ 407.270612][T10000] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 407.273312][T10000] syz.4.1185: attempt to access beyond end of device [ 407.273312][T10000] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 407.275926][T10000] syz.4.1185: attempt to access beyond end of device [ 407.275926][T10000] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 407.282007][T10000] syz.4.1185: attempt to access beyond end of device [ 407.282007][T10000] loop4: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 407.284174][T10000] syz.4.1185: attempt to access beyond end of device [ 407.284174][T10000] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 407.286851][T10000] syz.4.1185: attempt to access beyond end of device [ 407.286851][T10000] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 407.289259][T10000] syz.4.1185: attempt to access beyond end of device [ 407.289259][T10000] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 408.162930][ T1393] CPU: 1 UID: 0 PID: 1393 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.162972][ T1393] Tainted: [L]=SOFTLOCKUP [ 408.162982][ T1393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.162999][ T1393] Workqueue: writeback wb_workfn (flush-7:4) [ 408.163041][ T1393] Call Trace: [ 408.163050][ T1393] [ 408.163062][ T1393] dump_stack_lvl+0xe8/0x150 [ 408.163102][ T1393] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 408.163145][ T1393] f2fs_write_end_bio+0x1211/0x16e0 [ 408.163177][ T1393] ? blkg_put+0x22/0x240 [ 408.163230][ T1393] __submit_merged_bio+0x258/0x6a0 [ 408.163264][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.163294][ T1393] ? rcu_is_watching+0x16/0xb0 [ 408.163332][ T1393] __submit_merged_write_cond+0x3c9/0x4e0 [ 408.163379][ T1393] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 408.163432][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.163471][ T1393] f2fs_write_data_pages+0x2a27/0x36f0 [ 408.163543][ T1393] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 408.163566][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.163650][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.163678][ T1393] ? __lock_acquire+0x747/0x2de0 [ 408.163740][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.163782][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.163811][ T1393] ? lock_acquire+0x115/0x350 [ 408.163835][ T1393] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 408.163863][ T1393] do_writepages+0x338/0x560 [ 408.163898][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.163927][ T1393] ? reacquire_held_locks+0x117/0x1a0 [ 408.163957][ T1393] ? writeback_sb_inodes+0x450/0x1b00 [ 408.163998][ T1393] __writeback_single_inode+0x136/0x1220 [ 408.164036][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164065][ T1393] ? do_raw_spin_unlock+0xf5/0x200 [ 408.164106][ T1393] writeback_sb_inodes+0x9de/0x1b00 [ 408.164139][ T1393] ? __lock_acquire+0x747/0x2de0 [ 408.164178][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164211][ T1393] ? trace_irq_disable+0x3b/0x140 [ 408.164247][ T1393] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 408.164330][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164359][ T1393] ? rcu_is_watching+0x16/0xb0 [ 408.164389][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164418][ T1393] ? queue_io+0x2d3/0x470 [ 408.164459][ T1393] wb_writeback+0x41c/0xad0 [ 408.164496][ T1393] ? queue_io+0x271/0x470 [ 408.164541][ T1393] ? __pfx_wb_writeback+0x10/0x10 [ 408.164572][ T1393] ? do_raw_spin_lock+0x12b/0x2f0 [ 408.164627][ T1393] wb_workfn+0x431/0x10f0 [ 408.164677][ T1393] ? __pfx_wb_workfn+0x10/0x10 [ 408.164720][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164749][ T1393] ? do_raw_spin_lock+0x12b/0x2f0 [ 408.164794][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164823][ T1393] ? lock_acquire+0x115/0x350 [ 408.164850][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164887][ T1393] ? rcu_is_watching+0x16/0xb0 [ 408.164918][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.164948][ T1393] ? process_scheduled_works+0x97a/0x1630 [ 408.164984][ T1393] process_scheduled_works+0xc3d/0x1630 [ 408.165017][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.165083][ T1393] ? __pfx_process_scheduled_works+0x10/0x10 [ 408.165125][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.165154][ T1393] ? assign_work+0x3cf/0x5d0 [ 408.165193][ T1393] worker_thread+0xa47/0xfb0 [ 408.165261][ T1393] kthread+0x38b/0x480 [ 408.165287][ T1393] ? __pfx_worker_thread+0x10/0x10 [ 408.165320][ T1393] ? __pfx_kthread+0x10/0x10 [ 408.165347][ T1393] ret_from_fork+0x514/0xb70 [ 408.165376][ T1393] ? __pfx_ret_from_fork+0x10/0x10 [ 408.165400][ T1393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.165429][ T1393] ? __switch_to+0xc89/0x1420 [ 408.165469][ T1393] ? __pfx_kthread+0x10/0x10 [ 408.165496][ T1393] ret_from_fork_asm+0x1a/0x30 [ 408.165559][ T1393] [ 408.354171][ T1393] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 408.559281][ T187] usb 4-1: USB disconnect, device number 11 [ 408.595412][ T3104] loop4: lost filesystem error report for type 5 error -108 [ 408.950838][T10008] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 408.950859][T10008] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 408.950873][T10008] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 408.950883][T10008] One or more global auth toks could not properly register; rc = [-22] [ 408.950914][T10008] Error validating options; rc = [-22] [ 409.679631][T10030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1199'. [ 410.172663][T10037] dvmrp0: entered allmulticast mode [ 410.812046][ T5778] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 410.916907][T10036] dvmrp0: left allmulticast mode [ 410.967253][ T5778] usb 1-1: not running at top speed; connect to a high speed hub [ 410.967294][ T5778] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 410.969764][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.969791][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 410.969843][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.072947][T10049] binder_alloc: 10047: binder_alloc_buf, no vma [ 411.226141][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1208'. [ 412.119485][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.120317][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.678877][T10073] bridge_slave_0: left allmulticast mode [ 412.678903][T10073] bridge_slave_0: left promiscuous mode [ 412.679094][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.709986][T10073] bridge_slave_1: left allmulticast mode [ 412.710014][T10073] bridge_slave_1: left promiscuous mode [ 412.710184][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.739502][T10073] bond0: (slave bond_slave_0): Releasing backup interface [ 412.754804][T10073] bond0: (slave bond_slave_1): Releasing backup interface [ 412.776262][T10073] team0: Port device team_slave_0 removed [ 412.789831][T10073] team0: Port device team_slave_1 removed [ 412.807498][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.810300][T10073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.836852][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.850431][T10073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.868301][T10073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.840684][T10112] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 415.184955][ T5846] usb 1-1: USB disconnect, device number 16 [ 416.045357][T10138] binder_alloc: 10129: binder_alloc_buf, no vma [ 416.172042][ T5778] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 416.332161][ T5778] usb 4-1: Using ep0 maxpacket: 8 [ 416.332955][ T5778] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 416.338286][ T5778] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 416.338317][ T5778] usb 4-1: config 179 has no interface number 0 [ 416.338361][ T5778] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 416.338391][ T5778] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 416.338422][ T5778] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.338452][ T5778] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 416.338477][ T5778] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 416.338508][ T5778] usb 4-1: config 179 interface 65 has no altsetting 0 [ 416.338551][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.469751][ T5778] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input29 [ 419.027883][ T5778] usb 4-1: USB disconnect, device number 12 [ 419.028000][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 419.395222][ T3104] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 419.552162][ T3104] usb 7-1: Using ep0 maxpacket: 8 [ 419.552983][ T3104] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 419.556823][ T3104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.556877][ T3104] usb 7-1: Product: syz [ 419.556895][ T3104] usb 7-1: Manufacturer: syz [ 419.556912][ T3104] usb 7-1: SerialNumber: syz [ 419.585719][ T3104] usb 7-1: config 0 descriptor?? [ 419.615021][ T3104] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 419.616451][ T3104] pctv452e: pctv452e_power_ctrl: 1 [ 419.616451][ T3104] [ 419.616501][ T3104] usb 7-1: selecting invalid altsetting 3 [ 419.616518][ T3104] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 419.616518][ T3104] [ 419.616536][ T3104] dvb-usb: bulk message failed: -22 (5/0) [ 419.637623][T10188] fuse: Bad value for 'fd' [ 419.656329][ T3104] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 419.678244][ T3104] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 419.678306][ T3104] usb 7-1: media controller created [ 419.678800][ T3104] dvb-usb: bulk message failed: -22 (8/0) [ 419.678819][ T3104] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 419.678897][ T3104] dvb-usb: MAC address reading failed. [ 419.731384][ T3104] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.798783][T10176] dvb-usb: bulk message failed: -22 (7/0) [ 419.798809][T10176] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 419.885141][ T3104] DVB: Unable to find symbol stb0899_attach() [ 419.885162][ T3104] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 419.982053][ T3104] rc_core: IR keymap rc-tt-1500 not found [ 419.982076][ T3104] Registered IR keymap rc-empty [ 419.985466][ T3104] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 419.988284][ T3104] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input30 [ 419.990334][ T3104] dvb-usb: schedule remote query interval to 100 msecs. [ 419.990355][ T3104] pctv452e: pctv452e_power_ctrl: 0 [ 419.990355][ T3104] [ 419.990368][ T3104] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 420.053105][ T3104] usb 7-1: USB disconnect, device number 16 [ 420.211218][ T3104] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 420.552578][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1243'. [ 420.702697][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 420.857414][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 420.868196][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.868229][ T10] usb 1-1: Product: syz [ 420.868246][ T10] usb 1-1: Manufacturer: syz [ 420.868263][ T10] usb 1-1: SerialNumber: syz [ 420.892632][ T10] usb 1-1: config 0 descriptor?? [ 420.901222][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 420.907514][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 421.111237][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 421.128549][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 421.130181][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 421.131826][ T10] usb 1-1: media controller created [ 421.186013][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.316350][ T10] DVB: Unable to find symbol dib7000p_attach() [ 421.316371][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 421.413331][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 421.413355][ T10] Registered IR keymap rc-empty [ 421.413665][ T10] dvb-usb: could not initialize remote control. [ 421.413678][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 421.470827][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 421.616567][ T10] usb 1-1: USB disconnect, device number 17 [ 421.883926][T10233] tipc: Enabling of bearer rejected, failed to enable media [ 421.962121][ T3104] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 422.112498][ T3104] usb 7-1: Using ep0 maxpacket: 8 [ 422.113366][ T3104] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 422.114486][ T3104] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 422.114514][ T3104] usb 7-1: config 179 has no interface number 0 [ 422.114564][ T3104] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 422.114594][ T3104] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 422.114625][ T3104] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.114654][ T3104] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 422.114679][ T3104] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 422.114711][ T3104] usb 7-1: config 179 interface 65 has no altsetting 0 [ 422.114747][ T3104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.269900][ T3104] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input32 [ 422.519142][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 