last executing test programs: 1m1.316927501s ago: executing program 2 (id=1041): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000180)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) statfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff000000070581"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0x9}, 0x1c) mprotect(&(0x7f0000252000/0x4000)=nil, 0x4000, 0x2000004) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x3, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", "0400", "0f00", "64bdac32", ["770200", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0xff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000340)=[{&(0x7f0000001400)=""/227, 0xe3}, {0x0}], 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000180)=0xaf) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r0, @ANYRES16, @ANYRES16=r4], 0x4) 59.138158809s ago: executing program 4 (id=1044): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x100}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0xa103) unshare(0x400) poll(&(0x7f0000000080)=[{r3, 0x26}], 0x1, 0x30000) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) 58.894676434s ago: executing program 1 (id=1045): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigqueueinfo(0x0, 0x1d, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00'}, 0x94) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x82040, 0x0) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34000000c77611553b5bcabdba970caf421d0a3187dc5d132f11aa86402df8c49f75411b7425781137effebb4a26a00e75a1a7b8cc4b98d672", @ANYRES16=r4, @ANYBLOB="070e2dbd7000ffdbdf250a0000000800030003000000080002000000000008000200060000000800020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0xd1) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$packet(0x11, 0x3, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000051) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$SO_COOKIE(r6, 0x1, 0x31, &(0x7f0000000400), &(0x7f0000000440)=0x8) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000600)) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000001c0)={0xfffe, 0x0, 0x3, 0x5}) ioctl$DVB_DEMUX_DMX_ADD_PID(r8, 0x40026f33, &(0x7f0000000500)=0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4}) fgetxattr(r2, &(0x7f0000000640)=@known='system.advise\x00', &(0x7f0000000680)=""/220, 0xdc) r9 = accept$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040811}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082bbd7000fbdbdf2516000000000005000400"/30], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 57.092205333s ago: executing program 4 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000"], 0x40c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$inet6(0xa, 0x3, 0x4) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x80000006}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x6c}}}], 0x30}}], 0x1, 0x40000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000240)={0x6, 0x9, 0x1, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0xfffe) socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944c", 0x2}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 55.960457584s ago: executing program 0 (id=1050): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 55.733411141s ago: executing program 2 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x81d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 55.552321871s ago: executing program 0 (id=1052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c9f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4bb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b160600000000000000fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f02558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f52dac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x10}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x62001, 0x0) ioctl$TCXONC(r8, 0x540a, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)="dc8daf8d", 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000000)="f286d43e9ba0aff680c51b2ea727382708f361f658927ad8a381f54fd1ee4c", 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8, 0x1, 0x0, 0x0, 0x1000008) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 55.357494906s ago: executing program 4 (id=1053): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x400008}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) semop(0x0, &(0x7f0000001140)=[{0x4, 0xe038, 0x800}], 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x3b) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x84401, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x3403, 0x10000, 0x2, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 55.225498832s ago: executing program 2 (id=1054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002b00)=ANY=[@ANYBLOB="f8000000100001000100000000000000ffffffff000000000000000000000000fc0200000000000000000000000000000000ecdf0000000300008020001a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000101000000000000010000000000000000fdff00000000000000000000004000fcffffffffffffff00000000000000000000000000000000000000000000000001000000e5ffffffffffff7f00000000020000000000000010000000000000000200000027bd70000000000002"], 0xf8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 55.200160174s ago: executing program 1 (id=1055): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xffdffff8, 0x8, 0x8, "01001c000000000004000042d800"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) userfaultfd(0x80001) (async) userfaultfd(0x80001) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) pipe2(&(0x7f0000000000), 0x80000) write(0xffffffffffffffff, &(0x7f0000000180)="b0c8e8caab54581a265217d4e1254c9c2583764929706b2ec13cb783ebdcb7fc442201616280c2ce67a23e836cb70b0fe59813927c396c7ebac2e59bdeb98b6b6e3307ea5c20e01044d3b646a390ec896555c6bef5efc024c99dea3b3a3b179bb61224b71a411e261a882762762f6514fcc63f87c21a25d3de78100d0426d1c6", 0x80) (async) write(0xffffffffffffffff, &(0x7f0000000180)="b0c8e8caab54581a265217d4e1254c9c2583764929706b2ec13cb783ebdcb7fc442201616280c2ce67a23e836cb70b0fe59813927c396c7ebac2e59bdeb98b6b6e3307ea5c20e01044d3b646a390ec896555c6bef5efc024c99dea3b3a3b179bb61224b71a411e261a882762762f6514fcc63f87c21a25d3de78100d0426d1c6", 0x80) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000001680), 0x0, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000180)="228b0a3652", 0x5}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fad535a4", 0x5d}, {&(0x7f0000000440)="5fe22bb7bb83f3dce8fa869159ca63aa7fa342c010b43bebd16fd340b362aa61a8cc38e0389b6132aabbca1ba3cdf1205328a48fbe94f750a863619b1e8ec98b60faed078bb15658d50686d5c5b354b08f67723e19676fa7c6386c16af2425b3f00d", 0x62}, {&(0x7f0000000780)="fb182126dae81521ece692032aaf33f601510a53da0a3320f4ff08c6f2b8cc70e49fe8024309b9acada20b8b771c5e4b312b52eb77a341203c77ffcd21d53887633fdd199c3b94dd33828fc6ec389e4eedae3a1d66acc604c6319986b5484dc58b64c795072e6c7e873ae398a493b5e665414c7d195a47fc460a3860c499d788ef1112fe4a90c696350f00000000000000c602c8f5afeb4de3350186315190c10261f4599ffc530c730bd7e1ce934f465d5ab0f714fc7b979e894f1a8bb9e6cfd23c9566b720428d595b8b968b4dd46bc959b9b5424d459e0d4f1860efeebc7526d68b73", 0xe4}], 0x4) write(r6, &(0x7f0000001e00)="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", 0x40d) (async) write(r6, &(0x7f0000001e00)="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", 0x40d) ioctl$XFS_IOC_OPEN_BY_HANDLE(r6, 0xc038586b, &(0x7f0000000300)={r0, &(0x7f0000000200)='+/\x00', 0x80000, &(0x7f0000000240)={@align=0x9, {0xff, 0x0, 0x7, 0xba87}}, 0x5, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xffffffbd}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r6, 0xc038586b, &(0x7f0000000300)={r0, &(0x7f0000000200)='+/\x00', 0x80000, &(0x7f0000000240)={@align=0x9, {0xff, 0x0, 0x7, 