last executing test programs: 55.063893946s ago: executing program 0 (id=678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000400)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000580)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 53.476511867s ago: executing program 0 (id=684): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0x1000a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x0, 0x3c, 0x72, &(0x7f0000000dc0)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000e00)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000f80)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000009c0)={0x4, 0x0, 0x0, 0x228, 0x138, 0x1, 0x0, 0xa010, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x2080, 0x0, 0xf0, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1024', 0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}, ' 1 same_cpu_crypt'}}]}) 52.886488428s ago: executing program 0 (id=687): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x2b7, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 49.267308997s ago: executing program 0 (id=691): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) write(r4, &(0x7f0000000400)='PASV\r\n', 0x6) r5 = accept4(r2, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 47.700660096s ago: executing program 0 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x2) r0 = add_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000580)=""/4096, 0x1000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = gettid() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000027c0), 0x6) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000002800)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4038587a, &(0x7f0000002940)={{0xffffffffffffffff, &(0x7f0000002800)='nsfs\x00', 0x200, &(0x7f0000002840)={@_ha_fsid={[0x2, 0x7]}, {0x4, 0x7ff, 0x2, 0xfffffffffffffff7}}, 0x6, &(0x7f0000002880)={@_ha_fsid}, &(0x7f00000028c0)=0x7}, {[0x1, 0x9, 0xfff, 0xf2]}, 0xfe400000, 0x0, &(0x7f0000002900)}) epoll_pwait(r5, &(0x7f0000001640)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000002900)={[0x100]}, 0x8) timer_create(0x3, &(0x7f0000000080)={0x0, 0x80000021, 0x800000000004, @tid=r2}, &(0x7f00000015c0)) timer_settime(0x0, 0x0, &(0x7f0000001600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 46.714943067s ago: executing program 0 (id=698): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x1f4, &(0x7f0000000d00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1be, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x7, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x2, "fe906d26efe39393fe08f73eabc5977b"}, {0x22, 0x19, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac"}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e6"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000001600156f29bd70000000df270a000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)) dup(0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) fdatasync(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)='3', 0x1}], 0x1) 29.943093986s ago: executing program 32 (id=698): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x1f4, &(0x7f0000000d00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1be, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x7, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x2, "fe906d26efe39393fe08f73eabc5977b"}, {0x22, 0x19, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac"}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e6"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000001600156f29bd70000000df270a000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)) dup(0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) fdatasync(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)='3', 0x1}], 0x1) 11.405564936s ago: executing program 4 (id=758): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi3\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000480)={0x15020, 0x3, 0x1}, 0x18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r0, 0x1c, &(0x7f0000000680)={{0xa, 0x4ea2, 0x7, @remote, 0x2}}}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x78, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '0'}, 0x20, '16', 0x20, 'J', ' 1 journal_crypt:ctr(aes):0123456789abcdef0123456789abcdef'}}]}) 11.136949313s ago: executing program 3 (id=760): io_setup(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x2, &(0x7f0000000100)=[{}, {}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) socket$nl_route(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 10.796450168s ago: executing program 2 (id=761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x1000a) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000d00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r2, 0x0, 0x3c, 0x72, &(0x7f0000000dc0)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000e00)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000f80)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='270', 0x3) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000009c0)={0x4, 0x0, 0x0, 0x228, 0x138, 0x1, 0x0, 0xa010, 0x0, 0x0, @by_dev={r5}, [@crypt={0x0, 0x2080, 0x0, 0xf0, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1024', 0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}, ' 1 same_cpu_crypt'}}]}) r6 = fsopen(&(0x7f0000001100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001140)='fsid\x00', &(0x7f0000001180)='00000000-0000-0000-0000-000000000000\x00', 0x0) 9.441504706s ago: executing program 4 (id=762): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x9, 0x18b041) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x40013, r2, 0x8000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000340)="2efdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000002b00)={0x40, 0x4}, 0x10) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000003c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000002a40)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) connect$l2tp6(r7, &(0x7f0000002a80)={0xa, 0x0, 0x7fe8, @loopback, 0x7, 0xfffffffd}, 0x20) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000002ac0)) readv(r6, &(0x7f00000005c0)=[{&(0x7f00000009c0)=""/30, 0x1e}, {&(0x7f0000000a00)=""/4097, 0x1001}, {&(0x7f0000001a40)=""/4082, 0xff2}], 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x7, &(0x7f0000000880)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0xe, 0x0, &(0x7f0000000980)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000021c767a58207b7e7d80030"], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(0xffffffffffffffff, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 9.439990996s ago: executing program 1 (id=771): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x15, @loopback}, 0x10) write(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000280)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 9.438779546s ago: executing program 3 (id=763): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r4, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) 7.995243553s ago: executing program 4 (id=764): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000900)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x2, 0x101000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 7.906397412s ago: executing program 2 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 7.82644837s ago: executing program 1 (id=766): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x1c, &(0x7f00000009c0)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000a00)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a40)={r1, 0x0, "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"}, &(0x7f0000000bc0)=0xfebd) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[{0x18, 0x110, 0xd, "01"}], 0x18}, 0x0) 7.332651631s ago: executing program 2 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 6.84670066s ago: executing program 3 (id=768): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0x1000a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x0, 0x3c, 0x72, &(0x7f0000000dc0)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000e00)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000f80)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000009c0)={0x4, 0x0, 0x0, 0x228, 0x138, 0x1, 0x0, 0xa010, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x2080, 0x0, 0xf0, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1024', 0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}, ' 1 same_cpu_crypt'}}]}) 6.827639312s ago: executing program 2 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 6.519736323s ago: executing program 1 (id=770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000700)={0x3, &(0x7f0000000740)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]}) mount(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0)='nfs\x00', 0x0, &(0x7f0000000800)) syz_emit_ethernet(0x22, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r1, 0x407, 0x2) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20024040) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f0000000440), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./gadget\x00', &(0x7f00000005c0)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/dummy_udc\x00', 0x2, 0x84) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000840)) write(r5, &(0x7f0000000640)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 6.384771157s ago: executing program 2 (id=772): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi3\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000480)={0x15020, 0x3, 0x1}, 0x18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r0, 0x1c, &(0x7f0000000680)={{0xa, 0x4ea2, 0x7, @remote, 0x2}}}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x78, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '0'}, 0x20, '16', 0x20, 'J', ' 1 journal_crypt:ctr(aes):0123456789abcdef0123456789abcdef'}}]}) 5.125970325s ago: executing program 1 (id=773): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000192c0)={'dummy0\x00', @multicast}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000019080)={0x0, 0x0, &(0x7f00000190c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000019140)) sendmsg$nl_route(r2, &(0x7f0000019180)={0x0, 0x0, &(0x7f00000191c0)={&(0x7f0000019200)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.125817185s ago: executing program 3 (id=774): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c204", @ANYRESDEC], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x1ff, 0x202) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={@private=0xa010102, 0x1, 0x0, 0x90, 0x0, [{@broadcast}, {}, {@remote}, {@remote}, {@multicast2}, {@private}, {@private}, {@initdev}, {@multicast1}]}}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x54, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339162471f400"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40840}, 0x80) 3.692494151s ago: executing program 4 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x1000a) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000d00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r2, 0x0, 0x3c, 0x72, &(0x7f0000000dc0)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000e00)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000f80)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='270', 0x3) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000009c0)={0x4, 0x0, 0x0, 0x228, 0x138, 0x1, 0x0, 0xa010, 0x0, 0x0, @by_dev={r5}, [@crypt={0x0, 0x2080, 0x0, 0xf0, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1024', 0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}, ' 1 same_cpu_crypt'}}]}) r6 = fsopen(&(0x7f0000001100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001140)='fsid\x00', &(0x7f0000001180)='00000000-0000-0000-0000-000000000000\x00', 0x0) 814.133176ms ago: executing program 1 (id=776): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000240), 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000280)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 720.864245ms ago: executing program 4 (id=777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 367.891262ms ago: executing program 4 (id=778): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r4, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) 366.415392ms ago: executing program 3 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 292.09928ms ago: executing program 2 (id=780): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x1c, &(0x7f00000009c0)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000a00)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a40)={r1, 0x0, "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"}, &(0x7f0000000bc0)=0xfebd) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[{0x18, 0x110, 0xd, "01"}], 0x18}, 0x0) 280.974281ms ago: executing program 1 (id=781): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x2b7, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 0s ago: executing program 3 (id=782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000700)={0x3, &(0x7f0000000740)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]}) mount(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0)='nfs\x00', 0x0, &(0x7f0000000800)) syz_emit_ethernet(0x22, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r1, 0x407, 0x2) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20024040) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f0000000440), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./gadget\x00', &(0x7f00000005c0)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/dummy_udc\x00', 0x2, 0x84) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000840)) write(r5, &(0x7f0000000640)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) kernel console output (not intermixed with test programs): 63 [ 144.584227][ T5081] comedi: valid board names for amplc_pc236 driver are: [ 144.592353][ T5081] pc36at [ 144.595436][ T5081] comedi: valid board names for amplc_dio200 driver are: [ 144.603046][ T5081] pc212e [ 144.606144][ T5081] pc214e [ 144.609559][ T5081] pc215e [ 144.615230][ T5081] pc218e [ 144.621840][ T5081] pc272e [ 144.632052][ T5081] comedi: valid board names for comedi_parport driver are: [ 144.649520][ T5081] comedi_parport [ 144.658010][ T5081] comedi: valid board names for comedi_test driver are: [ 144.673076][ T5081] comedi_test [ 144.681335][ T5081] comedi: valid board names for comedi_bond driver are: [ 144.701006][ T5081] comedi_bond [ 145.161833][ T5190] gadgetfs: bound to dummy_udc driver [ 145.266834][ T4360] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.709880][ T22] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 146.020822][ T4360] usb 2-1: Using ep0 maxpacket: 16 [ 146.045719][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 146.100493][ T4360] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.156987][ T22] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 146.185531][ T22] usb 3-1: can't read configurations, error -71 [ 146.200805][ T4360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.251188][ T4360] usb 2-1: Product: syz [ 146.256355][ T4360] usb 2-1: Manufacturer: syz [ 146.310058][ T4360] usb 2-1: SerialNumber: syz [ 146.346947][ T4360] usb 2-1: config 0 descriptor?? [ 146.416588][ T4360] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.437742][ T4360] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 147.021389][ T4360] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 147.037577][ T5212] device-mapper: table: 248:7: ram4 too small for target: start=16, len=8320, dev_size=8192 [ 147.079591][ T5217] comedi: valid board names for 8255 driver are: [ 147.128300][ T5217] 8255 [ 147.132640][ T5212] device-mapper: core: Cannot calculate initial queue limits [ 147.150777][ T5217] comedi: valid board names for vmk80xx driver are: [ 147.192815][ T5212] device-mapper: ioctl: unable to set up device queue for new table. [ 147.201511][ T5217] vmk80xx [ 147.210804][ T5217] comedi: valid board names for usbduxsigma driver are: [ 147.225872][ T5217] usbduxsigma [ 147.241211][ T5217] comedi: valid board names for usbduxfast driver are: [ 147.256950][ T5217] usbduxfast [ 147.269236][ T5217] comedi: valid board names for usbdux driver are: [ 147.290521][ T5217] usbdux [ 147.301182][ T5217] comedi: valid board names for ni6501 driver are: [ 147.322983][ T5217] ni6501 [ 147.340064][ T5217] comedi: valid board names for dt9812 driver are: [ 147.374225][ T5217] dt9812 [ 147.399894][ T5217] comedi: valid board names for ni_labpc_cs driver are: [ 147.429695][ T5217] ni_labpc_cs [ 147.441058][ T5217] comedi: valid board names for ni_daq_700 driver are: [ 147.475182][ T5217] ni_daq_700 [ 147.509786][ T5217] comedi: valid board names for labpc_pci driver are: [ 147.533779][ T5217] labpc_pci [ 147.630646][ T5228] gadgetfs: bound to dummy_udc driver [ 147.935097][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.142412][ T5222] gadgetfs: suspended from state 2 [ 148.184163][ T5217] comedi: valid board names for adl_pci9118 driver are: [ 148.285071][ T5217] pci9118dg [ 148.319643][ T5217] pci9118hg [ 148.351441][ T5217] pci9118hr [ 148.355872][ T5217] comedi: valid board names for 8255_pci driver are: [ 148.363378][ T5217] 8255_pci [ 148.366541][ T5217] comedi: valid board names for s526 driver are: [ 148.376120][ T5217] s526 [ 148.380193][ T5217] comedi: valid board names for multiq3 driver are: [ 148.388335][ T5217] multiq3 [ 148.392387][ T5217] comedi: valid board names for pcmuio driver are: [ 148.412326][ T5217] pcmuio48 [ 148.416148][ T5217] pcmuio96 [ 148.419794][ T5217] comedi: valid board names for pcmmio driver are: [ 148.441008][ T4360] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 148.460472][ T4360] em28xx 2-1:0.0: board has no eeprom [ 148.462990][ T5217] pcmmio [ 148.486647][ T5217] comedi: valid board names for pcmda12 driver are: [ 148.525357][ T5217] pcmda12 [ 148.529112][ T5217] comedi: valid board names for pcmad driver are: [ 148.562523][ T5217] pcmad12 [ 148.566436][ T5217] pcmad16 [ 148.570043][ T5217] comedi: valid board names for ni_labpc driver are: [ 148.580983][ T4360] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 148.597920][ T4360] em28xx 2-1:0.0: dvb set to bulk mode. [ 148.627450][ T5217] lab-pc-1200 [ 148.657209][ T5217] lab-pc-1200ai [ 148.670687][ T5217] lab-pc+ [ 148.674112][ T5217] comedi: valid board names for atmio16 driver are: [ 148.697756][ T5217] atmio16 [ 148.726137][ T5217] atmio16d [ 148.730073][ T5217] comedi: valid board names for ni_at_ao driver are: [ 148.777102][ T5217] at-ao-6 [ 148.793981][ T5217] at-ao-10 [ 148.797542][ T5217] comedi: valid board names for ni_at_a2150 driver are: [ 148.847794][ T5217] ni_at_a2150 [ 148.863920][ T4360] usb 2-1: USB disconnect, device number 4 [ 148.871178][ T4360] em28xx 2-1:0.0: Disconnecting em28xx [ 148.890759][ T5146] em28xx 2-1:0.0: Binding DVB extension [ 148.919991][ T5217] comedi: valid board names for adq12b driver are: [ 149.063647][ T5217] adq12b [ 149.084899][ T5217] comedi: valid board names for mpc624 driver are: [ 149.385824][ T5217] mpc624 [ 149.563139][ T5217] comedi: valid board names for c6xdigio driver are: [ 149.603236][ T5217] c6xdigio [ 149.607674][ T5217] comedi: valid board names for aio_iiro_16 driver are: [ 149.727307][ T5217] aio_iiro_16 [ 149.791572][ T5217] comedi: valid board names for aio_aio12_8 driver are: [ 149.800456][ T5217] aio_aio12_8 [ 149.830719][ T5217] aio_ai12_8 [ 149.834575][ T5217] aio_ao12_4 [ 149.839475][ T5217] comedi: valid board names for fl512 driver are: [ 149.870711][ T5217] fl512 [ 149.873941][ T5217] comedi: valid board names for dmm32at driver are: [ 149.911802][ T5217] dmm32at [ 149.931396][ T5217] comedi: valid board names for dt282x driver are: [ 149.938300][ T5217] dt2821 [ 149.980987][ T5217] dt2821-f [ 149.995389][ T5146] em28xx 2-1:0.0: Registering input extension [ 149.999963][ T5217] dt2821-g [ 150.020836][ T5217] dt2823 [ 150.024545][ T4360] em28xx 2-1:0.0: Closing input extension [ 150.028732][ T5217] dt2824-pgh [ 150.048966][ T5217] dt2824-pgl [ 150.069352][ T4360] em28xx 2-1:0.0: Freeing device [ 150.079369][ T5217] dt2825 [ 150.089504][ T5217] dt2827 [ 150.092896][ T5217] dt2828 [ 150.120519][ T5217] dt2829 [ 150.148726][ T5217] dt21-ez [ 150.160733][ T5217] dt23-ez [ 150.164060][ T5217] dt24-ez [ 150.179170][ T5217] dt24-ez-pgl [ 150.195108][ T5249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'. [ 150.210689][ T5217] comedi: valid board names for dt2817 driver are: [ 150.217893][ T5217] dt2817 [ 150.230890][ T5217] comedi: valid board names for dt2815 driver are: [ 150.251286][ T5217] dt2815 [ 150.254449][ T5217] comedi: valid board names for dt2814 driver are: [ 150.280708][ T5217] dt2814 [ 150.290697][ T5217] comedi: valid board names for dt2811 driver are: [ 150.300724][ T5217] dt2811-pgh [ 150.317899][ T5217] dt2811-pgl [ 150.321582][ T5217] comedi: valid board names for dt2801 driver are: [ 150.348756][ T5217] dt2801 [ 150.369018][ T5217] comedi: valid board names for das6402 driver are: [ 150.389366][ T5217] das6402-12 [ 150.399502][ T5217] das6402-16 [ 150.419785][ T5217] comedi: valid board names for das1800 driver are: [ 150.440071][ T5217] das-1701st [ 150.443909][ T5217] das-1701st-da [ 150.464172][ T5217] das-1702st [ 150.487673][ T5217] das-1702st-da [ 150.497751][ T5217] das-1702hr [ 150.523280][ T5217] das-1702hr-da [ 150.527193][ T5217] das-1701ao [ 150.549486][ T5217] das-1702ao [ 150.570743][ T5217] das-1801st [ 150.582890][ T5217] das-1801st-da [ 150.586685][ T5217] das-1802st [ 150.604576][ T5217] das-1802st-da [ 150.608346][ T5217] das-1802hr [ 150.630712][ T5217] das-1802hr-da [ 150.634482][ T5217] das-1801hc [ 150.654832][ T5217] das-1802hc [ 150.658288][ T5217] das-1801ao [ 150.670748][ T5217] das-1802ao [ 150.690731][ T5217] comedi: valid board names for das800 driver are: [ 150.718988][ T5217] das-800 [ 150.728253][ T5217] cio-das800 [ 150.740964][ T5217] das-801 [ 150.744249][ T5217] cio-das801 [ 150.758663][ T5217] das-802 [ 150.768812][ T5217] cio-das802 [ 150.784819][ T5217] cio-das802/16 [ 150.788584][ T5217] comedi: valid board names for isa-das08 driver are: [ 150.835340][ T5217] isa-das08 [ 150.838814][ T5217] das08-pgm [ 150.845126][ T4360] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 150.877475][ T5217] das08-pgh [ 150.887154][ T5217] das08-pgl [ 150.901137][ T5217] das08-aoh [ 150.905141][ T5217] das08-aol [ 150.909130][ T5217] das08-aom [ 150.998045][ T5265] gadgetfs: bound to dummy_udc driver [ 151.206037][ T4360] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 151.295144][ T4360] usb 4-1: can't read configurations, error -71 [ 151.366527][ T5217] das08/jr-ao [ 151.520068][ T5217] das08jr-16-ao [ 151.537462][ T5217] pc104-das08 [ 151.555194][ T5217] das08jr/16 [ 151.575626][ T5217] comedi: valid board names for das16m1 driver are: [ 151.619949][ T5217] das16m1 [ 151.641551][ T5217] comedi: valid board names for dac02 driver are: [ 151.701449][ T5217] dac02 [ 151.720715][ T5217] comedi: valid board names for rti802 driver are: [ 151.789564][ T5217] rti802 [ 151.830125][ T5217] comedi: valid board names for rti800 driver are: [ 151.880661][ T5217] rti800 [ 151.883771][ T5217] rti815 [ 151.886749][ T5217] comedi: valid board names for pcm3724 driver are: [ 151.947100][ T5217] pcm3724 [ 151.950337][ T5217] comedi: valid board names for pcl818 driver are: [ 151.973931][ T5217] pcl818l [ 151.977721][ T5217] pcl818h [ 151.993081][ T5217] pcl818hd [ 151.996823][ T5217] pcl818hg [ 152.001916][ T5217] pcl818 [ 152.005370][ T5217] pcl718 [ 152.009013][ T5217] pcm3718 [ 152.013315][ T5217] comedi: valid board names for pcl816 driver are: [ 152.019905][ T5217] pcl816 [ 152.023300][ T5217] pcl814b [ 152.026381][ T5217] comedi: valid board names for pcl812 driver are: [ 152.033705][ T5217] pcl812 [ 152.036713][ T5217] pcl812pg [ 152.041423][ T5217] acl8112pg [ 152.046057][ T5217] acl8112dg [ 152.050432][ T5217] acl8112hg [ 152.054340][ T5217] a821pgl [ 152.057902][ T5217] a821pglnda [ 152.061649][ T5217] a821pgh [ 152.064721][ T5217] a822pgl [ 152.067799][ T5217] a822pgh [ 152.071618][ T5217] a823pgl [ 152.074704][ T5217] a823pgh [ 152.077930][ T5217] pcl813 [ 152.081593][ T5217] pcl813b [ 152.089657][ T5217] acl8113 [ 152.093999][ T5217] iso813 [ 152.098400][ T5217] acl8216 [ 152.104001][ T5217] a826pg [ 152.107727][ T5217] comedi: valid board names for pcl730 driver are: [ 152.117091][ T5217] pcl730 [ 152.120312][ T5217] iso730 [ 152.125411][ T5217] acl7130 [ 152.128550][ T5217] pcm3730 [ 152.132688][ T5217] pcl725 [ 152.135687][ T5217] p8r8dio [ 152.138775][ T5217] acl7225b [ 152.142437][ T5217] p16r16dio [ 152.145690][ T5217] pcl733 [ 152.149057][ T5217] pcl734 [ 152.153557][ T5217] opmm-1616-xt [ 152.157329][ T5217] pearl-mm-p [ 152.161111][ T5217] ir104-pbf [ 152.164378][ T5217] comedi: valid board names for pcl726 driver are: [ 152.171370][ T5217] pcl726 [ 152.174550][ T5217] pcl727 [ 152.182437][ T5217] pcl728 [ 152.188099][ T5217] acl6126 [ 152.191801][ T5217] acl6128 [ 152.194976][ T5217] comedi: valid board names for pcl724 driver are: [ 152.202718][ T5217] pcl724 [ 152.205719][ T5217] pcl722 [ 152.208821][ T5217] pcl731 [ 152.212253][ T5217] acl7122 [ 152.215345][ T5217] acl7124 [ 152.218497][ T5217] pet48dio [ 152.222796][ T5217] pcmio48 [ 152.227912][ T5217] onyx-mm-dio [ 152.232178][ T5217] comedi: valid board names for pcl711 driver are: [ 152.238972][ T5217] pcl711 [ 152.242299][ T5217] pcl711b [ 152.245467][ T5217] acl8112hg [ 152.248705][ T5217] acl8112dg [ 152.253029][ T5217] comedi: valid board names for amplc_pc263 driver are: [ 152.261253][ T5217] pc263 [ 152.264403][ T5217] comedi: valid board names for amplc_pc236 driver are: [ 152.273964][ T5217] pc36at [ 152.277046][ T5217] comedi: valid board names for amplc_dio200 driver are: [ 152.284852][ T5217] pc212e [ 152.287870][ T5217] pc214e [ 152.293008][ T5217] pc215e [ 152.301862][ T5217] pc218e [ 152.305954][ T5217] pc272e [ 152.309562][ T5217] comedi: valid board names for comedi_parport driver are: [ 152.328684][ T5217] comedi_parport [ 152.332900][ T5217] comedi: valid board names for comedi_test driver are: [ 152.343291][ T5217] comedi_test [ 152.346949][ T5217] comedi: valid board names for comedi_bond driver are: [ 152.360611][ T5217] comedi_bond [ 152.671340][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.270'. [ 153.091453][ T4360] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.300710][ T4360] usb 3-1: Using ep0 maxpacket: 16 [ 153.336485][ T4360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 153.451971][ T4360] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.514802][ T4360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.653117][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 153.670702][ T4360] usb 3-1: Product: syz [ 153.675222][ T4360] usb 3-1: Manufacturer: syz [ 153.680439][ T4360] usb 3-1: SerialNumber: syz [ 153.707010][ T4360] usb 3-1: config 0 descriptor?? [ 153.728579][ T4360] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.752907][ T4360] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 154.224308][ T5309] gadgetfs: bound to dummy_udc driver [ 154.417549][ T4360] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 154.539726][ T956] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.561992][ C0] gadgetfs: connected [ 154.566235][ T956] gadgetfs: disconnected [ 154.685403][ T5320] comedi: valid board names for 8255 driver are: [ 154.704005][ T5320] 8255 [ 154.708313][ T5320] comedi: valid board names for vmk80xx driver are: [ 154.716096][ T5301] gadgetfs: suspended from state 2 [ 154.750886][ T5320] vmk80xx [ 154.754137][ T5320] comedi: valid board names for usbduxsigma driver are: [ 154.781251][ T5320] usbduxsigma [ 154.790972][ T5320] comedi: valid board names for usbduxfast driver are: [ 154.818614][ T5320] usbduxfast [ 154.827376][ T5320] comedi: valid board names for usbdux driver are: [ 154.860855][ T5320] usbdux [ 154.864200][ T5320] comedi: valid board names for ni6501 driver are: [ 154.871144][ T5320] ni6501 [ 154.875978][ T5320] comedi: valid board names for dt9812 driver are: [ 154.884029][ T5320] dt9812 [ 154.888173][ T5320] comedi: valid board names for ni_labpc_cs driver are: [ 154.897263][ T5320] ni_labpc_cs [ 154.901732][ T5320] comedi: valid board names for ni_daq_700 driver are: [ 154.909183][ T5320] ni_daq_700 [ 154.912846][ T5320] comedi: valid board names for labpc_pci driver are: [ 154.919808][ T5320] labpc_pci [ 154.940904][ T5320] comedi: valid board names for adl_pci9118 driver are: [ 154.960935][ T5320] pci9118dg [ 154.975458][ T5320] pci9118hg [ 154.980286][ T5320] pci9118hr [ 155.010818][ T5320] comedi: valid board names for 8255_pci driver are: [ 155.029205][ T5320] 8255_pci [ 155.039375][ T5320] comedi: valid board names for s526 driver are: [ 155.057974][ T5320] s526 [ 155.073010][ T5320] comedi: valid board names for multiq3 driver are: [ 155.080924][ T956] usb 1-1: device not accepting address 13, error -71 [ 155.096544][ T4360] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 155.105434][ T5320] multiq3 [ 155.125524][ T4360] em28xx 3-1:0.0: board has no eeprom [ 155.141410][ T5320] comedi: valid board names for pcmuio driver are: [ 155.170714][ T5320] pcmuio48 [ 155.177238][ T5320] pcmuio96 [ 155.185040][ T5320] comedi: valid board names for pcmmio driver are: [ 155.195195][ T5320] pcmmio [ 155.199210][ T5320] comedi: valid board names for pcmda12 driver are: [ 155.201287][ T4360] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 155.227778][ T5320] pcmda12 [ 155.236814][ T4360] em28xx 3-1:0.0: dvb set to bulk mode. [ 155.240898][ T5320] comedi: valid board names for pcmad driver are: [ 155.260053][ T5320] pcmad12 [ 155.266479][ T5320] pcmad16 [ 155.269647][ T5320] comedi: valid board names for ni_labpc driver are: [ 155.291108][ T5320] lab-pc-1200 [ 155.301210][ T5320] lab-pc-1200ai [ 155.304980][ T5320] lab-pc+ [ 155.315966][ T4360] usb 3-1: USB disconnect, device number 9 [ 155.321205][ T5320] comedi: valid board names for atmio16 driver are: [ 155.355052][ T5320] atmio16 [ 155.359061][ T5320] atmio16d [ 155.373465][ T5146] em28xx 3-1:0.0: Binding DVB extension [ 155.381567][ T4360] em28xx 3-1:0.0: Disconnecting em28xx [ 155.389210][ T5320] comedi: valid board names for ni_at_ao driver are: [ 155.423153][ T5329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.283'. [ 155.440766][ T5320] at-ao-6 [ 155.445285][ T5320] at-ao-10 [ 155.461279][ T5320] comedi: valid board names for ni_at_a2150 driver are: [ 155.489690][ T5320] ni_at_a2150 [ 155.515266][ T5320] comedi: valid board names for adq12b driver are: [ 155.540891][ T5320] adq12b [ 155.544568][ T5320] comedi: valid board names for mpc624 driver are: [ 155.582832][ T5320] mpc624 [ 155.585953][ T5320] comedi: valid board names for c6xdigio driver are: [ 155.601887][ T5146] em28xx 3-1:0.0: Registering input extension [ 155.613041][ T4360] em28xx 3-1:0.0: Closing input extension [ 155.614574][ T5320] c6xdigio [ 155.643071][ T5320] comedi: valid board names for aio_iiro_16 driver are: [ 155.650285][ T5320] aio_iiro_16 [ 155.671086][ T5320] comedi: valid board names for aio_aio12_8 driver are: [ 155.693611][ T5320] aio_aio12_8 [ 155.713291][ T5320] aio_ai12_8 [ 155.732633][ T5320] aio_ao12_4 [ 155.747344][ T5320] comedi: valid board names for fl512 driver are: [ 155.778552][ T5320] fl512 [ 155.791380][ T5320] comedi: valid board names for dmm32at driver are: [ 155.819314][ T5320] dmm32at [ 155.836574][ T5320] comedi: valid board names for dt282x driver are: [ 155.861433][ T4360] em28xx 3-1:0.0: Freeing device [ 155.893386][ T5320] dt2821 [ 155.904784][ T5320] dt2821-f [ 155.915617][ T5320] dt2821-g [ 155.995895][ T5320] dt2823 [ 156.057991][ T5320] dt2824-pgh [ 156.149664][ T5320] dt2824-pgl [ 156.229444][ T5320] dt2825 [ 156.271615][ T5320] dt2827 [ 156.314926][ T5320] dt2828 [ 156.358241][ T5320] dt2829 [ 156.523110][ T5320] dt21-ez [ 156.535115][ T5320] dt23-ez [ 156.546232][ T5320] dt24-ez [ 156.556240][ T5320] dt24-ez-pgl [ 156.569677][ T5320] comedi: valid board names for dt2817 driver are: [ 156.588768][ T5320] dt2817 [ 156.605478][ T5320] comedi: valid board names for dt2815 driver are: [ 156.633670][ T5320] dt2815 [ 156.640402][ T5320] comedi: valid board names for dt2814 driver are: [ 156.684341][ T5320] dt2814 [ 156.687433][ T5320] comedi: valid board names for dt2811 driver are: [ 156.750693][ T5320] dt2811-pgh [ 156.754889][ T5320] dt2811-pgl [ 156.758310][ T5320] comedi: valid board names for dt2801 driver are: [ 156.765823][ T5320] dt2801 [ 156.768838][ T5320] comedi: valid board names for das6402 driver are: [ 156.775796][ T5320] das6402-12 [ 156.779260][ T5320] das6402-16 [ 156.782759][ T5320] comedi: valid board names for das1800 driver are: [ 156.789495][ T5320] das-1701st [ 156.829250][ T5320] das-1701st-da [ 156.849340][ T5320] das-1702st [ 156.852824][ T5320] das-1702st-da [ 156.856425][ T5320] das-1702hr [ 156.865407][ T5320] das-1702hr-da [ 156.869030][ T5320] das-1701ao [ 156.879806][ T5320] das-1702ao [ 156.883311][ T5320] das-1801st [ 156.886685][ T5320] das-1801st-da [ 156.902084][ T5320] das-1802st [ 156.905824][ T5320] das-1802st-da [ 156.909630][ T5320] das-1802hr [ 156.913316][ T5320] das-1802hr-da [ 156.916960][ T5320] das-1801hc [ 156.920436][ T5320] das-1802hc [ 156.925574][ T5320] das-1801ao [ 156.929012][ T5320] das-1802ao [ 156.932444][ T5320] comedi: valid board names for das800 driver are: [ 156.939418][ T5320] das-800 [ 156.945495][ T5320] cio-das800 [ 156.950214][ T5320] das-801 [ 156.954532][ T5320] cio-das801 [ 156.957973][ T5320] das-802 [ 156.961533][ T5320] cio-das802 [ 156.965797][ T5320] cio-das802/16 [ 156.969592][ T5320] comedi: valid board names for isa-das08 driver are: [ 156.995902][ T5320] isa-das08 [ 157.006076][ T5320] das08-pgm [ 157.009372][ T5320] das08-pgh [ 157.030750][ T5320] das08-pgl [ 157.044420][ T5320] das08-aoh [ 157.047727][ T5320] das08-aol [ 157.064769][ T5320] das08-aom [ 157.069738][ T5320] das08/jr-ao [ 157.089571][ T5320] das08jr-16-ao [ 157.099732][ T5320] pc104-das08 [ 