422.948461][ T3104] usb 7-1: USB disconnect, device number 17 [ 422.948574][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 423.268540][T10287] netlink: NAT attribute has 4 unknown bytes [ 423.268582][T10287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.304280][ T7666] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 423.464301][ T7666] usb 4-1: not running at top speed; connect to a high speed hub [ 423.464342][ T7666] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 423.465465][ T7666] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.465490][ T7666] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 423.465542][ T7666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.493226][T10296] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x1 [ 423.532777][ T7666] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 423.532809][ T7666] uvcvideo 4-1:1.0: No valid video chain found. [ 424.006248][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1286'. [ 424.384202][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.494723][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 424.577871][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.646092][ T10] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 424.650672][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.650701][ T10] usb 8-1: Product: syz [ 424.650719][ T10] usb 8-1: Manufacturer: syz [ 424.650736][ T10] usb 8-1: SerialNumber: syz [ 424.703601][T10326] loop1: detected capacity change from 0 to 40427 [ 424.709513][ T10] usb 8-1: config 0 descriptor?? [ 424.713013][T10326] F2FS-fs (loop1): invalid crc value [ 424.729740][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 424.729771][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 424.818125][T10326] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 424.825568][T10326] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 424.825596][T10326] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 424.825624][T10326] F2FS-fs (loop1): Start checkpoint disabled! [ 424.832337][T10326] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 424.832951][T10326] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 424.847055][T10326] bio_check_eod: 72 callbacks suppressed [ 424.847076][T10326] syz.1.1291: attempt to access beyond end of device [ 424.847076][T10326] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 424.972593][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 425.023453][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 425.026067][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 425.029555][ T10] usb 8-1: media controller created [ 425.118422][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.181704][T10332] syz.1.1291: attempt to access beyond end of device [ 425.181704][T10332] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 425.185788][T10332] syz.1.1291: attempt to access beyond end of device [ 425.185788][T10332] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 425.190887][T10332] syz.1.1291: attempt to access beyond end of device [ 425.190887][T10332] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 425.192291][T10332] syz.1.1291: attempt to access beyond end of device [ 425.192291][T10332] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 425.194826][T10332] syz.1.1291: attempt to access beyond end of device [ 425.194826][T10332] loop1: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 425.201302][T10332] syz.1.1291: attempt to access beyond end of device [ 425.201302][T10332] loop1: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 425.204079][T10332] syz.1.1291: attempt to access beyond end of device [ 425.204079][T10332] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 425.206556][T10332] syz.1.1291: attempt to access beyond end of device [ 425.206556][T10332] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 425.208873][T10332] syz.1.1291: attempt to access beyond end of device [ 425.208873][T10332] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 425.543670][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.819169][ T101] CPU: 1 UID: 0 PID: 101 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.819209][ T101] Tainted: [L]=SOFTLOCKUP [ 425.819219][ T101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.819235][ T101] Workqueue: writeback wb_workfn (flush-7:1) [ 425.819279][ T101] Call Trace: [ 425.819289][ T101] [ 425.819300][ T101] dump_stack_lvl+0xe8/0x150 [ 425.819339][ T101] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 425.819383][ T101] f2fs_write_end_bio+0x1211/0x16e0 [ 425.819414][ T101] ? blkg_put+0x22/0x240 [ 425.819466][ T101] __submit_merged_bio+0x258/0x6a0 [ 425.819501][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.819531][ T101] ? rcu_is_watching+0x16/0xb0 [ 425.819570][ T101] __submit_merged_write_cond+0x3c9/0x4e0 [ 425.819617][ T101] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 425.819668][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.819707][ T101] f2fs_write_data_pages+0x2a27/0x36f0 [ 425.819774][ T101] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 425.819815][ T101] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 425.819884][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.819913][ T101] ? lock_acquire+0x115/0x350 [ 425.819957][ T101] ? ktime_get+0x45/0x220 [ 425.819981][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820009][ T101] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 425.820037][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820070][ T101] ? ktime_get+0x1f5/0x220 [ 425.820098][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820141][ T101] ? trace_pelt_se_tp+0x3b/0x150 [ 425.820170][ T101] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 425.820197][ T101] do_writepages+0x338/0x560 [ 425.820233][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820262][ T101] ? reacquire_held_locks+0x117/0x1a0 [ 425.820292][ T101] ? writeback_sb_inodes+0x450/0x1b00 [ 425.820334][ T101] __writeback_single_inode+0x136/0x1220 [ 425.820372][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820401][ T101] ? do_raw_spin_unlock+0xf5/0x200 [ 425.820442][ T101] writeback_sb_inodes+0x9de/0x1b00 [ 425.820475][ T101] ? __lock_acquire+0x747/0x2de0 [ 425.820508][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820546][ T101] ? do_raw_spin_unlock+0xf5/0x200 [ 425.820590][ T101] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 425.820671][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820700][ T101] ? rcu_is_watching+0x16/0xb0 [ 425.820731][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.820759][ T101] ? queue_io+0x2d3/0x470 [ 425.820797][ T101] wb_writeback+0x41c/0xad0 [ 425.820834][ T101] ? queue_io+0x271/0x470 [ 425.820874][ T101] ? __pfx_wb_writeback+0x10/0x10 [ 425.820905][ T101] ? do_raw_spin_lock+0x12b/0x2f0 [ 425.820959][ T101] wb_workfn+0x431/0x10f0 [ 425.821008][ T101] ? __pfx_wb_workfn+0x10/0x10 [ 425.821042][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821076][ T101] ? trace_hrtimer_start+0x82/0x200 [ 425.821119][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821148][ T101] ? do_raw_spin_lock+0x12b/0x2f0 [ 425.821196][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821225][ T101] ? lock_acquire+0x115/0x350 [ 425.821252][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821289][ T101] ? rcu_is_watching+0x16/0xb0 [ 425.821319][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821350][ T101] ? process_scheduled_works+0x97a/0x1630 [ 425.821385][ T101] process_scheduled_works+0xc3d/0x1630 [ 425.821419][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821484][ T101] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.821525][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821553][ T101] ? assign_work+0x3cf/0x5d0 [ 425.821593][ T101] worker_thread+0xa47/0xfb0 [ 425.821631][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821672][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821701][ T101] ? __kthread_parkme+0x71/0x1f0 [ 425.821750][ T101] kthread+0x38b/0x480 [ 425.821776][ T101] ? __pfx_worker_thread+0x10/0x10 [ 425.821809][ T101] ? __pfx_kthread+0x10/0x10 [ 425.821836][ T101] ret_from_fork+0x514/0xb70 [ 425.821865][ T101] ? __pfx_ret_from_fork+0x10/0x10 [ 425.821889][ T101] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.821918][ T101] ? __switch_to+0xc89/0x1420 [ 425.821957][ T101] ? __pfx_kthread+0x10/0x10 [ 425.821984][ T101] ret_from_fork_asm+0x1a/0x30 [ 425.822042][ T101] [ 425.822397][ T101] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 425.906223][ T5778] loop1: lost filesystem error report for type 5 error -108 [ 425.948862][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.081397][ T5778] usb 4-1: USB disconnect, device number 13 [ 426.185950][T10337] tipc: Enabling of bearer rejected, failed to enable media [ 426.772733][ T10] DVB: Unable to find symbol dib7000p_attach() [ 426.772753][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 427.042019][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 427.042041][ T10] Registered IR keymap rc-empty [ 427.042327][ T10] dvb-usb: could not initialize remote control. [ 427.042340][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 427.046316][ T10] usb 8-1: USB disconnect, device number 8 [ 427.256168][ T50] bridge_slave_1: left allmulticast mode [ 427.256198][ T50] bridge_slave_1: left promiscuous mode [ 427.256407][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.295853][ T50] bridge_slave_0: left allmulticast mode [ 427.295884][ T50] bridge_slave_0: left promiscuous mode [ 427.295937][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 427.296109][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.354581][ T7666] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 427.505482][ T7666] usb 2-1: Using ep0 maxpacket: 8 [ 427.506404][ T7666] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 427.507827][ T7666] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 427.507854][ T7666] usb 2-1: config 179 has no interface number 0 [ 427.507902][ T7666] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 427.507932][ T7666] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 427.507964][ T7666] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.507993][ T7666] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 427.508019][ T7666] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 427.508050][ T7666] usb 2-1: config 179 interface 65 has no altsetting 0 [ 427.508087][ T7666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.631871][ T7666] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input34 [ 428.553908][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.586655][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.603850][ T50] bond0 (unregistering): Released all slaves [ 428.653135][ T10] usb 2-1: USB disconnect, device number 14 [ 428.653170][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 428.653837][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1306'. [ 428.934820][ T50] tipc: Left network mode [ 429.093329][ T5739] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 429.254186][ T5739] usb 5-1: not running at top speed; connect to a high speed hub [ 429.254227][ T5739] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 429.257345][ T5739] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.257374][ T5739] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 429.257427][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.378536][T10396] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[6198] was attempted by "\x0aÀÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   ú ÿÿÿÿ ©ýÿÿ . /dev/zero À @  [ 429.482512][ T5739] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 429.482553][ T5739] uvcvideo 5-1:1.0: No valid video chain found. [ 430.137718][ T50] hsr_slave_0: left promiscuous mode [ 430.223734][ T50] hsr_slave_1: left promiscuous mode [ 430.224871][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.224896][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.227144][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.227166][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.371571][ T50] veth1_macvtap: left promiscuous mode [ 430.371619][ T50] veth0_macvtap: left promiscuous mode [ 430.371843][ T50] veth1_vlan: left promiscuous mode [ 430.371988][ T50] veth0_vlan: left promiscuous mode [ 430.786995][T10401] syz.1.1312 (10401): drop_caches: 2 [ 431.021025][T10434] process 'syz.1.1320' launched './file0' with NULL argv: empty string added [ 431.497974][T10447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.745929][ T50] team0 (unregistering): Port device team_slave_1 removed [ 431.825734][ T50] team0 (unregistering): Port device team_slave_0 removed [ 431.827868][ T5846] usb 5-1: USB disconnect, device number 9 [ 431.987420][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1332'. [ 432.202693][T10471] netlink: 'syz.6.1332': attribute type 10 has an invalid length. [ 432.889849][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 432.944915][T10485] input: syz0 as /devices/virtual/input/input35 [ 433.250164][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.261343][T10471] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 