0xba87}}, 0x5, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xffffffbd}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x3}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x3}) 55.038239496s ago: executing program 2 (id=1056): r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @dev={0xac, 0x14, 0x14, 0x39}}, @echo_reply={0xe0, 0x0, 0x0, 0x66}}}}}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) r1 = syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x30, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xf28a, 0x400, 0x2, 0x2da}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e3, 0x1000, 0x0, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f0, 0x20, 0x0, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46a1, 0x1, 0x1, 0x2a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52e8, 0x400, 0x3, 0x30c}, 0xffffffffffffffff}], 0x4, &(0x7f0000001880)={0x2e, 0x8fc87e2c80dc2f21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x1, 0xfea, 0x0, &(0x7f0000000880)=@buf_max_buf="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"}}, &(0x7f0000001900)) r3 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = openat$sysfs(0xffffff9c, &(0x7f00000005c0)='/sys/power/freeze_filesystems', 0x42242, 0x73) write$FUSE_DIRENT(r6, &(0x7f0000003080)={0x118, 0x0, 0x0, [{0x3, 0x5, 0x12, 0x88, '/dev/input/event#\x00'}, {0x4, 0xe, 0x0, 0x8}, {0x1, 0x3, 0xa, 0xe, '/dev/dsp1\x00'}, {0x5, 0x2, 0x1, 0x8, '['}, {0x4, 0x7, 0x12, 0xd, '/dev/input/event#\x00'}, {0x0, 0x400, 0x1, 0x5, '!'}, {0x6, 0xfffffffffffff001, 0xa, 0x100, '/dev/dsp1\x00'}]}, 0x118) ioctl$TIOCGPTPEER(r6, 0x5441, 0x2000000000007cb2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000170a0101000000000000000000000008255c2763a0f62211d982bb951063a686f2319324d60d6da330443831cc7b2a54d748265ae206a7fafbe5f3091b97b0694142faf5919574562a1102adc5052b0f0afe9d5ebfad10ee750f98073d274821385a6212ece183808c07bf7b98e855d7a239c977d315df0200f429b6c10ce7c66926913bf493fc60ea1bff2e2551f1a810603fc6cbc29e98c77690dea6ba544d980bec5491b7020aa22b184c729639ec693f0ca1c93d381f8faff91215e3d061520648c0e7a0891b01046304b2d4e8d572a4e80fd159ef42fcc02869da1fc8"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) syz_open_dev$dri(0x0, 0x0, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r9, 0xc038563c, &(0x7f0000000340)={0x0, 0x0, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2"}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000000180)={r3, 0xffff, 0x0, 0x0, r1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sched_getattr(r10, &(0x7f0000000280)={0x38}, 0x38, 0x0) 54.319627733s ago: executing program 3 (id=1057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000480008000a40fffffffc0900010073797a310000000008000540000000242c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 51.553027242s ago: executing program 4 (id=1058): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa, 0x0, 0xa0000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 51.238790241s ago: executing program 3 (id=1059): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000006050000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0c00098008000140ffffffff0800034000000110"], 0x98}}, 0x20050800) 51.018708857s ago: executing program 1 (id=1060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005cfc0000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 51.014493465s ago: executing program 2 (id=1061): keyctl$setperm(0x5, 0x0, 0x124a00) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) recvmsg$can_raw(r0, &(0x7f0000005d40)={0x0, 0x0, 0x0}, 0x2000) socket$kcm(0x2, 0xa, 0x2) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x80}, 0x0, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x8e6a9000) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f00000001c0)=0xc) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@hyper}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x28, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000006200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x60, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x66, 0x2, 0x9, {0xa, 0x25, 0x25, 0x8, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x3, {0xa, 0x25, 0x25, 0x0, 0x7, 0x101}}}}}}}}]}}, &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@any, 0xfed2}, {@hyper}, 0x400, "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"}, 0x418, 0xfffffffc}) socket$kcm(0x2, 0xa, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000340)=""/93, 0x5d}], 0x2, 0x33, 0x2000051b) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000180)={@local, 0x7}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x2856035, &(0x7f0000000200)=ANY=[@ANYBLOB="2c326052d741ec0b177237a853c74186b6abe02c"], 0x0, 0x0, 0x0) 50.970733058s ago: executing program 0 (id=1062): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 50.767877574s ago: executing program 4 (id=1063): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000180)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) statfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff000000070581"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0x9}, 0x1c) mprotect(&(0x7f0000252000/0x4000)=nil, 0x4000, 0x2000004) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x3, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", "0400", "0f00", "64bdac32", ["770200", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0xff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000340)=[{&(0x7f0000001400)=""/227, 0xe3}, {0x0}], 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000180)=0xaf) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r0, @ANYRES16, @ANYRES16=r4], 0x4) 50.442470497s ago: executing program 0 (id=1064): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$FUSE_ATTR(r0, &(0x7f0000004540)={0x78, 0x0, 0x0, {0xfcfac6, 0x9, 0x0, {0x5, 0x0, 0xa, 0xce0, 0x2, 0x9, 0x2, 0x9, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x4, 0x9}}}, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000180)={0x9, r1, 'id0\x00'}) writev(r8, &(0x7f0000000480)=[{&(0x7f0000000200)="7188cd98ecb7efee595f5af2afefdf5ec050a701a1883982bdb093966ec15be69e0651", 0x23}, {&(0x7f0000000400)="ffd3ed6519ad07e4feb0bb974006a0a30e7eff7de03e35143e5cf928fa474696ab6dd248050f19a043d87c6cdc1310252a3b10570f33d5590586c3a8d7c1c8713446a24ba045a9a02d42b55986f403014002e446dc92bb8f99f29608b6273fae87237de6c3758f80b86b12aa65385fe4004c81fb", 0x74}], 0x2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x5, 0x0, 0xa, 0x20, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.03928543s ago: executing program 1 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001460060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) 49.915735951s ago: executing program 3 (id=1066): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2a6}}, './file0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x2, r3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000003d090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.572999168s ago: executing program 3 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 49.315413471s ago: executing program 0 (id=1068): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x400008}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) semop(0x0, &(0x7f0000001140)=[{0x4, 0xe038, 0x800}], 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x3b) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x84401, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x3403, 0x10000, 0x2, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 49.314894347s ago: executing program 3 (id=1069): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x24dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 49.215179352s ago: executing program 1 