last executing test programs: 16m53.460822788s ago: executing program 32 (id=83): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) sendto(r0, &(0x7f0000001240)="99b449f8", 0x4, 0x80, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 12m55.425585315s ago: executing program 0 (id=705): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=""/268, 0x10c}, 0x1}], 0x1, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x144) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000000f0ffffff0f"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x40) fallocate(r1, 0x10, 0x1, 0xaa03) 12m55.425364701s ago: executing program 2 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000003600000008007300000000000800e8ff020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000007ab3"], 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 12m53.795869348s ago: executing program 0 (id=708): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m49.4093996s ago: executing program 0 (id=712): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 12m48.730226208s ago: executing program 2 (id=714): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8142, 0x2000, 0x800, 0x9, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f0000000280)={0x2c, 0x2, r2, 0x0, r0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 12m47.476982504s ago: executing program 0 (id=715): pipe2$9p(&(0x7f0000000000), 0x0) eventfd2(0x3, 0x800) socket(0x28, 0x801, 0x0) timerfd_create(0x0, 0x80800) socket$inet_icmp(0x2, 0x2, 0x1) socket(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12m45.840122262s ago: executing program 0 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4df594cdc7ad07e8c5d00000000000000"]) 12m44.613718067s ago: executing program 0 (id=721): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f8ffffff0000000003000000850000002700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[], 0x0) 12m44.532465589s ago: executing program 2 (id=722): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) 12m40.402505994s ago: executing program 2 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 12m36.487714117s ago: executing program 2 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(0x3) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 12m33.590672174s ago: executing program 2 (id=728): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0x3, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4008, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}], 0xee00}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) lseek(r2, 0xfffffffffffffff9, 0x4) 12m28.624668386s ago: executing program 33 (id=721): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f8ffffff0000000003000000850000002700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[], 0x0) 12m18.204073113s ago: executing program 34 (id=728): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0x3, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4008, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}], 0xee00}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) lseek(r2, 0xfffffffffffffff9, 0x4) 10m57.050281888s ago: executing program 4 (id=812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40004) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x10) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_emit_ethernet(0x0, 0x0, 0x0) 10m56.029078762s ago: executing program 3 (id=813): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x36, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aafbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)={0x2, 0x0, @d}, 0x18, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x65, 0x58425c31ab49816a, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 10m55.477001722s ago: executing program 3 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, 0x0, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000240)=""/244, 0xf4) 10m54.054333376s ago: executing program 3 (id=815): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 10m49.340391559s ago: executing program 4 (id=818): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 10m48.502987421s ago: executing program 4 (id=819): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 10m45.560247498s ago: executing program 3 (id=820): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x4, 0x8}, 0x0) mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) unshare(0x28000600) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffff2a7, 0xffffffff, 0x1}, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) connect$tipc(r4, 0x0, 0x0) 10m45.485886702s ago: executing program 4 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) truncate(0x0, 0x6) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rmdir(0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syslog(0x4, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 10m38.965305509s ago: executing program 3 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sched_setaffinity(r3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) 10m36.862493555s ago: executing program 4 (id=824): openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x800080000000}]}) write(r4, &(0x7f0000000700)='0', 0x1) 10m36.645030911s ago: executing program 3 (id=825): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x2, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10m35.145526779s ago: executing program 4 (id=827): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10m19.817481025s ago: executing program 35 (id=825): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x2, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10m19.437540455s ago: executing program 36 (id=827): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8m22.2076614s ago: executing program 5 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+me'], 0xc) r5 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)) semget(0x1, 0x4, 0x200) setresuid(0x0, 0xee00, 0x0) r6 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, &(0x7f0000001140)) 8m15.716380036s ago: executing program 5 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r4, 0x0, 0xc) r5 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) 8m6.832214657s ago: executing program 5 (id=878): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f000001a840)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 7m57.949603135s ago: executing program 5 (id=879): r0 = syz_usb_connect$uac3(0x0, 0xa0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000000000000290000"], 0x18}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) ioctl$KDGKBTYPE(r7, 0x4b52, &(0x7f0000000000)) r8 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x33f, 0x180) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f00000006c0)={{0x4, 0x0, 0xfffffffb, 0xd5, 'syz1\x00'}, 0x3, 0x400, 0x2, 0x0, 0x0, 0xa8e, 'syz1\x00', 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m52.832932211s ago: executing program 5 (id=880): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB="b8ef00"], &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="64796e2c009c26fe0e9b179b045d3ef2faafcce24fc6e447139401332b273a92c8922efed7676fe1d940e26907998d3be68dd68fd07b0636f4a3f96edab5dd7ee91ee7e49ea61302577743845954"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) socket$inet6_udp(0xa, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') setgroups(0xffffffffffffff79, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 7m49.616448002s ago: executing program 5 (id=881): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) 7m34.382731405s ago: executing program 37 (id=881): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) 10.487893183s ago: executing program 1 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) lseek(r0, 0x49e9, 0x3) 9.107209848s ago: executing program 1 (id=1248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[], 0x27) write(r4, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7f000', 0x36) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close_range(r7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) 8.743166965s ago: executing program 1 (id=1249): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x12c}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1, 0x8004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x40000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80b4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') lseek(r6, 0x9, 0x0) 7.338274825s ago: executing program 6 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}], 0x5}, 0x2}], 0x1, 0x100, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a0001100000ff7f000000008020"], 0x24}}, 0x0) 4.782464676s ago: executing program 1 (id=1251): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 4.339988185s ago: executing program 1 (id=1252): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4}]}, 0x10) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 3.286808969s ago: executing program 6 (id=1253): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c0033008020090008021100000108021100"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) fcntl$lock(r1, 0x6, 0x0) 2.432645196s ago: executing program 6 (id=1254): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) 2.223171644s ago: executing program 1 (id=1255): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.900266995s ago: executing program 6 (id=1256): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0440, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x8929, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xb33, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7fff, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0xf, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 528.39736ms ago: executing program 6 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='Test Gadg', 0x9) 0s ago: executing program 6 (id=1258): syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) kernel console output (not intermixed with test programs): ice netdevsim3 [ 931.024145][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 931.269453][T10841] syz_tun: entered promiscuous mode [ 931.350657][T10841] macvtap1: entered promiscuous mode [ 931.354356][T10841] macvtap1: entered allmulticast mode [ 931.354378][T10841] syz_tun: entered allmulticast mode [ 931.394353][ T9301] Bluetooth: hci1: command 0x0406 tx timeout [ 931.507589][T10841] syz_tun: left allmulticast mode [ 931.507766][T10841] syz_tun: left promiscuous mode [ 932.270139][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 932.270441][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.932'. [ 933.231693][T10512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.315771][T10512] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.360259][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.360413][ T8806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.438696][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.441375][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.817452][T10866] jffs2: notice: (10866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 937.204617][ T8803] bridge_slave_1: left allmulticast mode [ 937.204647][ T8803] bridge_slave_1: left promiscuous mode [ 937.204846][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.213469][ T8803] bridge_slave_0: left allmulticast mode [ 937.213495][ T8803] bridge_slave_0: left promiscuous mode [ 937.213665][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.236462][ T8803] bridge_slave_1: left allmulticast mode [ 937.236490][ T8803] bridge_slave_1: left promiscuous mode [ 937.236669][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.257957][ T8803] bridge_slave_0: left allmulticast mode [ 937.257985][ T8803] bridge_slave_0: left promiscuous mode [ 937.258143][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.295800][ T8803] bridge_slave_1: left allmulticast mode [ 937.295837][ T8803] bridge_slave_1: left promiscuous mode [ 937.295998][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.309166][ T8803] bridge_slave_0: left allmulticast mode [ 937.309194][ T8803] bridge_slave_0: left promiscuous mode [ 937.309356][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.859286][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.873098][ T8803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.878162][ T8803] bond0 (unregistering): Released all slaves [ 938.149647][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 938.182523][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.218423][ T8803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.220433][ T8803] bond0 (unregistering): Released all slaves [ 938.300140][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 938.300672][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 938.301577][ T9] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 938.301608][ T9] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 938.301623][ T9] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.301639][ T9] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 938.309300][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.309319][ T9] usb 2-1: Product: syz [ 938.309328][ T9] usb 2-1: Manufacturer: syz [ 938.309336][ T9] usb 2-1: SerialNumber: syz [ 938.430383][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 938.841921][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.860889][ T8803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.872863][ T8803] bond0 (unregistering): Released all slaves [ 939.028907][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input19 [ 939.951531][ T9] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 939.951547][ T9] (id 0x00) [ 939.993661][ T8803] hsr_slave_0: left promiscuous mode [ 940.007752][ T8803] hsr_slave_1: left promiscuous mode [ 940.008502][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.009072][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.082186][ T8803] hsr_slave_0: left promiscuous mode [ 940.084231][ T8803] hsr_slave_1: left promiscuous mode [ 940.084972][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.102935][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.210148][ T9] rc_core: IR keymap rc-imon-pad not found [ 940.210167][ T9] Registered IR keymap rc-empty [ 940.210702][ T9] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 940.210715][ T9] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 940.374855][ T8803] hsr_slave_0: left promiscuous mode [ 940.435445][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 940.444177][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input20 [ 940.461450][ T8803] hsr_slave_1: left promiscuous mode [ 940.462183][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.555602][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.584358][ T9] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:14> initialized [ 940.594496][ T9] usb 2-1: USB disconnect, device number 14 [ 941.997619][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 942.043559][ T8803] team0 (unregistering): Port device team_slave_0 