433.702563][ T5846] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 433.900192][ T5846] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 433.967185][ T5846] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.967221][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.967243][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.967294][ T5846] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.048154][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.048186][ T5846] usb 2-1: Product: syz [ 434.048203][ T5846] usb 2-1: Manufacturer: syz [ 434.191132][ T5846] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 435.509615][ T5846] usb 2-1: USB disconnect, device number 15 [ 435.590857][T10525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.360430][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 437.506475][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1368'. [ 437.818704][T10583] loop6: detected capacity change from 0 to 40427 [ 437.845446][T10583] F2FS-fs (loop6): invalid crc value [ 437.914354][T10583] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 437.917702][T10583] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 437.917731][T10583] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 437.917760][T10583] F2FS-fs (loop6): Start checkpoint disabled! [ 437.932482][T10583] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 437.940534][T10583] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 437.986198][T10583] bio_check_eod: 72 callbacks suppressed [ 437.986223][T10583] syz.6.1369: attempt to access beyond end of device [ 437.986223][T10583] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 438.287679][T10590] syz.6.1369: attempt to access beyond end of device [ 438.287679][T10590] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 438.292126][T10590] syz.6.1369: attempt to access beyond end of device [ 438.292126][T10590] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 438.297228][T10590] syz.6.1369: attempt to access beyond end of device [ 438.297228][T10590] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 438.300088][T10590] syz.6.1369: attempt to access beyond end of device [ 438.300088][T10590] loop6: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 438.302175][T10590] syz.6.1369: attempt to access beyond end of device [ 438.302175][T10590] loop6: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 438.308878][T10590] syz.6.1369: attempt to access beyond end of device [ 438.308878][T10590] loop6: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 438.311703][T10590] syz.6.1369: attempt to access beyond end of device [ 438.311703][T10590] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 438.314336][T10590] syz.6.1369: attempt to access beyond end of device [ 438.314336][T10590] loop6: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 438.316911][T10590] syz.6.1369: attempt to access beyond end of device [ 438.316911][T10590] loop6: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 438.966145][ T7004] CPU: 0 UID: 0 PID: 7004 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.966189][ T7004] Tainted: [L]=SOFTLOCKUP [ 438.966199][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 438.966215][ T7004] Workqueue: writeback wb_workfn (flush-7:6) [ 438.966256][ T7004] Call Trace: [ 438.966267][ T7004] [ 438.966278][ T7004] dump_stack_lvl+0xe8/0x150 [ 438.966318][ T7004] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 438.966361][ T7004] f2fs_write_end_bio+0x1211/0x16e0 [ 438.966394][ T7004] ? blkg_put+0x22/0x240 [ 438.966452][ T7004] __submit_merged_bio+0x258/0x6a0 [ 438.966487][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.966516][ T7004] ? rcu_is_watching+0x16/0xb0 [ 438.966554][ T7004] __submit_merged_write_cond+0x3c9/0x4e0 [ 438.966603][ T7004] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 438.966655][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.966695][ T7004] f2fs_write_data_pages+0x2a27/0x36f0 [ 438.966720][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.966788][ T7004] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 438.966829][ T7004] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 438.966897][ T7004] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 438.966955][ T7004] ? __lock_acquire+0x747/0x2de0 [ 438.966990][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.967028][ T7004] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 438.967069][ T7004] ? f2fs_update_inode+0x1394/0x25c0 [ 438.967102][ T7004] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 438.967129][ T7004] do_writepages+0x338/0x560 [ 438.967165][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.967194][ T7004] ? reacquire_held_locks+0x117/0x1a0 [ 438.967224][ T7004] ? writeback_sb_inodes+0x450/0x1b00 [ 438.967264][ T7004] __writeback_single_inode+0x136/0x1220 [ 438.967304][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.967333][ T7004] ? do_raw_spin_unlock+0xf5/0x200 [ 438.967372][ T7004] writeback_sb_inodes+0x9de/0x1b00 [ 438.967405][ T7004] ? __lock_acquire+0x747/0x2de0 [ 438.967448][ T7004] ? lock_acquire+0x115/0x350 [ 438.967482][ T7004] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 438.967563][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.967592][ T7004] ? rcu_is_watching+0x16/0xb0 [ 438.967622][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.967651][ T7004] ? queue_io+0x2d3/0x470 [ 438.967689][ T7004] wb_writeback+0x41c/0xad0 [ 438.967727][ T7004] ? queue_io+0x271/0x470 [ 438.967766][ T7004] ? __pfx_wb_writeback+0x10/0x10 [ 438.967797][ T7004] ? do_raw_spin_lock+0x12b/0x2f0 [ 438.967852][ T7004] wb_workfn+0x431/0x10f0 [ 438.967902][ T7004] ? __pfx_wb_workfn+0x10/0x10 [ 438.967945][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.967975][ T7004] ? do_raw_spin_lock+0x12b/0x2f0 [ 438.968020][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968055][ T7004] ? lock_acquire+0x115/0x350 [ 438.968083][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968120][ T7004] ? rcu_is_watching+0x16/0xb0 [ 438.968151][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968182][ T7004] ? process_scheduled_works+0x97a/0x1630 [ 438.968218][ T7004] process_scheduled_works+0xc3d/0x1630 [ 438.968252][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968318][ T7004] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.968359][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968388][ T7004] ? assign_work+0x3cf/0x5d0 [ 438.968428][ T7004] worker_thread+0xa47/0xfb0 [ 438.968466][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968507][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968536][ T7004] ? __kthread_parkme+0x71/0x1f0 [ 438.968585][ T7004] kthread+0x38b/0x480 [ 438.968611][ T7004] ? __pfx_worker_thread+0x10/0x10 [ 438.968644][ T7004] ? __pfx_kthread+0x10/0x10 [ 438.968672][ T7004] ret_from_fork+0x514/0xb70 [ 438.968701][ T7004] ? __pfx_ret_from_fork+0x10/0x10 [ 438.968725][ T7004] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.968754][ T7004] ? __switch_to+0xc89/0x1420 [ 438.968794][ T7004] ? __pfx_kthread+0x10/0x10 [ 438.968822][ T7004] ret_from_fork_asm+0x1a/0x30 [ 438.968881][ T7004] [ 439.015528][ T7004] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 439.366646][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.366709][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.672023][ T7666] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 439.825182][ T7666] usb 8-1: Using ep0 maxpacket: 8 [ 439.827887][ T7666] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 439.831734][ T7666] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 439.832679][ T5739] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 439.878389][ T7666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.878422][ T7666] usb 8-1: Product: syz [ 439.878439][ T7666] usb 8-1: Manufacturer: syz [ 439.878457][ T7666] usb 8-1: SerialNumber: syz [ 439.914531][ T7666] usb 8-1: config 0 descriptor?? [ 439.931487][ T7666] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 439.931543][ T7666] usb 8-1: setting power ON [ 439.949673][ T7666] dvb-usb: bulk message failed: -22 (2/0) [ 439.961418][ T7666] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.971858][ T7666] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 439.980503][ T7666] usb 8-1: media controller created [ 440.007995][ T7666] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.044630][ T5739] usb 2-1: not running at top speed; connect to a high speed hub [ 440.044669][ T5739] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.045274][ T7666] usb 8-1: selecting invalid altsetting 6 [ 440.045296][ T7666] usb 8-1: digital interface selection failed (-22) [ 440.045313][ T7666] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 440.046055][ T5739] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 440.046096][ T5739] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 440.046123][ T5739] usb 2-1: config 1 interface 0 has no altsetting 0 [ 440.046331][ T7666] usb 8-1: setting power OFF [ 440.046385][ T7666] dvb-usb: bulk message failed: -22 (2/0) [ 440.046402][ T7666] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 440.046417][ T7666] (NULL device *): no alternate interface [ 440.047517][ T5739] usb 2-1: language id specifier not provided by device, defaulting to English [ 440.098356][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.098388][ T5739] usb 2-1: Product: 䢋歊纕念á¦é™žé•äš¹Ù©ã¨¹ï¼£ê¦¦î¦³äŸ¸ã¼«â…ì—絛旬鲤㎮㤜︢䩸Ꙛ䈾鳑—呺䋧㢭顃僷㼕뺫苢뜎ᶳ⮳ᾰì¼î—¿á½¿ì¹¸ç˜žâ¢£æ±„맢຅練î…뾕㤗崎ã…蚚䔶糮ཞè«â…¯á¿’é—›å¼ç‰ åº°ìˆ–튱苬摿â³á¯¶è³€ê£ªá¢—滢쭂᳟짳焼槬痢뇒Ὺà´é‚„᳅묞붒嶅䭋Ե㭛鎯닷ê§é¬½áŠŠæŽ èŸ­ì¬€í“©ä¯ï—‹ï–²î›éŸ•ç·šâ·„å™ [ 440.098429][ T5739] usb 2-1: Manufacturer: ꣫샂﬊玷௎ìŽé¼Žé†Šé¥¤ã»—⪹έì«ëˆ±ï¤˜æ¶Žêª²ê¿žæ»¹ì˜¦ï°¿ë´ì¹´â¼…㈘项夌㱅ᄰ㋰ë™â»°ë–¡è‰œíˆ¨âº£æŒ³è®×ºä¦½ï¤Šä—‡éŒ®ê—»åŽ¹ï„•î¨ìˆªî‰‹á†‹âµ¦î¶¤æ—™é•Ÿâ°¨ä¿»á—…ᛞ퉵籭쟜ê¶è‚’糂ៃﺪë‹í™²è¢±î›ƒë ¢â¡œá³ˆì¬î™­ï³á²á†«ç‡¢ç¶€á‘柎๼âà¡„ [ 440.098463][ T5739] usb 2-1: SerialNumber: syz [ 440.117252][T10596] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 440.256353][T10601] dvb-usb: bulk message failed: -22 (3/0) [ 440.256382][T10601] dvb-usb: bulk message failed: -22 (4/0) [ 440.256398][T10601] cxusb: i2c read failed [ 440.269287][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 440.317931][ T7666] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 440.333143][ T7666] usb 8-1: USB disconnect, device number 9 [ 440.349014][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.349592][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.454334][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 441.835221][T10642] bond0: (slave bond_slave_1): Releasing backup interface [ 443.332428][T10689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.352763][T10689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.989751][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 445.214873][ T5739] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 445.448137][T10716] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1408'. [ 447.167508][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 447.167664][T10755] veth1_to_hsr: entered allmulticast mode [ 447.169201][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 449.110938][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1433'. [ 449.274868][T10797] netlink: 'syz.7.1433': attribute type 10 has an invalid length. [ 449.536030][T10797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.550550][T10797] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 452.606882][T10805] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 454.605779][T10846] syzkaller0: entered promiscuous mode [ 454.605807][T10846] syzkaller0: entered allmulticast mode [ 454.792547][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 456.402092][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 456.406903][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 456.407955][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 456.407982][ T9] usb 7-1: config 179 has no interface number 0 [ 456.408024][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 456.408053][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 456.408093][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 456.408122][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 456.408148][ T9] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 456.408180][ T9] usb 7-1: config 179 interface 65 has no altsetting 0 [ 456.408218][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.455889][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input36 [ 456.792593][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 458.996879][T10906] binder: 10905:10906 ioctl c0306201 0 returned -14 [ 461.540573][ T5778] usb 7-1: USB disconnect, device number 18 [ 461.540631][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 461.765040][T10918] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5615] was attempted by "\x0aÀÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   ú ÿÿÿÿ ©ýÿÿ . /dev/zero À @  [ 461.811851][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.813049][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.035328][T10908] bridge_slave_0: left allmulticast mode [ 463.035355][T10908] bridge_slave_0: left promiscuous mode [ 463.050825][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.440569][ T31] audit: type=1326 audit(1790431093.632:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.471670][ T31] audit: type=1326 audit(1790431093.632:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.503221][ T31] audit: type=1326 audit(1790431093.702:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.503271][ T31] audit: type=1326 audit(1790431093.702:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.503311][ T31] audit: type=1326 audit(1790431093.702:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.519773][ T31] audit: type=1326 audit(1790431093.702:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.554415][ T31] audit: type=1326 audit(1790431093.732:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.564274][ T31] audit: type=1326 audit(1790431093.762:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.636223][ T31] audit: type=1326 audit(1790431093.812:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 463.688535][ T31] audit: type=1326 audit(1790431093.882:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.3.1477" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 464.120232][T10908] bridge_slave_1: left allmulticast mode [ 464.120735][T10908] bridge_slave_1: left promiscuous mode [ 464.120956][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.174424][T10908] bond0: (slave bond_slave_0): Releasing backup interface [ 464.233225][T10908] bond0: (slave bond_slave_1): Releasing backup interface [ 464.310240][T10908] team0: Port device team_slave_0 removed [ 464.337628][T10908] team0: Port device team_slave_1 removed [ 464.359501][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.383436][T10908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.403372][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.426975][T10908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.428272][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1481'. [ 464.461642][T10908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.536709][T10935] netlink: 'syz.7.1475': attribute type 6 has an invalid length. [ 465.060687][T10969] syzkaller0: entered promiscuous mode [ 465.060715][T10969] syzkaller0: entered allmulticast mode [ 465.856261][T10980] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by "\x0aÀÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   ú ÿÿÿÿ ©ýÿÿ . /dev/zero À @  [ 465.940311][T10982] binder_alloc: 10977: binder_alloc_buf, no vma [ 466.901278][T11001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 468.515012][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 468.699068][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1502'. [ 472.884142][T11116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1528'. [ 473.389174][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1527'. [ 476.938945][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 477.453031][T11185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'. [ 478.601007][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.601445][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.385222][T11219] input: syz0 as /devices/virtual/input/input37 [ 481.039224][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1555'. [ 481.300000][T11242] netlink: 'syz.6.1555': attribute type 10 has an invalid length. [ 481.780511][T11266] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1560'. [ 483.700133][T11278] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1563'. [ 483.737398][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.751261][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.789318][T11278] overlayfs: missing 'lowerdir' [ 483.846489][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.849036][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.242889][ T30] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 486.435087][ T30] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 486.450386][ T30] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 486.450420][ T30] usb 5-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 486.450443][ T30] usb 5-1: config 4 has no interface number 0 [ 486.450485][ T30] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 486.480695][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.480729][ T30] usb 5-1: Product: syz [ 486.480746][ T30] usb 5-1: Manufacturer: syz [ 486.480764][ T30] usb 5-1: SerialNumber: syz [ 487.038250][ T30] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 487.049616][ T30] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 487.054082][ T30] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 487.054137][ T30] usb 5-1: media controller created [ 487.062647][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.235844][ T30] DVB: Unable to find symbol dib7000p_attach() [ 487.235866][ T30] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 487.350643][T11308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.442704][ T30] rc_core: IR keymap rc-dib0700-rc5 not found [ 487.442723][ T30] Registered IR keymap rc-empty [ 487.442939][ T30] dvb-usb: could not initialize remote control. [ 487.442947][ T30] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 487.538820][ T30] usb 5-1: USB disconnect, device number 10 [ 487.746450][ T30] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 489.579304][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.579643][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.947537][T11301] bridge_slave_0: left allmulticast mode [ 489.947563][T11301] bridge_slave_0: left promiscuous mode [ 489.949401][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.019250][T11301] bridge_slave_1: left allmulticast mode [ 490.019275][T11301] bridge_slave_1: left promiscuous mode [ 490.019465][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.075842][T11301] bond0: (slave bond_slave_0): Releasing backup interface [ 490.125018][T11301] bond0: (slave bond_slave_1): Releasing backup interface [ 490.179242][T11301] team0: Port device team_slave_0 removed [ 490.229261][T11301] team0: Port device team_slave_1 removed [ 490.249626][T11301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.278559][T11301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.294930][T11301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.310351][T11301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.352814][T11301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 490.352946][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1576'. [ 490.704497][T11335] syzkaller0: entered promiscuous mode [ 490.704525][T11335] syzkaller0: entered allmulticast mode [ 490.869174][T11351] loop3: detected capacity change from 0 to 128 [ 491.122478][ T5604] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 491.301082][ T5604] usb 8-1: Using ep0 maxpacket: 16 [ 491.309676][ T5604] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 491.310734][ T5604] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 491.334305][ T5604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.334337][ T5604] usb 8-1: Product: syz [ 491.334355][ T5604] usb 8-1: Manufacturer: syz [ 491.334372][ T5604] usb 8-1: SerialNumber: syz [ 491.338328][ T5604] usb 8-1: config 0 descriptor?? [ 491.369983][ T5604] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 491.370023][ T5604] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 491.967327][ T5604] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 492.934906][ T5604] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 492.934975][ T5604] em28xx 8-1:0.0: board has no eeprom [ 493.521579][T11355] em28xx 8-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 493.553415][ T5604] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 493.553468][ T5604] em28xx 8-1:0.0: dvb set to bulk mode. [ 493.559024][ T5604] usb 8-1: USB disconnect, device number 10 [ 493.647644][ T5604] em28xx 8-1:0.0: Disconnecting em28xx [ 493.725162][ T30] em28xx 8-1:0.0: Binding DVB extension [ 494.247049][ T30] em28xx 8-1:0.0: Registering input extension [ 494.247735][ T5604] em28xx 8-1:0.0: Closing input extension [ 494.323637][ T5604] em28xx: Freeing device [ 496.529874][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 496.827708][T11416] bridge_slave_0: default FDB implementation only supports local addresses [ 497.195069][T11424] loop4: detected capacity change from 0 to 128 [ 498.561690][T11413] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.562096][T11413] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.891105][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.891200][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.009865][T11413] bridge_slave_0: left allmulticast mode [ 501.009895][T11413] bridge_slave_0: left promiscuous mode [ 501.011701][T11413] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.074088][T11413] bridge_slave_1: left allmulticast mode [ 501.074114][T11413] bridge_slave_1: left promiscuous mode [ 501.074283][T11413] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.140860][T11413] bond0: (slave bond_slave_0): Releasing backup interface [ 501.204659][T11413] bond0: (slave bond_slave_1): Releasing backup interface [ 501.246057][T11413] team0: Port device team_slave_0 removed [ 501.270401][T11413] team0: Port device team_slave_1 removed [ 501.303854][T11413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.306407][T11413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.337969][T11413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.354860][T11413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.386990][T11413] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.391753][T11452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1610'. [ 501.805069][T11470] syzkaller0: entered promiscuous mode [ 501.805096][T11470] syzkaller0: entered allmulticast mode [ 502.007810][T11475] loop0: detected capacity change from 0 to 32768 [ 502.009416][T11475] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 502.040033][T11475] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1616 (11475) [ 502.069990][T11475] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 502.070028][T11475] BTRFS info (device loop0): using crc32c checksum algorithm [ 502.646490][T11475] BTRFS info (device loop0): rebuilding free space tree [ 502.653954][T11480] loop4: detected capacity change from 0 to 128 [ 502.668792][T11475] BTRFS info (device loop0): disabling free space tree [ 502.668862][T11475] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 502.668887][T11475] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 502.690985][T11475] BTRFS info (device loop0): enabling ssd optimizations [ 502.691014][T11475] BTRFS info (device loop0): turning on async discard [ 502.691034][T11475] BTRFS info (device loop0): force clearing of disk cache [ 502.691055][T11475] BTRFS info (device loop0): use zstd compression, level 3 [ 503.521768][ T5615] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 503.761377][T11411] Set syz1 is full, maxelem 65536 reached [ 505.835307][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 505.994393][ T187] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 506.014029][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.037093][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.037132][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.037158][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.037211][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.052476][ T10] usb 5-1: config 0 descriptor?? [ 506.152404][ T187] usb 8-1: Using ep0 maxpacket: 16 [ 506.153437][ T187] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 506.154842][ T187] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 506.157846][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.157874][ T187] usb 8-1: Product: syz [ 506.157892][ T187] usb 8-1: Manufacturer: syz [ 506.157909][ T187] usb 8-1: SerialNumber: syz [ 506.222998][ T187] usb 8-1: config 0 descriptor?? [ 506.231496][ T187] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 506.231565][ T187] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 506.518470][ T10] hid_parser_main: 18 callbacks suppressed [ 506.518526][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518555][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518580][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518605][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518630][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518681][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518705][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518729][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518753][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.518778][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 506.628686][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 506.847713][ T187] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 507.028375][T11538] syzkaller0: entered promiscuous mode [ 507.028403][T11538] syzkaller0: entered allmulticast mode [ 507.316968][ T187] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 507.317007][ T187] em28xx 8-1:0.0: board has no eeprom [ 507.764155][T11548] loop0: detected capacity