157.109895][ T5320] das08jr/16 [ 157.125064][ T5320] comedi: valid board names for das16m1 driver are: [ 157.150788][ T5320] das16m1 [ 157.154072][ T5320] comedi: valid board names for dac02 driver are: [ 157.170758][ T5320] dac02 [ 157.174005][ T5320] comedi: valid board names for rti802 driver are: [ 157.190781][ T5320] rti802 [ 157.198800][ T5320] comedi: valid board names for rti800 driver are: [ 157.210961][ T5320] rti800 [ 157.213993][ T5320] rti815 [ 157.221521][ T5320] comedi: valid board names for pcm3724 driver are: [ 157.240104][ T5320] pcm3724 [ 157.259926][ T5320] comedi: valid board names for pcl818 driver are: [ 157.267402][ T5320] pcl818l [ 157.289184][ T5320] pcl818h [ 157.307063][ T5320] pcl818hd [ 157.317206][ T5320] pcl818hg [ 157.320430][ T5320] pcl818 [ 157.336745][ T5320] pcl718 [ 157.339806][ T5320] pcm3718 [ 157.346898][ T5320] comedi: valid board names for pcl816 driver are: [ 157.368230][ T5320] pcl816 [ 157.380263][ T5320] pcl814b [ 157.390445][ T5320] comedi: valid board names for pcl812 driver are: [ 157.408585][ T5320] pcl812 [ 157.412579][ T5320] pcl812pg [ 157.415765][ T5320] acl8112pg [ 157.429190][ T5320] acl8112dg [ 157.433499][ T5320] acl8112hg [ 157.436788][ T5320] a821pgl [ 157.447947][ T5320] a821pglnda [ 157.458156][ T5320] a821pgh [ 157.469167][ T5320] a822pgl [ 157.484151][ T5320] a822pgh [ 157.487516][ T5320] a823pgl [ 157.510771][ T5320] a823pgh [ 157.524341][ T5320] pcl813 [ 157.527381][ T5320] pcl813b [ 157.530452][ T5320] acl8113 [ 157.555870][ T5320] iso813 [ 157.558939][ T5320] acl8216 [ 157.576275][ T5320] a826pg [ 157.579600][ T5320] comedi: valid board names for pcl730 driver are: [ 157.608165][ T5320] pcl730 [ 157.621661][ T5320] iso730 [ 157.624851][ T5320] acl7130 [ 157.639081][ T5320] pcm3730 [ 157.646109][ T5320] pcl725 [ 157.659956][ T5320] p8r8dio [ 157.670083][ T5320] acl7225b [ 157.674312][ T5320] p16r16dio [ 157.690405][ T5320] pcl733 [ 157.696646][ T5320] pcl734 [ 157.699881][ T5320] opmm-1616-xt [ 157.717466][ T5320] pearl-mm-p [ 157.723939][ T5320] ir104-pbf [ 157.730949][ T5320] comedi: valid board names for pcl726 driver are: [ 157.765861][ T5320] pcl726 [ 157.772743][ T5320] pcl727 [ 157.776979][ T5320] pcl728 [ 157.804182][ T5320] acl6126 [ 157.807495][ T5320] acl6128 [ 157.833084][ T5320] comedi: valid board names for pcl724 driver are: [ 157.861803][ T5320] pcl724 [ 157.864956][ T5320] pcl722 [ 157.881549][ T5320] pcl731 [ 157.884587][ T5320] acl7122 [ 157.888340][ T5320] acl7124 [ 157.891846][ T5320] pet48dio [ 157.895020][ T5320] pcmio48 [ 157.898098][ T5320] onyx-mm-dio [ 157.901579][ T5320] comedi: valid board names for pcl711 driver are: [ 157.908240][ T5320] pcl711 [ 157.920659][ T5320] pcl711b [ 157.925159][ T5320] acl8112hg [ 157.928419][ T5320] acl8112dg [ 157.940688][ T5320] comedi: valid board names for amplc_pc263 driver are: [ 157.947852][ T5320] pc263 [ 157.951045][ T5320] comedi: valid board names for amplc_pc236 driver are: [ 157.958090][ T5320] pc36at [ 157.965396][ T5320] comedi: valid board names for amplc_dio200 driver are: [ 157.975418][ T5355] gadgetfs: bound to dummy_udc driver [ 157.995256][ T5320] pc212e [ 158.003895][ T5320] pc214e [ 158.017535][ T5320] pc215e [ 158.030333][ T5320] pc218e [ 158.040379][ T5320] pc272e [ 158.061468][ T5320] comedi: valid board names for comedi_parport driver are: [ 158.079467][ T5320] comedi_parport [ 158.089702][ T5320] comedi: valid board names for comedi_test driver are: [ 158.110780][ T5320] comedi_test [ 158.129498][ T5320] comedi: valid board names for comedi_bond driver are: [ 158.142493][ T5320] comedi_bond [ 158.267235][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 158.285386][ C0] gadgetfs: connected [ 158.290261][ T7] gadgetfs: disconnected [ 158.436059][ T5351] gadgetfs: suspended from state 2 [ 158.680729][ T7] usb 1-1: device not accepting address 15, error -71 [ 158.691045][ T956] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.920975][ T956] usb 2-1: Using ep0 maxpacket: 16 [ 159.752191][ T956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 159.781496][ T956] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.800848][ T956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.810415][ T956] usb 2-1: Product: syz [ 159.820633][ T956] usb 2-1: Manufacturer: syz [ 159.827328][ T956] usb 2-1: SerialNumber: syz [ 159.843751][ T956] usb 2-1: config 0 descriptor?? [ 159.868335][ T956] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.900729][ T956] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 160.466795][ T956] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 160.538456][ T5394] comedi: valid board names for 8255 driver are: [ 160.567762][ T5394] 8255 [ 160.571840][ T5394] comedi: valid board names for vmk80xx driver are: [ 160.590696][ T5394] vmk80xx [ 160.593913][ T5394] comedi: valid board names for usbduxsigma driver are: [ 160.621709][ T5394] usbduxsigma [ 160.625695][ T5394] comedi: valid board names for usbduxfast driver are: [ 160.658314][ T5394] usbduxfast [ 160.663247][ T5394] comedi: valid board names for usbdux driver are: [ 160.670260][ T5394] usbdux [ 160.678984][ T5394] comedi: valid board names for ni6501 driver are: [ 160.700779][ T5394] ni6501 [ 160.703975][ T5394] comedi: valid board names for dt9812 driver are: [ 160.720790][ T5394] dt9812 [ 160.750746][ T5394] comedi: valid board names for ni_labpc_cs driver are: [ 160.759277][ T5394] ni_labpc_cs [ 160.764118][ T5394] comedi: valid board names for ni_daq_700 driver are: [ 160.772023][ T5394] ni_daq_700 [ 160.775618][ T5394] comedi: valid board names for labpc_pci driver are: [ 160.800939][ T5394] labpc_pci [ 160.804785][ T5394] comedi: valid board names for adl_pci9118 driver are: [ 160.820922][ T5394] pci9118dg [ 160.831458][ T5394] pci9118hg [ 160.834823][ T5394] pci9118hr [ 160.862165][ T5394] comedi: valid board names for 8255_pci driver are: [ 160.869123][ T5394] 8255_pci [ 160.872916][ T5394] comedi: valid board names for s526 driver are: [ 160.891653][ T5394] s526 [ 160.894626][ T5394] comedi: valid board names for multiq3 driver are: [ 160.913925][ T5394] multiq3 [ 160.921029][ T5394] comedi: valid board names for pcmuio driver are: [ 160.940690][ T5394] pcmuio48 [ 160.966995][ T5394] pcmuio96 [ 160.971248][ T5394] comedi: valid board names for pcmmio driver are: [ 160.978505][ T5394] pcmmio [ 160.982699][ T5394] comedi: valid board names for pcmda12 driver are: [ 160.990168][ T5394] pcmda12 [ 161.000911][ T5394] comedi: valid board names for pcmad driver are: [ 161.017678][ T5394] pcmad12 [ 161.050820][ T5394] pcmad16 [ 161.056365][ T5394] comedi: valid board names for ni_labpc driver are: [ 161.100704][ T5394] lab-pc-1200 [ 161.108816][ T5394] lab-pc-1200ai [ 161.116990][ T5394] lab-pc+ [ 161.134189][ T5394] comedi: valid board names for atmio16 driver are: [ 161.153149][ T956] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 161.174126][ T5394] atmio16 [ 161.182739][ T956] em28xx 2-1:0.0: board has no eeprom [ 161.192431][ T5394] atmio16d [ 161.209507][ T5394] comedi: valid board names for ni_at_ao driver are: [ 161.253764][ T5394] at-ao-6 [ 161.257801][ T5394] at-ao-10 [ 161.277479][ T5394] comedi: valid board names for ni_at_a2150 driver are: [ 161.297752][ T5394] ni_at_a2150 [ 161.305069][ T5394] comedi: valid board names for adq12b driver are: [ 161.312211][ T956] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 161.320088][ T956] em28xx 2-1:0.0: dvb set to bulk mode. [ 161.332814][ T5401] gadgetfs: bound to dummy_udc driver [ 161.368945][ T956] usb 2-1: USB disconnect, device number 5 [ 161.394604][ T5394] adq12b [ 161.397951][ T5394] comedi: valid board names for mpc624 driver are: [ 161.416318][ T5394] mpc624 [ 161.422334][ T956] em28xx 2-1:0.0: Disconnecting em28xx [ 161.433329][ T5394] comedi: valid board names for c6xdigio driver are: [ 161.442451][ T7] em28xx 2-1:0.0: Binding DVB extension [ 161.456554][ T5394] c6xdigio [ 161.470044][ T5394] comedi: valid board names for aio_iiro_16 driver are: [ 161.496921][ T5394] aio_iiro_16 [ 161.512346][ T5394] comedi: valid board names for aio_aio12_8 driver are: [ 161.537922][ T5394] aio_aio12_8 [ 161.547599][ T7] em28xx 2-1:0.0: Registering input extension [ 161.555562][ T956] em28xx 2-1:0.0: Closing input extension [ 161.557304][ T5394] aio_ai12_8 [ 161.576996][ T956] em28xx 2-1:0.0: Freeing device [ 161.583380][ T5394] aio_ao12_4 [ 161.595439][ T5394] comedi: valid board names for fl512 driver are: [ 161.613852][ T5394] fl512 [ 161.621456][ T5394] comedi: valid board names for dmm32at driver are: [ 161.637329][ T5394] dmm32at [ 161.646464][ T5394] comedi: valid board names for dt282x driver are: [ 161.672991][ T5394] dt2821 [ 161.683467][ T5394] dt2821-f [ 161.695154][ T5394] dt2821-g [ 161.699031][ T5394] dt2823 [ 161.703774][ T5394] dt2824-pgh [ 161.712848][ T5394] dt2824-pgl [ 161.723211][ T5394] dt2825 [ 161.729829][ T5394] dt2827 [ 161.735763][ T5394] dt2828 [ 161.738940][ T5394] dt2829 [ 161.743820][ T5397] gadgetfs: suspended from state 2 [ 161.749880][ T5394] dt21-ez [ 161.761851][ T5394] dt23-ez [ 161.765067][ T5394] dt24-ez [ 161.768201][ T5394] dt24-ez-pgl [ 161.776625][ T5394] comedi: valid board names for dt2817 driver are: [ 161.785192][ T5394] dt2817 [ 161.788318][ T5394] comedi: valid board names for dt2815 driver are: [ 161.799909][ T3603] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 161.809413][ T5394] dt2815 [ 161.817387][ T5394] comedi: valid board names for dt2814 driver are: [ 161.827419][ T5394] dt2814 [ 161.830516][ T5394] comedi: valid board names for dt2811 driver are: [ 161.837541][ T5394] dt2811-pgh [ 161.865874][ T5394] dt2811-pgl [ 161.877209][ T5394] comedi: valid board names for dt2801 driver are: [ 161.908302][ T5394] dt2801 [ 161.927777][ T5394] comedi: valid board names for das6402 driver are: [ 161.957001][ T5394] das6402-12 [ 161.977342][ T5394] das6402-16 [ 161.987497][ T5394] comedi: valid board names for das1800 driver are: [ 162.013953][ T5394] das-1701st [ 162.024107][ T5394] das-1701st-da [ 162.028393][ T5394] das-1702st [ 162.060824][ T5394] das-1702st-da [ 162.064729][ T5394] das-1702hr [ 162.076271][ T5394] das-1702hr-da [ 162.095799][ T5394] das-1701ao [ 162.099184][ T5394] das-1702ao [ 162.135622][ T5394] das-1801st [ 162.142422][ T5394] das-1801st-da [ 162.166873][ T5394] das-1802st [ 162.187186][ T5394] das-1802st-da [ 162.202566][ T5394] das-1802hr [ 162.206364][ T5394] das-1802hr-da [ 162.240139][ T5394] das-1801hc [ 162.266940][ T5394] das-1802hc [ 162.276036][ T5394] das-1801ao [ 162.297111][ T5394] das-1802ao [ 162.310034][ T5394] comedi: valid board names for das800 driver are: [ 162.431165][ T5394] das-800 [ 162.463896][ T5394] cio-das800 [ 162.495751][ T5394] das-801 [ 162.562074][ T5394] cio-das801 [ 162.620738][ T5394] das-802 [ 162.682759][ T5394] cio-das802 [ 162.725254][ T5394] cio-das802/16 [ 162.786441][ T5394] comedi: valid board names for isa-das08 driver are: [ 162.941878][ T5394] isa-das08 [ 162.954116][ T5394] das08-pgm [ 162.965500][ T5394] das08-pgh [ 162.978111][ T5394] das08-pgl [ 163.000704][ T5394] das08-aoh [ 163.011150][ T5394] das08-aol [ 163.030218][ T5394] das08-aom [ 163.063242][ T5394] das08/jr-ao [ 163.080757][ T5394] das08jr-16-ao [ 163.085230][ T5394] pc104-das08 [ 163.118629][ T5394] das08jr/16 [ 163.127664][ T5394] comedi: valid board names for das16m1 driver are: [ 163.159710][ T5394] das16m1 [ 163.178072][ T5394] comedi: valid board names for dac02 driver are: [ 163.184833][ T5394] dac02 [ 163.187817][ T5394] comedi: valid board names for rti802 driver are: [ 163.197501][ T5394] rti802 [ 163.200652][ T5394] comedi: valid board names for rti800 driver are: [ 163.207206][ T5394] rti800 [ 163.210209][ T5394] rti815 [ 163.213297][ T5394] comedi: valid board names for pcm3724 driver are: [ 163.220100][ T5394] pcm3724 [ 163.223359][ T5394] comedi: valid board names for pcl818 driver are: [ 163.229950][ T5394] pcl818l [ 163.233122][ T5394] pcl818h [ 163.236218][ T5394] pcl818hd [ 163.239380][ T5394] pcl818hg [ 163.261404][ T5394] pcl818 [ 163.264437][ T5394] pcl718 [ 163.267426][ T5394] pcm3718 [ 163.270501][ T5394] comedi: valid board names for pcl816 driver are: [ 163.323134][ T5394] pcl816 [ 163.326146][ T5394] pcl814b [ 163.329218][ T5394] comedi: valid board names for pcl812 driver are: [ 163.359765][ T5394] pcl812 [ 163.385428][ T5394] pcl812pg [ 163.390036][ T5394] acl8112pg [ 163.402148][ T5394] acl8112dg [ 163.410832][ T5394] acl8112hg [ 163.414646][ T5394] a821pgl [ 163.430651][ T5394] a821pglnda [ 163.434303][ T5394] a821pgh [ 163.437553][ T5394] a822pgl [ 163.461028][ T5394] a822pgh [ 163.464394][ T5394] a823pgl [ 163.467480][ T5394] a823pgh [ 163.485763][ T5394] pcl813 [ 163.489162][ T5394] pcl813b [ 163.509647][ T5394] acl8113 [ 163.524240][ T5394] iso813 [ 163.528577][ T5394] acl8216 [ 163.554751][ T5394] a826pg [ 163.557844][ T5394] comedi: valid board names for pcl730 driver are: [ 163.590884][ T5394] pcl730 [ 163.594463][ T5394] iso730 [ 163.630604][ T5394] acl7130 [ 163.633902][ T5394] pcm3730 [ 163.637065][ T5394] pcl725 [ 163.640130][ T5394] p8r8dio [ 163.670737][ T5394] acl7225b [ 163.677401][ T5292] Set syz0 is full, maxelem 65536 reached [ 163.684222][ T5394] p16r16dio [ 163.687679][ T5394] pcl733 [ 163.700997][ T5394] pcl734 [ 163.704151][ T5394] opmm-1616-xt [ 163.721669][ T5394] pearl-mm-p [ 163.725064][ T5394] ir104-pbf [ 163.769440][ T5394] comedi: valid board names for pcl726 driver are: [ 163.800637][ T5394] pcl726 [ 163.804270][ T5394] pcl727 [ 163.807370][ T5394] pcl728 [ 163.810437][ T5394] acl6126 [ 163.871084][ T5394] acl6128 [ 163.874772][ T5394] comedi: valid board names for pcl724 driver are: [ 163.899477][ T5394] pcl724 [ 163.902643][ T5394] pcl722 [ 163.912877][ T5394] pcl731 [ 163.918420][ T5394] acl7122 [ 163.922518][ T5394] acl7124 [ 163.925988][ T5394] pet48dio [ 163.970294][ T5394] pcmio48 [ 163.973694][ T5394] onyx-mm-dio [ 163.977359][ T5394] comedi: valid board names for pcl711 driver are: [ 164.000775][ T5394] pcl711 [ 164.003804][ T5394] pcl711b [ 164.021518][ T5394] acl8112hg [ 164.024813][ T5394] acl8112dg [ 164.032195][ T5394] comedi: valid board names for amplc_pc263 driver are: [ 164.046127][ T5394] pc263 [ 164.050288][ T5394] comedi: valid board names for amplc_pc236 driver are: [ 164.076454][ T5394] pc36at [ 164.086415][ T5394] comedi: valid board names for amplc_dio200 driver are: [ 164.109734][ T5394] pc212e [ 164.121076][ T5394] pc214e [ 164.128651][ T5394] pc215e [ 164.133277][ T5394] pc218e [ 164.136467][ T5394] pc272e [ 164.139604][ T5394] comedi: valid board names for comedi_parport driver are: [ 164.147301][ T5394] comedi_parport [ 164.151119][ T5394] comedi: valid board names for comedi_test driver are: [ 164.158248][ T5394] comedi_test [ 164.161729][ T5394] comedi: valid board names for comedi_bond driver are: [ 164.169006][ T5394] comedi_bond [ 164.809186][ T5441] gadgetfs: bound to dummy_udc driver [ 165.000716][ T4360] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.660666][ T4360] usb 2-1: Using ep0 maxpacket: 16 [ 165.668122][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.689266][ T4360] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.698946][ T4360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.738988][ T4360] usb 2-1: Product: syz [ 165.756790][ T4360] usb 2-1: Manufacturer: syz [ 165.762059][ T4360] usb 2-1: SerialNumber: syz [ 165.781260][ T4360] usb 2-1: config 0 descriptor?? [ 165.800333][ T4360] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.836436][ T4360] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 165.866829][ T5473] comedi: valid board names for 8255 driver are: [ 165.880861][ T5473] 8255 [ 165.885922][ T5473] comedi: valid board names for vmk80xx driver are: [ 165.910739][ T5473] vmk80xx [ 165.913959][ T5473] comedi: valid board names for usbduxsigma driver are: [ 165.961177][ T5473] usbduxsigma [ 165.964924][ T5473] comedi: valid board names for usbduxfast driver are: [ 165.980890][ T5473] usbduxfast [ 166.010775][ T5473] comedi: valid board names for usbdux driver are: [ 166.043887][ T5473] usbdux [ 166.047609][ T5473] comedi: valid board names for ni6501 driver are: [ 166.106309][ T5473] ni6501 [ 166.109453][ T5473] comedi: valid board names for dt9812 driver are: [ 166.147420][ T5473] dt9812 [ 166.185717][ T5473] comedi: valid board names for ni_labpc_cs driver are: [ 166.220713][ T5473] ni_labpc_cs [ 166.224178][ T5473] comedi: valid board names for ni_daq_700 driver are: [ 166.280800][ T5473] ni_daq_700 [ 166.285878][ T5473] comedi: valid board names for labpc_pci driver are: [ 166.299050][ T5473] labpc_pci [ 166.303706][ T5473] comedi: valid board names for adl_pci9118 driver are: [ 166.321968][ T5473] pci9118dg [ 166.325262][ T5473] pci9118hg [ 166.328513][ T5473] pci9118hr [ 166.338793][ T5473] comedi: valid board names for 8255_pci driver are: [ 166.347259][ T5473] 8255_pci [ 166.350454][ T5473] comedi: valid board names for s526 driver are: [ 166.369851][ T5473] s526 [ 166.377730][ T5473] comedi: valid board names for multiq3 