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x1) connect$inet6(r6, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b0009008000", 0x2c}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) preadv(r7, &(0x7f00000022c0)=[{&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/247, 0xf7}, {&(0x7f0000000a40)=""/166, 0xa6}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x0) 45.238220549s ago: executing program 2 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0x3, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x8, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0xfffffffd, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x8, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0x20000c9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5cd, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0x1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9d6, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x6, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0x7, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000002101410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 44.620512861s ago: executing program 3 (id=1072): r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @dev={0xac, 0x14, 0x14, 0x39}}, @echo_reply={0xe0, 0x0, 0x0, 0x66}}}}}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) r1 = syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x30, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xf28a, 0x400, 0x2, 0x2da}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e3, 0x1000, 0x0, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f0, 0x20, 0x0, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46a1, 0x1, 0x1, 0x2a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52e8, 0x400, 0x3, 0x30c}, 0xffffffffffffffff}], 0x4, &(0x7f0000001880)={0x2e, 0x8fc87e2c80dc2f21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x1, 0xfea, 0x0, &(0x7f0000000880)=@buf_max_buf="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"}}, &(0x7f0000001900)) r3 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = openat$sysfs(0xffffff9c, &(0x7f00000005c0)='/sys/power/freeze_filesystems', 0x42242, 0x73) write$FUSE_DIRENT(r6, &(0x7f0000003080)={0x118, 0x0, 0x0, [{0x3, 0x5, 0x12, 0x88, '/dev/input/event#\x00'}, {0x4, 0xe, 0x0, 0x8}, {0x1, 0x3, 0xa, 0xe, '/dev/dsp1\x00'}, {0x5, 0x2, 0x1, 0x8, '['}, {0x4, 0x7, 0x12, 0xd, '/dev/input/event#\x00'}, {0x0, 0x400, 0x1, 0x5, '!'}, {0x6, 0xfffffffffffff001, 0xa, 0x100, '/dev/dsp1\x00'}]}, 0x118) ioctl$TIOCGPTPEER(r6, 0x5441, 0x2000000000007cb2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000170a0101000000000000000000000008255c2763a0f62211d982bb951063a686f2319324d60d6da330443831cc7b2a54d748265ae206a7fafbe5f3091b97b0694142faf5919574562a1102adc5052b0f0afe9d5ebfad10ee750f98073d274821385a6212ece183808c07bf7b98e855d7a239c977d315df0200f429b6c10ce7c66926913bf493fc60ea1bff2e2551f1a810603fc6cbc29e98c77690dea6ba544d980bec5491b7020aa22b184c729639ec693f0ca1c93d381f8faff91215e3d061520648c0e7a0891b01046304b2d4e8d572a4e80fd159ef42fcc02869da1fc8"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) syz_open_dev$dri(0x0, 0x0, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r9, 0xc038563c, &(0x7f0000000340)={0x0, 0x0, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2"}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000000180)={r3, 0xffff, 0x0, 0x0, r1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sched_getattr(r10, &(0x7f0000000280)={0x38}, 0x38, 0x0) 44.30263046s ago: executing program 0 (id=1073): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000011000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 44.004025579s ago: executing program 4 (id=1074): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.124884739s ago: executing program 1 (id=1075): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x1}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card2/oss_mixer\x00', 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x0) keyctl$set_timeout(0xf, 0x0, 0x2) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) tee(r8, r9, 0x404, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x5e) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000e0000000000000000000000050006003a0000000a00000400000000fc0000000000000000000000000000004000000080ff00000200010000000000000003080000000005000500000000000a000000ffffffffff010000000000000000000000000001d69e000000000000"], 0x70}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x100000, 0x0, {0x0, 0x0, 0x0, r4, 0x8a83}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xbd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 0s ago: executing program 32 (id=1073): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000011000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) kernel console output (not intermixed with test programs): bulk message failed: -22 (1/0) [ 140.322419][ T5677] dvb-usb: error while querying for an remote control event. [ 140.347549][ T5677] usb 5-1: USB disconnect, device number 14 [ 140.427744][ T5677] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 140.581005][ T5710] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 140.626268][ T5694] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.743698][ T5710] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.745010][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.745035][ T5710] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.748285][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.748308][ T5710] usb 2-1: Product: syz [ 140.748324][ T5710] usb 2-1: Manufacturer: syz [ 140.748338][ T5710] usb 2-1: SerialNumber: syz [ 140.826023][ T5710] usb 2-1: 0:2 : does not exist [ 140.836540][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.849546][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.882025][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.882830][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.934361][ T5694] usb 3-1: USB disconnect, device number 6 [ 141.154009][ T6726] netlink: 'syz.4.332': attribute type 11 has an invalid length. [ 141.713240][ T5710] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 141.933161][ T5710] usb 2-1: USB disconnect, device number 12 [ 142.127181][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.317959][ T6746] __nla_validate_parse: 6 callbacks suppressed [ 142.317979][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 142.317995][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 142.319854][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 142.319874][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 142.608105][ T6755] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [7c!