change from 0 to 32768 [ 507.765569][T11548] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 507.798248][T11548] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1634 (11548) [ 507.842024][ T187] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 507.842061][ T187] em28xx 8-1:0.0: dvb set to bulk mode. [ 507.844110][ T10] em28xx 8-1:0.0: Binding DVB extension [ 507.928081][T11548] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 507.928118][T11548] BTRFS info (device loop0): using crc32c checksum algorithm [ 508.209851][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1625'. [ 508.218845][ T7666] usb 8-1: USB disconnect, device number 11 [ 508.632149][T11515] usb 5-1: string descriptor 0 read error: -71 [ 508.674716][T11519] em28xx 8-1:0.0: writing to i2c device at 0xe failed (error=-19) [ 508.798260][T11548] BTRFS info (device loop0): rebuilding free space tree [ 508.824648][ T7666] em28xx 8-1:0.0: Disconnecting em28xx [ 508.876763][T11548] BTRFS info (device loop0): disabling free space tree [ 508.876834][T11548] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 508.876861][T11548] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 508.881486][T11548] BTRFS info (device loop0): enabling ssd optimizations [ 508.881516][T11548] BTRFS info (device loop0): turning on async discard [ 508.881536][T11548] BTRFS info (device loop0): force clearing of disk cache [ 508.881557][T11548] BTRFS info (device loop0): use zstd compression, level 3 [ 509.183945][ T10] em28xx 8-1:0.0: Registering input extension [ 511.312116][ T7666] em28xx 8-1:0.0: Closing input extension [ 511.541644][ T5615] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 511.594915][ T5739] usb 5-1: USB disconnect, device number 11 [ 511.665582][ T7666] em28xx: Freeing device [ 513.660475][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.660518][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 60191 - 0 [ 513.661015][ T987] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.661049][ T987] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 60191 - 0 [ 513.661092][ T987] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.661119][ T987] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 60191 - 0 [ 513.661158][ T987] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.661193][ T987] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 60191 - 0 [ 514.427402][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 515.467946][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.468463][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.606997][T11635] loop3: detected capacity change from 0 to 32768 [ 515.608143][T11635] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 515.609059][T11635] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1654 (11635) [ 515.661884][T11635] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 515.661979][T11635] BTRFS info (device loop3): using crc32c checksum algorithm [ 515.817118][T11635] BTRFS info (device loop3): rebuilding free space tree [ 515.846241][T11635] BTRFS info (device loop3): disabling free space tree [ 515.846315][T11635] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 515.846342][T11635] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 515.851148][T11635] BTRFS info (device loop3): enabling ssd optimizations [ 515.851188][T11635] BTRFS info (device loop3): turning on async discard [ 515.851208][T11635] BTRFS info (device loop3): force clearing of disk cache [ 515.851230][T11635] BTRFS info (device loop3): use zstd compression, level 3 [ 516.956419][T11657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.958031][ T5620] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 517.198709][T11668] fuse: Bad value for 'fd' [ 517.203379][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 517.347986][T11671] dlm: non-version read from control device 36 [ 517.352080][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 517.354694][ T30] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 517.357521][ T30] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 517.357547][ T30] usb 5-1: config 179 has no interface number 0 [ 517.357591][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 517.357621][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 517.357653][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.357682][ T30] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 517.357708][ T30] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 517.357745][ T30] usb 5-1: config 179 interface 65 has no altsetting 0 [ 517.357781][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.451370][ T30] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input41 [ 518.598556][T11686] bridge_slave_0: default FDB implementation only supports local addresses [ 518.728175][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 518.839378][T11700] netlink: 'syz.3.1667': attribute type 10 has an invalid length. [ 518.862975][ T5778] usb 5-1: USB disconnect, device number 12 [ 518.863090][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 519.052721][ T7666] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 519.126983][T11700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.128608][T11700] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 519.154984][T11695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 519.202853][ T7666] usb 8-1: Using ep0 maxpacket: 16 [ 519.204205][ T7666] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 519.208260][ T7666] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 519.210586][ T7666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.210611][ T7666] usb 8-1: Product: syz [ 519.210628][ T7666] usb 8-1: Manufacturer: syz [ 519.210644][ T7666] usb 8-1: SerialNumber: syz [ 519.233425][ T7666] usb 8-1: config 0 descriptor?? [ 519.247346][ T7666] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 519.247384][ T7666] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 519.360587][T11708] binfmt_misc: register: failed to install interpreter ./file0 [ 519.628316][T11711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.708898][T11717] fuse: Bad value for 'fd' [ 520.044844][ T7666] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 520.633704][T11734] loop1: detected capacity change from 0 to 128 [ 520.649073][T10957] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 521.076226][T10957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 521.078912][T10957] usb 4-1: not running at top speed; connect to a high speed hub [ 521.078944][T10957] usb 4-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=c5.7c [ 521.263334][T10957] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 521.263366][T10957] usb 4-1: config 2 has no interface number 0 [ 521.263397][T10957] usb 4-1: config 2 interface 99 has no altsetting 0 [ 521.265521][T10957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.265546][T10957] usb 4-1: Product: syz [ 521.265562][T10957] usb 4-1: Manufacturer: syz [ 521.265580][T10957] usb 4-1: SerialNumber: syz [ 521.343364][ T7666] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 521.343400][ T7666] em28xx 8-1:0.0: board has no eeprom [ 521.574520][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.577761][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.616588][T10957] gspca_main: tv8532-2.14.0 probing 0923:010f [ 521.686962][T10957] usb 4-1: USB disconnect, device number 14 [ 521.733270][ T7666] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 521.733307][ T7666] em28xx 8-1:0.0: dvb set to bulk mode. [ 521.747064][ T5778] em28xx 8-1:0.0: Binding DVB extension [ 521.904951][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1689'. [ 521.966721][ T7666] usb 8-1: USB disconnect, device number 12 [ 521.997378][T11699] em28xx 8-1:0.0: writing to i2c device at 0xe failed (error=-19) [ 522.038499][ T7666] em28xx 8-1:0.0: Disconnecting em28xx [ 522.085906][ T5778] em28xx 8-1:0.0: Registering input extension [ 522.089127][T11763] netlink: 'syz.6.1689': attribute type 10 has an invalid length. [ 522.089789][ T7666] em28xx 8-1:0.0: Closing input extension [ 522.299513][ T7666] em28xx: Freeing device [ 522.394544][T11772] fuse: Bad value for 'fd' [ 522.469782][T11773] netlink: NAT attribute has 4 unknown bytes [ 522.469821][T11773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.479414][T11773] misc userio: No port type given on /dev/userio [ 525.013840][T11823] tipc: Enabled bearer , priority 10 [ 525.050866][T11828] netlink: NAT attribute has 4 unknown bytes [ 525.050902][T11828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.072618][T11828] misc userio: No port type given on /dev/userio [ 525.176580][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.177196][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.545998][T11839] netlink: 'syz.7.1714': attribute type 1 has an invalid length. [ 525.669010][T11839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.769549][T11843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.769988][T11843] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 525.800418][T11843] bond1: (slave gre1): Error -95 calling set_mac_address [ 525.921997][T10957] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 526.085508][T10957] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 526.088241][T10957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.108201][T10957] usb 8-1: config 0 descriptor?? [ 526.476460][T10957] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 526.480435][T11861] dlm: non-version read from control device 36 [ 526.492045][T10957] [drm:udl_init] *ERROR* Selecting channel failed [ 526.661062][T10957] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 526.661094][T10957] [drm] Initialized udl on minor 1 [ 526.668652][T10957] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 526.669102][T10957] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 526.672351][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 526.674173][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 526.674381][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 526.684210][T10957] usb 8-1: USB disconnect, device number 13 [ 527.290564][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1724'. [ 527.326434][T11867] netlink: 'syz.6.1724': attribute type 10 has an invalid length. [ 527.363970][T11871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.570887][T11874] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 527.612484][T11874] bond2 (unregistering): Released all slaves [ 528.604006][T11889] binfmt_misc: register: failed to install interpreter ./file0 [ 528.881006][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 529.173472][T11904] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1738'. [ 529.274920][T11908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.798831][T11926] bridge_slave_0: default FDB implementation only supports local addresses [ 529.811344][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 529.822114][ T7666] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 529.822310][ T5778] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 529.972692][ T5778] usb 7-1: Using ep0 maxpacket: 8 [ 529.973553][ T5778] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 529.974923][ T5778] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 529.974950][ T5778] usb 7-1: config 179 has no interface number 0 [ 529.974994][ T5778] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 529.975024][ T5778] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 529.975055][ T5778] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 529.975085][ T5778] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 529.975111][ T5778] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 529.975143][ T5778] usb 7-1: config 179 interface 65 has no altsetting 0 [ 529.975179][ T5778] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.979927][T11927] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 529.997575][ T7666] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.998975][ T7666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.999008][ T7666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.999033][ T7666] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.999079][ T7666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.053407][ T7666] usb 5-1: config 0 descriptor?? [ 530.179691][ T5778] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input43 [ 530.241551][T11927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.254869][T11927] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 530.529180][ T7666] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 530.620674][ T7666] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 530.745356][ T7666] usb 7-1: USB disconnect, device number 19 [ 530.745426][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 530.908408][ T10] usb 5-1: USB disconnect, device number 13 [ 531.159521][T11953] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.1757'. [ 531.479571][T11968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.480385][T11968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.629547][T11959] bridge_slave_0: default FDB implementation only supports local addresses [ 532.582030][ T5778] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 532.756700][ T5778] usb 8-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 532.763858][ T5778] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.763911][ T5778] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 532.785874][ T5778] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.785932][ T5778] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 532.821666][ T5778] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.821719][ T5778] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 532.821778][ T5778] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.841871][ T5778] usb 8-1: config 0 descriptor?? [ 532.868664][ T5778] rndis_host 8-1:0.0: rndis: master #0/ffff8880350de000 slave #1/0000000000000000 [ 534.721560][T10957] usb 8-1: USB disconnect, device number 14 [ 536.910816][ T5778] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 537.147984][ T5778] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 537.196285][ T5778] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.196332][ T5778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.348072][T12041] syzkaller1: entered promiscuous mode [ 537.348183][T12041] syzkaller1: entered allmulticast mode [ 537.396628][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.398675][ T5778] usb 4-1: Product: syz [ 537.399831][ T5778] usb 4-1: Manufacturer: syz [ 537.401473][ T5778] usb 4-1: SerialNumber: syz [ 537.652856][ T5778] usb 4-1: 0:1 : does not exist [ 537.853285][ T5778] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 537.858977][ T5778] usb 4-1: unit 0 not found! [ 537.939113][ T5778] usb 4-1: USB disconnect, device number 15 [ 538.026973][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 538.026996][ T31] audit: type=1326 audit(1790431168.222:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.027228][ T31] audit: type=1326 audit(1790431168.222:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.027750][ T31] audit: type=1326 audit(1790431168.222:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.028348][ T31] audit: type=1326 audit(1790431168.222:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.028553][ T31] audit: type=1326 audit(1790431168.222:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.028721][ T31] audit: type=1326 audit(1790431168.222:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.028929][ T31] audit: type=1326 audit(1790431168.222:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.029104][ T31] audit: type=1326 audit(1790431168.222:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.029260][ T31] audit: type=1326 audit(1790431168.222:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.029420][ T31] audit: type=1326 audit(1790431168.222:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.6.1789" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6e99e159 code=0x7ffc0000 [ 538.350169][T12065] bridge_slave_0: default FDB implementation only supports local addresses [ 538.467580][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.971615][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 540.267620][T12086] dvmrp0: entered allmulticast mode [ 540.312730][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 540.313494][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 540.321552][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.321584][ T10] usb 5-1: Product: syz [ 540.321601][ T10] usb 5-1: Manufacturer: syz [ 540.321618][ T10] usb 5-1: SerialNumber: syz [ 540.383655][ T10] usb 5-1: config 0 descriptor?? [ 540.392741][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 540.392791][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 540.392791][ T10] [ 540.392836][ T10] usb 5-1: selecting invalid altsetting 3 [ 540.392854][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 540.392854][ T10] [ 540.392871][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 540.470031][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.482133][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 540.482193][ T10] usb 5-1: media controller created [ 540.482251][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 540.482268][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 540.482324][ T10] dvb-usb: MAC address reading failed. [ 540.534617][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.656324][T12085] dvmrp0: left allmulticast mode [ 540.680516][T12096] dvb-usb: bulk message failed: -22 (7/0) [ 540.680541][T12096] pctv452e: I2C error -22; AA 02 00 00 10 -> aa 02 31 03 00 00 10 [ 540.680691][T12096] dvb-usb: bulk message failed: -22 (7/0) [ 540.680707][T12096] pctv452e: I2C error -22; AA 03 00 00 10 -> aa 03 31 03 00 00 10 [ 540.680818][T12096] dvb-usb: bulk message failed: -22 (7/0) [ 540.680834][T12096] pctv452e: I2C error -22; AA 04 00 00 10 -> aa 04 31 03 00 00 10 [ 540.680925][T12096] dvb-usb: bulk message failed: -22 (7/0) [ 540.680939][T12096] pctv452e: I2C error -22; AA 05 00 00 10 -> aa 05 31 03 00 00 10 [ 540.745856][T12097] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1803'. [ 540.805547][ T10] DVB: Unable to find symbol stb0899_attach() [ 540.805569][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 541.073687][ T10] rc_core: IR keymap rc-tt-1500 not found [ 541.073711][ T10] Registered IR keymap rc-empty [ 541.074977][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 541.107466][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input45 [ 541.128471][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 541.128499][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 541.128499][ T10] [ 541.128512][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 541.156536][ T10] usb 5-1: USB disconnect, device number 14 [ 541.261727][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 543.126485][T12149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.238434][T12152] binder: 12150:12152 ioctl c0306201 0 returned -14 [ 543.543339][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 543.702487][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 543.705047][ T30] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 543.708966][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.708995][ T30] usb 4-1: Product: syz [ 543.709012][ T30] usb 4-1: Manufacturer: syz [ 543.709030][ T30] usb 4-1: SerialNumber: syz [ 543.715198][ T30] usb 4-1: config 0 descriptor?? [ 543.728460][ T30] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 543.728508][ T30] pctv452e: pctv452e_power_ctrl: 1 [ 543.728508][ T30] [ 543.728554][ T30] usb 4-1: selecting invalid altsetting 3 [ 543.728572][ T30] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 543.728572][ T30] [ 543.728590][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 543.827961][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.840235][ T30] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 543.840298][ T30] usb 4-1: media controller created [ 543.840383][ T30] dvb-usb: bulk message failed: -22 (8/0) [ 543.840401][ T30] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 543.865668][ T30] dvb-usb: MAC address reading failed. [ 543.946610][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.602004][ T5778] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 544.961399][ T30] DVB: Unable to find symbol stb0899_attach() [ 544.961420][ T30] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 545.205295][ T30] rc_core: IR keymap rc-tt-1500 not found [ 545.205318][ T30] Registered IR keymap rc-empty [ 545.207258][ T30] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 545.234542][ T30] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input46 [ 545.239715][ T30] dvb-usb: schedule remote query interval to 100 msecs. [ 545.239749][ T30] pctv452e: pctv452e_power_ctrl: 0 [ 545.239749][ T30] [ 545.239763][ T30] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 545.281939][ T30] usb 4-1: USB disconnect, device number 16 [ 545.671792][ T30] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 547.057277][T12234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1846'. [ 547.132388][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 547.302033][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 547.461621][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 547.472522][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 547.478475][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.525862][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 547.525885][ T9] pvrusb2: ********** [ 547.525893][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 547.525907][ T9] pvrusb2: Important functionality might not be entirely working. [ 547.525918][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 547.525930][ T9] pvrusb2: ********** [ 547.723124][ T2349] pvrusb2: Invalid write control endpoint [ 547.927211][ T30] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 547.954594][ T9] usb 8-1: USB disconnect, device number 15 [ 548.123028][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 548.128321][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 548.130701][ T2349] pvrusb2: Invalid write control endpoint [ 548.130716][ T2349] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 548.130728][ T2349] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 548.130739][ T2349] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 548.152428][ T2349] pvrusb2: Device being rendered inoperable [ 548.153300][ T2349] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 548.153352][ T2349] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 548.193468][ T2349] pvrusb2: Attached sub-driver cx25840 [ 548.199315][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 548.199332][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 548.205330][ T30] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 548.205362][ T30] usb 4-1: config 0 has no interface number 0 [ 548.205960][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.206453][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.209486][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.209513][ T30] usb 4-1: Product: syz [ 548.209531][ T30] usb 4-1: Manufacturer: syz [ 548.209549][ T30] usb 4-1: SerialNumber: syz [ 548.263281][ T30] usb 4-1: config 0 descriptor?? [ 549.627219][ T30] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 550.695909][T12293] bridge_slave_0: default FDB implementation only supports local addresses [ 551.181208][T12308] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.375259][ T30] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 551.375534][ T30] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 551.389606][ T30] usb 4-1: USB disconnect, device number 17 [ 551.487183][T12242] syz.3.1850 (12242) used greatest stack depth: 19168 bytes left [ 551.552024][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 551.682335][ T9] usb 5-1: device descriptor read/64, error -71 [ 551.907244][T12329] bridge_slave_0: default FDB implementation only supports local addresses [ 551.922049][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 552.052509][ T9] usb 5-1: device descriptor read/64, error -71 [ 552.187593][ T9] usb usb5-port1: attempt power cycle [ 552.564872][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 552.596676][ T9] usb 5-1: device descriptor read/8, error -71 [ 552.754497][T12342] binder: 12341:12342 ioctl c0306201 0 returned -14 [ 552.755532][T12346] fuse: Bad value for 'fd' [ 552.831993][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 552.854864][ T9] usb 5-1: device descriptor read/8, error -71 [ 552.915945][T12344] bridge_slave_0: default FDB implementation only supports local addresses [ 552.962577][ T9] usb usb5-port1: unable to enumerate USB device [ 553.273043][T12363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 553.502058][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 553.651984][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 553.653452][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 553.654493][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.694645][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 553.694663][ T9] pvrusb2: ********** [ 553.694672][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 553.694686][ T9] pvrusb2: Important functionality might not be entirely working. [ 553.694696][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 553.694709][ T9] pvrusb2: ********** [ 553.781413][T12385] fuse: Bad value for 'fd' [ 553.797945][T12387] bridge_slave_0: default FDB implementation only supports local addresses [ 553.887550][ T2349] pvrusb2: Invalid write control endpoint [ 554.018649][T12392] binder: 12391:12392 ioctl c0306201 0 returned -14 [ 554.108408][ T30] usb 4-1: USB disconnect, device number 18 [ 554.110815][ T2349] pvrusb2: Invalid write control endpoint [ 554.110830][ T2349] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 554.110842][ T2349] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 554.110852][ T2349] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 554.110865][ T2349] pvrusb2: Device being rendered inoperable [ 554.110988][ T2349] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 554.111035][ T2349] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 