removed [ 943.629356][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 943.677761][ T8803] team0 (unregistering): Port device team_slave_0 removed [ 944.522201][ T17] IPVS: starting estimator thread 0... [ 944.532928][T10956] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 944.610895][T10957] IPVS: using max 14 ests per chain, 33600 per kthread [ 944.635019][ T9301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 944.674222][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 944.712571][ T9301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 944.719460][ T9301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 944.726923][ T9301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 944.743886][ T9301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 945.278734][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 945.378641][ T8803] team0 (unregistering): Port device team_slave_0 removed [ 946.108226][T10967] jffs2: notice: (10967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 946.917346][ T9301] Bluetooth: hci3: command tx timeout [ 949.013126][ T9301] Bluetooth: hci3: command tx timeout [ 950.377196][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 950.545729][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 950.556719][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 950.558860][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 950.559287][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 951.076523][ T5596] Bluetooth: hci3: command tx timeout [ 951.148113][ T38] audit: type=1326 audit(1788493026.097:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11013 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe84284e159 code=0x0 [ 951.428579][ T9301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 951.476841][ T9301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 951.490672][ T9301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 951.491424][ T9301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 951.492297][ T9301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 952.425397][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 952.471857][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 952.482035][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 952.482835][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 952.488165][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.874403][ T5596] Bluetooth: hci0: command tx timeout [ 953.163307][ T5596] Bluetooth: hci3: command tx timeout [ 953.199622][ T11] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 953.352621][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 953.353708][ T11] usb 2-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 953.353724][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 953.354695][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 953.354727][ T11] usb 2-1: SerialNumber: syz [ 953.679140][ T5596] Bluetooth: hci4: command tx timeout [ 953.688605][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.688731][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.688920][T10958] bridge_slave_0: entered allmulticast mode [ 953.693635][T10958] bridge_slave_0: entered promiscuous mode [ 953.919884][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.919961][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.920086][T10958] bridge_slave_1: entered allmulticast mode [ 953.932249][T10958] bridge_slave_1: entered promiscuous mode [ 953.936961][ T11] usb 2-1: 0:2 : does not exist [ 954.598712][ T11] usb 2-1: USB disconnect, device number 15 [ 954.666658][T10444] udevd[10444]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 954.671337][ T5596] Bluetooth: hci5: command tx timeout [ 954.912779][ T5596] Bluetooth: hci0: command tx timeout [ 955.709664][ T9301] Bluetooth: hci4: command tx timeout [ 956.097874][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.098728][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.967'. [ 956.391175][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.757815][ T9301] Bluetooth: hci5: command tx timeout [ 956.995881][ T9301] Bluetooth: hci0: command tx timeout [ 957.477253][T10958] team0: Port device team_slave_0 added [ 957.793538][ T9301] Bluetooth: hci4: command tx timeout [ 957.883247][T10958] team0: Port device team_slave_1 added [ 958.830732][ T9301] Bluetooth: hci5: command tx timeout [ 959.070126][ T9301] Bluetooth: hci0: command tx timeout [ 959.335092][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.335107][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.335123][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.418251][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.418266][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.418282][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.870053][ T9301] Bluetooth: hci4: command tx timeout [ 960.165569][T11078] binder: 11077:11078 ioctl c0306201 2000000006c0 returned -14 [ 960.910863][ T9301] Bluetooth: hci5: command tx timeout [ 960.925103][T10958] hsr_slave_0: entered promiscuous mode [ 960.925948][T10958] hsr_slave_1: entered promiscuous mode [ 960.927570][T10563] netdevsim netdevsim8: probe with driver netdevsim failed with error -12 [ 961.062451][T10958] debugfs: 'hsr0' already exists in 'hsr' [ 961.062473][T10958] Cannot create hsr debugfs directory [ 961.505560][T11092] loop5: detected capacity change from 0 to 7 [ 961.754633][T11092] Dev loop5: unable to read RDB block 7 [ 961.754681][T11092] loop5: AHDI p1 p2 p3 [ 961.754695][T11092] loop5: partition table partially beyond EOD, truncated [ 961.755417][T11092] loop5: p2 start 16777216 is beyond EOD, truncated [ 963.441052][T11107] ±ÿ†Ý'É|d: renamed from lo (while UP) [ 964.583473][ T8803] bridge_slave_1: left allmulticast mode [ 964.583501][ T8803] bridge_slave_1: left promiscuous mode [ 964.583728][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.587512][ T8803] bridge_slave_0: left allmulticast mode [ 964.587537][ T8803] bridge_slave_0: left promiscuous mode [ 964.587690][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.922841][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.942184][ T8803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.943998][ T8803] bond0 (unregistering): Released all slaves [ 966.219846][ T8803] hsr_slave_0: left promiscuous mode [ 966.239008][ T8803] hsr_slave_1: left promiscuous mode [ 966.240053][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.261508][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.107074][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 967.137419][ T8803] team0 (unregistering): Port device team_slave_0 removed [ 967.377098][ T38] audit: type=1800 audit(1788493042.427:12): pid=11138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.990" name="addr_trsvcid" dev="configfs" ino=38604 res=0 errno=0 [ 969.572185][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.572264][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.572410][T11008] bridge_slave_0: entered allmulticast mode [ 969.580841][T11008] bridge_slave_0: entered promiscuous mode [ 969.677624][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.677712][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.677854][T11008] bridge_slave_1: entered allmulticast mode [ 969.689191][T11008] bridge_slave_1: entered promiscuous mode [ 970.154103][T11019] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.154190][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.154331][T11019] bridge_slave_0: entered allmulticast mode [ 970.159348][T11019] bridge_slave_0: entered promiscuous mode [ 970.206712][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.206788][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.206897][T11027] bridge_slave_0: entered allmulticast mode [ 970.212964][T11027] bridge_slave_0: entered promiscuous mode [ 970.518578][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.522557][T11019] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.522653][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.522786][T11019] bridge_slave_1: entered allmulticast mode [ 970.541162][T11019] bridge_slave_1: entered promiscuous mode [ 970.555962][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.556039][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.556164][T11027] bridge_slave_1: entered allmulticast mode [ 970.563791][T11027] bridge_slave_1: entered promiscuous mode [ 970.595887][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.012860][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 971.160254][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 971.161169][ T9] usb 2-1: config 2 has an invalid interface number: 255 but max is 0 [ 971.161185][ T9] usb 2-1: config 2 has no interface number 0 [ 971.161204][ T9] usb 2-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 971.161227][ T9] usb 2-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 971.161243][ T9] usb 2-1: config 2 interface 255 has no altsetting 0 [ 971.161263][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.178552][ T9] ums-realtek 2-1:2.255: USB Mass Storage device detected [ 971.467449][ T9] usb 2-1: USB disconnect, device number 16 [ 972.097430][T11019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.114797][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.116258][T11008] team0: Port device team_slave_0 added [ 972.124574][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 972.148353][T11019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.161987][T11008] team0: Port device team_slave_1 added [ 972.169943][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.038878][T11019] team0: Port device team_slave_0 added [ 973.043107][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.043119][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.043134][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.265813][T11027] team0: Port device team_slave_0 added [ 973.272247][T11019] team0: Port device team_slave_1 added [ 973.292045][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.292060][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.292076][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.307378][T11027] team0: Port device team_slave_1 added [ 973.858980][T11019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.858994][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.859009][T11019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.868145][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.868159][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.868175][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.969255][T11019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.969270][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.969285][T11019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.973026][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.973037][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.973052][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.212176][T11008] hsr_slave_0: entered promiscuous mode [ 974.213040][T11008] hsr_slave_1: entered promiscuous mode [ 974.621946][T11027] hsr_slave_0: entered promiscuous mode [ 974.622803][T11027] hsr_slave_1: entered promiscuous mode [ 974.623363][T11027] debugfs: 'hsr0' already exists in 'hsr' [ 974.623380][T11027] Cannot create hsr debugfs directory [ 975.810594][T11019] hsr_slave_0: entered promiscuous mode [ 975.817679][T11019] hsr_slave_1: entered promiscuous mode [ 975.818397][T11019] debugfs: 'hsr0' already exists in 'hsr' [ 975.818415][T11019] Cannot create hsr debugfs directory [ 976.235215][T11214] FAULT_INJECTION: forcing a failure. [ 976.235215][T11214] name failslab, interval 1, probability 0, space 0, times 0 [ 976.235246][T11214] CPU: 0 UID: 0 PID: 11214 Comm: syz.1.1009 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 976.235265][T11214] Tainted: [L]=SOFTLOCKUP [ 976.235270][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 976.235277][T11214] Call Trace: [ 976.235283][T11214] [ 976.235303][T11214] dump_stack_lvl+0xe8/0x150 [ 976.235366][T11214] should_fail_ex+0x46b/0x600 [ 976.235402][T11214] should_failslab+0xa8/0x100 [ 976.235440][T11214] __kmalloc_noprof+0xfb/0x790 [ 976.235462][T11214] ? prepare_creds+0x30/0x820 [ 976.235505][T11214] ? security_prepare_creds+0x52/0x360 [ 976.235529][T11214] ? security_prepare_creds+0x52/0x360 [ 976.235546][T11214] security_prepare_creds+0x52/0x360 [ 976.235562][T11214] prepare_creds+0x57d/0x820 [ 976.235578][T11214] __sys_setregid+0xfa/0x660 [ 976.235596][T11214] do_syscall_64+0x166/0x520 [ 976.235638][T11214] ? trace_irq_disable+0x3b/0x140 [ 976.235662][T11214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.235687][T11214] ? clear_bhb_loop+0x70/0xc0 [ 976.235702][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.235713][T11214] RIP: 0033:0x7fe84284e159 [ 976.235727][T11214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.235737][T11214] RSP: 002b:00007fe840aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 976.235756][T11214] RAX: ffffffffffffffda RBX: 00007fe842ad5fa0 RCX: 00007fe84284e159 [ 976.235765][T11214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 976.235773][T11214] RBP: 00007fe8428e5024 R08: 0000000000000000 R09: 0000000000000000 [ 976.235780][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.235787][T11214] R13: 00007fe842ad6038 R14: 00007fe842ad5fa0 R15: 00007ffdc76deeb8 [ 976.235805][T11214] [ 977.195756][T11222] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1012'. [ 978.408552][T10958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 978.496024][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 978.757268][T10958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 978.764030][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.829770][T10958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 978.849122][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 979.013071][T10958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 979.077580][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.898302][T10958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.555346][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.675708][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.675791][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.708841][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.710773][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.249841][T10334] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 982.399821][T10334] usb 2-1: Using ep0 maxpacket: 32 [ 982.401720][T10334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 982.401759][T10334] usb 2-1: New USB device found, idVendor=050d, idProduct=825b, bcdDevice=57.ca [ 982.402702][T10334] usb 2-1: config 6 has an invalid interface number: 134 but max is 0 [ 982.402717][T10334] usb 2-1: config 6 has no interface number 0 [ 982.402744][T10334] usb 2-1: config 6 interface 134 has no altsetting 0 [ 982.404556][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.404571][T10334] usb 