=40, 4,40] [ 142.763622][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 142.815153][ T6763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'. [ 142.815178][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 143.024553][ T6767] syzkaller0: entered promiscuous mode [ 143.024578][ T6767] syzkaller0: entered allmulticast mode [ 143.027486][ T6765] syzkaller0: entered promiscuous mode [ 143.119875][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 143.450128][ T5694] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.539597][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 143.650080][ T5694] usb 1-1: Using ep0 maxpacket: 8 [ 143.650913][ T5694] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 143.652157][ T5694] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 143.654968][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.654997][ T5694] usb 1-1: Product: syz [ 143.655009][ T5694] usb 1-1: Manufacturer: syz [ 143.655020][ T5694] usb 1-1: SerialNumber: syz [ 143.662811][ T5694] usb 1-1: config 0 descriptor?? [ 143.725487][ T5694] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 144.103971][ T6796] syzkaller0: entered promiscuous mode [ 144.103988][ T6796] syzkaller0: entered allmulticast mode [ 144.136446][ T6796] tipc: Enabled bearer , priority 10 [ 144.155705][ T6794] tipc: Resetting bearer [ 144.246985][ T6794] tipc: Disabling bearer [ 144.588880][ T5694] gspca_zc3xx: reg_r err -32 [ 144.627128][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.627421][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.670195][ T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.820127][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 144.853057][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 144.884565][ T30] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 144.908694][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.908724][ T30] usb 3-1: Product: syz [ 144.908740][ T30] usb 3-1: Manufacturer: syz [ 144.908755][ T30] usb 3-1: SerialNumber: syz [ 144.956610][ T30] usb 3-1: config 0 descriptor?? [ 144.985732][ T30] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 145.170227][ T5694] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 145.170345][ T5694] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 145.262000][ T5701] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.397432][ T6826] x_tables: unsorted underflow at hook 1 [ 145.421211][ T5701] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 145.422882][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.422932][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.489630][ T5701] as10x_usb: device has been detected [ 145.496238][ T5701] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 145.521667][ T5701] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 145.574437][ T5694] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.612705][ T5701] as10x_usb: error during firmware upload part1 [ 145.613471][ T5701] Registered device Abilis Systems DVB-Titan [ 145.680942][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.683955][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.686493][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.687097][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.752715][ T5694] usb 5-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c [ 145.754187][ T5694] usb 5-1: config 127 has an invalid interface number: 24 but max is 0 [ 145.754224][ T5694] usb 5-1: config 127 has no interface number 0 [ 145.759074][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.759097][ T5694] usb 5-1: Product: syz [ 145.759114][ T5694] usb 5-1: Manufacturer: syz [ 145.759152][ T5694] usb 5-1: SerialNumber: syz [ 145.816054][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 145.872428][ T6828] bridge1: port 1(veth0_to_bond) entered blocking state [ 145.872558][ T6828] bridge1: port 1(veth0_to_bond) entered disabled state [ 145.872689][ T6828] veth0_to_bond: entered allmulticast mode [ 145.876659][ T6828] veth0_to_bond: entered promiscuous mode [ 145.879785][ T6828] bridge1: port 1(veth0_to_bond) entered blocking state [ 145.880155][ T6828] bridge1: port 1(veth0_to_bond) entered forwarding state [ 146.057044][ T5694] usb-storage 5-1:127.24: USB Mass Storage device detected [ 146.137706][ T5694] usb 5-1: USB disconnect, device number 15 [ 146.260120][ T4944] usb 1-1: USB disconnect, device number 12 [ 146.788532][ T6841] netlink: 'syz.0.374': attribute type 11 has an invalid length. [ 147.491059][ T6851] syzkaller0: entered promiscuous mode [ 147.491089][ T6851] syzkaller0: entered allmulticast mode [ 147.530641][ T6851] tipc: Enabled bearer , priority 0 [ 147.536569][ T6849] tipc: Resetting bearer [ 147.593120][ T6849] tipc: Disabling bearer [ 147.763030][ T6855] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 147.832229][ T6855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.859385][ T4944] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 147.888211][ T6855] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 148.032005][ T4944] usb 2-1: Using ep0 maxpacket: 8 [ 148.035116][ T4944] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 148.055112][ T4944] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 148.055142][ T4944] usb 2-1: config 8 has no interface number 0 [ 148.055187][ T4944] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 148.055212][ T4944] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.055237][ T4944] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 148.131034][ T4944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.131061][ T4944] usb 2-1: Product: syz [ 148.131075][ T4944] usb 2-1: Manufacturer: syz [ 148.131114][ T4944] usb 2-1: SerialNumber: syz [ 148.339491][ T6799] capability: warning: `syz.2.362' uses 32-bit capabilities (legacy support in use) [ 148.398107][ T6853] fuse: Bad value for 'group_id' [ 148.398129][ T6853] fuse: Bad value for 'group_id' [ 148.413132][ T6860] fuse: Bad value for 'group_id' [ 148.413152][ T6860] fuse: Bad value for 'group_id' [ 148.414395][ T30] gspca_zc3xx: reg_w_i err -71 [ 148.450170][ T30] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 148.459822][ T30] usb 3-1: USB disconnect, device number 7 [ 148.520529][ T1218] usb 4-1: USB disconnect, device number 10 [ 148.652050][ T1218] Unregistered device Abilis Systems DVB-Titan [ 148.688672][ T1218] as10x_usb: device has been disconnected [ 148.772526][ T4944] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 148.775049][ T4944] vmk80xx 2-1:8.188: probe with driver vmk80xx failed with error -22 [ 148.798437][ T4944] usb 2-1: USB disconnect, device number 13 [ 149.608997][ T6884] syzkaller0: entered promiscuous mode [ 149.609013][ T6884] syzkaller0: entered allmulticast mode [ 149.637311][ T6884] tipc: Enabled bearer , priority 0 [ 149.652312][ T6881] tipc: Resetting bearer [ 149.715588][ T6881] tipc: Disabling bearer [ 149.734644][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 149.734667][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 149.910528][ T4944] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.075495][ T4944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.079693][ T4944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.079743][ T4944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.124951][ T4944] usb 4-1: config 0 descriptor?? [ 150.315370][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 150.618554][ T4944] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 150.681817][ T4944] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input11 [ 150.748745][ T5710] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 150.908555][ T4944] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 150.917566][ T5710] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 150.936810][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.936859][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.936882][ T5710] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.936905][ T5710] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.936947][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.058673][ T5615] usb 4-1: USB disconnect, device number 11 [ 151.231607][ T6922] fido_id[6922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 151.264725][ T6910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.264862][ T6910] block device autoloading is deprecated and will be removed. [ 151.688840][ T6930] x_tables: unsorted underflow at hook 1 [ 151.792294][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 151.918847][ T6939] bridge1: port 1(veth0_to_bond) entered blocking state [ 151.918991][ T6939] bridge1: port 1(veth0_to_bond) entered disabled state [ 151.919166][ T6939] veth0_to_bond: entered allmulticast mode [ 151.959409][ T6939] veth0_to_bond: entered promiscuous mode [ 151.976133][ T6939] bridge1: port 1(veth0_to_bond) entered blocking state [ 151.976211][ T6939] bridge1: port 1(veth0_to_bond) entered forwarding state [ 152.380178][ T4944] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 152.386483][ T6957] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 152.510941][ T4944] usb 5-1: device descriptor read/64, error -71 [ 152.530192][ T5615] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.681316][ T5615] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 152.682544][ T5615] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 152.682568][ T5615] usb 3-1: config 1 has no interface number 0 [ 152.689667][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.689693][ T5615] usb 3-1: Product: syz [ 152.689745][ T5615] usb 3-1: Manufacturer: syz [ 152.689760][ T5615] usb 3-1: SerialNumber: syz [ 152.716856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.770214][ T4944] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 152.799886][ T5615] usb 3-1: cannot find UAC_HEADER [ 152.837448][ T6966] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 152.912163][ T4944] usb 5-1: device descriptor read/64, error -71 [ 152.947636][ T6966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.949002][ T5615] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 152.970715][ T6968] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 152.975499][ T5615] usb 3-1: USB disconnect, device number 8 [ 153.014458][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.038813][ T4944] usb usb5-port1: attempt power cycle [ 153.223113][ T6974] process 'syz.1.421' launched './file0' with NULL argv: empty string added [ 153.282628][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.361058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.380189][ T4944] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 153.400759][ T4944] usb 5-1: device descriptor read/8, error -71 [ 153.427819][ T5710] gud 1-1:1.0: Failed to add properties (error=-71) [ 153.427854][ T5710] gud 1-1:1.0: probe with driver gud failed with error -71 [ 153.599132][ T5710] usb 1-1: USB disconnect, device number 13 [ 153.650242][ T4944] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 153.680780][ T4944] usb 5-1: device descriptor read/8, error -71 [ 153.790390][ T4944] usb usb5-port1: unable to enumerate USB device [ 154.312552][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.473272][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.503475][ T7003] syzkaller0: entered promiscuous mode [ 154.503499][ T7003] syzkaller0: entered allmulticast mode [ 154.509726][ T7003] tipc: Enabled bearer , priority 0 [ 154.529175][ T7002] tipc: Resetting bearer [ 154.602626][ T7002] tipc: Disabling bearer [ 154.833413][ T7011] syzkaller0: entered promiscuous mode [ 154.833438][ T7011] syzkaller0: entered allmulticast mode [ 155.114910][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 155.208772][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 155.325229][ T5710] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.350687][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.390885][ T7031] x_tables: unsorted underflow at hook 1 [ 155.470412][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 155.477831][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.477881][ T5710] usb 3-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 155.495340][ T5710] usb 3-1: config 1 has an invalid interface number: 237 but max is 0 [ 155.495414][ T5710] usb 3-1: config 1 has no interface number 0 [ 155.495538][ T5710] usb 3-1: config 1 interface 237 has no altsetting 0 [ 155.535101][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.535129][ T5710] usb 3-1: Product: syz [ 155.535145][ T5710] usb 3-1: Manufacturer: syz [ 155.535160][ T5710] usb 3-1: SerialNumber: syz [ 155.604118][ T7034] syzkaller0: entered promiscuous mode [ 155.604143][ T7034] syzkaller0: entered allmulticast mode [ 155.609899][ T7034] tipc: Enabled bearer , priority 0 [ 155.644887][ T7033] tipc: Resetting bearer [ 155.683183][ T7033] tipc: Disabling bearer [ 155.852482][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 155.852519][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 156.084961][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'. [ 156.084987][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 156.179508][ T5710] ipaq 3-1:1.237: PocketPC PDA converter detected [ 156.201597][ T5710] ipaq 3-1:1.237: probe with driver ipaq failed with error -71 [ 156.250163][ T5710] usb 3-1: USB disconnect, device number 9 [ 156.391252][ T4944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.572328][ T5701] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 156.725263][ T5701] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 156.729435][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.729463][ T5701] usb 5-1: Product: syz [ 156.729478][ T5701] usb 5-1: Manufacturer: syz [ 156.729505][ T5701] usb 5-1: SerialNumber: syz [ 156.928941][ T7081] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 157.013111][ T7081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.014324][ T7084] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 157.100563][ T5710] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 157.195831][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.463'. [ 157.214305][ T7090] raw_sendmsg: syz.0.463 forgot to set AF_INET. Fix it! [ 157.214567][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.463'. [ 157.265731][ T5710] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 157.268582][ T5710] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 157.268664][ T5710] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.268692][ T5710] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 157.268716][ T5710] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 157.268735][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.268758][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.351120][ T5710] usb 3-1: config 0 descriptor?? [ 157.357135][ T7079] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.405555][ T7090] vlan3: entered promiscuous mode [ 157.405577][ T7090] bridge0: entered promiscuous mode [ 157.430557][ T1218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.511815][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.741467][ T7100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.466'. [ 157.832688][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.835555][ T7057] misc userio: The device must be registered before sending interrupts [ 157.837736][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.879248][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.908048][ T5710] usbhid 3-1:0.0: can't add hid device: -71 [ 157.908139][ T5710] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.946972][ T5710] usb 3-1: USB disconnect, device number 10 [ 158.032403][ T30] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 158.164785][ T30] usb 2-1: device descriptor read/64, error -71 [ 158.243838][ T7114] ipvlan2: entered allmulticast mode [ 158.243855][ T7114] virt_wifi0: entered allmulticast mode [ 158.245329][ T7114] batman_adv: batadv0: Adding interface: ipvlan2 [ 158.245340][ T7114] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.246077][ T7114] batman_adv: batadv0: Interface activated: ipvlan2 [ 158.430159][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.471402][ T4944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.560806][ T30] usb 2-1: device descriptor read/64, error -71 [ 158.649451][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 158.668955][ T5701] rtl8150 5-1:1.0: couldn't reset the device [ 158.669291][ T5701] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 158.685648][ T30] usb usb2-port1: attempt power cycle [ 158.721492][ T5701] usb 5-1: USB disconnect, device number 20 [ 159.040628][ T30] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 159.071124][ T30] usb 2-1: device descriptor read/8, error -71 [ 159.311333][ T30] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.343344][ T30] usb 2-1: device descriptor read/8, error -71 [ 159.346706][ T7146] syzkaller0: entered promiscuous mode [ 159.346727][ T7146] syzkaller0: entered allmulticast mode [ 159.383044][ T7146] tipc: Enabled bearer , priority 0 [ 159.405979][ T7144] tipc: Resetting bearer [ 159.452337][ T30] usb usb2-port1: unable to enumerate USB device [ 159.516201][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.526742][ T7144] tipc: Disabling bearer [ 159.724501][ T7156] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.150197][ T7179] syzkaller0: entered promiscuous mode [ 160.150219][ T7179] syzkaller0: entered allmulticast mode [ 160.261634][ T7183] __nla_validate_parse: 68 callbacks suppressed [ 160.261649][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 160.375133][ T7185] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [a4!