554.177630][ T2349] pvrusb2: Attached sub-driver cx25840 [ 554.177648][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 554.177660][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 554.544812][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.547613][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.724100][T12402] bridge_slave_0: left allmulticast mode [ 554.724131][T12402] bridge_slave_0: left promiscuous mode [ 554.724376][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.799428][T12402] bridge_slave_1: left allmulticast mode [ 554.799458][T12402] bridge_slave_1: left promiscuous mode [ 554.799674][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.859332][T12402] bond0: (slave bond_slave_0): Releasing backup interface [ 554.901089][T12402] bond0: (slave bond_slave_1): Releasing backup interface [ 554.935969][T12402] team0: Port device team_slave_0 removed [ 554.976761][T12402] team0: Port device team_slave_1 removed [ 554.990625][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.998539][T12402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.033343][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.044827][T12402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.079234][T12402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 555.444446][T12432] binder: 12429:12432 ioctl c0306201 0 returned -14 [ 556.084395][T12456] erspan1: entered promiscuous mode [ 556.319706][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 556.319728][ T31] audit: type=1326 audit(1790431186.512:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.320972][ T31] audit: type=1326 audit(1790431186.512:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.384147][ T31] audit: type=1326 audit(1790431186.572:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.384213][ T31] audit: type=1326 audit(1790431186.582:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.384274][ T31] audit: type=1326 audit(1790431186.582:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.394881][ T31] audit: type=1326 audit(1790431186.592:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.394939][ T31] audit: type=1326 audit(1790431186.592:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.394988][ T31] audit: type=1326 audit(1790431186.592:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.397392][ T31] audit: type=1326 audit(1790431186.592:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.423914][ T31] audit: type=1326 audit(1790431186.612:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.7.1938" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e099e159 code=0x7ffc0000 [ 556.714625][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 556.875533][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.889140][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.889178][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.889204][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.889261][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.911039][ T9] usb 8-1: config 0 descriptor?? [ 557.144385][T12475] binder: 12474:12475 ioctl c0306201 0 returned -14 [ 557.222492][ T30] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 557.372080][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 557.374369][ T30] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 557.376187][ T30] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 557.376214][ T30] usb 4-1: config 0 has no interface number 0 [ 557.376264][ T30] usb 4-1: config 0 interface 12 has no altsetting 0 [ 557.387508][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.387542][ T30] usb 4-1: Product: syz [ 557.387559][ T30] usb 4-1: Manufacturer: syz [ 557.387576][ T30] usb 4-1: SerialNumber: syz [ 557.452663][ T30] usb 4-1: config 0 descriptor?? [ 557.537116][ T9] hid_parser_main: 5 callbacks suppressed [ 557.537144][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.537173][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.537198][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x4 [ 557.537224][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.537249][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.537274][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.537299][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x2 [ 557.537324][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.537350][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.537375][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 557.682739][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 557.772658][T12491] syzkaller0: entered promiscuous mode [ 557.772685][T12491] syzkaller0: entered allmulticast mode [ 558.513782][ T30] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 558.513845][ T30] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 558.513866][ T30] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 558.513950][ T30] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 558.554836][ T30] usb 4-1: USB disconnect, device number 19 [ 558.953613][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1959'. [ 559.081469][T12512] binder: 12510:12512 ioctl c0306201 0 returned -14 [ 559.246288][T12519] batman_adv: batadv0: Adding interface: dummy0 [ 559.246310][T12519] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.246824][T12519] batman_adv: batadv0: Interface activated: dummy0 [ 559.319689][T12522] netlink: 'syz.4.1962': attribute type 10 has an invalid length. [ 559.319716][T12522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1962'. [ 559.428620][T12522] batadv0: entered promiscuous mode [ 559.428649][T12522] batadv0: entered allmulticast mode [ 559.447570][T12522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.455805][T12522] bridge0: port 1(batadv0) entered blocking state [ 559.459944][T12522] bridge0: port 1(batadv0) entered disabled state [ 559.632195][ T5739] usb 8-1: reset high-speed USB device number 16 using dummy_hcd [ 560.060247][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 560.060274][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 561.337075][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 561.494543][ T9] usb 8-1: USB disconnect, device number 16 [ 561.681627][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 561.681651][ T31] audit: type=1326 audit(1790431191.872:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 561.681705][ T31] audit: type=1326 audit(1790431191.872:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 561.681753][ T31] audit: type=1326 audit(1790431191.872:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 561.681802][ T31] audit: type=1326 audit(1790431191.872:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 561.754234][ T31] audit: type=1326 audit(1790431191.952:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 561.754310][ T31] audit: type=1326 audit(1790431191.952:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 561.754361][ T31] audit: type=1326 audit(1790431191.952:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 561.754409][ T31] audit: type=1326 audit(1790431191.952:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786099e159 code=0x7ffc0000 [ 562.033839][T12560] binder: 12559:12560 ioctl c0306201 0 returned -14 [ 562.188923][T12569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.190629][T12569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.234258][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.234327][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.439730][T12573] batman_adv: batadv0: Interface deactivated: dummy0 [ 562.452246][T12573] batman_adv: batadv0: Removing interface: dummy0 [ 562.462330][T12573] batadv0: left allmulticast mode [ 562.462356][T12573] batadv0: left promiscuous mode [ 562.462606][T12573] bridge0: port 1(batadv0) entered disabled state [ 562.510600][T12573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 564.200079][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1985'. [ 564.875185][T12605] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 564.984963][T12612] binder: 12611:12612 ioctl c0306201 0 returned -14 [ 565.019007][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.021479][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.055606][T12605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.134960][T12609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.135419][T12609] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 565.147260][T12609] bond1: (slave gre1): Error -95 calling set_mac_address [ 565.293773][T12619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 565.762883][T12635] syzkaller0: entered promiscuous mode [ 565.762910][T12635] syzkaller0: entered allmulticast mode [ 565.773827][T12629] tipc: Enabled bearer , priority 0 [ 565.795753][T12628] tipc: Resetting bearer [ 565.848905][T12628] tipc: Disabling bearer [ 566.636572][T12663] binder: 12662:12663 ioctl c0306201 0 returned -14 [ 566.952250][T12677] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 567.245229][T12677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.359617][T12683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.360086][T12683] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 567.360976][T12683] bond2: (slave gre1): Error -95 calling set_mac_address [ 567.393078][ T5778] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 567.486514][T12695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 567.554015][ T5778] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 567.555223][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.584827][ T5778] usb 4-1: config 0 descriptor?? [ 567.845884][ T5778] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 567.846378][ T5778] [drm:udl_init] *ERROR* Selecting channel failed [ 567.900199][ T5778] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 567.900228][ T5778] [drm] Initialized udl on minor 1 [ 567.911742][ T5778] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 567.940020][ T5778] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 567.974461][ T5778] usb 4-1: USB disconnect, device number 20 [ 568.005442][ T5604] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 568.306735][T12721] syzkaller0: entered promiscuous mode [ 568.306762][T12721] syzkaller0: entered allmulticast mode [ 568.934068][T12735] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.934268][T12735] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.022901][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 569.129038][T12735] bridge_slave_0: left allmulticast mode [ 569.135536][T12735] bridge_slave_0: left promiscuous mode [ 569.137371][T12735] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.186028][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 569.186085][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 569.204064][T12735] bridge_slave_1: left allmulticast mode [ 569.204095][T12735] bridge_slave_1: left promiscuous mode [ 569.204344][T12735] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.227570][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 569.227607][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.229814][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.229839][ T9] usb 4-1: Product: syz [ 569.229856][ T9] usb 4-1: Manufacturer: syz [ 569.229873][ T9] usb 4-1: SerialNumber: syz [ 569.298063][T12735] bond0: (slave bond_slave_0): Releasing backup interface [ 569.651069][T12744] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 569.682597][ T187] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 569.715258][T12735] team0: Port device team_slave_0 removed [ 569.728630][T12735] team0: Port device team_slave_1 removed [ 569.731682][T12735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.736873][T12735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.741840][T12735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.749155][T12735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.767453][T12735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.862159][ T187] usb 5-1: Using ep0 maxpacket: 32 [ 569.868194][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 569.868248][ T187] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 569.869378][ T187] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 569.869405][ T187] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 569.869428][ T187] usb 5-1: config 14 has no interface number 0 [ 569.869477][ T187] usb 5-1: config 14 has no interface number 1 [ 569.869542][ T187] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 569.869569][ T187] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 569.869624][ T187] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 569.869653][ T187] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 569.869686][ T187] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 569.869715][ T187] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.869772][ T187] usb 5-1: config 14 interface 57 has no altsetting 0 [ 569.869795][ T187] usb 5-1: config 14 interface 228 has no altsetting 0 [ 569.899361][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.900173][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.010479][T12736] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2036'. [ 