driver are: [ 166.385298][ T5473] multiq3 [ 166.388988][ T5473] comedi: valid board names for pcmuio driver are: [ 166.420337][ T5473] pcmuio48 [ 166.429606][ T5473] pcmuio96 [ 166.445604][ T5473] comedi: valid board names for pcmmio driver are: [ 166.466078][ T5473] pcmmio [ 166.470406][ T5473] comedi: valid board names for pcmda12 driver are: [ 166.510856][ T5473] pcmda12 [ 166.528826][ T5473] comedi: valid board names for pcmad driver are: [ 166.562580][ T5473] pcmad12 [ 166.578325][ T5473] pcmad16 [ 166.595485][ T5473] comedi: valid board names for ni_labpc driver are: [ 166.636422][ T5473] lab-pc-1200 [ 166.652624][ T5473] lab-pc-1200ai [ 166.671882][ T5473] lab-pc+ [ 166.677448][ T4360] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 166.736777][ T5473] comedi: valid board names for atmio16 driver are: [ 166.778984][ T5473] atmio16 [ 166.794989][ T5473] atmio16d [ 166.846418][ T5473] comedi: valid board names for ni_at_ao driver are: [ 166.887619][ T5473] at-ao-6 [ 166.905526][ T5473] at-ao-10 [ 166.909148][ T5473] comedi: valid board names for ni_at_a2150 driver are: [ 166.947945][ T5473] ni_at_a2150 [ 166.968286][ T5473] comedi: valid board names for adq12b driver are: [ 167.020759][ T5473] adq12b [ 167.023946][ T5473] comedi: valid board names for mpc624 driver are: [ 167.070947][ T5473] mpc624 [ 167.090895][ T5473] comedi: valid board names for c6xdigio driver are: [ 167.128633][ T5473] c6xdigio [ 167.138171][ T5483] gadgetfs: bound to dummy_udc driver [ 167.143125][ T5473] comedi: valid board names for aio_iiro_16 driver are: [ 167.230488][ T5473] aio_iiro_16 [ 167.243512][ T5473] comedi: valid board names for aio_aio12_8 driver are: [ 167.269034][ T5473] aio_aio12_8 [ 167.290854][ T5473] aio_ai12_8 [ 167.294239][ T5473] aio_ao12_4 [ 167.307912][ T5473] comedi: valid board names for fl512 driver are: [ 167.320867][ T5473] fl512 [ 167.323808][ T5473] comedi: valid board names for dmm32at driver are: [ 167.355103][ T5473] dmm32at [ 167.358283][ T5473] comedi: valid board names for dt282x driver are: [ 167.378637][ T5473] dt2821 [ 167.385365][ T5473] dt2821-f [ 167.391130][ T5473] dt2821-g [ 167.394521][ T5473] dt2823 [ 167.397709][ T5473] dt2824-pgh [ 167.420779][ T5473] dt2824-pgl [ 167.431007][ T5473] dt2825 [ 167.434629][ T5473] dt2827 [ 167.437945][ T5473] dt2828 [ 167.454018][ T5473] dt2829 [ 167.457409][ T5473] dt21-ez [ 167.462510][ T5473] dt23-ez [ 167.466649][ T5473] dt24-ez [ 167.469909][ T5473] dt24-ez-pgl [ 167.474497][ T5473] comedi: valid board names for dt2817 driver are: [ 167.490891][ T5473] dt2817 [ 167.497630][ T5473] comedi: valid board names for dt2815 driver are: [ 167.513232][ T5473] dt2815 [ 167.522067][ T5473] comedi: valid board names for dt2814 driver are: [ 167.541038][ T5473] dt2814 [ 167.555727][ T5473] comedi: valid board names for dt2811 driver are: [ 167.573012][ T5473] dt2811-pgh [ 167.580095][ T5473] dt2811-pgl [ 167.588588][ T5473] comedi: valid board names for dt2801 driver are: [ 167.602930][ T4360] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 167.618895][ T5473] dt2801 [ 167.626589][ T5473] comedi: valid board names for das6402 driver are: [ 167.627484][ T4360] em28xx 2-1:0.0: board has no eeprom [ 167.654186][ T5473] das6402-12 [ 167.662707][ T5473] das6402-16 [ 167.679656][ T5473] comedi: valid board names for das1800 driver are: [ 167.698061][ T5473] das-1701st [ 167.714813][ T5473] das-1701st-da [ 167.729260][ T5473] das-1702st [ 167.736291][ T5473] das-1702st-da [ 167.747722][ T5473] das-1702hr [ 167.751129][ T4360] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 167.751160][ T4360] em28xx 2-1:0.0: dvb set to bulk mode. [ 167.775932][ T4360] usb 2-1: USB disconnect, device number 6 [ 167.793507][ T4360] em28xx 2-1:0.0: Disconnecting em28xx [ 167.815379][ T5146] em28xx 2-1:0.0: Binding DVB extension [ 167.839350][ T5473] das-1702hr-da [ 167.872760][ T5473] das-1701ao [ 167.885441][ T5473] das-1702ao [ 167.898132][ T5473] das-1801st [ 167.924837][ T5473] das-1801st-da [ 167.947284][ T5473] das-1802st [ 167.965065][ T5473] das-1802st-da [ 167.969684][ T5473] das-1802hr [ 167.976528][ T5473] das-1802hr-da [ 167.990445][ T5473] das-1801hc [ 168.007333][ T5473] das-1802hc [ 168.020849][ T5473] das-1801ao [ 168.029859][ T5473] das-1802ao [ 168.047133][ T5473] comedi: valid board names for das800 driver are: [ 168.066685][ T5473] das-800 [ 168.069810][ T5473] cio-das800 [ 168.087041][ T5473] das-801 [ 168.092912][ T5146] em28xx 2-1:0.0: Registering input extension [ 168.099599][ T5473] cio-das801 [ 168.119873][ T5473] das-802 [ 168.128120][ T5473] cio-das802 [ 168.140030][ T5473] cio-das802/16 [ 168.151915][ T5473] comedi: valid board names for isa-das08 driver are: [ 168.174640][ T5473] isa-das08 [ 168.190785][ T5473] das08-pgm [ 168.196416][ T5473] das08-pgh [ 168.216839][ T5473] das08-pgl [ 168.228133][ T5473] das08-aoh [ 168.250359][ T5473] das08-aol [ 168.278154][ T5473] das08-aom [ 168.289268][ T5473] das08/jr-ao [ 168.308610][ T5473] das08jr-16-ao [ 168.326318][ T5473] pc104-das08 [ 168.330378][ T5473] das08jr/16 [ 168.335162][ T4360] em28xx 2-1:0.0: Closing input extension [ 168.371552][ T4360] em28xx 2-1:0.0: Freeing device [ 168.401858][ T5473] comedi: valid board names for das16m1 driver are: [ 168.414492][ T5499] gadgetfs: bound to dummy_udc driver [ 168.441131][ T5473] das16m1 [ 168.446188][ T5473] comedi: valid board names for dac02 driver are: [ 168.463719][ T5473] dac02 [ 168.486082][ T5473] comedi: valid board names for rti802 driver are: [ 168.528178][ T5473] rti802 [ 168.532601][ T5473] comedi: valid board names for rti800 driver are: [ 168.539836][ T5473] rti800 [ 168.551174][ T5473] rti815 [ 168.554724][ T5473] comedi: valid board names for pcm3724 driver are: [ 168.568469][ T5473] pcm3724 [ 168.574603][ T5473] comedi: valid board names for pcl818 driver are: [ 168.590037][ T5473] pcl818l [ 168.597384][ T5473] pcl818h [ 168.607812][ T5473] pcl818hd [ 168.612120][ T5473] pcl818hg [ 168.615597][ T5473] pcl818 [ 168.619560][ T5473] pcl718 [ 168.639608][ T5473] pcm3718 [ 168.650384][ T5473] comedi: valid board names for pcl816 driver are: [ 168.670838][ T5473] pcl816 [ 168.674625][ T5473] pcl814b [ 168.677969][ T5473] comedi: valid board names for pcl812 driver are: [ 168.694205][ T5473] pcl812 [ 168.707962][ T5473] pcl812pg [ 168.718122][ T5473] acl8112pg [ 168.721634][ T5473] acl8112dg [ 168.725016][ T5473] acl8112hg [ 168.738827][ T5473] a821pgl [ 168.742389][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 168.750332][ T5473] a821pglnda [ 168.753755][ T5473] a821pgh [ 168.757402][ T5473] a822pgl [ 168.761252][ C0] gadgetfs: connected [ 168.768110][ T7] gadgetfs: disconnected [ 168.780702][ T5473] a822pgh [ 168.783987][ T5473] a823pgl [ 168.787241][ T5473] a823pgh [ 168.791120][ T5473] pcl813 [ 168.794118][ T5473] pcl813b [ 168.797312][ T5473] acl8113 [ 168.800490][ T5473] iso813 [ 168.806497][ T5473] acl8216 [ 168.809901][ T5473] a826pg [ 168.815502][ T5473] comedi: valid board names for pcl730 driver are: [ 168.823288][ T5473] pcl730 [ 168.826642][ T5473] iso730 [ 168.829803][ T5473] acl7130 [ 168.834112][ T5473] pcm3730 [ 168.838878][ T5473] pcl725 [ 168.842788][ T5473] p8r8dio [ 168.847107][ T5473] acl7225b [ 168.851428][ T5473] p16r16dio [ 168.877466][ T5473] pcl733 [ 168.887600][ T5473] pcl734 [ 168.900321][ T5473] opmm-1616-xt [ 168.907852][ T5473] pearl-mm-p [ 168.912035][ T5497] gadgetfs: suspended from state 2 [ 168.934005][ T5473] ir104-pbf [ 168.940459][ T5473] comedi: valid board names for pcl726 driver are: [ 168.969801][ T5473] pcl726 [ 168.975877][ T5473] pcl727 [ 168.990076][ T5473] pcl728 [ 168.995817][ T5473] acl6126 [ 169.008886][ T5473] acl6128 [ 169.026710][ T5473] comedi: valid board names for pcl724 driver are: [ 169.087310][ T5473] pcl724 [ 169.091029][ T5473] pcl722 [ 169.097881][ T5473] pcl731 [ 169.104673][ T5473] acl7122 [ 169.107829][ T5473] acl7124 [ 169.113000][ T5473] pet48dio [ 169.116625][ T5473] pcmio48 [ 169.119870][ T5473] onyx-mm-dio [ 169.137678][ T5473] comedi: valid board names for pcl711 driver are: [ 169.150870][ T7] usb 1-1: device not accepting address 18, error -71 [ 169.190910][ T5473] pcl711 [ 169.201411][ T5473] pcl711b [ 169.237607][ T5473] acl8112hg [ 169.248085][ T5473] acl8112dg [ 169.255912][ T5473] comedi: valid board names for amplc_pc263 driver are: [ 169.266956][ T5473] pc263 [ 169.274867][ T5473] comedi: valid board names for amplc_pc236 driver are: [ 169.324834][ T5473] pc36at [ 169.329039][ T5473] comedi: valid board names for amplc_dio200 driver are: [ 169.338384][ T5473] pc212e [ 169.347531][ T5473] pc214e [ 169.353146][ T5473] pc215e [ 169.356434][ T5473] pc218e [ 169.386228][ T5473] pc272e [ 169.392661][ T5473] comedi: valid board names for comedi_parport driver are: [ 169.448148][ T5473] comedi_parport [ 169.468464][ T5473] comedi: valid board names for comedi_test driver are: [ 169.540868][ T5473] comedi_test [ 169.550309][ T5473] comedi: valid board names for comedi_bond driver are: [ 169.578960][ T5473] comedi_bond [ 170.141412][ T5515] gadgetfs: bound to dummy_udc driver [ 170.740860][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 170.922150][ T5540] gadgetfs: bound to dummy_udc driver [ 170.941714][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 170.949206][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 170.965943][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.976291][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.984910][ T7] usb 1-1: Product: syz [ 170.989401][ T7] usb 1-1: Manufacturer: syz [ 171.002093][ T7] usb 1-1: SerialNumber: syz [ 171.028506][ T7] usb 1-1: config 0 descriptor?? [ 171.058231][ T7] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.078003][ T7] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 171.245224][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.274809][ C0] gadgetfs: connected [ 171.281155][ T14] gadgetfs: disconnected [ 171.396955][ T5535] gadgetfs: suspended from state 2 [ 171.650826][ T14] usb 2-1: device not accepting address 7, error -71 [ 171.727489][ T7] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 172.006084][ T5475] Set syz0 is full, maxelem 65536 reached [ 172.373453][ T7] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.408637][ T7] em28xx 1-1:0.0: board has no eeprom [ 172.444646][ T5560] gadgetfs: bound to dummy_udc driver [ 172.574383][ T7] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.616754][ T7] em28xx 1-1:0.0: dvb set to bulk mode. [ 172.653640][ T7] usb 1-1: USB disconnect, device number 20 [ 172.705008][ T3603] em28xx 1-1:0.0: Binding DVB extension [ 172.713026][ T7] em28xx 1-1:0.0: Disconnecting em28xx [ 172.992145][ T3603] em28xx 1-1:0.0: Registering input extension [ 173.001308][ T7] em28xx 1-1:0.0: Closing input extension [ 173.051473][ T7] em28xx 1-1:0.0: Freeing device [ 173.185016][ T5581] gadgetfs: bound to dummy_udc driver [ 173.367749][ T5593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.374'. [ 173.540884][ T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 173.561190][ C0] gadgetfs: connected [ 173.567109][ T7] gadgetfs: disconnected [ 173.709007][ T5575] gadgetfs: suspended from state 2 [ 173.960789][ T7] usb 1-1: device not accepting address 21, error -71 [ 173.999890][ T5597] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 174.108282][ T5607] gadgetfs: bound to dummy_udc driver [ 174.370654][ T4360] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.560671][ T4360] usb 4-1: Using ep0 maxpacket: 16 [ 174.568180][ T4360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 174.617194][ T4360] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.639966][ T4360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.658030][ T4360] usb 4-1: Product: syz [ 174.667294][ T4360] usb 4-1: Manufacturer: syz [ 174.677919][ T4360] usb 4-1: SerialNumber: syz [ 174.705855][ T4360] usb 4-1: config 0 descriptor?? [ 174.750149][ T4360] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 174.761491][ T4360] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 175.172915][ T5644] gadgetfs: bound to dummy_udc driver [ 175.481012][ T4354] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 175.524415][ T4360] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 175.746545][ T5639] gadgetfs: suspended from state 2 [ 176.143270][ T5648] gadgetfs: bound to dummy_udc driver [ 176.332355][ T4360] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.343684][ T4360] em28xx 4-1:0.0: board has no eeprom [ 176.460636][ T4360] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 176.479751][ T4360] em28xx 4-1:0.0: dvb set to bulk mode. [ 176.500798][ T4356] em28xx 4-1:0.0: Binding DVB extension [ 176.530778][ T4360] usb 4-1: USB disconnect, device number 7 [ 176.554608][ T4360] em28xx 4-1:0.0: Disconnecting em28xx [ 176.799239][ T4356] em28xx 4-1:0.0: Registering input extension [ 176.824618][ T4360] em28xx 4-1:0.0: Closing input extension [ 176.871241][ T4360] em28xx 4-1:0.0: Freeing device [ 177.226303][ T5689] ======================================================= [ 177.226303][ T5689] WARNING: The mand mount option has been deprecated and [ 177.226303][ T5689] and is ignored by this kernel. Remove the mand [ 177.226303][ T5689] option from the mount to silence this warning. [ 177.226303][ T5689] ======================================================= [ 177.347562][ T5694] gadgetfs: bound to dummy_udc driver [ 177.661259][ T4360] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 177.712189][ C1] gadgetfs: connected [ 177.719557][ T4360] gadgetfs: disconnected [ 178.016013][ T5689] overlayfs: missing 'lowerdir' [ 178.216183][ T5701] gadgetfs: bound to dummy_udc driver [ 178.370563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 178.390563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 178.420565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 178.590564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 178.800562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 179.310062][ T5720] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 179.343449][ T5720] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 179.570640][ T3603] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.773421][ T5737] gadgetfs: bound to dummy_udc driver [ 179.792957][ T3603] usb 5-1: Using ep0 maxpacket: 16 [ 179.808252][ T3603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 179.915364][ T5740] gadgetfs: bound to dummy_udc driver [ 180.301165][ T4354] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 180.463012][ T5731] gadgetfs: suspended from state 2 [ 180.702759][ T3603] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.731125][ T3603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.739240][ T3603] usb 5-1: Product: syz [ 180.805203][ T3603] usb 5-1: Manufacturer: syz [ 180.834252][ T3603] usb 5-1: SerialNumber: syz [ 180.882687][ T3603] usb 5-1: config 0 descriptor?? [ 181.074050][ T3603] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.222616][ T3603] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 181.728905][ T3603] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 181.807203][ T5768] 9pnet_virtio: no channels available for device syz [ 181.836894][ T5769] raw_sendmsg: syz.2.434 forgot to set AF_INET. Fix it! [ 181.847600][ T5768] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 182.116213][ T5778] gadgetfs: bound to dummy_udc driver [ 182.368072][ T3603] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 182.431471][ T3603] em28xx 5-1:0.0: board has no eeprom [ 182.447418][ T5783] gadgetfs: bound to dummy_udc driver [ 182.910712][ T3603] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 182.950787][ T3603] em28xx 5-1:0.0: dvb set to bulk mode. [ 183.200562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 183.350562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 183.520566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 183.560563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 183.590561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 183.711901][ T3603] usb 5-1: USB disconnect, device number 3 [ 183.724958][ T7] em28xx 5-1:0.0: Binding DVB extension [ 183.739257][ T3603] em28xx 5-1:0.0: Disconnecting em28xx [ 184.340900][ T7] em28xx 5-1:0.0: Registering input extension [ 184.341527][ T3603] em28xx 5-1:0.0: Closing input extension [ 184.357266][ T3603] em28xx 5-1:0.0: Freeing device [ 184.534800][ T5810] gadgetfs: bound to dummy_udc driver [ 184.881672][ T5826] netlink: 'syz.3.451': attribute type 9 has an invalid length. [ 185.178625][ T5835] gadgetfs: bound to dummy_udc driver [ 185.260794][ T4356] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.762409][ T5825] gadgetfs: suspended from state 2 [ 185.910722][ T3603] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 186.190723][ T4356] usb 2-1: Using ep0 maxpacket: 16 [ 186.202365][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.236304][ T4356] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.269726][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.280230][ T5842] md: serialize_policy is only effective for raid1 [ 186.290252][ T4356] usb 2-1: Product: syz [ 186.296924][ T4356] usb 2-1: Manufacturer: syz [ 186.310653][ T4356] usb 2-1: SerialNumber: syz [ 186.317103][ T5842] md: serialize_policy is only effective for raid1 [ 186.326513][ T4356] usb 2-1: config 0 descriptor?? [ 186.348745][ T4356] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.373072][ T4356] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 186.507275][ T5856] tmpfs: Bad value for 'mpol' [ 186.985019][ T4356] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 187.053115][ T5871] gadgetfs: bound to dummy_udc driver [ 187.146148][ T5873] netlink: 'syz.4.468': attribute type 9 has an invalid length. [ 187.323023][ T3603] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 187.344294][ C0] gadgetfs: connected [ 187.349044][ T3603] gadgetfs: disconnected [ 187.532549][ C0] gadgetfs: connected [ 187.538061][ T3603] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 187.556458][ T3603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.579415][ C0] gadgetfs: configuration #1 [ 187.589851][ T3603] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22 [ 187.609605][ T4356] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 187.621168][ T5864] gadgetfs: suspended from state 3 [ 187.627008][ T5864] gadgetfs: disconnected [ 187.712402][ T3603] usb 1-1: USB disconnect, device number 27 [ 187.768300][ T4356] em28xx 2-1:0.0: board has no eeprom [ 187.860651][ T4356] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 187.907477][ T4356] em28xx 2-1:0.0: dvb set to bulk mode. [ 188.017632][ T5146] em28xx 2-1:0.0: Binding DVB extension [ 188.726979][ T4356] usb 2-1: USB disconnect, device number 9 [ 188.803893][ T4356] em28xx 2-1:0.0: Disconnecting em28xx [ 188.995969][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 189.021562][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 189.040870][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 189.086268][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 189.103404][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 189.118700][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 189.135353][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 189.276835][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.288708][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.300492][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.312204][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.327801][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.339380][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.350858][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.364645][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.377137][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.389361][ T5894] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 190.078163][ T5146] em28xx 2-1:0.0: Registering input extension [ 190.101692][ T4356] em28xx 2-1:0.0: Closing input extension [ 190.127333][ T4356] em28xx 2-1:0.0: Freeing device [ 192.021140][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.083213][ T5920] gadgetfs: bound to dummy_udc driver [ 192.211643][ T5940] netlink: 'syz.2.488': attribute type 9 has an invalid length. [ 192.230689][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 192.251247][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.295665][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.330682][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.350944][ T5944] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 192.358126][ T7] usb 2-1: Product: syz [ 192.370925][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.490'. [ 192.386922][ T7] usb 2-1: Manufacturer: syz [ 192.399728][ T5944] device dummy0 entered promiscuous mode [ 192.402508][ T7] usb 2-1: SerialNumber: syz [ 192.417586][ T5944] bridge0: port 3(dummy0) entered blocking state [ 192.441700][ T7] usb 2-1: config 0 descriptor?? [ 192.458046][ T5944] bridge0: port 3(dummy0) entered disabled state [ 192.461939][ T7] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.487028][ T5944] bridge0: port 3(dummy0) entered blocking state [ 192.494936][ T5944] bridge0: port 3(dummy0) entered forwarding state [ 192.518534][ T7] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 192.895844][ T5955] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 193.075339][ T7] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 193.769411][ T7] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 193.873082][ T7] em28xx 2-1:0.0: board has no eeprom [ 194.105093][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.111952][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.190801][ T7] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.222082][ T7] em28xx 2-1:0.0: dvb set to bulk mode. [ 194.467128][ T14] em28xx 2-1:0.0: Binding DVB extension [ 194.494552][ T7] usb 2-1: USB disconnect, device number 10 [ 194.674086][ T7] em28xx 2-1:0.0: Disconnecting em28xx [ 195.190667][ T14] em28xx 2-1:0.0: Registering input extension [ 195.212846][ T7] em28xx 2-1:0.0: Closing input extension [ 195.239644][ T7] em28xx 2-1:0.0: Freeing device [ 196.239381][ T4296] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 196.830784][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 197.042061][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 197.049731][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 197.083903][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.100832][ T6031] md: serialize_policy is only effective for raid1 [ 197.104676][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.145724][ T14] usb 2-1: Product: syz [ 197.150260][ T14] usb 2-1: Manufacturer: syz [ 197.176117][ T14] usb 2-1: SerialNumber: syz [ 197.208528][ T14] usb 2-1: config 0 descriptor?? [ 197.334679][ T14] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.991835][ T14] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 198.201119][ T14] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 198.814772][ T14] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 198.840988][ T14] em28xx 2-1:0.0: board has no eeprom [ 198.940641][ T14] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 198.950649][ T14] em28xx 2-1:0.0: dvb set to bulk mode. [ 198.978161][ T14] usb 2-1: USB disconnect, device number 11 [ 198.998984][ T14] em28xx 2-1:0.0: Disconnecting em28xx [ 199.037381][ T7] em28xx 2-1:0.0: Binding DVB extension [ 199.263609][ T7] em28xx 2-1:0.0: Registering input extension [ 199.286538][ T14] em28xx 2-1:0.0: Closing input extension [ 199.317970][ T14] em28xx 2-1:0.0: Freeing device [ 199.353454][ T4878] udevd[4878]: setting mode of /dev/bus/usb/002/011 to 020664 failed: No such file or directory [ 199.528338][ T4878] udevd[4878]: setting owner of /dev/bus/usb/002/011 to uid=0, gid=0 failed: No such file or directory [ 200.262525][ T4293] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 200.272145][ T4293] Bluetooth: hci0: Injecting HCI hardware error event [ 200.281994][ T4296] Bluetooth: hci0: hardware error 0x00 [ 201.300919][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 201.307143][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 201.311741][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.620729][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.820825][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 201.828238][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 201.860765][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.879503][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.913785][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.946643][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.981242][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.173702][ T6138] gadgetfs: bound to dummy_udc driver [ 202.421582][ T4296] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 202.808943][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.047741][ T14] usb 4-1: usb_control_msg returned -32 [ 203.053635][ T14] usbtmc 4-1:16.0: can't read capabilities [ 203.946061][ T6171] gadgetfs: bound to dummy_udc driver [ 204.361660][ T6176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.567'. [ 204.510787][ T14] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 204.547864][ T7] usb 4-1: USB disconnect, device number 8 [ 204.921726][ T14] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 204.933010][ T14] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 204.947319][ T14] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 204.963796][ T14] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 204.990775][ T14] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.021886][ T14] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 205.073200][ T6185] gadgetfs: bound to dummy_udc driver [ 205.287391][ T14] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.414035][ T14] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.824290][ T14] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 205.843478][ T14] usb 5-1: string descriptor 0 read error: -22 [ 205.851906][ T14] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.867660][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.888263][ T14] adutux 5-1:168.0: interrupt endpoints not found [ 206.128519][ T4356] usb 5-1: USB disconnect, device number 4 [ 206.518861][ T6206] gadgetfs: bound to dummy_udc driver [ 206.918530][ T6216] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.242587][ T6224] device syzkaller1 entered promiscuous mode [ 207.632003][ T6233] fuse: Unknown parameter 'grouË\p_i00000000000000000000' [ 208.007997][ T6238] gadgetfs: bound to dummy_udc driver [ 209.095890][ T6252] gadgetfs: bound to dummy_udc driver [ 209.370906][ T4356] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 209.590601][ T4356] usb 1-1: Using ep0 maxpacket: 16 [ 209.602340][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.633794][ T4356] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.655227][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.667558][ T4356] usb 1-1: Product: syz [ 209.671896][ T4356] usb 1-1: Manufacturer: syz [ 209.696986][ T4356] usb 1-1: SerialNumber: syz [ 209.716792][ T4356] usb 1-1: config 0 descriptor?? [ 209.735412][ T4356] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 209.750529][ T4356] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 210.104704][ T6264] md: serialize_policy is only effective for raid1 [ 210.753094][ T4356] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 210.966637][ T27] audit: type=1326 audit(1794725867.113:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facabba94d9 code=0x7ffc0000 [ 211.061960][ T27] audit: type=1326 audit(1794725867.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7facabba94d9 code=0x7ffc0000 [ 211.147343][ T27] audit: type=1326 audit(1794725867.263:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facabba94d9 code=0x7ffc0000 [ 211.222126][ T27] audit: type=1326 audit(1794725867.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.4.598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facabba94d9 code=0x7ffc0000 [ 211.422770][ T4356] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 211.440644][ T4356] em28xx 1-1:0.0: board has no eeprom [ 211.542807][ T4356] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 211.551144][ T4356] em28xx 1-1:0.0: dvb set to bulk mode. [ 211.591809][ T4356] usb 1-1: USB disconnect, device number 28 [ 211.624040][ T4356] em28xx 1-1:0.0: Disconnecting em28xx [ 211.636660][ T6288] gadgetfs: bound to dummy_udc driver [ 211.698051][ T22] em28xx 1-1:0.0: Binding DVB extension [ 212.026721][ T22] em28xx 1-1:0.0: Registering input extension [ 212.033055][ T4356] em28xx 1-1:0.0: Closing input extension [ 212.058992][ T4356] em28xx 1-1:0.0: Freeing device [ 212.746264][ T6302] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 212.838177][ T6310] md: serialize_policy is only effective for raid1 [ 212.958430][ T6302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.106622][ T6303] device bond1 entered promiscuous mode [ 213.296554][ T6312] bridge0: port 3(dummy0) entered disabled state [ 213.315020][ T6326] FAULT_INJECTION: forcing a failure. [ 213.315020][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 213.389787][ T6312] device dummy0 left promiscuous mode [ 213.423560][ T6326] CPU: 0 PID: 6326 Comm: syz.1.612 Not tainted syzkaller #0 [ 213.430953][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 213.441681][ T6326] Call Trace: [ 213.445011][ T6326] [ 213.448012][ T6326] dump_stack_lvl+0x188/0x24e [ 213.452765][ T6326] ? show_regs_print_info+0x12/0x12 [ 213.458058][ T6326] ? load_image+0x410/0x410 [ 213.463873][ T6326] ? __might_sleep+0xd0/0xd0 [ 213.468534][ T6326] ? __lock_acquire+0x7ea0/0x7ea0 [ 213.473647][ T6326] should_fail_ex+0x390/0x4c0 [ 213.478442][ T6326] should_failslab+0x5/0x20 [ 213.483286][ T6326] slab_pre_alloc_hook+0x59/0x300 [ 213.488461][ T6326] ? lockdep_hardirqs_on+0x94/0x140 [ 213.493714][ T6326] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 213.499404][ T6326] __kmem_cache_alloc_node+0x4f/0x270 [ 213.504829][ T6326] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 213.511689][ T6326] __kmalloc_node+0xa2/0x240 [ 213.516344][ T6326] memcg_alloc_slab_cgroups+0x81/0x120 [ 213.521892][ T6326] slab_post_alloc_hook+0xba/0x490 [ 213.527088][ T6326] ? __d_alloc+0xb3/0x6e0 [ 213.532735][ T6326] __kmem_cache_alloc_node+0x19d/0x270 [ 213.541525][ T6326] ? __d_alloc+0xb3/0x6e0 [ 213.545948][ T6326] __kmalloc+0xa3/0x240 [ 213.550194][ T6326] __d_alloc+0xb3/0x6e0 [ 213.554438][ T6326] d_alloc_parallel+0xdc/0x1590 [ 213.559517][ T6326] ? stack_trace_save+0xa6/0xf0 [ 213.564692][ T6326] ? verify_lock_unused+0x140/0x140 [ 213.570241][ T6326] ? __stack_depot_save+0x439/0x480 [ 213.575531][ T6326] ? lockdep_softirqs_off+0x430/0x430 [ 213.580968][ T6326] ? lockdep_softirqs_off+0x430/0x430 [ 213.586399][ T6326] ? d_hash_and_lookup+0x1b0/0x1b0 [ 213.592208][ T6326] ? __init_waitqueue_head+0xa4/0x140 [ 213.597740][ T6326] __lookup_slow+0x134/0x3f0 [ 213.602657][ T6326] ? lookup_one_len+0x2d0/0x2d0 [ 213.607584][ T6326] ? down_read+0x1a8/0x2d0 [ 213.612906][ T6326] lookup_one_unlocked+0x184/0x2a0 [ 213.618080][ T6326] ? lookup_one+0x2d0/0x2d0 [ 213.622641][ T6326] ? slab_free_freelist_hook+0x133/0x1b0 [ 213.628569][ T6326] ? ovl_lookup_index+0x115/0x6e0 [ 213.633647][ T6326] lookup_one_positive_unlocked+0x28/0xb0 [ 213.639611][ T6326] ovl_lookup_index+0x1c0/0x6e0 [ 213.644764][ T6326] ? ovl_lookup+0x523/0x18d0 [ 213.649456][ T6326] ovl_lookup+0x11f3/0x18d0 [ 213.654126][ T6326] ? ovl_path_next+0x260/0x260 [ 213.658936][ T6326] ? lockdep_softirqs_off+0x430/0x430 [ 213.665573][ T6326] ? d_hash_and_lookup+0x1b0/0x1b0 [ 213.671163][ T6326] ? __init_waitqueue_head+0xa4/0x140 [ 213.676686][ T6326] __lookup_slow+0x29d/0x3f0 [ 213.681360][ T6326] ? lookup_one_len+0x2d0/0x2d0 [ 213.686263][ T6326] ? down_read+0x1a8/0x2d0 [ 213.690732][ T6326] lookup_slow+0x53/0x70 [ 213.695030][ T6326] walk_component+0x2ad/0x3e0 [ 213.699754][ T6326] path_lookupat+0x148/0x420 [ 213.706968][ T6326] filename_lookup+0x229/0x580 [ 213.711801][ T6326] ? hashlen_string+0x110/0x110 [ 213.716717][ T6326] ? strncpy_from_user+0x1dc/0x340 [ 213.721873][ T6326] ? getname_flags+0x206/0x500 [ 213.727038][ T6326] user_path_at_empty+0x3e/0x60 [ 213.731937][ T6326] do_fchmodat+0xa3/0x1a0 [ 213.736314][ T6326] ? do_faccessat+0x9e0/0x9e0 [ 213.741084][ T6326] __x64_sys_fchmodat+0x77/0x90 [ 213.745980][ T6326] do_syscall_64+0x4c/0xa0 [ 213.750452][ T6326] ? clear_bhb_loop+0x60/0xb0 [ 213.755174][ T6326] ? clear_bhb_loop+0x60/0xb0 [ 213.759936][ T6326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.765881][ T6326] RIP: 0033:0x7f7af91a94d9 [ 213.770342][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.789999][ T6326] RSP: 002b:00007f7af9fcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 213.798470][ T6326] RAX: ffffffffffffffda RBX: 00007f7af9425fa0 RCX: 00007f7af91a94d9 [ 213.806563][ T6326] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 213.814576][ T6326] RBP: 00007f7af923804e R08: 0000000000000000 R09: 0000000000000000 [ 213.822588][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.831837][ T6326] R13: 00007f7af9426038 R14: 00007f7af9425fa0 R15: 00007ffda5b222d8 [ 213.839884][ T6326] [ 213.844406][ T6312] bridge0: port 3(dummy0) entered disabled state [ 214.059469][ T6312] bond1: (slave dummy0): making interface the new active one [ 214.118104][ T6312] device dummy0 entered promiscuous mode [ 214.126570][ T6312] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 214.203816][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 214.225302][ T6322] lo speed is unknown, defaulting to 1000 [ 214.778627][ T6336] gadgetfs: bound to dummy_udc driver [ 215.149912][ T6331] gadgetfs: suspended from state 2 [ 215.186786][ T4360] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 215.670689][ T6323] bond1 (unregistering): (slave dummy0): Releasing