=40, 4,68] [ 160.419610][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 160.553296][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.555237][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.592949][ T7193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.593236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.791121][ T7200] x_tables: unsorted underflow at hook 1 [ 160.855038][ T7203] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 161.195762][ T7215] syzkaller0: entered promiscuous mode [ 161.195783][ T7215] syzkaller0: entered allmulticast mode [ 161.232644][ T7215] tipc: Enabled bearer , priority 0 [ 161.236914][ T7214] tipc: Resetting bearer [ 161.254639][ T4944] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 161.385436][ T7214] tipc: Disabling bearer [ 161.415254][ T4944] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 161.419651][ T4944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.419698][ T4944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.419725][ T4944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.419762][ T4944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.434457][ T4944] usb 2-1: config 0 descriptor?? [ 161.955998][ T4944] usbhid 2-1:0.0: can't add hid device: -71 [ 161.956105][ T4944] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.979690][ T4944] usb 2-1: USB disconnect, device number 18 [ 162.339530][ T7252] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 162.354358][ T7252] team0: Device ipvlan0 failed to register rx_handler [ 162.679113][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 162.736577][ T7259] bridge1: port 1(veth0_to_bond) entered blocking state [ 162.736772][ T7259] bridge1: port 1(veth0_to_bond) entered disabled state [ 162.736926][ T7259] veth0_to_bond: entered allmulticast mode [ 162.747708][ T7259] veth0_to_bond: entered promiscuous mode [ 162.754840][ T7259] bridge1: port 1(veth0_to_bond) entered blocking state [ 162.755160][ T7259] bridge1: port 1(veth0_to_bond) entered forwarding state [ 163.054730][ T7264] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 163.193671][ T7264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.207843][ T7268] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 163.766459][ T7292] nvme_fabrics: nof]bEDE=Ԙب]O0!WSל޷}F'5m[ޕwh}1n@ 7E aoVMYm0;yl:&1<7-h:SXl7ZS`.7Ph\fPG4`5_*v搡]\yu$[&s_M needs to be < 223 bytes [ 164.363959][ T7310] netlink: 72 bytes leftover after parsing attributes in process `syz.0.541'. [ 164.363985][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 164.363999][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 164.747452][ T7316] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 164.747490][ T7316] bond1: option packets_per_slave: allowed values 0 - 65535 [ 164.768642][ T7316] bond1 (unregistering): Released all slaves [ 164.834264][ T7320] syzkaller0: entered promiscuous mode [ 164.834289][ T7320] syzkaller0: entered allmulticast mode [ 164.839918][ T7320] tipc: Enabled bearer , priority 0 [ 164.863505][ T7319] tipc: Resetting bearer [ 164.904638][ T7319] tipc: Disabling bearer [ 164.910998][ T5701] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 165.064012][ T5701] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 165.068224][ T5701] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 165.068257][ T5701] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 165.068297][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.132653][ T5701] pl2303 3-1:1.0: required endpoints missing [ 165.132810][ T7322] netlink: 'syz.4.546': attribute type 12 has an invalid length. [ 165.156433][ T5701] pl2303 3-1:1.1: pl2303 converter detected [ 165.180396][ T5701] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 165.463392][ T7334] netlink: 'syz.2.542': attribute type 11 has an invalid length. [ 165.553436][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 165.904998][ T7352] FAULT_INJECTION: forcing a failure. [ 165.904998][ T7352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.905044][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.3.558 Not tainted syzkaller #0 PREEMPT(full) [ 165.905068][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.905085][ T7352] Call Trace: [ 165.905093][ T7352] [ 165.905102][ T7352] dump_stack_lvl+0xe8/0x150 [ 165.905138][ T7352] should_fail_ex+0x410/0x560 [ 165.905169][ T7352] _copy_from_user+0x2d/0xb0 [ 165.905199][ T7352] ___sys_sendmsg+0x1c6/0x360 [ 165.905228][ T7352] ? __lock_acquire+0x747/0x2de0 [ 165.905256][ T7352] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.905292][ T7352] ? kstrtouint+0x6e/0xe0 [ 165.905338][ T7352] ? __fget_files+0x2a/0x420 [ 165.905367][ T7352] ? __fget_files+0x3a2/0x420 [ 165.905407][ T7352] __sys_sendmmsg+0x273/0x4d0 [ 165.905442][ T7352] ? __pfx___sys_sendmmsg+0x10/0x10 [ 165.905481][ T7352] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.905524][ T7352] ? ksys_write+0x242/0x270 [ 165.905559][ T7352] ? __pfx_ksys_write+0x10/0x10 [ 165.905598][ T7352] __x64_sys_sendmmsg+0xa0/0xc0 [ 165.905630][ T7352] do_syscall_64+0x166/0x520 [ 165.905654][ T7352] ? trace_irq_disable+0x3b/0x140 [ 165.905674][ T7352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.905696][ T7352] ? clear_bhb_loop+0x70/0xc0 [ 165.905719][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.905739][ T7352] RIP: 0033:0x7fc03659e159 [ 165.905764][ T7352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.905785][ T7352] RSP: 002b:00007fc0373bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.905811][ T7352] RAX: ffffffffffffffda RBX: 00007fc036825fa0 RCX: 00007fc03659e159 [ 165.905827][ T7352] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 165.905840][ T7352] RBP: 00007fc0373bf090 R08: 0000000000000000 R09: 0000000000000000 [ 165.905852][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.905871][ T7352] R13: 00007fc036826038 R14: 00007fc036825fa0 R15: 00007fc03694fa48 [ 165.905904][ T7352] [ 165.968167][ T7354] netlink: 72 bytes leftover after parsing attributes in process `syz.0.559'. [ 166.207084][ T7357] x_tables: unsorted underflow at hook 1 [ 166.259591][ T7355] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.387595][ T4944] usb 3-1: USB disconnect, device number 11 [ 166.449328][ T4944] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 166.463054][ T4944] pl2303 3-1:1.1: device disconnected [ 166.651301][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.067209][ T7388] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 167.074219][ T7388] team0: Device ipvlan0 failed to register rx_handler [ 167.433443][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.511246][ T31] audit: type=1326 audit(1790130366.833:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.2.574" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a1f99e159 code=0x0 [ 167.545330][ T990] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 167.700249][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 167.701743][ T990] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 167.703010][ T990] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 167.703034][ T990] usb 2-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 167.703059][ T990] usb 2-1: config 0 has no interface number 0 [ 167.703086][ T990] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 167.703105][ T990] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 167.703125][ T990] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 167.703144][ T990] usb 2-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 167.703172][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.717921][ T990] usb 2-1: config 0 descriptor?? [ 167.818001][ T7392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.834816][ T990] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.912850][ T4944] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 168.040413][ T4944] usb 3-1: device descriptor read/64, error -71 [ 168.091713][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 168.281173][ T4944] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 168.299780][ T990] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 168.410715][ T4944] usb 3-1: device descriptor read/64, error -71 [ 168.418092][ T990] usb 2-1: USB disconnect, device number 19 [ 168.520834][ T4944] usb usb3-port1: attempt power cycle [ 168.555585][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 168.624438][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'. [ 168.629123][ T7406] bridge2: port 1(veth0_to_bond) entered blocking state [ 168.629229][ T7406] bridge2: port 1(veth0_to_bond) entered disabled state [ 168.629380][ T7406] veth0_to_bond: entered allmulticast mode [ 168.683774][ T7406] veth0_to_bond: entered promiscuous mode [ 168.861375][ T4944] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 168.882707][ T4944] usb 3-1: device descriptor read/8, error -71 [ 169.102271][ T7418] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 169.120520][ T4944] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 169.142735][ T4944] usb 3-1: device descriptor read/8, error -71 [ 169.144217][ T7418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.153669][ T7418] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 169.250587][ T4944] usb usb3-port1: unable to enumerate USB device [ 169.980168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.020229][ T990] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 170.174003][ T7445] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 170.174029][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 170.174044][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 170.181230][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 170.189318][ T990] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 170.226367][ T990] usb 5-1: config 0 has no interfaces? [ 170.239867][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.239886][ T990] usb 5-1: Product: syz [ 170.239897][ T990] usb 5-1: Manufacturer: syz [ 170.239907][ T990] usb 5-1: SerialNumber: syz [ 170.276407][ T990] usb 5-1: config 0 descriptor?? [ 170.550213][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 170.800182][ T990] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.207033][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 171.270457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.651569][ T7471] syzkaller0: entered promiscuous mode [ 171.651593][ T7471] syzkaller0: entered allmulticast mode [ 171.691479][ T7471] tipc: Enabled bearer , priority 0 [ 171.696604][ T7470] tipc: Resetting bearer [ 171.737663][ T7470] tipc: Disabling bearer [ 171.814122][ T1218] usb 5-1: USB disconnect, device number 21 [ 172.263762][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 172.265330][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 172.919068][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 173.693345][ T7501] x_tables: unsorted underflow at hook 1 [ 173.790327][ T4944] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.942827][ T4944] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 173.948926][ T4944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.948954][ T4944] usb 4-1: Product: syz [ 173.948970][ T4944] usb 4-1: Manufacturer: syz [ 173.948998][ T4944] usb 4-1: SerialNumber: syz [ 174.002654][ T4944] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 174.055219][ T4944] scsi host1: usb-storage 4-1:1.0 [ 174.277701][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 174.290979][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 174.317096][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.319092][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.320873][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.325349][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.342759][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.390853][ T7510] FAULT_INJECTION: forcing a failure. [ 174.390853][ T7510] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 174.390890][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT(full) [ 174.390914][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.390928][ T7510] Call Trace: [ 174.390937][ T7510] [ 174.390947][ T7510] dump_stack_lvl+0xe8/0x150 [ 174.390984][ T7510] should_fail_ex+0x410/0x560 [ 174.391017][ T7510] prepare_alloc_pages+0x223/0x600 [ 174.391047][ T7510] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 174.391077][ T7510] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.391112][ T7510] ? __pfx_policy_nodemask+0x10/0x10 [ 174.391145][ T7510] ? __lock_acquire+0x747/0x2de0 [ 174.391173][ T7510] alloc_pages_mpol+0x21e/0x390 [ 174.391208][ T7510] folio_alloc_mpol_noprof+0x39/0x160 [ 174.391249][ T7510] vma_alloc_folio_noprof+0xe1/0x1e0 [ 174.391281][ T7510] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 174.391310][ T7510] ? lock_acquire+0x115/0x350 [ 174.391337][ T7510] do_pte_missing+0x173a/0x34b0 [ 174.391374][ T7510] handle_mm_fault+0x1a53/0x3750 [ 174.391425][ T7510] ? handle_mm_fault+0xf1/0x3750 [ 174.391467][ T7510] ? __pfx_handle_mm_fault+0x10/0x10 [ 174.391493][ T7510] ? lock_vma_under_rcu+0x45a/0x500 [ 174.391524][ T7510] ? __fget_files+0x2a/0x420 [ 174.391564][ T7510] do_user_addr_fault+0xa4f/0x1340 [ 174.391610][ T7510] ? trace_page_fault_user+0x84/0x1e0 [ 174.391641][ T7510] exc_page_fault+0x6a/0xc0 [ 174.391670][ T7510] asm_exc_page_fault+0x26/0x30 [ 174.391686][ T7510] RIP: 0033:0x7fdfea25f6cb [ 174.391700][ T7510] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 174.391713][ T7510] RSP: 002b:00007fdfeb211fa0 EFLAGS: 00010206 [ 174.391743][ T7510] RAX: 0000000000000000 RBX: 00007fdfea625fa0 RCX: 0000000000000000 [ 174.391758][ T7510] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000380 [ 174.391772][ T7510] RBP: 00007fdfeb213090 R08: 0000000000000000 R09: 0000000000000000 [ 174.391785][ T7510] R10: 0000200000000380 R11: 0000000000000000 R12: 0000000000000001 [ 174.391798][ T7510] R13: 00007fdfea626038 R14: 00007fdfea625fa0 R15: 00007fdfea74fa48 [ 174.391833][ T7510] [ 174.408886][ T7510] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 174.482881][ T5701] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 174.660384][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 174.661750][ T5701] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.662922][ T5701] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.662948][ T5701] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.662969][ T5701] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.663016][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.663038][ T5701] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.663062][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.663101][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.703471][ T5701] usb 3-1: config 0 descriptor?? [ 174.829110][ T4944] ums_eneub6250 4-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 174.845827][ T4944] usb 4-1: USB disconnect, device number 12 [ 174.977537][ T5701] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 175.277065][ T1218] usb 3-1: USB disconnect, device number 16 [ 175.298316][ T1218] usblp0: removed [ 175.415772][ T7536] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [3c!