2-1: Product: syz [ 982.404580][T10334] usb 2-1: Manufacturer: syz [ 982.404588][T10334] usb 2-1: SerialNumber: syz [ 982.745442][T10334] uvcvideo 2-1:6.134: Found UVC 0.00 device syz (050d:825b) [ 982.745497][T10334] uvcvideo 2-1:6.134: No valid video chain found. [ 982.770750][T10334] usb 2-1: USB disconnect, device number 17 [ 984.484858][T11296] Bluetooth: MGMT ver 1.23 [ 984.596862][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 984.879310][ T8803] bridge_slave_1: left allmulticast mode [ 984.879338][ T8803] bridge_slave_1: left promiscuous mode [ 984.879715][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.887545][ T8803] bridge_slave_0: left allmulticast mode [ 984.887577][ T8803] bridge_slave_0: left promiscuous mode [ 984.887716][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.931258][ T8803] bridge_slave_1: left allmulticast mode [ 984.931286][ T8803] bridge_slave_1: left promiscuous mode [ 984.931474][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.933385][ T8803] bridge_slave_0: left allmulticast mode [ 984.933404][ T8803] bridge_slave_0: left promiscuous mode [ 984.933540][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.968867][ T8803] bridge_slave_1: left allmulticast mode [ 984.968895][ T8803] bridge_slave_1: left promiscuous mode [ 984.969049][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.975797][ T8803] bridge_slave_0: left allmulticast mode [ 984.975822][ T8803] bridge_slave_0: left promiscuous mode [ 984.975969][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.242594][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.250508][ T8803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.264097][ T8803] bond0 (unregistering): Released all slaves [ 985.554505][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.564788][ T8803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.574540][ T8803] bond0 (unregistering): Released all slaves [ 985.915742][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.922265][ T8803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.927180][ T8803] bond0 (unregistering): Released all slaves [ 987.644732][ T8803] hsr_slave_0: left promiscuous mode [ 987.645252][ T8803] hsr_slave_1: left promiscuous mode [ 987.645867][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.646351][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.895430][ T8803] hsr_slave_0: left promiscuous mode [ 987.999055][ T8803] hsr_slave_1: left promiscuous mode [ 987.999963][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.021845][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.317824][ T8803] hsr_slave_0: left promiscuous mode [ 988.318456][ T8803] hsr_slave_1: left promiscuous mode [ 988.319077][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.322753][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.183068][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 989.233083][ T8803] team0 (unregistering): Port device team_slave_0 removed [ 989.799629][T10334] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 989.952137][T10334] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 989.953162][T10334] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 989.953177][T10334] usb 2-1: config 0 has no interface number 0 [ 989.953204][T10334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.970896][T10334] usb 2-1: config 0 descriptor?? [ 990.068136][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 990.087237][T10334] ums-realtek 2-1:0.6: USB Mass Storage device detected [ 990.115334][ T8803] team0 (unregistering): Port device team_slave_0 removed [ 990.278996][T10334] usb 2-1: USB disconnect, device number 18 [ 990.981902][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 991.016029][ T8803] team0 (unregistering): Port device team_slave_0 removed [ 991.333770][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 991.809199][T10958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.822856][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 993.777675][T10958] veth0_vlan: entered promiscuous mode [ 993.918989][T10958] veth1_vlan: entered promiscuous mode [ 994.190400][T10958] veth0_macvtap: entered promiscuous mode [ 994.238878][T10958] veth1_macvtap: entered promiscuous mode [ 994.287590][T10958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.366043][T10958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.320713][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 996.082228][ T17] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.749847][ T11] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 997.752851][T10958] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 997.933529][ T11] usb 2-1: not running at top speed; connect to a high speed hub [ 997.933558][ T11] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice=ba.a3 [ 997.934469][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.941280][ T11] usb 2-1: New USB device strings: Mfr=226, Product=216, SerialNumber=0 [ 997.941300][ T11] usb 2-1: Product: syz [ 997.941309][ T11] usb 2-1: Manufacturer: syz [ 997.962956][ T11] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0825) [ 998.161677][ T11] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 998.163939][ T11] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 998.163996][ T11] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 998.164560][ T11] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 998.293398][ T11] usb 2-1: USB disconnect, device number 19 [ 998.747201][ T17] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.747220][ T17] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.819745][ T91] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.819785][ T91] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.819806][ T91] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.847801][T10958] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 999.550061][T10334] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 999.710983][T10334] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 999.712040][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 999.712059][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 999.712073][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 999.714936][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.714954][T10334] usb 2-1: Product: syz [ 999.714962][T10334] usb 2-1: Manufacturer: syz [ 999.714970][T10334] usb 2-1: SerialNumber: syz [ 999.719943][T10334] usb 2-1: config 0 descriptor?? [ 999.967584][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.967600][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.970678][T10334] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1000.220414][T10334] usb 2-1: USB disconnect, device number 20 [ 1001.399738][T11420] FAULT_INJECTION: forcing a failure. [ 1001.399738][T11420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.399768][T11420] CPU: 0 UID: 0 PID: 11420 Comm: syz.1.1042 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1001.399786][T11420] Tainted: [L]=SOFTLOCKUP [ 1001.399790][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.399801][T11420] Call Trace: [ 1001.399806][T11420] [ 1001.399812][T11420] dump_stack_lvl+0xe8/0x150 [ 1001.399834][T11420] should_fail_ex+0x46b/0x600 [ 1001.399852][T11420] _copy_from_user+0x2d/0xb0 [ 1001.399898][T11420] memdup_user+0x5e/0xd0 [ 1001.399917][T11420] strndup_user+0x68/0xd0 [ 1001.399935][T11420] __se_sys_request_key+0x1c4/0x350 [ 1001.399972][T11420] ? __pfx___se_sys_request_key+0x10/0x10 [ 1001.399993][T11420] do_syscall_64+0x166/0x520 [ 1001.400007][T11420] ? trace_irq_disable+0x3b/0x140 [ 1001.400022][T11420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.400035][T11420] ? clear_bhb_loop+0x70/0xc0 [ 1001.400050][T11420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.400068][T11420] RIP: 0033:0x7fe84284e159 [ 1001.400081][T11420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.400092][T11420] RSP: 002b:00007fe840aa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1001.400107][T11420] RAX: ffffffffffffffda RBX: 00007fe842ad5fa0 RCX: 00007fe84284e159 [ 1001.400117][T11420] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000000 [ 1001.400125][T11420] RBP: 00007fe8428e5024 R08: 0000000000000000 R09: 0000000000000000 [ 1001.400133][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.400140][T11420] R13: 00007fe842ad6038 R14: 00007fe842ad5fa0 R15: 00007ffdc76deeb8 [ 1001.400160][T11420] [ 1002.332392][T11424] page: refcount:3 mapcount:2 mapping:0000000000000000 index:0xec1 pfn:0x78000 [ 1002.332429][T11424] flags: 0x80000000000000(node=0|zone=1) [ 1002.332446][T11424] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000 [ 1002.332456][T11424] raw: 0000000000000ec1 0000000000000000 0000000300000001 0000000000000000 [ 1002.332463][T11424] page dumped because: unmovable page [ 1002.332470][T11424] page_owner tracks the page as allocated [ 1002.332475][T11424] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 11011, tgid 11011 (syz-executor), ts 950905456087 [ 1002.332503][T11424] post_alloc_hook+0x1f9/0x250 [ 1002.332521][T11424] get_page_from_freelist+0x2591/0x2600 [ 1002.332536][T11424] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 1002.332550][T11424] alloc_pages_mpol+0xd4/0x280 [ 1002.332565][T11424] alloc_pages_noprof+0xd2/0x2f0 [ 1002.332580][T11424] __vmalloc_node_range_noprof+0x6e5/0x1540 [ 1002.332593][T11424] vmalloc_user_noprof+0xad/0xe0 [ 1002.332605][T11424] kcov_ioctl+0x58/0x650 [ 1002.332642][T11424] __se_sys_ioctl+0xff/0x170 [ 1002.332671][T11424] do_syscall_64+0x166/0x520 [ 1002.332685][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.332697][T11424] page last free pid 10791 tgid 10791 ts 917392891373 stack trace: [ 1002.332708][T11424] free_pages_prepare+0x9c6/0xac0 [ 1002.332722][T11424] __free_contig_range_common+0x174/0x340 [ 1002.332738][T11424] free_pages_bulk+0x48/0x120 [ 1002.332753][T11424] vfree+0x278/0x500 [ 1002.332764][T11424] vb2_vmalloc_put+0x68/0xb0 [ 1002.332847][T11424] __vb2_buf_mem_free+0x113/0x2c0 [ 1002.332874][T11424] __vb2_queue_free+0x404/0xac0 [ 1002.332902][T11424] vb2_core_queue_release+0x6b/0x150 [ 1002.332915][T11424] v4l2_m2m_ctx_release+0x2a/0x40 [ 1002.332945][T11424] vicodec_release+0x99/0x110 [ 1002.332996][T11424] v4l2_release+0x198/0x350 [ 1002.333022][T11424] __fput+0x42a/0xa80 [ 1002.333037][T11424] task_work_run+0x1d9/0x270 [ 1002.333050][T11424] exit_to_user_mode_loop+0x204/0x770 [ 1002.333076][T11424] do_syscall_64+0x328/0x520 [ 1002.333088][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.719766][T11436] loop2: detected capacity change from 0 to 7 [ 1002.922662][T11436] Dev loop2: unable to read RDB block 7 [ 1002.922699][T11436] loop2: unable to read partition table [ 1002.922901][T11436] loop2: partition table beyond EOD, truncated [ 1002.922925][T11436] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1003.693908][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.694411][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.092426][T10334] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1004.215408][ T8877] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1004.250279][T10334] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1004.251488][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1004.251508][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.256540][T10334] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1004.256559][T10334] usb 2-1: Product: syz [ 1004.310231][T10334] usb 2-1: config 0 descriptor?? [ 1004.369225][T11008] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1004.377833][T10334] hub 2-1:0.0: USB hub found [ 1004.381902][T11008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.404710][ T8877] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1004.406090][ T8877] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1004.406120][ T8877] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1004.406135][ T8877] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1004.406149][ T8877] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1004.406214][ T8877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.441570][T11008] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1004.505735][T11448] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1004.595316][T10334] hub 2-1:0.0: 1 port detected [ 1004.596994][T11008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.649037][T11008] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1005.023229][ T8877] ims_pcu 7-1:1.0: Failed to set line coding, error: -71 [ 1005.023913][ T8877] ims_pcu 7-1:1.0: probe with driver ims_pcu failed with error -71 [ 1005.058448][T11008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.068838][T11008] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1005.185705][T11008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.296439][ T8877] usb 7-1: USB disconnect, device number 2 [ 1005.706384][T10334] usb 2-1: USB disconnect, device number 21 [ 1006.068388][T11459] vivid-000: disconnect [ 1006.087652][T11458] vivid-000: reconnect [ 1006.114765][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1006.668228][T11462] binder: 11460:11462 ioctl c0306201 200000001a80 returned -14 [ 1006.859633][ T11] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1007.112363][ T11] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1007.112891][ T11] usb 7-1: config 0 has no interfaces? [ 1007.112915][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.128718][ T11] usb 7-1: config 0 descriptor?? [ 1007.193746][T11473] netlink: 'syz.1.1059': attribute type 4 has an invalid length. [ 1007.553103][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.912089][T10334] usb 7-1: USB disconnect, device number 3 [ 1008.176086][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.228740][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.228831][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.312018][T11027] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1008.323684][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1008.332027][T11027] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1008.347421][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.359361][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.359442][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.380419][T11027] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1008.492968][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.503372][T11027] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1008.656936][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1009.044167][T10334] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1009.201243][T10334] usb 7-1: Using ep0 maxpacket: 8 [ 1009.204050][T10334] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1009.205115][T10334] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1009.205150][T10334] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1009.205163][T10334] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1009.205177][T10334] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1009.205191][T10334] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.205215][T10334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.512919][T10334] usb 