active interface [ 215.713019][ T6323] device dummy0 left promiscuous mode [ 215.731676][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 215.766358][ T6323] bond1 (unregistering): Released all slaves [ 215.876669][ T6322] lo speed is unknown, defaulting to 1000 [ 215.900269][ T6322] lo speed is unknown, defaulting to 1000 [ 215.924022][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 215.947044][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.014849][ T6322] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 216.032272][ T22] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.057761][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.090470][ T22] usb 3-1: Product: syz [ 216.107071][ T22] usb 3-1: Manufacturer: syz [ 216.112087][ T22] usb 3-1: SerialNumber: syz [ 216.132585][ T6322] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 216.164640][ T22] usb 3-1: config 0 descriptor?? [ 216.187452][ T22] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 216.228714][ T22] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 216.387635][ T6322] lo speed is unknown, defaulting to 1000 [ 216.502811][ T6322] lo speed is unknown, defaulting to 1000 [ 216.556168][ T6322] lo speed is unknown, defaulting to 1000 [ 216.659551][ T6322] lo speed is unknown, defaulting to 1000 [ 216.737358][ T6322] lo speed is unknown, defaulting to 1000 [ 216.916928][ T22] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 217.615951][ T22] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 217.636399][ T22] em28xx 3-1:0.0: board has no eeprom [ 217.751525][ T22] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 217.762087][ T22] em28xx 3-1:0.0: dvb set to bulk mode. [ 217.795743][ T22] usb 3-1: USB disconnect, device number 10 [ 217.821801][ T22] em28xx 3-1:0.0: Disconnecting em28xx [ 217.890497][ T4354] em28xx 3-1:0.0: Binding DVB extension [ 218.190282][ T4354] em28xx 3-1:0.0: Registering input extension [ 218.198167][ T22] em28xx 3-1:0.0: Closing input extension [ 218.221581][ T22] em28xx 3-1:0.0: Freeing device [ 219.036353][ T6374] md: serialize_policy is only effective for raid1 [ 219.994879][ T6399] 9pnet_virtio: no channels available for device syz [ 220.252103][ T7] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 220.454938][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 220.495769][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 220.553658][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 220.599678][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.638985][ T7] usb 1-1: Product: syz [ 220.663153][ T7] usb 1-1: Manufacturer: syz [ 220.694334][ T7] usb 1-1: SerialNumber: syz [ 220.740293][ T7] usb 1-1: config 0 descriptor?? [ 220.782955][ T7] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 220.826814][ T7] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 221.477513][ T7] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 221.672659][ T6411] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 222.029571][ T7] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 222.099806][ T7] em28xx 1-1:0.0: board has no eeprom [ 222.213279][ T6409] gadgetfs: bound to dummy_udc driver [ 222.271746][ T7] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 222.310571][ T7] em28xx 1-1:0.0: dvb set to bulk mode. [ 222.398383][ T7] usb 1-1: USB disconnect, device number 30 [ 222.438721][ C0] hrtimer: interrupt took 1810459 ns [ 222.465974][ T7] em28xx 1-1:0.0: Disconnecting em28xx [ 222.504585][ T4364] em28xx 1-1:0.0: Binding DVB extension [ 222.883984][ T4364] em28xx 1-1:0.0: Registering input extension [ 222.912870][ T7] em28xx 1-1:0.0: Closing input extension [ 222.925500][ T7] em28xx 1-1:0.0: Freeing device [ 225.499044][ T4364] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 225.691339][ T4364] usb 1-1: Using ep0 maxpacket: 8 [ 225.719476][ T4364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.720634][ T4364] usb 1-1: config 14 has an invalid interface number: 154 but max is 1 [ 225.720664][ T4364] usb 1-1: config 14 has an invalid interface number: 65 but max is 1 [ 225.720689][ T4364] usb 1-1: config 14 has no interface number 0 [ 225.720708][ T4364] usb 1-1: config 14 has no interface number 1 [ 225.720756][ T4364] usb 1-1: config 14 interface 65 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 225.720785][ T4364] usb 1-1: config 14 interface 65 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 225.720816][ T4364] usb 1-1: config 14 interface 154 has no altsetting 0 [ 225.720837][ T4364] usb 1-1: config 14 interface 65 has no altsetting 0 [ 225.738919][ T4364] usb 1-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c3.93 [ 225.738956][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.738980][ T4364] usb 1-1: Product: syz [ 225.738997][ T4364] usb 1-1: Manufacturer: syz [ 225.739014][ T4364] usb 1-1: SerialNumber: syz [ 225.969577][ T27] audit: type=1800 audit(1794725881.159:6): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.653" name="protocol" dev="configfs" ino=41392 res=0 errno=0 [ 226.757434][ T6472] process 'syz.0.650' launched './file0' with NULL argv: empty string added [ 226.786079][ T4364] snd-usb-audio: probe of 1-1:14.154 failed with error -2 [ 227.035532][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.045537][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.281926][ T6479] md: serialize_policy is only effective for raid1 [ 227.299038][ T6480] gadgetfs: bound to dummy_udc driver [ 228.998202][ T4364] snd-usb-audio: probe of 1-1:14.65 failed with error -2 [ 229.080204][ T4364] usb 1-1: USB disconnect, device number 31 [ 229.136446][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:14.65/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.746795][ T6507] gadgetfs: bound to dummy_udc driver [ 230.062093][ T4360] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 230.218727][ T6496] gadgetfs: suspended from state 2 [ 230.910656][ T6512] input: syz0 as /devices/virtual/input/input29 [ 236.920837][ T6552] md: serialize_policy is only effective for raid1 [ 237.593087][ T6564] gadgetfs: bound to dummy_udc driver [ 238.150946][ T6558] gadgetfs: suspended from state 2 [ 238.177282][ T22] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 240.099254][ T6601] gadgetfs: bound to dummy_udc driver [ 240.755794][ T6475] syz.2.654 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 240.863805][ T6475] CPU: 0 PID: 6475 Comm: syz.2.654 Not tainted syzkaller #0 [ 240.871192][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 240.881332][ T6475] Call Trace: [ 240.884662][ T6475] [ 240.887642][ T6475] dump_stack_lvl+0x188/0x24e [ 240.892399][ T6475] ? ___ratelimit+0x14e/0x610 [ 240.897157][ T6475] ? show_regs_print_info+0x12/0x12 [ 240.902446][ T6475] ? load_image+0x410/0x410 [ 240.907009][ T6475] ? ___ratelimit+0x474/0x610 [ 240.911746][ T6475] ? radix_tree_cpu_dead+0x160/0x160 [ 240.917107][ T6475] dump_header+0xd8/0x820 [ 240.921510][ T6475] oom_kill_process+0x361/0x550 [ 240.926441][ T6475] out_of_memory+0xe25/0x1220 [ 240.931186][ T6475] ? mutex_lock_nested+0x10/0x10 [ 240.936218][ T6475] ? unregister_oom_notifier+0x20/0x20 [ 240.941757][ T6475] mem_cgroup_out_of_memory+0x2c0/0x390 [ 240.947369][ T6475] ? mem_cgroup_oom_trylock+0x210/0x210 [ 240.955787][ T6475] ? do_raw_spin_unlock+0x11d/0x230 [ 240.961423][ T6475] try_charge_memcg+0xc9d/0x17c0 [ 240.966730][ T6475] ? percpu_ref_put+0x180/0x180 [ 240.972045][ T6475] ? get_mem_cgroup_from_mm+0x34/0x290 [ 240.977844][ T6475] charge_memcg+0x117/0x3b0 [ 240.982863][ T6475] ? __mem_cgroup_charge+0x80/0x80 [ 240.988124][ T6475] ? get_mem_cgroup_from_mm+0x34/0x290 [ 240.993629][ T6475] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 240.999230][ T6475] __mem_cgroup_charge+0x21/0x80 [ 241.004218][ T6475] shmem_add_to_page_cache+0x8d7/0x1c90 [ 241.009806][ T6475] ? __filemap_get_folio+0x10f/0xde0 [ 241.015220][ T6475] ? __filemap_get_folio+0x10f/0xde0 [ 241.020639][ T6475] ? put_page+0x270/0x270 [ 241.025016][ T6475] ? mark_lock+0x94/0x320 [ 241.029399][ T6475] shmem_get_folio_gfp+0x1663/0x35e0 [ 241.034743][ T6475] ? __lock_acquire+0x7ea0/0x7ea0 [ 241.039901][ T6475] shmem_fault+0x1b6/0x790 [ 241.044397][ T6475] ? shmem_fallocate+0x1050/0x1050 [ 241.049641][ T6475] ? filemap_map_pages+0x1ae/0x11e0 [ 241.055328][ T6475] ? filemap_read_folio+0x7a0/0x7a0 [ 241.060585][ T6475] ? count_memcg_event_mm+0x8a/0x3c0 [ 241.066528][ T6475] __do_fault+0x13b/0x4e0 [ 241.070899][ T6475] ? handle_mm_fault+0x2600/0x3d40 [ 241.076049][ T6475] handle_mm_fault+0x2610/0x3d40 [ 241.081035][ T6475] ? numa_migrate_prep+0x250/0x250 [ 241.086205][ T6475] __get_user_pages+0x40d/0xec0 [ 241.091114][ T6475] ? populate_vma_page_range+0x2b0/0x2b0 [ 241.096788][ T6475] ? up_write+0x1b6/0x410 [ 241.101158][ T6475] ? __generic_file_write_iter+0x148/0x2a0 [ 241.107011][ T6475] ? get_dump_page+0xee/0x670 [ 241.111725][ T6475] ? down_read_killable+0x1cc/0x340 [ 241.116957][ T6475] get_dump_page+0x18c/0x670 [ 241.121594][ T6475] ? fault_in_readable+0x1f0/0x1f0 [ 241.126778][ T6475] ? dump_user_range+0x279/0x7b0 [ 241.131749][ T6475] ? iov_iter_bvec+0x4a/0x1f0 [ 241.136466][ T6475] dump_user_range+0x128/0x7b0 [ 241.141274][ T6475] ? dump_skip+0x40/0x40 [ 241.145578][ T6475] elf_core_dump+0x30ca/0x3630 [ 241.150427][ T6475] ? load_elf_binary+0x2820/0x2820 [ 241.155759][ T6475] ? dump_vma_snapshot+0xaea/0xe40 [ 241.160911][ T6475] ? verify_lock_unused+0x140/0x140 [ 241.166151][ T6475] ? __lock_acquire+0x7ea0/0x7ea0 [ 241.171213][ T6475] ? mas_next_entry+0xe03/0xe90 [ 241.176171][ T6475] ? rcu_read_lock_any_held+0xb0/0x130 [ 241.181670][ T6475] ? 0xffffffffff600000 [ 241.185859][ T6475] ? getname_kernel+0x142/0x2f0 [ 241.190755][ T6475] do_coredump+0x1702/0x25c0 [ 241.195419][ T6475] ? nfs_stat_to_errno+0x170/0x170 [ 241.200600][ T6475] ? lock_chain_count+0x20/0x20 [ 241.205502][ T6475] ? _raw_spin_unlock_irq+0x1f/0x40 [ 241.210732][ T6475] ? lockdep_hardirqs_on+0x94/0x140 [ 241.215969][ T6475] get_signal+0x1093/0x1340 [ 241.220526][ T6475] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 241.226577][ T6475] arch_do_signal_or_restart+0xc4/0x1310 [ 241.232266][ T6475] ? get_sigframe_size+0x10/0x10 [ 241.237270][ T6475] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 241.243336][ T6475] ? exit_to_user_mode_loop+0x3b/0x110 [ 241.248837][ T6475] exit_to_user_mode_loop+0x70/0x110 [ 241.254165][ T6475] exit_to_user_mode_prepare+0xee/0x180 [ 241.259752][ T6475] irqentry_exit_to_user_mode+0x5/0x30 [ 241.265244][ T6475] exc_page_fault+0x88/0x100 [ 241.269875][ T6475] asm_exc_page_fault+0x22/0x30 [ 241.274763][ T6475] RIP: 0033:0x7f4246a54db7 [ 241.279215][ T6475] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 241.298878][ T6475] RSP: 002b:00007f4247a4d120 EFLAGS: 00010202 [ 241.304984][ T6475] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4246ba94d9 [ 241.312991][ T6475] RDX: 00007f4247a4d140 RSI: 00007f4247a4d270 RDI: 000000000000000b [ 241.321000][ T6475] RBP: 00007f4246c3804e R08: 0000000000000000 R09: 0000000000000000 [ 241.329118][ T6475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.337124][ T6475] R13: 00007f4246e26038 R14: 00007f4246e25fa0 R15: 00007ffcc1d91d28 [ 241.345182][ T6475] [ 241.367695][ T6475] memory: usage 307200kB, limit 307200kB, failcnt 17094 [ 241.375105][ T6475] memory+swap: usage 414720kB, limit 9007199254740988kB, failcnt 0 [ 241.546811][ T6475] kmem: usage 2352kB, limit 9007199254740988kB, failcnt 0 [ 241.590825][ T6475] Memory cgroup stats for /syz2: [ 241.591414][ T6475] anon 970752 [ 241.591414][ T6475] file 311193600 [ 241.591414][ T6475] kernel 2408448 [ 241.591414][ T6475] kernel_stack 131072 [ 241.591414][ T6475] pagetables 774144 [ 241.591414][ T6475] sec_pagetables 0 [ 241.591414][ T6475] percpu 0 [ 241.591414][ T6475] sock 0 [ 241.591414][ T6475] vmalloc 0 [ 241.591414][ T6475] shmem 311185408 [ 241.591414][ T6475] zswap 0 [ 241.591414][ T6475] zswapped 0 [ 241.591414][ T6475] file_mapped 210640896 [ 241.591414][ T6475] file_dirty 8192 [ 241.591414][ T6475] file_writeback 0 [ 241.591414][ T6475] swapcached 110657536 [ 241.591414][ T6475] anon_thp 0 [ 241.591414][ T6475] file_thp 0 [ 241.591414][ T6475] shmem_thp 0 [ 241.591414][ T6475] inactive_anon 256565248 [ 241.591414][ T6475] active_anon 55590912 [ 241.591414][ T6475] inactive_file 0 [ 241.591414][ T6475] active_file 8192 [ 241.591414][ T6475] unevictable 0 [ 241.591414][ T6475] slab_reclaimable 1207816 [ 241.591414][ T6475] slab_unreclaimable 200192 [ 242.747502][ T6611] gadgetfs: bound to dummy_udc driver [ 243.109426][ T6475] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.456,pid=5841,uid=0 [ 243.127428][ T6475] Memory cgroup out of memory: Killed process 5841 (syz.2.456) total-vm:200592kB, anon-rss:1572kB, file-rss:20608kB, shmem-rss:128436kB, UID:0 pgtables:368kB oom_score_adj:1000 [ 244.176986][ T6623] md: serialize_policy is only effective for raid1 [ 244.531122][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 245.358943][ T29] oom_reaper: reaped process 5841 (syz.2.456), now anon-rss:0kB, file-rss:20480kB, shmem-rss:82800kB [ 245.374734][ T128] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 245.545501][ T6475] syz.2.654 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 245.614984][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 245.672844][ T128] usb 5-1: unable to get BOS descriptor or descriptor too short [ 245.720750][ T128] usb 5-1: string descriptor 0 read error: -22 [ 245.727183][ T128] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 245.777989][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.832942][ T128] dw2102: su3000_identify_state [ 245.844071][ T6634] clocksource: Switched to clocksource kvm-clock [ 245.881560][ T128] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 245.914328][ T128] dw2102: su3000_power_ctrl: 1, initialized 0 [ 245.945273][ T128] dvb-usb: bulk message failed: -22 (2/0) [ 245.971332][ T128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.003323][ T128] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 246.033875][ T128] usb 5-1: media controller created [ 246.056660][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 246.077078][ T128] dw2102: i2c transfer failed. [ 246.097804][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 246.141848][ T128] dw2102: i2c transfer failed. [ 246.173264][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 246.209965][ T128] dw2102: i2c transfer failed. [ 246.234068][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 246.254350][ T128] dw2102: i2c transfer failed. [ 246.276121][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 246.307020][ T128] dw2102: i2c transfer failed. [ 246.312195][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 246.350952][ T128] dw2102: i2c transfer failed. [ 246.357970][ T6475] CPU: 1 PID: 6475 Comm: syz.2.654 Not tainted syzkaller #0 [ 246.365421][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 246.375960][ T6475] Call Trace: [ 246.381117][ T6475] [ 246.384708][ T6475] dump_stack_lvl+0x188/0x24e [ 246.389833][ T6475] ? ___ratelimit+0x14e/0x610 [ 246.394767][ T6475] ? show_regs_print_info+0x12/0x12 [ 246.400263][ T6475] ? load_image+0x410/0x410 [ 246.405568][ T6475] ? ___ratelimit+0x474/0x610 [ 246.411255][ T6475] ? radix_tree_cpu_dead+0x160/0x160 [ 246.418265][ T6475] dump_header+0xd8/0x820 [ 246.424287][ T6475] oom_kill_process+0x361/0x550 [ 246.430089][ T6475] out_of_memory+0xe25/0x1220 [ 246.435328][ T6475] ? print_unlock_imbalance_bug+0x160/0x160 [ 246.442585][ T6475] ? mutex_lock_nested+0x10/0x10 [ 246.447731][ T6475] ? unregister_oom_notifier+0x20/0x20 [ 246.453541][ T6475] mem_cgroup_out_of_memory+0x2c0/0x390 [ 246.459371][ T6475] ? mem_cgroup_oom_trylock+0x210/0x210 [ 246.465596][ T6475] ? do_raw_spin_unlock+0x11d/0x230 [ 246.471726][ T6475] try_charge_memcg+0xc9d/0x17c0 [ 246.478077][ T6475] ? percpu_ref_put+0x180/0x180 [ 246.483378][ T6475] ? get_mem_cgroup_from_mm+0x34/0x290 [ 246.489100][ T6475] charge_memcg+0x117/0x3b0 [ 246.493692][ T6475] ? __mem_cgroup_charge+0x80/0x80 [ 246.499852][ T6475] ? get_mem_cgroup_from_mm+0x34/0x290 [ 246.505486][ T6475] ? get_mem_cgroup_from_mm+0x34/0x290 [ 246.511120][ T6475] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 246.516745][ T6475] __mem_cgroup_charge+0x21/0x80 [ 246.522022][ T6475] shmem_add_to_page_cache+0x8d7/0x1c90 [ 246.527912][ T6475] ? __filemap_get_folio+0x10f/0xde0 [ 246.533477][ T6475] ? __filemap_get_folio+0x10f/0xde0 [ 246.539640][ T6475] ? put_page+0x270/0x270 [ 246.544074][ T6475] ? mark_lock+0x94/0x320 [ 246.550102][ T6475] shmem_get_folio_gfp+0x1663/0x35e0 [ 246.557057][ T6475] ? __lock_acquire+0x7ea0/0x7ea0 [ 246.562462][ T6475] shmem_fault+0x1b6/0x790 [ 246.566974][ T6475] ? shmem_fallocate+0x1050/0x1050 [ 246.572324][ T6475] ? filemap_map_pages+0x1ae/0x11e0 [ 246.578128][ T6475] ? filemap_read_folio+0x7a0/0x7a0 [ 246.583749][ T6475] ? count_memcg_event_mm+0x8a/0x3c0 [ 246.592451][ T6475] __do_fault+0x13b/0x4e0 [ 246.598416][ T6475] ? handle_mm_fault+0x2600/0x3d40 [ 246.605163][ T6475] handle_mm_fault+0x2610/0x3d40 [ 246.612996][ T6475] ? numa_migrate_prep+0x250/0x250 [ 246.619793][ T6475] __get_user_pages+0x40d/0xec0 [ 246.625366][ T6475] ? populate_vma_page_range+0x2b0/0x2b0 [ 246.631878][ T6475] ? up_write+0x1b6/0x410 [ 246.636650][ T6475] ? __generic_file_write_iter+0x148/0x2a0 [ 246.642539][ T6475] ? get_dump_page+0xee/0x670 [ 246.648809][ T6475] ? down_read_killable+0x1cc/0x340 [ 246.654775][ T6475] get_dump_page+0x18c/0x670 [ 246.661207][ T6475] ? fault_in_readable+0x1f0/0x1f0 [ 246.666852][ T6475] ? dump_user_range+0x279/0x7b0 [ 246.672624][ T6475] ? iov_iter_bvec+0x4a/0x1f0 [ 246.677388][ T6475] dump_user_range+0x128/0x7b0 [ 246.682236][ T6475] ? dump_skip+0x40/0x40 [ 246.686608][ T6475] elf_core_dump+0x30ca/0x3630 [ 246.691548][ T6475] ? load_elf_binary+0x2820/0x2820 [ 246.696730][ T6475] ? dump_vma_snapshot+0xaea/0xe40 [ 246.702355][ T6475] ? verify_lock_unused+0x140/0x140 [ 246.707862][ T6475] ? __lock_acquire+0x7ea0/0x7ea0 [ 246.715158][ T6475] ? mas_next_entry+0xe03/0xe90 [ 246.720822][ T6475] ? rcu_read_lock_any_held+0xb0/0x130 [ 246.728885][ T6475] ? 