570.052410][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.052443][ T187] usb 5-1: Product: syz [ 570.052460][ T187] usb 5-1: Manufacturer: syz [ 570.052476][ T187] usb 5-1: SerialNumber: syz [ 570.128796][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.128886][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 570.326427][ T9] usb 4-1: USB disconnect, device number 21 [ 570.541836][ T187] legousbtower 5-1:14.57: interrupt endpoints not found [ 570.656914][ T5731] udevd[5731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.750841][T12775] openvswitch: netlink: IP tunnel TTL not specified. [ 570.757349][T12774] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 570.882366][T12774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.900490][T12778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.909343][T12778] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 570.911315][T12778] bond2: (slave gre1): Error -95 calling set_mac_address [ 570.946969][ T187] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 570.992227][ T187] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 571.551523][T12791] usb 5-1: LEGO USB Tower reset control request failed [ 571.998744][ T187] usb 5-1: USB disconnect, device number 19 [ 572.470362][ T187] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 572.967055][T12803] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2056'. [ 575.973745][T12831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.907969][T12847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2070'. [ 577.931897][T12845] syzkaller0: entered promiscuous mode [ 577.944105][T12845] syzkaller0: entered allmulticast mode [ 578.000191][T12845] tipc: Enabled bearer , priority 0 [ 578.027521][T12843] tipc: Resetting bearer [ 578.087430][T12843] tipc: Disabling bearer [ 578.583268][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 578.921658][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.934852][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.341743][T12882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 579.732279][T12890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 580.874611][ T187] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 581.025680][ T187] usb 4-1: not running at top speed; connect to a high speed hub [ 581.025718][ T187] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 581.027037][ T187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.027063][ T187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 581.027114][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.076884][ T187] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 581.275692][ T187] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1). [ 581.477582][ T187] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 581.479387][ T187] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 581.479473][ T187] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 581.532920][ T187] usb 4-1: USB disconnect, device number 22 [ 582.190119][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.195402][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.472071][T12937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.162018][ T5778] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 583.552056][ T5778] usb 5-1: Using ep0 maxpacket: 16 [ 583.554887][ T5778] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 583.556235][ T5778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 583.595990][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.596022][ T5778] usb 5-1: Product: syz [ 583.596039][ T5778] usb 5-1: Manufacturer: syz [ 583.596056][ T5778] usb 5-1: SerialNumber: syz [ 583.661629][ T5778] usb 5-1: config 0 descriptor?? [ 583.690888][ T5778] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 583.690931][ T5778] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 583.865355][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.883442][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.127630][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.128145][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.425217][ T5778] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 584.623541][ T7666] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 584.806713][ T7666] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 584.809932][ T7666] usb 4-1: config 0 has no interfaces? [ 584.810128][ T7666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.094958][ T7666] usb 4-1: config 0 descriptor?? [ 585.282618][ T5778] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 585.283019][ T5778] em28xx 5-1:0.0: board has no eeprom [ 585.852225][ T5778] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 585.852332][ T5778] em28xx 5-1:0.0: dvb set to bulk mode. [ 585.945935][ T5604] em28xx 5-1:0.0: Binding DVB extension [ 586.445010][ T5778] usb 5-1: USB disconnect, device number 20 [ 586.783982][ T5778] em28xx 5-1:0.0: Disconnecting em28xx [ 587.379754][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.380211][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.189999][ T5604] em28xx 5-1:0.0: Registering input extension [ 588.190269][ T5778] em28xx 5-1:0.0: Closing input extension [ 588.368990][ T5778] em28xx: Freeing device [ 588.936615][T13023] netlink: NAT attribute has 4 unknown bytes [ 588.936654][T13023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.989583][T13016] misc userio: No port type given on /dev/userio [ 589.114355][ T5778] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 589.212693][T13029] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2133'. [ 589.472101][ T5778] usb 5-1: device descriptor read/64, error -71 [ 589.512453][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 589.657820][ T7666] usb 4-1: string descriptor 0 read error: -71 [ 589.680357][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 589.701693][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.713887][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.902000][ T5778] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 589.947773][ T7666] usb 4-1: USB disconnect, device number 23 [ 590.193499][ T5778] usb 5-1: device descriptor read/64, error -71 [ 590.302291][ T5778] usb usb5-port1: attempt power cycle [ 590.553328][T13035] overlayfs: missing 'lowerdir' [ 590.585655][ T187] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 590.586010][ C0] raw-gadget.3 gadget.6: ignoring, device is not running [ 590.592658][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.605638][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.712527][ T187] usb 7-1: device descriptor read/64, error -32 [ 590.952238][ T187] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 590.952713][ C0] raw-gadget.3 gadget.6: ignoring, device is not running [ 591.042068][ T5778] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 591.063606][ T5778] usb 5-1: device descriptor read/8, error -71 [ 591.084136][ T187] usb 7-1: device descriptor read/64, error -32 [ 591.187428][ T9] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 591.203360][ T187] usb usb7-port1: attempt power cycle [ 591.397709][ T9] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 591.420680][ T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 591.421094][ T9] usb 8-1: media controller created [ 591.423559][ T5778] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 591.552180][ T5778] usb 5-1: device descriptor read/8, error -71 [ 591.603744][ T187] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 591.640574][ T187] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 591.673307][ T187] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.675298][ T187] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 591.742251][ T5778] usb usb5-port1: unable to enumerate USB device [ 591.751239][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 591.758897][ T187] usb 7-1: Product: syz [ 591.769002][ T187] usb 7-1: Manufacturer: syz [ 592.064379][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.092058][ T7666] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 592.167682][T13032] usb 8-1: dvb_usb_v2: could not submit urb no. 0 - get them all back [ 592.167737][T13032] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000061: 0000 [#1] SMP KASAN NOPTI [ 592.187967][T13032] KASAN: null-ptr-deref in range [0x0000000000000308-0x000000000000030f] [ 592.196391][T13032] CPU: 0 UID: 0 PID: 13032 Comm: syz.6.2135 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.207378][T13032] Tainted: [L]=SOFTLOCKUP [ 592.211693][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.221744][T13032] RIP: 0010:mxl111sf_ep6_streaming_ctrl+0x2e/0x2e0 [ 592.228260][T13032] Code: 55 41 57 41 56 41 54 53 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 10 62 93 f9 49 8d 9e 08 03 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 53 66 03 fa 48 8b 1b 48 83 c3 38 [ 592.247872][T13032] RSP: 0018:ffffc90006217b30 EFLAGS: 00010212 [ 592.253945][T13032] RAX: 0000000000000061 RBX: 0000000000000308 RCX: 0000000000080000 [ 592.261912][T13032] RDX: ffffc9001ce87000 RSI: 00000000000008ee RDI: 00000000000008ef [ 592.269888][T13032] RBP: 0000000000000001 R08: ffffc90006217647 R09: 1ffff92000c42ec8 [ 592.277859][T13032] R10: dffffc0000000000 R11: ffffffff883479d0 R12: dffffc0000000000 [ 592.285831][T13032] R13: ffff88807a4b13b8 R14: 0000000000000000 R15: ffff88807a4b08d8 [ 592.293811][T13032] FS: 00007f9a6cbf66c0(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 592.302746][T13032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.309327][T13032] CR2: 000000110c2b2398 CR3: 000000005a596000 CR4: 0000000000350ef0 [ 592.317304][T13032] Call Trace: [ 592.320582][T13032] [ 592.323500][T13032] ? __pfx_mxl111sf_ep6_streaming_ctrl+0x10/0x10 [ 592.329828][T13032] dvb_usb_start_feed+0x57a/0xc70 [ 592.334871][T13032] ? __pfx_dvb_usb_start_feed+0x10/0x10 [ 592.340430][T13032] dmx_ts_feed_start_filtering+0x129/0x220 [ 592.346240][T13032] dvb_dmxdev_filter_start+0x434/0x10d0 [ 592.351812][T13032] dvb_demux_do_ioctl+0x48b/0x540 [ 592.356857][T13032] dvb_usercopy+0x199/0x2e0 [ 592.361368][T13032] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 592.366918][T13032] ? __pfx_dvb_usercopy+0x10/0x10 [ 592.371962][T13032] ? __fget_files+0x3a2/0x420 [ 592.376656][T13032] ? __fget_files+0x2a/0x420 [ 592.381276][T13032] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 592.386574][T13032] dvb_demux_ioctl+0x29/0x40 [ 592.391177][T13032] __se_sys_ioctl+0xfc/0x170 [ 592.395766][T13032] do_syscall_64+0x166/0x520 [ 592.400362][T13032] ? trace_irq_disable+0x3b/0x140 [ 592.405382][T13032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.411446][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.417374][T13032] RIP: 0033:0x7f9a6e99e159 [ 592.421791][T13032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.441476][T13032] RSP: 002b:00007f9a6cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.449893][T13032] RAX: ffffffffffffffda RBX: 00007f9a6ec25fa0 RCX: 00007f9a6e99e159 [ 592.457859][T13032] RDX: 0000200000000100 RSI: 0000000040146f2c RDI: 0000000000000004 [ 592.465861][T13032] RBP: 00007f9a6ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 592.473830][T13032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.481795][T13032] R13: 00007f9a6ec26038 R14: 00007f9a6ec25fa0 R15: 00007ffd61ddeee8 [ 592.489770][T13032] [ 592.492777][T13032] Modules linked in: [ 592.497714][T13032] ---[ end trace 0000000000000000 ]--- [ 592.524950][ T9] usb 8-1: selecting invalid altsetting 1 [ 592.524972][ T9] set interface failed [ 592.524987][ T9] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 592.525005][ T9] error writing reg: 0xff, val: 0x00 [ 592.544411][ T7666] usb 4-1: not running at top speed; connect to a high speed hub [ 592.544445][ T7666] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 592.569675][ T7666] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.569704][ T7666] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 592.569747][ T7666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.592989][T13032] RIP: 0010:mxl111sf_ep6_streaming_ctrl+0x2e/0x2e0 [ 592.593032][T13032] Code: 55 41 57 41 56 41 54 53 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 10 62 93 f9 49 8d 9e 08 03 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 53 66 03 fa 48 8b 1b 48 83 c3 38 [ 592.593053][T13032] RSP: 0018:ffffc90006217b30 EFLAGS: 00010212 [ 592.593076][T13032] RAX: 0000000000000061 RBX: 0000000000000308 RCX: 0000000000080000 [ 592.593093][T13032] RDX: ffffc9001ce87000 RSI: 00000000000008ee RDI: 00000000000008ef [ 592.593110][T13032] RBP: 0000000000000001 R08: ffffc90006217647 R09: 1ffff92000c42ec8 [ 592.593128][T13032] R10: dffffc0000000000 R11: ffffffff883479d0 R12: dffffc0000000000 [ 592.593146][T13032] R13: ffff88807a4b13b8 R14: 0000000000000000 R15: ffff88807a4b08d8 [ 592.593167][T13032] FS: 00007f9a6cbf66c0(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 592.593189][T13032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.593206][T13032] CR2: 000056212c4d8000 CR3: 000000005a596000 CR4: 0000000000350ef0 [ 592.593229][T13032] Kernel panic - not syncing: Fatal exception [ 592.711654][T13032] Kernel Offset: disabled [ 592.715971][T13032] Rebooting in 86400 seconds..