7-1: GET_CAPABILITIES returned 0 [ 1009.512960][T10334] usbtmc 7-1:16.0: can't read capabilities [ 1009.883357][T10334] usb 7-1: USB disconnect, device number 4 [ 1011.452744][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.506161][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.514697][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1011.515361][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1011.527522][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.335635][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1012.384255][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1012.417875][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1012.432071][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1012.432636][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1012.999980][T11517] FAULT_INJECTION: forcing a failure. [ 1012.999980][T11517] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.000013][T11517] CPU: 0 UID: 0 PID: 11517 Comm: syz.1.1069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1013.000031][T11517] Tainted: [L]=SOFTLOCKUP [ 1013.000036][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1013.000043][T11517] Call Trace: [ 1013.000048][T11517] [ 1013.000054][T11517] dump_stack_lvl+0xe8/0x150 [ 1013.000077][T11517] should_fail_ex+0x46b/0x600 [ 1013.000094][T11517] should_failslab+0xa8/0x100 [ 1013.000111][T11517] ? __mpol_dup+0x79/0x330 [ 1013.000127][T11517] kmem_cache_alloc_noprof+0x9e/0x690 [ 1013.000142][T11517] ? __mpol_dup+0x79/0x330 [ 1013.000162][T11517] __mpol_dup+0x79/0x330 [ 1013.000178][T11517] ? __pfx___mpol_dup+0x10/0x10 [ 1013.000199][T11517] mbind_range+0x3d9/0x800 [ 1013.000216][T11517] __se_sys_mbind+0xacd/0x10e0 [ 1013.000237][T11517] ? __pfx___se_sys_mbind+0x10/0x10 [ 1013.000257][T11517] ? __se_sys_futex+0x3a8/0x450 [ 1013.000281][T11517] ? rcu_is_watching+0x16/0xb0 [ 1013.000300][T11517] ? __x64_sys_mbind+0x21/0xf0 [ 1013.000316][T11517] do_syscall_64+0x166/0x520 [ 1013.000329][T11517] ? trace_irq_disable+0x3b/0x140 [ 1013.000347][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.000358][T11517] ? clear_bhb_loop+0x70/0xc0 [ 1013.000373][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.000384][T11517] RIP: 0033:0x7fe84284e159 [ 1013.000397][T11517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.000408][T11517] RSP: 002b:00007fe840aa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1013.000422][T11517] RAX: ffffffffffffffda RBX: 00007fe842ad5fa0 RCX: 00007fe84284e159 [ 1013.000432][T11517] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 1013.000440][T11517] RBP: 00007fe8428e5024 R08: 0000000000000000 R09: 0000000000000002 [ 1013.000448][T11517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.000455][T11517] R13: 00007fe842ad6038 R14: 00007fe842ad5fa0 R15: 00007ffdc76deeb8 [ 1013.000475][T11517] [ 1013.565439][ T9301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1013.639388][ T9301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1013.650814][ T9301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1013.656414][ T9301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1013.656959][ T9301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1013.713418][ T5596] Bluetooth: hci0: command tx timeout [ 1013.826382][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1014.011630][ T9] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1014.028121][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.028140][ T9] usb 7-1: config 0 has no interfaces? [ 1014.035359][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.035377][ T9] usb 7-1: Product: syz [ 1014.035386][ T9] usb 7-1: Manufacturer: syz [ 1014.035394][ T9] usb 7-1: SerialNumber: syz [ 1014.095047][ T9] usb 7-1: config 0 descriptor?? [ 1014.546317][ T9] usb 7-1: USB disconnect, device number 5 [ 1014.693824][ T9301] Bluetooth: hci2: command tx timeout [ 1015.792554][ T9301] Bluetooth: hci0: command tx timeout [ 1015.875298][ T9301] Bluetooth: hci6: command tx timeout [ 1016.179758][ T8879] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1016.333008][ T8879] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1016.334007][ T8879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.337168][ T8879] usb 7-1: config 0 descriptor?? [ 1016.752799][ T9301] Bluetooth: hci2: command tx timeout [ 1017.684258][ T8879] usb 7-1: Cannot set autoneg [ 1017.684425][ T8879] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1017.711951][ T8879] usb 7-1: USB disconnect, device number 6 [ 1017.776074][T11539] netlink: 'syz.1.1072': attribute type 1 has an invalid length. [ 1017.869887][ T9301] Bluetooth: hci0: command tx timeout [ 1017.950024][ T9301] Bluetooth: hci6: command tx timeout [ 1018.829741][ T9301] Bluetooth: hci2: command tx timeout [ 1019.949904][ T9301] Bluetooth: hci0: command tx timeout [ 1020.072595][ T9301] Bluetooth: hci6: command tx timeout [ 1020.909671][ T9301] Bluetooth: hci2: command tx timeout [ 1022.110629][ T9301] Bluetooth: hci6: command tx timeout [ 1022.914377][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1023.079620][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1023.080487][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1023.085420][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1023.085439][ T9] usb 2-1: config 0 has no interface number 0 [ 1023.085468][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1023.087369][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.087385][ T9] usb 2-1: Product: syz [ 1023.087393][ T9] usb 2-1: Manufacturer: syz [ 1023.087401][ T9] usb 2-1: SerialNumber: syz [ 1023.097154][ T9] usb 2-1: config 0 descriptor?? [ 1024.396648][ T9] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 1024.396739][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1024.396756][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1024.396814][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1024.438318][ T9] usb 2-1: USB disconnect, device number 22 [ 1025.492034][T10334] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1025.506499][ T8877] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1025.640388][T10334] usb 2-1: Using ep0 maxpacket: 16 [ 1025.641179][T10334] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1025.642188][T10334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.642220][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.642237][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1025.642258][T10334] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1025.642272][T10334] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.643163][T10334] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1025.643178][T10334] usb 2-1: Manufacturer: syz [ 1025.650170][ T8877] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1025.651453][ T8877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.669919][T10334] usb 2-1: config 0 descriptor?? [ 1025.874746][ T8877] usb 7-1: config 0 descriptor?? [ 1025.889591][ T8877] cp210x 7-1:0.0: cp210x converter detected [ 1026.051155][T10334] rc_core: IR keymap rc-hauppauge not found [ 1026.051215][T10334] Registered IR keymap rc-empty [ 1026.051561][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.073309][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.097036][T10334] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1026.110969][T10334] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 1026.243960][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.267545][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.280088][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.311804][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.320536][ T8877] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1026.332439][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.350407][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.374686][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.402537][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.419671][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.440335][T10334] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1026.598766][ T8877] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1026.617080][ T8877] usb 7-1: USB disconnect, device number 7 [ 1026.626495][T10334] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1026.626514][T10334] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1026.717986][T10334] usb 2-1: USB disconnect, device number 23 [ 1026.907389][ T8877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1027.102873][ T8806] bridge_slave_1: left allmulticast mode [ 1027.102901][ T8806] bridge_slave_1: left promiscuous mode [ 1027.103074][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.106802][ T8806] bridge_slave_0: left allmulticast mode [ 1027.106823][ T8806] bridge_slave_0: left promiscuous mode [ 1027.106970][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.141481][ T8877] cp210x 7-1:0.0: device disconnected [ 1027.589794][T11634] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1028.091179][T10334] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1028.279594][T10334] usb 2-1: Using ep0 maxpacket: 32 [ 1028.290613][T10334] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1028.291561][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.291580][T10334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.291603][T10334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.355069][T10334] usb 2-1: config 0 descriptor?? [ 1028.376896][T10334] hub 2-1:0.0: USB hub found [ 1028.701111][T10334] hub 2-1:0.0: 1 port detected [ 1029.323313][ T8806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.330830][ T8806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.337695][ T8806] bond0 (unregistering): Released all slaves [ 1030.234914][T10334] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1030.246433][T10334] usbhid 2-1:0.0: can't add hid device: -32 [ 1030.246514][T10334] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1030.325025][T11502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.325109][T11502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.325239][T11502] bridge_slave_0: entered allmulticast mode [ 1030.328644][T11502] bridge_slave_0: entered promiscuous mode [ 1030.533355][ T8806] hsr_slave_0: left promiscuous mode [ 1030.560650][ T8806] hsr_slave_1: left promiscuous mode [ 1030.561425][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.561811][T10334] usb 2-1: USB disconnect, device number 24 [ 1030.565726][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.319665][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1031.433316][ T8806] team0 (unregistering): Port device team_slave_1 removed [ 1031.458729][ T8806] team0 (unregistering): Port device team_slave_0 removed [ 1031.480108][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 1031.481874][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.562238][ T8877] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1031.771053][ T8877] usb 2-1: Using ep0 maxpacket: 8 [ 1031.777930][ T8877] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1031.782290][ T8877] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1031.782328][ T8877] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1031.782342][ T8877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1031.782356][ T8877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1031.782370][ T8877] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.782395][ T8877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.079304][ T8877] usb 2-1: usb_control_msg returned -32 [ 1032.079338][ T8877] usbtmc 2-1:16.0: can't read capabilities [ 1032.460322][T11502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.460414][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.460517][T11502] bridge_slave_1: entered allmulticast mode [ 1032.463254][T11502] bridge_slave_1: entered promiscuous mode [ 1032.565929][T11669] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1033.513384][ T9] net1080 7-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.6-1, NetChip TurboCONNECT, c6:77:cf:9e:62:3f [ 1034.481591][ T9] usb 2-1: USB disconnect, device number 25 [ 1035.272131][T11674] input: syz1 as /devices/virtual/input/input22 [ 1038.839811][ T8877] usb 7-1: USB disconnect, device number 8 [ 1038.917048][ T8877] net1080 7-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.6-1, NetChip TurboCONNECT [ 1039.837404][T11502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.838432][T11523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.838505][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.838617][T11523] bridge_slave_0: entered allmulticast mode [ 1039.840831][T11523] bridge_slave_0: entered promiscuous mode [ 1039.913992][T11523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.914070][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.914484][T11523] bridge_slave_1: entered allmulticast mode [ 1039.916153][T11523] bridge_slave_1: entered promiscuous mode [ 1039.919278][T11502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.326081][T11512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.326231][T11512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.326380][T11512] bridge_slave_0: entered allmulticast mode [ 1040.340225][T11512] bridge_slave_0: entered promiscuous mode [ 1040.391635][ T8877] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1040.395103][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.397590][T11502] team0: Port device team_slave_0 added [ 1040.398770][T11512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.398847][T11512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.398971][T11512] bridge_slave_1: entered allmulticast mode [ 1040.400863][T11512] bridge_slave_1: entered promiscuous mode [ 1040.414989][T11502] team0: Port device team_slave_1 added [ 1040.462697][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.544344][ T8877] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1040.545273][ T8877] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1040.545293][ T8877] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1040.545307][ T8877] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1040.547079][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.547095][ T8877] usb 2-1: Product: syz [ 1040.547104][ T8877] usb 2-1: Manufacturer: syz [ 1040.547112][ T8877] usb 2-1: SerialNumber: syz [ 1040.557848][T11702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1040.558008][T11702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1041.029878][T11512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.165566][T11502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.165588][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.165604][T11502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.212123][T11512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.216206][T11523] team0: Port device team_slave_0 added [ 1041.217084][T11502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.217095][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.217111][T11502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.633860][ T8877] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:01:d9:ef:f6:8f [ 1041.678709][T11523] team0: Port device team_slave_1 added [ 1041.810758][ T8877] rtl8150 2-1:1.0: eth9: rtl8150 is detected [ 1041.880839][ T8877] usb 2-1: USB disconnect, device number 26 [ 1041.982487][T11512] team0: Port device team_slave_0 added [ 1042.101191][T11512] team0: Port device team_slave_1 added [ 1042.645153][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.645168][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.645184][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.969410][T11709] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 1042.969443][T11709] device-mapper: raid: Choosing default region size of 4MiB [ 1043.132892][ T8877] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1043.316536][ T8877] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1043.321366][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.321384][ T8877] usb 2-1: Product: syz [ 1043.321393][ T8877] usb 2-1: Manufacturer: syz [ 1043.321401][ T8877] usb 2-1: SerialNumber: syz [ 1043.332600][ T8877] usb 2-1: config 0 descriptor?? [ 1043.503017][ T8877] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1044.544221][T11709] device-mapper: table: 248:0: raid: RAID device lookup failure (-ENOENT) [ 1044.544243][T11709] device-mapper: ioctl: error adding target to table [ 1044.755644][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.755673][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.755689][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.791717][ T8877] gspca_stk1135: reg_w 0xd err -71 [ 1044.792852][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.792862][ T8877] gspca_stk1135: Sensor write failed [ 1044.792879][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.792885][ T8877] gspca_stk1135: Sensor write failed [ 1044.792902][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.792908][ T8877] gspca_stk1135: Sensor read failed [ 1044.792924][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.792929][ T8877] gspca_stk1135: Sensor read failed [ 1044.792933][ T8877] gspca_stk1135: Detected sensor type unknown (0x0) [ 1044.792969][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.792975][ T8877] gspca_stk1135: Sensor read failed [ 1044.792992][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.792997][ T8877] gspca_stk1135: Sensor read failed [ 1044.793013][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.793019][ T8877] gspca_stk1135: Sensor write failed [ 1044.793036][ T8877] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.793041][ T8877] gspca_stk1135: Sensor write failed [ 1044.793097][ T8877] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1044.814733][ T8877] usb 2-1: USB disconnect, device number 27 [ 1044.913554][T11502] hsr_slave_0: entered promiscuous mode [ 1044.926250][T11502] hsr_slave_1: entered promiscuous mode [ 1045.013724][T11512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.013739][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.013754][T11512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.193247][T11512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.193262][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.193277][T11512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.656053][T11523] hsr_slave_0: entered promiscuous mode [ 1045.658286][T11523] hsr_slave_1: entered promiscuous mode [ 1045.659217][T11523] debugfs: 'hsr0' already exists in 'hsr' [ 1045.659234][T11523] Cannot create hsr debugfs directory [ 1046.925792][T11512] hsr_slave_0: entered promiscuous mode [ 1046.932064][T11512] hsr_slave_1: entered promiscuous mode [ 1046.932683][T11512] debugfs: 'hsr0' already exists in 'hsr' [ 1046.932701][T11512] Cannot create hsr debugfs directory [ 1047.126610][ T8877] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1047.146935][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1047.286004][ T8877] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1047.286928][ T8877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.286943][ T8877] usb 7-1: config 0 has no interfaces? [ 1047.286961][ T8877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.317307][ T8877] usb 7-1: config 0 descriptor?? [ 1048.009687][ T8877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1048.151515][T10334] usb 7-1: USB disconnect, device number 9 [ 1048.159705][ T8877] usb 2-1: Using ep0 maxpacket: 32 [ 1048.160533][ T8877] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1048.161605][ T8877] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1048.161625][ T8877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1048.161639][ T8877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1048.161652][ T8877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1048.161666][ T8877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1048.163509][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.163524][ T8877] usb 2-1: Product: syz [ 1048.163533][ T8877] usb 2-1: Manufacturer: syz [ 1048.163541][ T8877] usb 2-1: SerialNumber: syz [ 1048.243233][ T8877] usb 2-1: config 0 descriptor?? [ 1048.693915][ T8877] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1048.694006][ T8877] input input23: Device does not respond to id packet M [ 1048.912042][ T8877] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1048.912081][ T8877] input input23: Device does not respond to id packet B [ 1048.928883][ T8877] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1048.928922][ T8877] input input23: Device does not respond to id packet N [ 1048.929418][ T8877] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1048.929928][ T8877] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1048.934925][ T8877] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1048.935295][ T8877] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1049.116692][ T8877] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23 [ 1049.211682][ T8877] usb 2-1: USB disconnect, device number 28 [ 1050.199634][ T8877] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1050.368386][ T8877] usb 2-1: Using ep0 maxpacket: 32 [ 1050.369102][ T8877] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1050.374122][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.374140][ T8877] usb 2-1: Product: syz [ 1050.374148][ T8877] usb 2-1: Manufacturer: syz [ 1050.374157][ T8877] usb 2-1: SerialNumber: syz [ 1050.392920][ T8877] usb 2-1: config 0 descriptor?? [ 1050.420162][ T8877] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1051.830905][ T8877] gspca_ov534_9: reg_w failed -71 [ 1052.169638][ T8877] gspca_ov534_9: Unknown sensor 0000 [ 1052.169708][ T8877] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1052.173901][ T8877] usb 2-1: USB disconnect, device number 29 [ 1052.830096][ T8877] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1052.987229][ T8877] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1052.993149][ T8877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.993169][ T8877] usb 7-1: Product: syz [ 1052.993178][ T8877] usb 7-1: Manufacturer: syz [ 1052.993186][ T8877] usb 7-1: SerialNumber: syz [ 1053.098814][ T8877] usb 7-1: config 0 descriptor?? [ 1053.484579][ T8877] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1054.143128][ T8877] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1054.240486][ T8877] usb 7-1: USB disconnect, device number 10 [ 1055.255333][ T8879] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1055.333567][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1055.403527][ T8879] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1055.404451][ T8879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.406242][ T8879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.406257][ T8879] usb 7-1: Product: syz [ 1055.406265][ T8879] usb 7-1: Manufacturer: syz [ 1055.406273][ T8879] usb 7-1: SerialNumber: syz [ 1055.515128][T11806] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1055.987866][ T8879] snd-usb-6fire 7-1:1.0: can't set first interface. [ 1055.987942][ T8879] snd-usb-6fire 7-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1056.061768][ T8879] usb 7-1: USB disconnect, device number 11 [ 1056.597238][T11811] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 1057.409650][ T8879] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1057.571108][ T8879] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.00 [ 1057.572335][ T8879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.584291][ T8879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.584316][ T8879] usb 7-1: Product: syz [ 1057.584325][ T8879] usb 7-1: Manufacturer: syz [ 1057.584333][ T8879] usb 7-1: SerialNumber: syz [ 1057.654865][ T8879] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1057.654947][ T8879] gspca_stv06xx: st6422 sensor detected [ 1058.310559][T11830] loop4: detected capacity change from 0 to 7 [ 1058.697020][T11830] Dev loop4: unable to read RDB block 7 [ 1058.697053][T11830] loop4: unable to read partition table [ 1058.697227][T11830] loop4: partition table beyond EOD, truncated [ 1058.697251][T11830] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1059.071166][ T8879] STV06xx 7-1:1.0: probe with driver STV06xx failed with error -71 [ 1059.103275][ T8879] usb 7-1: USB disconnect, device number 12 [ 1059.662089][ T8879] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1059.809822][ T8879] usb 2-1: Using ep0 maxpacket: 8 [ 1059.811582][ T8879] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1059.812567][ T8879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.812597][ T8879] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1059.814550][ T8879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.814565][ T8879] usb 2-1: Product: syz [ 1059.814573][ T8879] usb 2-1: Manufacturer: syz [ 1059.814581][ T8879] usb 2-1: SerialNumber: syz [ 1059.831421][ T8879] usb 2-1: config 0 descriptor?? [ 1059.843567][ T8879] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 1059.843593][ T8879] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 1059.843912][ T8879] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1064.419646][ T8877] usb 2-1: USB disconnect, device number 30 [ 1064.936284][ T8877] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1065.137727][ T8877] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1065.147561][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.147582][ T8877] usb 2-1: Product: syz [ 1065.147591][ T8877] usb 2-1: Manufacturer: syz [ 1065.147599][ T8877] usb 2-1: SerialNumber: syz [ 1066.023331][ T8877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1066.023371][ T8877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1066.192261][ T8877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1066.194516][ T8877] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1066.251098][ T8877] usb 2-1: USB disconnect, device number 31 [ 1066.788480][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1066.889559][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1067.042007][ T9] usb 7-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 1067.043145][ T9] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1067.043176][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1067.043198][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.046976][ T9] usb 7-1: config 0 descriptor?? [ 1067.089763][T11882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1151'. [ 1067.570352][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1067.723387][ T9] speedlink 0003:1AE7:9001.0007: hidraw0: USB HID v0.00 Joystick [HID 1ae7:9001] on usb-dummy_hcd.6-1/input0 [ 1067.800953][ T9] usb 7-1: USB disconnect, device number 13 [ 1067.974866][T11888] fido_id[11888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1068.432592][T11882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.971578][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1069.049291][T11900] binder: 11897:11900 ioctl c0306201 200000000480 returned -14 [ 1069.650135][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 1069.760453][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1156'. [ 1070.609824][T11919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.572271][ T8879] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1071.675930][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1071.742477][ T8879] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1071.744900][ T8879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.744918][ T8879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1071.746997][ T8879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1071.747013][ T8879] usb 2-1: SerialNumber: syz [ 1072.123612][ T8879] usb 2-1: 0:2 : does not exist [ 1072.517267][ T8879] usb 2-1: USB disconnect, device number 32 [ 1073.003659][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1073.127208][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1073.164861][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1073.165900][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1073.175325][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1073.795382][T11853] udevd[11853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.813378][ T8806] bridge_slave_1: left allmulticast mode [ 1073.813405][ T8806] bridge_slave_1: left promiscuous mode [ 1073.945399][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.033237][ T8806] bridge_slave_0: left allmulticast mode [ 1074.033266][ T8806] bridge_slave_0: left promiscuous mode [ 1074.033443][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.213298][ T9301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1074.266941][ T9301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1074.274186][ T9301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1074.334681][ T9301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1074.335122][ T9301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1074.485372][ T8806] bridge_slave_1: left allmulticast mode [ 1074.485401][ T8806] bridge_slave_1: left promiscuous mode [ 1074.485560][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.540635][ T8806] bridge_slave_0: left allmulticast mode [ 1074.540661][ T8806] bridge_slave_0: left promiscuous mode [ 1074.540824][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.859663][T10334] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1075.011738][T10334] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1075.012809][T10334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.012828][T10334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.012841][T10334] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1075.012865][T10334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.065303][T10334] usb 