0xffffffffff600000 [ 246.736869][ T6475] ? getname_kernel+0x142/0x2f0 [ 246.745020][ T6475] do_coredump+0x1702/0x25c0 [ 246.750693][ T6475] ? nfs_stat_to_errno+0x170/0x170 [ 246.756876][ T6475] ? lock_chain_count+0x20/0x20 [ 246.762059][ T6475] ? _raw_spin_unlock_irq+0x1f/0x40 [ 246.767498][ T6475] ? lockdep_hardirqs_on+0x94/0x140 [ 246.773338][ T6475] get_signal+0x1093/0x1340 [ 246.778368][ T6475] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 246.785326][ T6475] arch_do_signal_or_restart+0xc4/0x1310 [ 246.792120][ T6475] ? get_sigframe_size+0x10/0x10 [ 246.797193][ T6475] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 246.803972][ T6475] ? exit_to_user_mode_loop+0x3b/0x110 [ 246.810843][ T6475] exit_to_user_mode_loop+0x70/0x110 [ 246.817172][ T6475] exit_to_user_mode_prepare+0xee/0x180 [ 246.823345][ T6475] irqentry_exit_to_user_mode+0x5/0x30 [ 246.829291][ T6475] exc_page_fault+0x88/0x100 [ 246.834228][ T6475] asm_exc_page_fault+0x22/0x30 [ 246.839339][ T6475] RIP: 0033:0x7f4246a54db7 [ 246.844606][ T6475] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 246.866252][ T6475] RSP: 002b:00007f4247a4d120 EFLAGS: 00010202 [ 246.874038][ T6475] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4246ba94d9 [ 246.884386][ T6475] RDX: 00007f4247a4d140 RSI: 00007f4247a4d270 RDI: 000000000000000b [ 246.894003][ T6475] RBP: 00007f4246c3804e R08: 0000000000000000 R09: 0000000000000000 [ 246.902754][ T6475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.912432][ T6475] R13: 00007f4246e26038 R14: 00007f4246e25fa0 R15: 00007ffcc1d91d28 [ 246.923552][ T6475] [ 247.054087][ T128] dvb-usb: MAC address: 02:02:02:02:02:02 [ 247.295409][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.490394][ T128] dvb-usb: bulk message failed: -22 (3/0) [ 247.548585][ T128] dw2102: command 0x0e transfer failed. [ 247.555372][ T128] dvb-usb: bulk message failed: -22 (3/0) [ 247.561977][ T128] dw2102: command 0x0e transfer failed. [ 248.773292][ T6653] gadgetfs: bound to dummy_udc driver [ 249.366769][ T128] dvb-usb: bulk message failed: -22 (3/0) [ 249.373172][ T128] dw2102: command 0x0e transfer failed. [ 249.378820][ T128] dvb-usb: bulk message failed: -22 (3/0) [ 249.384764][ T128] dw2102: command 0x0e transfer failed. [ 249.390370][ T128] dvb-usb: bulk message failed: -22 (1/0) [ 249.396205][ T128] dw2102: command 0x51 transfer failed. [ 249.420289][ T6475] memory: usage 307200kB, limit 307200kB, failcnt 18007 [ 249.459431][ T6475] memory+swap: usage 414720kB, limit 9007199254740988kB, failcnt 0 [ 249.562690][ T6475] kmem: usage 2384kB, limit 9007199254740988kB, failcnt 0 [ 249.637650][ T6475] Memory cgroup stats for /syz2: [ 249.637864][ T6475] anon 696320 [ 249.637864][ T6475] file 311435264 [ 249.637864][ T6475] kernel 2441216 [ 249.637864][ T6475] kernel_stack 131072 [ 249.637864][ T6475] pagetables 794624 [ 249.637864][ T6475] sec_pagetables 0 [ 249.637864][ T6475] percpu 0 [ 249.637864][ T6475] sock 0 [ 249.637864][ T6475] vmalloc 0 [ 249.637864][ T6475] shmem 311427072 [ 249.637864][ T6475] zswap 0 [ 249.637864][ T6475] zswapped 0 [ 249.637864][ T6475] file_mapped 124801024 [ 249.637864][ T6475] file_dirty 8192 [ 249.637864][ T6475] file_writeback 0 [ 249.637864][ T6475] swapcached 110657536 [ 249.637864][ T6475] anon_thp 0 [ 249.637864][ T6475] file_thp 0 [ 249.637864][ T6475] shmem_thp 0 [ 249.637864][ T6475] inactive_anon 266223616 [ 249.637864][ T6475] active_anon 45899776 [ 249.637864][ T6475] inactive_file 0 [ 249.637864][ T6475] active_file 8192 [ 249.637864][ T6475] unevictable 0 [ 249.637864][ T6475] slab_reclaimable 1210664 [ 249.637864][ T6475] slab_unreclaimable 203960 [ 249.752362][ T128] DVB: Unable to find symbol ds3000_attach() [ 249.763474][ T128] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 250.011619][ T128] rc_core: IR keymap rc-su3000 not found [ 250.017357][ T128] Registered IR keymap rc-empty [ 250.066585][ T128] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 250.109686][ T128] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input30 [ 250.182992][ T128] dvb-usb: schedule remote query interval to 150 msecs. [ 250.190325][ T128] dw2102: su3000_power_ctrl: 0, initialized 1 [ 250.209303][ T128] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 250.244942][ T128] usb 5-1: USB disconnect, device number 5 [ 250.357742][ T6664] 9pnet_virtio: no channels available for device syz [ 250.369325][ T6475] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.516,pid=6030,uid=0 [ 250.397662][ T128] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 250.452349][ T6475] Memory cgroup out of memory: Killed process 6030 (syz.2.516) total-vm:200592kB, anon-rss:1572kB, file-rss:20608kB, shmem-rss:71412kB, UID:0 pgtables:256kB oom_score_adj:1000 [ 250.528686][ T6667] overlayfs: missing 'lowerdir' [ 250.589335][ T4281] syz-executor invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 250.657257][ T4281] CPU: 1 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 [ 250.665039][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 250.675859][ T4281] Call Trace: [ 250.679622][ T4281] [ 250.682607][ T4281] dump_stack_lvl+0x188/0x24e [ 250.687524][ T4281] ? ___ratelimit+0x14e/0x610 [ 250.693046][ T4281] ? show_regs_print_info+0x12/0x12 [ 250.700401][ T4281] ? load_image+0x410/0x410 [ 250.704970][ T4281] ? ___ratelimit+0x474/0x610 [ 250.709709][ T4281] ? radix_tree_cpu_dead+0x160/0x160 [ 250.715339][ T4281] dump_header+0xd8/0x820 [ 250.720637][ T4281] oom_kill_process+0x361/0x550 [ 250.726451][ T4281] out_of_memory+0xe25/0x1220 [ 250.731890][ T4281] ? mutex_lock_nested+0x10/0x10 [ 250.737224][ T4281] ? unregister_oom_notifier+0x20/0x20 [ 250.743111][ T4281] mem_cgroup_out_of_memory+0x2c0/0x390 [ 250.748816][ T4281] ? mem_cgroup_oom_trylock+0x210/0x210 [ 250.754789][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 250.760829][ T4281] try_charge_memcg+0xc9d/0x17c0 [ 250.766528][ T4281] ? __lock_acquire+0x7ea0/0x7ea0 [ 250.771713][ T4281] ? percpu_ref_put+0x180/0x180 [ 250.776609][ T4281] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 250.782483][ T4281] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 250.788413][ T4281] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 250.796732][ T4281] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 250.802848][ T4281] __memcg_kmem_charge_page+0x220/0x380 [ 250.808454][ T4281] __alloc_pages+0x21e/0x4f0 [ 250.813103][ T4281] ? __lock_acquire+0x7ea0/0x7ea0 [ 250.818360][ T4281] ? zone_statistics+0x170/0x170 [ 250.823435][ T4281] pte_alloc_one+0x7b/0x310 [ 250.828019][ T4281] ? pfn_modify_allowed+0x560/0x560 [ 250.833258][ T4281] ? __rwlock_init+0x140/0x140 [ 250.838506][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 250.843736][ T4281] __pte_alloc+0x21/0x150 [ 250.848397][ T4281] copy_page_range+0x322f/0x3a60 [ 250.853735][ T4281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 250.860318][ T4281] ? pfn_valid+0x450/0x450 [ 250.864797][ T4281] copy_mm+0xf5e/0x16e0 [ 250.869360][ T4281] ? copy_signal+0x640/0x640 [ 250.874345][ T4281] ? __init_rwsem+0x11e/0x160 [ 250.879155][ T4281] ? copy_signal+0x51f/0x640 [ 250.883775][ T4281] copy_process+0x1952/0x4070 [ 250.888492][ T4281] ? copy_process+0x974/0x4070 [ 250.893286][ T4281] ? idle_dummy+0x10/0x10 [ 250.897678][ T4281] kernel_clone+0x24b/0x900 [ 250.902220][ T4281] ? create_io_thread+0x170/0x170 [ 250.907300][ T4281] ? __lock_acquire+0x7ea0/0x7ea0 [ 250.912357][ T4281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 250.918390][ T4281] __x64_sys_clone+0x1a7/0x220 [ 250.923185][ T4281] ? __might_fault+0xc2/0x120 [ 250.927889][ T4281] ? __ia32_sys_vfork+0x140/0x140 [ 250.932951][ T4281] ? lock_chain_count+0x20/0x20 [ 250.937835][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 250.943098][ T4281] do_syscall_64+0x4c/0xa0 [ 250.947549][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 250.952275][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 250.956985][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.962918][ T4281] RIP: 0033:0x7f54a27d51d2 [ 250.967400][ T4281] Code: 89 e7 e8 b1 c7 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 250.987089][ T4281] RSP: 002b:00007ffcf0b7d280 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 250.995633][ T4281] RAX: ffffffffffffffda RBX: 00007ffcf0b7d280 RCX: 00007f54a27d51d2 [ 251.003765][ T4281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 251.011774][ T4281] RBP: 00007ffcf0b7d40c R08: 0000000000000000 R09: 0000000000000001 [ 251.019901][ T4281] R10: 0000555589d157d0 R11: 0000000000000246 R12: 0000000000000001 [ 251.028012][ T4281] R13: 00000000000927c0 R14: 000000000003bba6 R15: 00007ffcf0b7d460 [ 251.036022][ T4281] [ 251.848979][ T4281] memory: usage 307200kB, limit 307200kB, failcnt 8719 [ 251.865781][ T4281] memory+swap: usage 324608kB, limit 9007199254740988kB, failcnt 0 [ 251.888772][ T4281] kmem: usage 2392kB, limit 9007199254740988kB, failcnt 0 [ 251.916342][ T4281] Memory cgroup stats for /syz3: [ 251.916806][ T4281] anon 671744 [ 251.916806][ T4281] file 311451648 [ 251.916806][ T4281] kernel 2449408 [ 251.916806][ T4281] kernel_stack 98304 [ 251.916806][ T4281] pagetables 524288 [ 251.916806][ T4281] sec_pagetables 0 [ 251.916806][ T4281] percpu 0 [ 251.916806][ T4281] sock 0 [ 251.916806][ T4281] vmalloc 0 [ 251.916806][ T4281] shmem 311349248 [ 251.916806][ T4281] zswap 0 [ 251.916806][ T4281] zswapped 0 [ 251.916806][ T4281] file_mapped 164683776 [ 251.916806][ T4281] file_dirty 102400 [ 251.916806][ T4281] file_writeback 0 [ 251.916806][ T4281] swapcached 17825792 [ 251.916806][ T4281] anon_thp 0 [ 251.916806][ T4281] file_thp 0 [ 251.916806][ T4281] shmem_thp 0 [ 251.916806][ T4281] inactive_anon 135880704 [ 251.916806][ T4281] active_anon 176140288 [ 251.916806][ T4281] inactive_file 0 [ 251.916806][ T4281] active_file 102400 [ 251.916806][ T4281] unevictable 0 [ 251.916806][ T4281] slab_reclaimable 1072264 [ 251.916806][ T4281] slab_unreclaimable 688128 [ 252.118050][ T4281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.577,pid=6209,uid=0 [ 252.172795][ T4281] Memory cgroup out of memory: Killed process 6209 (syz.3.577) total-vm:200592kB, anon-rss:1576kB, file-rss:20608kB, shmem-rss:103356kB, UID:0 pgtables:316kB oom_score_adj:1000 [ 252.322626][ T6311] syz.0.609 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 252.422950][ T6311] CPU: 0 PID: 6311 Comm: syz.0.609 Not tainted syzkaller #0 [ 252.430456][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 252.442508][ T6311] Call Trace: [ 252.447202][ T6311] [ 252.450516][ T6311] dump_stack_lvl+0x188/0x24e [ 252.457009][ T6311] ? ___ratelimit+0x14e/0x610 [ 252.462601][ T6311] ? show_regs_print_info+0x12/0x12 [ 252.468793][ T6311] ? load_image+0x410/0x410 [ 252.474195][ T6311] ? ___ratelimit+0x474/0x610 [ 252.483256][ T6311] ? radix_tree_cpu_dead+0x160/0x160 [ 252.489358][ T6311] dump_header+0xd8/0x820 [ 252.498900][ T6311] oom_kill_process+0x361/0x550 [ 252.503937][ T6311] out_of_memory+0xe25/0x1220 [ 252.512011][ T6311] ? mutex_lock_nested+0x10/0x10 [ 252.518531][ T6311] ? unregister_oom_notifier+0x20/0x20 [ 252.525647][ T6311] mem_cgroup_out_of_memory+0x2c0/0x390 [ 252.531677][ T6311] ? mem_cgroup_oom_trylock+0x210/0x210 [ 252.538574][ T6311] ? do_raw_spin_unlock+0x11d/0x230 [ 252.543954][ T6311] try_charge_memcg+0xc9d/0x17c0 [ 252.553392][ T6311] ? percpu_ref_put+0x180/0x180 [ 252.561527][ T6311] ? get_mem_cgroup_from_mm+0x34/0x290 [ 252.570118][ T6311] charge_memcg+0x117/0x3b0 [ 252.576024][ T6311] ? __mem_cgroup_charge+0x80/0x80 [ 252.583387][ T6311] ? get_mem_cgroup_from_mm+0x34/0x290 [ 252.590682][ T6311] ? get_mem_cgroup_from_mm+0x34/0x290 [ 252.597011][ T6311] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 252.604177][ T6311] __mem_cgroup_charge+0x21/0x80 [ 252.609724][ T6311] shmem_add_to_page_cache+0x8d7/0x1c90 [ 252.618591][ T6311] ? __filemap_get_folio+0x10f/0xde0 [ 252.625295][ T6311] ? __filemap_get_folio+0x10f/0xde0 [ 252.634413][ T6311] ? put_page+0x270/0x270 [ 252.640561][ T6311] ? mark_lock+0x94/0x320 [ 252.646111][ T6311] shmem_get_folio_gfp+0x1663/0x35e0 [ 252.653298][ T6311] shmem_write_begin+0xee/0x3f0 [ 252.660486][ T6311] generic_perform_write+0x2fa/0x5c0 [ 252.665979][ T6311] ? generic_file_direct_write+0x330/0x330 [ 252.673113][ T6311] ? __file_remove_privs+0x5f0/0x5f0 [ 252.681936][ T6311] ? rwsem_write_trylock+0x135/0x1c0 [ 252.688767][ T6311] ? clear_nonspinnable+0x60/0x60 [ 252.694603][ T6311] ? generic_write_checks_count+0x363/0x440 [ 252.700647][ T6311] __generic_file_write_iter+0x148/0x2a0 [ 252.708657][ T6311] generic_file_write_iter+0xab/0x2e0 [ 252.715937][ T6311] __kernel_write_iter+0x298/0x690 [ 252.722205][ T6311] ? vfs_read+0x960/0x960 [ 252.726870][ T6311] ? iov_iter_bvec+0x4a/0x1f0 [ 252.732188][ T6311] dump_user_range+0x374/0x7b0 [ 252.738793][ T6311] ? dump_skip+0x40/0x40 [ 252.744367][ T6311] elf_core_dump+0x30ca/0x3630 [ 252.752766][ T6311] ? load_elf_binary+0x2820/0x2820 [ 252.758326][ T6311] ? dump_vma_snapshot+0xaea/0xe40 [ 252.764451][ T6311] ? verify_lock_unused+0x140/0x140 [ 252.770571][ T6311] ? __lock_acquire+0x7ea0/0x7ea0 [ 252.777062][ T6311] ? mas_next_entry+0xe03/0xe90 [ 252.784226][ T6311] ? rcu_read_lock_any_held+0xb0/0x130 [ 252.792058][ T6311] ? 0xffffffffff600000 [ 252.796858][ T6311] ? getname_kernel+0x142/0x2f0 [ 252.802910][ T6311] do_coredump+0x1702/0x25c0 [ 252.808969][ T6311] ? nfs_stat_to_errno+0x170/0x170 [ 252.814347][ T6311] ? lock_chain_count+0x20/0x20 [ 252.819871][ T6311] ? _raw_spin_unlock_irq+0x1f/0x40 [ 252.828864][ T6311] ? lockdep_hardirqs_on+0x94/0x140 [ 252.837011][ T6311] get_signal+0x1093/0x1340 [ 252.842551][ T6311] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.850750][ T6311] arch_do_signal_or_restart+0xc4/0x1310 [ 252.858330][ T6311] ? get_sigframe_size+0x10/0x10 [ 252.866152][ T6311] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.873453][ T6311] ? exit_to_user_mode_loop+0x3b/0x110 [ 252.880825][ T6311] exit_to_user_mode_loop+0x70/0x110 [ 252.886903][ T6311] exit_to_user_mode_prepare+0xee/0x180 [ 252.894858][ T6311] irqentry_exit_to_user_mode+0x5/0x30 [ 252.901607][ T6311] exc_page_fault+0x88/0x100 [ 252.906964][ T6311] asm_exc_page_fault+0x22/0x30 [ 252.913016][ T6311] RIP: 0033:0x7f2864854db7 [ 252.918651][ T6311] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 252.941917][ T6311] RSP: 002b:00007f28657b2120 EFLAGS: 00010202 [ 252.950135][ T6311] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f28649a94d9 [ 252.958898][ T6311] RDX: 00007f28657b2140 RSI: 00007f28657b2270 RDI: 000000000000000b [ 252.967653][ T6311] RBP: 00007f2864a3804e R08: 0000000000000000 R09: 0000000000000000 [ 252.976386][ T6311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.987183][ T6311] R13: 00007f2864c26038 R14: 00007f2864c25fa0 R15: 00007ffee8c4ff18 [ 253.001387][ T6311] [ 253.011241][ T29] oom_reaper: reaped process 6030 (syz.2.516), now anon-rss:0kB, file-rss:20480kB, shmem-rss:63488kB [ 253.057031][ T6311] memory: usage 307200kB, limit 307200kB, failcnt 232 [ 253.153348][ T6311] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 253.162394][ T6311] kmem: usage 2392kB, limit 9007199254740988kB, failcnt 0 [ 253.270854][ T6311] Memory cgroup stats for /syz0: [ 253.271332][ T6311] anon 2928640 [ 253.271332][ T6311] file 309194752 [ 253.271332][ T6311] kernel 2449408 [ 253.271332][ T6311] kernel_stack 98304 [ 253.271332][ T6311] pagetables 643072 [ 253.271332][ T6311] sec_pagetables 0 [ 253.271332][ T6311] percpu 0 [ 253.271332][ T6311] sock 0 [ 253.271332][ T6311] vmalloc 0 [ 253.271332][ T6311] shmem 309170176 [ 253.271332][ T6311] zswap 0 [ 253.271332][ T6311] zswapped 0 [ 253.271332][ T6311] file_mapped 154603520 [ 253.271332][ T6311] file_dirty 24576 [ 253.271332][ T6311] file_writeback 0 [ 253.271332][ T6311] swapcached 0 [ 253.271332][ T6311] anon_thp 2097152 [ 253.271332][ T6311] file_thp 0 [ 253.271332][ T6311] shmem_thp 0 [ 253.271332][ T6311] inactive_anon 487424 [ 253.271332][ T6311] active_anon 311611392 [ 253.271332][ T6311] inactive_file 0 [ 253.271332][ T6311] active_file 24576 [ 253.271332][ T6311] unevictable 0 [ 253.271332][ T6311] slab_reclaimable 900440 [ 253.271332][ T6311] slab_unreclaimable 725328 [ 253.497825][ T6682] Bluetooth: ISO socket layer initialized [ 254.189679][ T6311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.609,pid=6311,uid=0 [ 254.319209][ T6311] Memory cgroup out of memory: Killed process 6311 (syz.0.609) total-vm:200592kB, anon-rss:1576kB, file-rss:20608kB, shmem-rss:115500kB, UID:0 pgtables:340kB oom_score_adj:1000 [ 256.643102][ T29] oom_reaper: reaped process 6311 (syz.0.609), now anon-rss:0kB, file-rss:2724kB, shmem-rss:0kB [ 258.694330][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.711141][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.476503][ T6720] gadgetfs: bound to dummy_udc driver [ 262.216383][ T6729] gadgetfs: bound to dummy_udc driver [ 264.232772][ T4294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.251160][ T4294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.271977][ T4294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.289478][ T4294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.299250][ T4294] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 264.309757][ T4294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.497670][ T6741] rxe_eth0 speed is unknown, defaulting to 1000 [ 265.539937][ T6755] gadgetfs: bound to dummy_udc driver [ 266.690608][ T4294] Bluetooth: hci5: command 0x0409 tx timeout [ 266.881456][ T6741] lo speed is unknown, defaulting to 1000 [ 267.749704][ T6741] chnl_net:caif_netlink_parms(): no params data found [ 268.192309][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.259842][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.306043][ T6741] device bridge_slave_0 entered promiscuous mode [ 268.371306][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.378985][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.404712][ T6741] device bridge_slave_1 entered promiscuous mode [ 268.509011][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 268.550934][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.618678][ T6209] syz.3.577 (6209) used greatest stack depth: 17680 bytes left [ 268.630921][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.727542][ T22] usb 5-1: device descriptor read/64, error -71 [ 268.801589][ T6741] team0: Port device team_slave_0 added [ 268.825801][ T6741] team0: Port device team_slave_1 added [ 268.861679][ T4294] Bluetooth: hci5: command 0x041b tx timeout [ 268.990809][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.011692][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.056966][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 269.137349][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.278796][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.322766][ T22] usb 5-1: device descriptor read/64, error -71 [ 269.385020][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.450075][ T22] usb usb5-port1: attempt power cycle [ 269.525976][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.908992][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 269.953298][ T22] usb 5-1: device descriptor read/8, error -71 [ 270.168846][ T6741] device hsr_slave_0 entered promiscuous mode [ 270.250981][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 270.305148][ T22] usb 5-1: device descriptor read/8, error -71 [ 270.433133][ T22] usb usb5-port1: unable to enumerate USB device [ 270.458720][ T6741] device hsr_slave_1 entered promiscuous mode [ 270.608175][ T6741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.642808][ T6741] Cannot create hsr debugfs directory [ 271.084376][ T4294] Bluetooth: hci5: command 0x040f tx timeout [ 271.514242][ T6741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.644204][ T6741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.722003][ T6741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.860506][ T6741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.133163][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.740'. [ 272.251835][ T6030] syz.2.516 (6030) used greatest stack depth: 17584 bytes left [ 272.664791][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 273.192242][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.256833][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.297889][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.307237][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 273.346581][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.433770][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.500259][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.553949][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.562687][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.638764][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.682346][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.714859][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.725402][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.791575][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.835443][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.916286][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.951376][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.982714][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.077573][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.156736][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.179249][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.237700][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.261742][ T6839] gadgetfs: bound to dummy_udc driver [ 274.295363][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.295805][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.339180][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.398011][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.455723][ T6843] device-mapper: table: 248:3: integrity: Cannot allocate workqueue (-ENOMEM) [ 275.530601][ T6843] device-mapper: ioctl: error adding target to table [ 275.995975][ T6649] syz.0.698 (6649): drop_caches: 3 [ 276.032028][ T3603] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 276.245831][ T3603] usb 4-1: device descriptor read/64, error -71 [ 276.534272][ T3603] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 276.705574][ T3603] usb 4-1: device descriptor read/64, error -71 [ 276.865811][ T3603] usb usb4-port1: attempt power cycle [ 277.009177][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.066549][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.115882][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.348067][ T3603] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.416951][ T3603] usb 4-1: device descriptor read/8, error -71 [ 277.741866][ T3603] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 277.828642][ T3603] usb 4-1: device descriptor read/8, error -71 [ 277.973851][ T3603] usb usb4-port1: unable to enumerate USB device [ 278.709384][ T4578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.289085][ T4578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.471601][ T4578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.695591][ T4578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.871129][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.923282][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.055445][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.088736][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.111016][ T6741] device veth0_vlan entered promiscuous mode [ 281.163139][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.206895][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.325005][ T6741] device veth1_vlan entered promiscuous mode [ 281.625088][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 281.656151][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 281.722296][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.748448][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.021080][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.269225][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.101088][ T6741] device veth0_macvtap entered promiscuous mode [ 283.127010][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.443136][ T6741] device veth1_macvtap entered promiscuous mode [ 284.446820][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.559490][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.623729][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.647243][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.709135][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.762893][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.804172][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.864495][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.899850][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.943281][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.003908][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.025474][ T4380] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 285.222175][ T4380] usb 5-1: device descriptor read/64, error -71 [ 285.448526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.471561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.496285][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.521943][ T4380] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 285.531902][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.531981][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.532001][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.532046][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.532061][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.532073][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.532087][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.536661][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.799253][ T4380] usb 5-1: device descriptor read/64, error -71 [ 285.901543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.957735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.969917][ T4380] usb usb5-port1: attempt power cycle [ 285.998311][ T6741] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.059557][ T6741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.099403][ T6741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.117819][ T6741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.410973][ T4380] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.465948][ T4380] usb 5-1: device descriptor read/8, error -71 [ 286.609028][ T6966] gadgetfs: bound to dummy_udc driver [ 286.921480][ T4354] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 287.014991][ C1] gadgetfs: connected [ 287.033144][ T4354] gadgetfs: disconnected [ 287.541201][ T4380] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 287.613568][ T4380] usb 5-1: device descriptor read/8, error -71 [ 287.776660][ T4380] usb usb5-port1: unable to enumerate USB device [ 291.890866][ T6965] device-mapper: table: 248:8: integrity: Cannot allocate workqueue (-ENOMEM) [ 291.899923][ T6965] device-mapper: ioctl: error adding target to table [ 292.040531][ T4578] IPVS: stopping master sync thread 4914 ... [ 292.087388][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.124810][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.715946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.263961][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.377084][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.467008][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.487419][ T6741] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 293.500995][ T6741] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 293.510850][ T6741] CPU: 0 PID: 6741 Comm: syz-executor Not tainted syzkaller #0 [ 293.521342][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 293.534657][ T6741] RIP: 0010:ext4_mb_load_buddy_gfp+0x27a/0x1770 [ 293.541422][ T6741] Code: 00 00 e8 a9 c1 58 ff 41 bc 8b ff ff ff e9 96 05 00 00 48 89 c3 4c 8d 78 08 4d 89 fd 49 c1 ed 03 48 bd 00 00 00 00 00 fc ff df <41> 80 7c 2d 00 00 74 08 4c 89 ff e8 46 25 aa ff 4d 8b 3f 4c 89 fe [ 293.565839][ T6741] RSP: 0018:ffffc90004acf1b0 EFLAGS: 00010202 [ 293.574355][ T6741] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888019b05a00 [ 293.585643][ T6741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.597638][ T6741] RBP: dffffc0000000000 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 293.610096][ T6741] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: 0000000000000000 [ 293.619664][ T6741] R13: 0000000000000001 R14: 1ffff1100fb842de R15: 0000000000000008 [ 293.630111][ T6741] FS: 000055556c4db500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 293.640080][ T6741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.646711][ T6741] CR2: 00007fec20c95ce0 CR3: 000000004b26c000 CR4: 00000000003506f0 [ 293.654964][ T6741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.663002][ T6741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.671030][ T6741] Call Trace: [ 293.674361][ T6741] [ 293.677355][ T6741] ext4_mb_regular_allocator+0x1346/0x34a0 [ 293.683223][ T6741] ext4_mb_new_blocks+0xcf1/0x44d0 [ 293.688417][ T6741] ? ext4_find_extent+0x372/0xde0 [ 293.693484][ T6741] ? rcu_is_watching+0x11/0xa0 [ 293.698557][ T6741] ? memset+0x1e/0x40 [ 293.702755][ T6741] ? ext4_mb_pa_callback+0xd0/0xd0 [ 293.708004][ T6741] ? ext4_inode_to_goal_block+0x313/0x450 [ 293.713971][ T6741] ext4_ext_map_blocks+0x184a/0x6680 [ 293.719297][ T6741] ? ext4_ext_release+0x10/0x10 [ 293.724451][ T6741] ? rwsem_write_trylock+0x135/0x1c0 [ 293.729862][ T6741] ? ext4_es_lookup_extent+0x638/0xb00 [ 293.735377][ T6741] ext4_map_blocks+0x9d7/0x1a90 [ 293.740458][ T6741] ? ext4_issue_zeroout+0x250/0x250 [ 293.745716][ T6741] ext4_getblk+0x1c5/0x720 [ 293.750165][ T6741] ? ext4_get_block_unwritten+0x100/0x100 [ 293.755911][ T6741] ? __ext4_new_inode+0x3240/0x3b40 [ 293.761168][ T6741] ext4_bread+0x26/0x170 [ 293.765440][ T6741] ext4_append+0x2bb/0x560 [ 293.770122][ T6741] ? ext4_init_new_dir+0x550/0x550 [ 293.775274][ T6741] ext4_init_new_dir+0x2b8/0x550 [ 293.780605][ T6741] ext4_mkdir+0x4c3/0xc90 [ 293.785244][ T6741] ? ext4_symlink+0x940/0x940 [ 293.790156][ T6741] ? inode_permission+0xef/0x480 [ 293.795130][ T6741] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 293.800304][ T6741] ? security_inode_mkdir+0xb3/0x100 [ 293.805800][ T6741] vfs_mkdir+0x386/0x570 [ 293.810212][ T6741] do_mkdirat+0x1d8/0x440 [ 293.814575][ T6741] ? vfs_mkdir+0x570/0x570 [ 293.819064][ T6741] __x64_sys_mkdirat+0x85/0x90 [ 293.824000][ T6741] do_syscall_64+0x4c/0xa0 [ 293.828590][ T6741] ? clear_bhb_loop+0x60/0xb0 [ 293.833445][ T6741] ? clear_bhb_loop+0x60/0xb0 [ 293.838511][ T6741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.844441][ T6741] RIP: 0033:0x7f03357a8347 [ 293.848883][ T6741] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.868608][ T6741] RSP: 002b:00007ffcececbe68 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 293.877154][ T6741] RAX: ffffffffffffffda RBX: 00007f0335837a4b RCX: 00007f03357a8347 [ 293.885274][ T6741] RDX: 00000000000001ff RSI: 00007f0335837a4b RDI: 00000000ffffff9c [ 293.894174][ T6741] RBP: 00007f0335a267b8 R08: 0000000000000000 R09: 0000000000000000 [ 293.902195][ T6741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 293.910304][ T6741] R13: 0000000000000003 R14: 00007ffcececc0d8 R15: 0000000000000000 [ 293.918359][ T6741] [ 293.921577][ T6741] Modules linked in: [ 295.044095][ T7018] gadgetfs: bound to dummy_udc driver [ 295.431327][ T6741] ---[ end trace 0000000000000000 ]--- [ 295.437308][ T6741] RIP: 0010:ext4_mb_load_buddy_gfp+0x27a/0x1770 [ 295.443714][ T6741] Code: 00 00 e8 a9 c1 58 ff 41 bc 8b ff ff ff e9 96 05 00 00 48 89 c3 4c 8d 78 08 4d 89 fd 49 c1 ed 03 48 bd 00 00 00 00 00 fc ff df <41> 80 7c 2d 00 00 74 08 4c 89 ff e8 46 25 aa ff 4d 8b 3f 4c 89 fe [ 295.480571][ T6741] RSP: 0018:ffffc90004acf1b0 EFLAGS: 00010202 [ 295.512770][ T6741] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888019b05a00 [ 295.520843][ T6741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.548091][ T6741] RBP: dffffc0000000000 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 295.576729][ T6741] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: 0000000000000000 [ 295.601796][ T6741] R13: 0000000000000001 R14: 1ffff1100fb842de R15: 0000000000000008 [ 295.640407][ T6741] FS: 000055556c4db500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 295.671088][ T6741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.690352][ T6741] CR2: 00007f54a29f92f8 CR3: 000000004b26c000 CR4: 00000000003506e0 [ 295.726448][ T6741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.769165][ T6741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.777270][ T6741] Kernel panic - not syncing: Fatal exception [ 295.783972][ T6741] Kernel Offset: disabled [ 295.788333][ T6741] Rebooting in 86400 seconds..