7-1: config 0 descriptor?? [ 1075.402400][ T5590] Bluetooth: hci4: command tx timeout [ 1075.431333][ T9301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1075.512785][ T9301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1075.525447][ T9301] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1075.535055][ T9301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1075.535837][ T9301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1075.872184][T10334] plantronics 0003:047F:FFFF.0008: unbalanced collection at end of report description [ 1075.872702][T10334] plantronics 0003:047F:FFFF.0008: parse failed [ 1075.872766][T10334] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 1075.925596][T10334] usb 7-1: USB disconnect, device number 14 [ 1076.247414][ T8806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.267542][ T8806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.288129][ T8806] bond0 (unregistering): Released all slaves [ 1076.509825][ T9301] Bluetooth: hci5: command tx timeout [ 1076.996354][ T8806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.999138][ T8806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.009960][ T8806] bond0 (unregistering): Released all slaves [ 1077.305298][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1077.489608][ T9301] Bluetooth: hci4: command tx timeout [ 1077.955450][ T9301] Bluetooth: hci7: command tx timeout [ 1078.609711][ T9301] Bluetooth: hci5: command tx timeout [ 1079.549571][ T9301] Bluetooth: hci4: command tx timeout [ 1079.611685][ T8806] hsr_slave_0: left promiscuous mode [ 1079.740640][ T8806] hsr_slave_1: left promiscuous mode [ 1079.741433][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.745851][T12005] FAULT_INJECTION: forcing a failure. [ 1079.745851][T12005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1079.745878][T12005] CPU: 0 UID: 0 PID: 12005 Comm: syz.6.1170 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1079.745896][T12005] Tainted: [L]=SOFTLOCKUP [ 1079.745901][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1079.745908][T12005] Call Trace: [ 1079.745913][T12005] [ 1079.745919][T12005] dump_stack_lvl+0xe8/0x150 [ 1079.745945][T12005] should_fail_ex+0x46b/0x600 [ 1079.745965][T12005] prepare_alloc_pages+0x223/0x650 [ 1079.745987][T12005] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 1079.746005][T12005] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1079.746023][T12005] ? __pfx_policy_nodemask+0x10/0x10 [ 1079.746040][T12005] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1079.746065][T12005] alloc_pages_mpol+0xd4/0x280 [ 1079.746083][T12005] ___kmalloc_large_node+0x4f/0x120 [ 1079.746100][T12005] __kmalloc_large_noprof+0x1a/0x90 [ 1079.746115][T12005] ksys_ioperm+0x15e/0x670 [ 1079.746166][T12005] do_syscall_64+0x166/0x520 [ 1079.746180][T12005] ? trace_irq_disable+0x3b/0x140 [ 1079.746197][T12005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.746210][T12005] ? clear_bhb_loop+0x70/0xc0 [ 1079.746224][T12005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.746236][T12005] RIP: 0033:0x7f22d8e9e159 [ 1079.746249][T12005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.746259][T12005] RSP: 002b:00007f22d70f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 1079.746274][T12005] RAX: ffffffffffffffda RBX: 00007f22d9125fa0 RCX: 00007f22d8e9e159 [ 1079.746283][T12005] RDX: 000000000000163f RSI: 0000000000000003 RDI: 0000000000000001 [ 1079.746291][T12005] RBP: 00007f22d8f35024 R08: 0000000000000000 R09: 0000000000000000 [ 1079.746299][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.746307][T12005] R13: 00007f22d9126038 R14: 00007f22d9125fa0 R15: 00007ffd3beec538 [ 1079.746326][T12005] [ 1079.748390][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.819902][ T8806] hsr_slave_0: left promiscuous mode [ 1079.820860][ T8806] hsr_slave_1: left promiscuous mode [ 1079.821536][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.823543][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.029810][ T9301] Bluetooth: hci7: command tx timeout [ 1080.669666][ T9301] Bluetooth: hci5: command tx timeout [ 1080.962189][ T8806] team0 (unregistering): Port device team_slave_1 removed [ 1081.028297][ T8806] team0 (unregistering): Port device team_slave_0 removed [ 1081.249776][T10334] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1081.400832][T10334] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1081.402209][T10334] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1081.402227][T10334] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1081.402240][T10334] usb 2-1: config 150 has no interface number 0 [ 1081.402266][T10334] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1081.412859][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.412879][T10334] usb 2-1: Product: syz [ 1081.412887][T10334] usb 2-1: Manufacturer: syz [ 1081.412896][T10334] usb 2-1: SerialNumber: syz [ 1081.629651][ T9301] Bluetooth: hci4: command tx timeout [ 1081.674175][T10334] xr_serial 2-1:150.204: skipping garbage [ 1081.674235][T10334] xr_serial 2-1:150.204: xr_serial converter detected [ 1081.752269][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1081.955576][ T9] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1081.973707][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.973728][ T9] usb 7-1: Product: syz [ 1081.973736][ T9] usb 7-1: Manufacturer: syz [ 1081.973744][ T9] usb 7-1: SerialNumber: syz [ 1082.109765][ T9301] Bluetooth: hci7: command tx timeout [ 1082.143337][ T9] usb 7-1: config 0 descriptor?? [ 1082.167021][ T9] ch341 7-1:0.0: ch341-uart converter detected [ 1082.584669][T10334] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 1082.749713][ T9301] Bluetooth: hci5: command tx timeout [ 1082.769947][T10334] usb 2-1: USB disconnect, device number 33 [ 1082.985908][ T8806] team0 (unregistering): Port device team_slave_1 removed [ 1083.115289][T10334] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1083.173853][T10334] xr_serial 2-1:150.204: device disconnected [ 1083.197389][ T8806] team0 (unregistering): Port device team_slave_0 removed [ 1083.355485][ T9] usb 7-1: ch341-uart converter now attached to ttyUSB1 [ 1083.589629][T10334] usb 7-1: USB disconnect, device number 15 [ 1083.628543][T10334] ch341-uart ttyUSB1: ch341-uart converter now disconnected from ttyUSB1 [ 1083.632489][T10334] ch341 7-1:0.0: device disconnected [ 1084.189592][ T9301] Bluetooth: hci7: command tx timeout [ 1084.453007][T12029] loop4: detected capacity change from 0 to 1 [ 1084.456402][T12029] Dev loop4: unable to read RDB block 1 [ 1084.456428][T12029] loop4: unable to read partition table [ 1084.456555][T12029] loop4: partition table beyond EOD, truncated [ 1084.456576][T12029] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1084.903408][T12034] FAULT_INJECTION: forcing a failure. [ 1084.903408][T12034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.903437][T12034] CPU: 0 UID: 0 PID: 12034 Comm: syz.6.1178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1084.903455][T12034] Tainted: [L]=SOFTLOCKUP [ 1084.903460][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.903466][T12034] Call Trace: [ 1084.903471][T12034] [ 1084.903477][T12034] dump_stack_lvl+0xe8/0x150 [ 1084.903501][T12034] should_fail_ex+0x46b/0x600 [ 1084.903517][T12034] _copy_to_user+0x31/0xb0 [ 1084.903534][T12034] pagemap_read+0x4df/0x7d0 [ 1084.903589][T12034] ? __pfx_pagemap_read+0x10/0x10 [ 1084.903605][T12034] ? rw_verify_area+0x250/0x4d0 [ 1084.903620][T12034] ? __pfx_pagemap_read+0x10/0x10 [ 1084.903631][T12034] vfs_read+0x219/0xa90 [ 1084.903648][T12034] ? __pfx_vfs_read+0x10/0x10 [ 1084.903662][T12034] ? __fget_files+0x2a/0x420 [ 1084.903676][T12034] ? __fget_files+0x2a/0x420 [ 1084.903687][T12034] ? __fget_files+0x3a8/0x420 [ 1084.903697][T12034] ? __fget_files+0x2a/0x420 [ 1084.903714][T12034] __x64_sys_pread64+0x199/0x230 [ 1084.903730][T12034] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1084.903750][T12034] do_syscall_64+0x166/0x520 [ 1084.903764][T12034] ? trace_irq_disable+0x3b/0x140 [ 1084.903778][T12034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.903790][T12034] ? clear_bhb_loop+0x70/0xc0 [ 1084.903805][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.903817][T12034] RIP: 0033:0x7f22d8e9e159 [ 1084.903829][T12034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.903840][T12034] RSP: 002b:00007f22d70f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1084.903855][T12034] RAX: ffffffffffffffda RBX: 00007f22d9125fa0 RCX: 00007f22d8e9e159 [ 1084.903865][T12034] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000004 [ 1084.903873][T12034] RBP: 00007f22d8f35024 R08: 0000000000000000 R09: 0000000000000000 [ 1084.903881][T12034] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1084.903889][T12034] R13: 00007f22d9126038 R14: 00007f22d9125fa0 R15: 00007ffd3beec538 [ 1084.903907][T12034] [ 1087.130291][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1087.349118][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1087.357081][ T9] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1087.357101][ T9] usb 2-1: Product: syz [ 1087.357110][ T9] usb 2-1: Manufacturer: syz [ 1087.357118][ T9] usb 2-1: SerialNumber: syz [ 1087.397781][ T9] usb 2-1: config 0 descriptor?? [ 1087.447601][T12066] FAULT_INJECTION: forcing a failure. [ 1087.447601][T12066] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.447630][T12066] CPU: 0 UID: 0 PID: 12066 Comm: syz.6.1184 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1087.447648][T12066] Tainted: [L]=SOFTLOCKUP [ 1087.447652][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.447660][T12066] Call Trace: [ 1087.447665][T12066] [ 1087.447672][T12066] dump_stack_lvl+0xe8/0x150 [ 1087.447694][T12066] should_fail_ex+0x46b/0x600 [ 1087.447710][T12066] ? alloc_inode+0xb8/0x1b0 [ 1087.447731][T12066] should_failslab+0xa8/0x100 [ 1087.447751][T12066] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1087.447769][T12066] ? alloc_inode+0xb8/0x1b0 [ 1087.447790][T12066] alloc_inode+0xb8/0x1b0 [ 1087.447807][T12066] new_inode+0x1f/0x170 [ 1087.447821][T12066] devpts_pty_new+0xd9/0x610 [ 1087.447843][T12066] ? __pfx_devpts_pty_new+0x10/0x10 [ 1087.447860][T12066] ? rt_spin_unlock+0x159/0x200 [ 1087.447880][T12066] ? rt_spin_unlock+0x165/0x200 [ 1087.447898][T12066] ptmx_open+0x1d1/0x2e0 [ 1087.448005][T12066] chrdev_open+0x4dc/0x600 [ 1087.448022][T12066] ? __pfx_chrdev_open+0x10/0x10 [ 1087.448039][T12066] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1087.448067][T12066] ? __pfx_chrdev_open+0x10/0x10 [ 1087.448082][T12066] do_dentry_open+0x849/0x1420 [ 1087.448109][T12066] vfs_open+0x3b/0x350 [ 1087.448123][T12066] ? path_openat+0x142d/0x1d60 [ 1087.448147][T12066] path_openat+0x1448/0x1d60 [ 1087.448172][T12066] do_file_open+0x23e/0x4a0 [ 1087.448189][T12066] ? __pfx_do_file_open+0x10/0x10 [ 1087.448221][T12066] ? alloc_fd+0x654/0x6d0 [ 1087.448245][T12066] do_sys_openat2+0x115/0x200 [ 1087.448261][T12066] ? __se_sys_futex+0x3a8/0x450 [ 1087.448280][T12066] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.448301][T12066] ? rcu_is_watching+0x16/0xb0 [ 1087.448324][T12066] __x64_sys_openat+0x138/0x170 [ 1087.448345][T12066] do_syscall_64+0x166/0x520 [ 1087.448358][T12066] ? trace_irq_disable+0x3b/0x140 [ 1087.448372][T12066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.448385][T12066] ? clear_bhb_loop+0x70/0xc0 [ 1087.448399][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.448410][T12066] RIP: 0033:0x7f22d8e9e159 [ 1087.448424][T12066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.448434][T12066] RSP: 002b:00007f22d70f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1087.448450][T12066] RAX: ffffffffffffffda RBX: 00007f22d9125fa0 RCX: 00007f22d8e9e159 [ 1087.448459][T12066] RDX: 0000000001123102 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1087.448467][T12066] RBP: 00007f22d8f35024 R08: 0000000000000000 R09: 0000000000000000 [ 1087.448475][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.448483][T12066] R13: 00007f22d9126038 R14: 00007f22d9125fa0 R15: 00007ffd3beec538 [ 1087.448502][T12066] [ 1087.485868][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 1088.697979][ T9] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1088.705166][ T9] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 1089.012186][ T9] usb 2-1: USB disconnect, device number 34 [ 1089.033690][ T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1089.035134][ T9] ch341 2-1:0.0: device disconnected [ 1089.739574][T10338] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1089.909157][T10338] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1089.911885][T10338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1089.911918][T10338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.945336][T10338] usb 7-1: config 0 descriptor?? [ 1089.948347][T12077] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1090.453524][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453550][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453564][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453579][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453593][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453608][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453631][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453645][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453659][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.453674][T10338] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 1090.911534][T10338] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found [ 1090.992480][T10338] usb 7-1: USB disconnect, device number 16 [ 1092.109166][T12101] misc userio: Invalid payload size [ 1095.569707][ T8879] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1095.720697][ T8879] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1095.723413][ T8879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.723431][ T8879] usb 2-1: Product: syz [ 1095.723439][ T8879] usb 2-1: Manufacturer: syz [ 1095.723448][ T8879] usb 2-1: SerialNumber: syz [ 1095.726825][ T8879] usb 2-1: config 0 descriptor?? [ 1095.906020][ T8809] bridge_slave_1: left allmulticast mode [ 1095.906048][ T8809] bridge_slave_1: left promiscuous mode [ 1095.906339][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.192633][ T8809] bridge_slave_0: left allmulticast mode [ 1096.192664][ T8809] bridge_slave_0: left promiscuous mode [ 1096.192956][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.797409][ T8879] usb 2-1: non-Atmel transceiver xxxxaaf4 [ 1097.068104][ T8879] usb 2-1: Firmware version (0.0) predates our first public release. [ 1097.068124][ T8879] usb 2-1: Please update to version 0.2 or newer [ 1097.069092][ T8879] usb 2-1: atusb_probe: initialization failed, error = -19 [ 1097.132111][ T8809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1097.149260][ T8879] usb 2-1: USB disconnect, device number 35 [ 1097.152945][ T8809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1097.211866][ T8809] bond0 (unregistering): Released all slaves [ 1098.682182][ T8809] hsr_slave_0: left promiscuous mode [ 1098.685667][ T8809] hsr_slave_1: left promiscuous mode [ 1098.688070][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.688751][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.869907][T10334] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1099.973466][ T8809] team0 (unregistering): Port device team_slave_1 removed [ 1100.022567][T10334] usb 7-1: Using ep0 maxpacket: 16 [ 1100.023310][T10334] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1100.024438][T10334] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1100.024454][T10334] usb 7-1: config 0 has no interface number 0 [ 1100.026390][T10334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.026405][T10334] usb 7-1: Product: syz [ 1100.026414][T10334] usb 7-1: Manufacturer: syz [ 1100.026422][T10334] usb 7-1: SerialNumber: syz [ 1100.059048][T10334] usb 7-1: config 0 descriptor?? [ 1100.073177][T10334] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1100.079234][ T8809] team0 (unregistering): Port device team_slave_0 removed [ 1100.689595][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1100.849808][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1100.850937][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1100.851997][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.852015][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1100.852040][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.869270][ T9] usb 2-1: config 0 descriptor?? [ 1101.337356][T10334] gspca_spca1528: reg_w err -71 [ 1101.337474][T10334] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1101.409541][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 1101.427371][T10334] usb 7-1: USB disconnect, device number 17 [ 1101.450738][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input26 [ 1102.888172][T12207] input: syz0 as /devices/virtual/input/input27 [ 1103.258650][ T9] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1103.286606][ T9] usb 2-1: USB disconnect, device number 36 [ 1103.336668][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.336747][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.336884][T11949] bridge_slave_0: entered allmulticast mode [ 1103.351477][T11949] bridge_slave_0: entered promiscuous mode [ 1103.684942][T12213] fido_id[12213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1103.769128][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.769207][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.769349][T11949] bridge_slave_1: entered allmulticast mode [ 1103.778720][T11949] bridge_slave_1: entered promiscuous mode [ 1103.849566][T10338] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1104.000508][T10338] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1104.003242][T10338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.003259][T10338] usb 7-1: Product: syz [ 1104.003267][T10338] usb 7-1: Manufacturer: syz [ 1104.003275][T10338] usb 7-1: SerialNumber: syz [ 1104.008472][T10338] usb 7-1: config 0 descriptor?? [ 1104.569246][T10338] usb 7-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 1104.771117][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.807999][T10338] usb 7-1: Firmware: build [ 1105.005669][T10338] usb 7-1: no permanent extended address found, random address set [ 1105.005694][T10338] usb 7-1: atusb_probe: initialization failed, error = -524 [ 1105.005839][T10338] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 1105.079049][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.378565][T10338] usb 7-1: USB disconnect, device number 18 [ 1105.839648][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1106.009633][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1106.010313][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1106.014166][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1106.014185][ T9] usb 2-1: config 0 has no interface number 0 [ 1106.014214][ T9] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 1106.014228][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1106.024410][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.024431][ T9] usb 2-1: Product: syz [ 1106.024440][ T9] usb 2-1: Manufacturer: syz [ 1106.024448][ T9] usb 2-1: SerialNumber: syz [ 1106.079030][ T9] usb 2-1: config 0 descriptor?? [ 1106.085938][T12219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1106.283042][T11949] team0: Port device team_slave_0 added [ 1106.373052][T12219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1107.281686][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1107.484710][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1107.484735][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1107.484746][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1107.484756][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1107.484933][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1107.498032][ T9] usb 2-1: USB disconnect, device number 37 [ 1107.639638][T10338] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1107.674828][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.674906][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.675041][T11963] bridge_slave_0: entered allmulticast mode [ 1107.676637][T11963] bridge_slave_0: entered promiscuous mode [ 1107.686655][T11949] team0: Port device team_slave_1 added [ 1107.686964][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.687036][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.687156][T11937] bridge_slave_0: entered allmulticast mode [ 1107.747896][T11937] bridge_slave_0: entered promiscuous mode [ 1107.856658][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.856744][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.856887][T11963] bridge_slave_1: entered allmulticast mode [ 1107.864613][T11963] bridge_slave_1: entered promiscuous mode [ 1107.869634][T10338] usb 7-1: Using ep0 maxpacket: 8 [ 1107.870167][T10338] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1107.871258][T10338] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.871292][T10338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.875762][T10338] usb 7-1: config 0 descriptor?? [ 1107.888790][T10338] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1107.972344][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.972469][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.972636][T11937] bridge_slave_1: entered allmulticast mode [ 1107.974878][T11937] bridge_slave_1: entered promiscuous mode [ 1107.976760][ T8809] bridge_slave_1: left allmulticast mode [ 1107.976821][ T8809] bridge_slave_1: left promiscuous mode [ 1107.977013][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.980254][ T8809] bridge_slave_0: left allmulticast mode [ 1107.980279][ T8809] bridge_slave_0: left promiscuous mode [ 1107.980568][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.741113][ T8809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.886914][ T8809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.938933][ T8809] bond0 (unregistering): Released all slaves [ 1109.119645][T10338] gspca_vc032x: reg_w err -71 [ 1109.119708][T10338] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1109.130360][T10338] usb 7-1: USB disconnect, device number 19 [ 1109.433221][T12263] Bluetooth: MGMT ver 1.23 [ 1110.039574][T10334] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1110.086742][T12271] netlink: 'syz.6.1213': attribute type 16 has an invalid length. [ 1110.215627][T10334] usb 2-1: Using ep0 maxpacket: 32 [ 1110.218620][T10334] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1110.228589][T10334] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1110.228613][T10334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1110.228634][T10334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.235235][T10334] usb 2-1: config 0 descriptor?? [ 1110.463668][T10334] usbhid 2-1:0.0: can't add hid device: -71 [ 1110.463749][T10334] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1110.472830][T10334] usb 2-1: USB disconnect, device number 38 [ 1110.939735][T10334] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1111.089567][T10334] usb 2-1: Using ep0 maxpacket: 32 [ 1111.091036][T10334] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1111.091961][T10334] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1111.091979][T10334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1111.091999][T10334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.143993][T10334] usb 2-1: config 0 descriptor?? [ 1111.298089][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.298104][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.298119][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.353230][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.611228][T10334] hid_parser_main: 470 callbacks suppressed [ 1111.611248][T10334] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 1111.611268][T10334] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 1111.611283][T10334] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 1111.611298][T10334] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 1111.611312][T10334] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 1111.649593][ T5849] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1111.717138][T10334] corsair-cpro 0003:1B1C:0C10.000B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1111.894723][ T5849] usb 7-1: Using ep0 maxpacket: 32 [ 1111.895502][ T5849] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1111.897063][ T5849] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.897122][ T5849] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1111.897204][ T5849] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1111.897228][ T5849] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1111.897294][ T5849] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1111.897308][ T5849] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1111.904451][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.904470][ T5849] usb 7-1: Product: syz [ 1111.904479][ T5849] usb 7-1: Manufacturer: syz [ 1111.904487][ T5849] usb 7-1: SerialNumber: syz [ 1112.171961][ T5849] usb 7-1: selecting invalid altsetting 0 [ 1112.275639][ T8809] hsr_slave_0: left promiscuous mode [ 1112.318100][ T8809] hsr_slave_1: left promiscuous mode [ 1112.319835][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.336215][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.369574][ T5849] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 1112.414955][T10334] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -110 [ 1112.458295][T10334] usb 2-1: USB disconnect, device number 39 [ 1112.798254][T12295] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 1112.798275][T12295] device-mapper: ioctl: error adding target to table [ 1113.577042][ T8809] team0 (unregistering): Port device team_slave_1 removed [ 1113.670891][ T8809] team0 (unregistering): Port device team_slave_0 removed [ 1114.465616][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.466742][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.466753][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.466768][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.493777][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.555252][T12306] FAULT_INJECTION: forcing a failure. [ 1114.555252][T12306] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.555282][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.1.1219 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1114.555301][T12306] Tainted: [L]=SOFTLOCKUP [ 1114.555305][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1114.555313][T12306] Call Trace: [ 1114.555319][T12306] [ 1114.555324][T12306] dump_stack_lvl+0xe8/0x150 [ 1114.555348][T12306] should_fail_ex+0x46b/0x600 [ 1114.555366][T12306] should_failslab+0xa8/0x100 [ 1114.555382][T12306] ? locks_get_lock_context+0x95/0x5a0 [ 1114.555421][T12306] kmem_cache_alloc_noprof+0x9e/0x690 [ 1114.555437][T12306] ? locks_get_lock_context+0x95/0x5a0 [ 1114.555455][T12306] locks_get_lock_context+0x95/0x5a0 [ 1114.555473][T12306] posix_lock_inode+0x111/0x3e80 [ 1114.555485][T12306] ? smk_tskacc+0x2fb/0x370 [ 1114.555505][T12306] ? smack_file_lock+0x1e6/0x280 [ 1114.555529][T12306] ? __pfx_posix_lock_inode+0x10/0x10 [ 1114.555542][T12306] ? __rt_spin_lock_init+0x3e/0x50 [ 1114.555567][T12306] fcntl_setlk+0x9a6/0x1070 [ 1114.555590][T12306] ? __pfx_fcntl_setlk+0x10/0x10 [ 1114.555613][T12306] do_fcntl+0x981/0x19e0 [ 1114.555629][T12306] ? smack_file_fcntl+0x152/0x320 [ 1114.555645][T12306] ? __pfx_do_fcntl+0x10/0x10 [ 1114.555658][T12306] ? __pfx_smack_file_fcntl+0x10/0x10 [ 1114.555680][T12306] ? __fget_files+0x2a/0x420 [ 1114.555695][T12306] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1114.555718][T12306] __se_sys_fcntl+0xcb/0x160 [ 1114.555732][T12306] do_syscall_64+0x166/0x520 [ 1114.555746][T12306] ? trace_irq_disable+0x3b/0x140 [ 1114.555759][T12306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.555771][T12306] ? clear_bhb_loop+0x70/0xc0 [ 1114.555784][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.555796][T12306] RIP: 0033:0x7fe84284e159 [ 1114.555808][T12306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.555818][T12306] RSP: 002b:00007fe840aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1114.555833][T12306] RAX: ffffffffffffffda RBX: 00007fe842ad5fa0 RCX: 00007fe84284e159 [ 1114.555842][T12306] RDX: 0000200000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 1114.555850][T12306] RBP: 00007fe8428e5024 R08: 0000000000000000 R09: 0000000000000000 [ 1114.555857][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.555864][T12306] R13: 00007fe842ad6038 R14: 00007fe842ad5fa0 R15: 00007ffdc76deeb8 [ 1114.555882][T12306] [ 1114.612991][ T5849] usb 7-1: USB disconnect, device number 20 [ 1114.667427][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.337228][T11963] team0: Port device team_slave_0 added [ 1115.467714][T11937] team0: Port device team_slave_0 added [ 1115.470535][T11963] team0: Port device team_slave_1 added [ 1115.544651][T11937] team0: Port device team_slave_1 added [ 1116.522136][T11949] hsr_slave_0: entered promiscuous mode [ 1116.581939][T11949] hsr_slave_1: entered promiscuous mode [ 1116.582487][T11949] debugfs: 'hsr0' already exists in 'hsr' [ 1116.582505][T11949] Cannot create hsr debugfs directory [ 1116.614780][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.614795][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.614811][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.805152][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.805166][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.805182][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.818200][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.818213][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.818228][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.993036][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.993050][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.993067][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.109002][T12248] udevd[12248]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.024679][T12333] tipc: Started in network mode [ 1118.024703][T12333] tipc: Node identity 92275e1e66ee, cluster identity 4711 [ 1118.025061][T12333] tipc: Enabled bearer , priority 0 [ 1118.202821][T12330] syzkaller0: entered promiscuous mode [ 1118.202842][T12330] syzkaller0: entered allmulticast mode [ 1118.278259][T12325] tipc: Resetting bearer [ 1118.545108][T11963] hsr_slave_0: entered promiscuous mode [ 1118.545888][T11963] hsr_slave_1: entered promiscuous mode [ 1118.546425][T11963] debugfs: 'hsr0' already exists in 'hsr' [ 1118.546442][T11963] Cannot create hsr debugfs directory [ 1118.549890][T12323] tipc: Resetting bearer [ 1118.727649][T12323] tipc: Disabling bearer [ 1118.933527][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1119.082316][ T9] usb 2-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 1119.083325][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.083357][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.083370][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1119.085476][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.085491][ T9] usb 2-1: Product: syz [ 1119.085500][ T9] usb 2-1: Manufacturer: syz [ 1119.085508][ T9] usb 2-1: SerialNumber: syz [ 1119.998228][T11937] hsr_slave_0: entered promiscuous mode [ 1120.016912][T11937] hsr_slave_1: entered promiscuous mode [ 1120.017475][T11937] debugfs: 'hsr0' already exists in 'hsr' [ 1120.017492][T11937] Cannot create hsr debugfs directory [ 1120.590118][ T5849] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1120.763944][ T5849] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1120.764990][ T5849] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.765020][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.350649][ T5849] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1121.487213][ T5849] wacom 0003:056A:033B.000C: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input0 [ 1121.513811][ T5849] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:033B.000C/input/input28 [ 1121.897751][T10334] usb 2-1: USB disconnect, device number 40 [ 1122.246203][ T5849] usb 7-1: USB disconnect, device number 21 [ 1122.247821][T12354] FAULT_INJECTION: forcing a failure. [ 1122.247821][T12354] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.247847][T12354] CPU: 0 UID: 0 PID: 12354 Comm: syz.1.1229 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1122.247872][T12354] Tainted: [L]=SOFTLOCKUP [ 1122.247878][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1122.247891][T12354] Call Trace: [ 1122.247897][T12354] [ 1122.247904][T12354] dump_stack_lvl+0xe8/0x150 [ 1122.247932][T12354] should_fail_ex+0x46b/0x600 [ 1122.247954][T12354] should_failslab+0xa8/0x100 [ 1122.247976][T12354] __kmalloc_cache_noprof+0xa1/0x680 [ 1122.247991][T12354] ? ceph_get_tree+0x1b7/0x1a40 [ 1122.248006][T12354] ? ceph_get_tree+0x1b7/0x1a40 [ 1122.248021][T12354] ceph_get_tree+0x1b7/0x1a40 [ 1122.248034][T12354] ? cap_capable+0x123/0x460 [ 1122.248046][T12354] ? safesetid_security_capable+0xa9/0x1a0 [ 1122.248189][T12354] vfs_get_tree+0x92/0x2a0 [ 1122.248209][T12354] vfs_cmd_create+0xa2/0x200 [ 1122.248229][T12354] __se_sys_fsconfig+0x6bf/0x810 [ 1122.248254][T12354] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1122.248275][T12354] ? rcu_is_watching+0x16/0xb0 [ 1122.248302][T12354] ? __x64_sys_fsconfig+0x20/0xc0 [ 1122.248325][T12354] do_syscall_64+0x166/0x520 [ 1122.248346][T12354] ? trace_irq_disable+0x3b/0x140 [ 1122.248362][T12354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.248375][T12354] ? clear_bhb_loop+0x70/0xc0 [ 1122.248395][T12354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.248407][T12354] RIP: 0033:0x7fe84284e159 [ 1122.248422][T12354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.248432][T12354] RSP: 002b:00007fe840aa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1122.248447][T12354] RAX: ffffffffffffffda RBX: 00007fe842ad5fa0 RCX: 00007fe84284e159 [ 1122.248456][T12354] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1122.248463][T12354] RBP: 00007fe8428e5024 R08: 0000000000000000 R09: 0000000000000000 [ 1122.248474][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.248485][T12354] R13: 00007fe842ad6038 R14: 00007fe842ad5fa0 R15: 00007ffdc76deeb8 [ 1122.248509][T12354] [ 1123.170497][T12360] syz_tun: entered allmulticast mode [ 1123.693297][T12357] syz_tun: left allmulticast mode [ 1125.449288][T12377] FAULT_INJECTION: forcing a failure. [ 1125.449288][T12377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.449318][T12377] CPU: 0 UID: 0 PID: 12377 Comm: syz.1.1235 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1125.449337][T12377] Tainted: [L]=SOFTLOCKUP [ 1125.449341][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.449349][T12377] Call Trace: [ 1125.449355][T12377] [ 1125.449361][T12377] dump_stack_lvl+0xe8/0x150 [ 1125.449384][T12377] should_fail_ex+0x46b/0x600 [ 1125.449401][T12377] _copy_to_user+0x31/0xb0 [ 1125.449419][T12377] do_ip_getsockopt+0x1093/0x1d00 [ 1125.449536][T12377] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 1125.449548][T12377] ? futex_unqueue+0x22/0x240 [ 1125.449565][T12377] ? futex_unqueue+0x22/0x240 [ 1125.449580][T12377] ? futex_unqueue+0x22/0x240 [ 1125.449596][T12377] ? futex_unqueue+0x211/0x240 [ 1125.449612][T12377] ? __futex_wait+0x1e3/0x410 [ 1125.449626][T12377] ? __futex_wait+0x35a/0x410 [ 1125.449643][T12377] ? __lock_acquire+0x6df/0x2e40 [ 1125.449661][T12377] ? __pfx_futex_wake_mark+0x10/0x10 [ 1125.449677][T12377] ? try_to_wake_up+0x84b/0x1430 [ 1125.449699][T12377] ip_getsockopt+0xbb/0x230 [ 1125.449716][T12377] ? __pfx_ip_getsockopt+0x10/0x10 [ 1125.449731][T12377] ? sctp_getsockopt+0x9b/0xb90 [ 1125.449816][T12377] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1125.449863][T12377] do_sock_getsockopt+0x51d/0x7e0 [ 1125.449937][T12377] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1125.449969][T12377] ? __fget_files+0x3a8/0x420 [ 1125.449981][T12377] ? __fget_files+0x2a/0x420 [ 1125.449997][T12377] __x64_sys_getsockopt+0x1aa/0x250 [ 1125.450018][T12377] do_syscall_64+0x166/0x520 [ 1125.450032][T12377] ? trace_irq_disable+0x3b/0x140 [ 1125.450048][T12377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.450061][T12377] ? clear_bhb_loop+0x70/0xc0 [ 1125.450077][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.450089][T12377] RIP: 0033:0x7fe84284e159 [ 1125.450102][T12377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.450113][T12377] RSP: 002b:00007fe840aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1125.450128][T12377] RAX: ffffffffffffffda RBX: 00007fe842ad5fa0 RCX: 00007fe84284e159 [ 1125.450136][T12377] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000003 [ 1125.450144][T12377] RBP: 00007fe8428e5024 R08: 0000200000000300 R09: 0000000000000000 [ 1125.450151][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.450158][T12377] R13: 00007fe842ad6038 R14: 00007fe842ad5fa0 R15: 00007ffdc76deeb8 [ 1125.450177][T12377] [ 1127.983318][T10338] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1128.129559][T10338] usb 7-1: Using ep0 maxpacket: 8 [ 1128.130270][T10338] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1128.137049][T10338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.137068][T10338] usb 7-1: Product: syz [ 1128.137077][T10338] usb 7-1: Manufacturer: syz [ 1128.137085][T10338] usb 7-1: SerialNumber: syz [ 1128.152437][T10338] usb 7-1: config 0 descriptor?? [ 1128.177513][T10338] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1129.738352][T10338] gspca_sonixj: i2c_w8 err -71 [ 1129.771344][T10338] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1129.791679][T10338] usb 7-1: USB disconnect, device number 22 [ 1130.501872][T11949] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1130.657175][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1130.674849][T11949] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1131.340867][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.389335][ T8809] bridge_slave_1: left allmulticast mode [ 1131.390555][ T8809] bridge_slave_1: left promiscuous mode [ 1131.390793][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.397677][ T8809] bridge_slave_0: left allmulticast mode [ 1131.397706][ T8809] bridge_slave_0: left promiscuous mode [ 1131.412002][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.858264][ T8809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.866376][ T8809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.873021][ T8809] bond0 (unregistering): Released all slaves [ 1131.892688][T11949] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1131.906155][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1132.094303][T11949] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1132.130478][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.755951][T11949] kthread_run failed with err -4 [ 1133.821474][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1250'. [ 1134.756697][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1134.815541][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1134.836161][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1134.837033][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1134.839359][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1135.565353][ T8809] hsr_slave_0: left promiscuous mode [ 1135.573924][ T8809] hsr_slave_1: left promiscuous mode [ 1135.574670][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.575175][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.843137][ T9301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1135.953651][ T9301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1135.958811][ T9301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1135.965731][ T9301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1135.966757][ T9301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1136.623475][ T8809] team0 (unregistering): Port device team_slave_1 removed [ 1136.733451][ T9301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1136.802919][ T9301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1136.806373][ T9301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1136.808523][ T9301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1136.847005][ T9301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1136.863795][ T8809] team0 (unregistering): Port device team_slave_0 removed [ 1137.070997][ T5596] Bluetooth: hci0: command tx timeout [ 1138.189676][ T5596] Bluetooth: hci2: command tx timeout [ 1139.070933][ T5596] Bluetooth: hci5: command tx timeout [ 1139.149556][ T5596] Bluetooth: hci0: command tx timeout [ 1139.200749][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1139.374194][ T9] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1139.375115][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.375159][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.758311][ T9] as10x_usb: device has been detected [ 1139.761811][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1140.037710][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1140.284971][ T5596] Bluetooth: hci2: command tx timeout [ 1140.788119][ T38] audit: type=1800 audit(1788493215.837:13): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1257" name="product" dev="configfs" ino=46323 res=0 errno=0 [ 1141.149694][ T5596] Bluetooth: hci5: command tx timeout [ 1141.171674][T12527] INFO: trying to register non-static key. [ 1168.150116][T12527] The code is fine but needs lockdep annotation, or maybe [ 1168.157585][T12527] you didn't initialize this object before use? [ 1168.164050][T12527] turning off the locking correctness validator. [ 1168.170736][T12527] CPU: 0 UID: 0 PID: 12527 Comm: syz.1.1255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1168.182640][T12527] Tainted: [L]=SOFTLOCKUP [ 1168.187049][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1168.197196][T12527] Call Trace: [ 1168.200504][T12527] [ 1168.203453][T12527] dump_stack_lvl+0xe8/0x150 [ 1168.208068][T12527] assign_lock_key+0x133/0x150 [ 1168.212876][T12527] register_lock_class+0xcc/0x2e0 [ 1168.217921][T12527] ? __lock_acquire+0x6df/0x2e40 [ 1168.222865][T12527] __lock_acquire+0xaf/0x2e40 [ 1168.227544][T12527] ? __lock_acquire+0x6df/0x2e40 [ 1168.232478][T12527] ? __lock_acquire+0x6df/0x2e40 [ 1168.237524][T12527] lock_acquire+0x115/0x350 [ 1168.242046][T12527] ? as102_stream_ctrl+0x27/0xc0 [ 1168.247180][T12527] ? as102_stream_ctrl+0x27/0xc0 [ 1168.252253][T12527] ? as102_stream_ctrl+0x27/0xc0 [ 1168.257813][T12527] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1168.263974][T12527] ? as102_stream_ctrl+0x27/0xc0 [ 1168.269009][T12527] as102_stream_ctrl+0x27/0xc0 [ 1168.273786][T12527] __dvb_frontend_open+0x2ef/0xc40 [ 1168.278973][T12527] ? mutex_lock_nested+0x152/0x1d0 [ 1168.284091][T12527] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1168.289905][T12527] dvb_device_open+0x258/0x350 [ 1168.294961][T12527] chrdev_open+0x4dc/0x600 [ 1168.300266][T12527] ? __pfx_chrdev_open+0x10/0x10 [ 1168.305229][T12527] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1168.311852][T12527] ? __pfx_chrdev_open+0x10/0x10 [ 1168.316797][T12527] do_dentry_open+0x849/0x1420 [ 1168.321715][T12527] vfs_open+0x3b/0x350 [ 1168.325803][T12527] ? path_openat+0x142d/0x1d60 [ 1168.330676][T12527] path_openat+0x1448/0x1d60 [ 1168.335290][T12527] do_file_open+0x23e/0x4a0 [ 1168.339900][T12527] ? __pfx_do_file_open+0x10/0x10 [ 1168.344935][T12527] ? alloc_fd+0x654/0x6d0 [ 1168.349284][T12527] do_sys_openat2+0x115/0x200 [ 1168.354161][T12527] ? __pfx_do_sys_openat2+0x10/0x10 [ 1168.359741][T12527] __x64_sys_openat+0x138/0x170 [ 1168.364907][T12527] do_syscall_64+0x166/0x520 [ 1168.369538][T12527] ? trace_irq_disable+0x3b/0x140 [ 1168.374665][T12527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.380904][T12527] ? clear_bhb_loop+0x70/0xc0 [ 1168.385592][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.391563][T12527] RIP: 0033:0x7fe84280e98e [ 1168.396069][T12527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1168.416110][T12527] RSP: 002b:00007fe84021db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1168.424623][T12527] RAX: ffffffffffffffda RBX: 00007fe84021e6c0 RCX: 00007fe84280e98e [ 1168.432649][T12527] RDX: 0000000000000802 RSI: 00007fe84021dc00 RDI: ffffffffffffff9c [ 1168.440741][T12527] RBP: 00007fe84021dc00 R08: 0000000000000000 R09: 0000000000000000 [ 1168.448805][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1168.456956][T12527] R13: 00007fe842ad63f8 R14: 00007fe842ad6360 R15: 00007ffdc76deeb8 [ 1168.465109][T12527] SYZFAIL: failed to send rpc fd=3 want=15936 sent=0 n=-1 (errno 32: Broken pipe)