=40, 4,0] [ 175.766316][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.769430][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.769582][ T7516] bridge_slave_0: entered allmulticast mode [ 175.797125][ T7516] bridge_slave_0: entered promiscuous mode [ 175.820250][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.820366][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.820482][ T7516] bridge_slave_1: entered allmulticast mode [ 175.823432][ T7516] bridge_slave_1: entered promiscuous mode [ 175.972360][ T7548] fuse: Unknown parameter 'rJ!ootmode' [ 176.018470][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.036289][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.173927][ T7516] team0: Port device team_slave_0 added [ 176.195846][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 176.196873][ T7516] team0: Port device team_slave_1 added [ 176.198669][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 176.355314][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.355333][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.355362][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.395621][ T5619] Bluetooth: hci2: command tx timeout [ 176.433608][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.433627][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.433654][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.507991][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'. [ 176.577414][ T7563] veth0_to_bond: left allmulticast mode [ 176.577440][ T7563] veth0_to_bond: left promiscuous mode [ 176.577690][ T7563] bridge2: port 1(veth0_to_bond) entered disabled state [ 176.602350][ T7563] bridge3: port 1(veth0_to_bond) entered blocking state [ 176.602600][ T7563] bridge3: port 1(veth0_to_bond) entered disabled state [ 176.602697][ T7563] veth0_to_bond: entered allmulticast mode [ 176.604890][ T7563] veth0_to_bond: entered promiscuous mode [ 176.839948][ T7516] hsr_slave_0: entered promiscuous mode [ 176.846903][ T7516] hsr_slave_1: entered promiscuous mode [ 176.849307][ T7516] debugfs: 'hsr0' already exists in 'hsr' [ 176.849331][ T7516] Cannot create hsr debugfs directory [ 177.030727][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.083870][ T7574] sock: sock_set_timeout: `syz.2.634' (pid 7574) tries to set negative timeout [ 177.131874][ T4944] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 177.291279][ T4944] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 177.292590][ T4944] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 177.292633][ T4944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.511227][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 177.511252][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 177.585578][ T4944] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -71 [ 177.607420][ T4944] usb 4-1: USB disconnect, device number 13 [ 177.854885][ T7516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.854926][ T7516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.011268][ T7516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.011305][ T7516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.220490][ T7594] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 178.242000][ T7516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.242027][ T7516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.310358][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.310833][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 178.366642][ T7594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.367617][ T7595] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 178.389064][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 178.448648][ T7516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.448685][ T7516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.470847][ T5619] Bluetooth: hci2: command tx timeout [ 178.750589][ T7516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.770841][ T7516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.771692][ T7516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.779639][ T7516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.098508][ T7516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.114932][ T7516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.115749][ T7516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.139470][ T7516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.203743][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.204048][ T7614] bridge0: port 2(bridge_slave_1) entered listening state [ 179.204344][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.204487][ T7614] bridge0: port 1(bridge_slave_0) entered listening state [ 179.507459][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.549905][ T7516] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.565927][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.566011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.615602][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.615710][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.779596][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.829342][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 179.943872][ T7516] veth0_vlan: entered promiscuous mode [ 179.965377][ T7516] veth1_vlan: entered promiscuous mode [ 180.063072][ T7516] veth0_macvtap: entered promiscuous mode [ 180.068081][ T7516] veth1_macvtap: entered promiscuous mode [ 180.128087][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.155694][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.263320][ T88] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.263747][ T88] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.292206][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.293866][ T88] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.386951][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 180.446138][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.446178][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.550740][ T5619] Bluetooth: hci2: command tx timeout [ 180.623049][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.623070][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.623806][ T7652] x_tables: duplicate underflow at hook 1 [ 180.780388][ T30] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 180.951098][ T30] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 180.952425][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.952454][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.952492][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.002998][ T30] usb 3-1: config 0 descriptor?? [ 181.243134][ T7670] syzkaller0: entered promiscuous mode [ 181.243158][ T7670] syzkaller0: entered allmulticast mode [ 181.264799][ T7670] tipc: Enabled bearer , priority 0 [ 181.269255][ T7669] tipc: Resetting bearer [ 181.323463][ T7669] tipc: Disabling bearer [ 181.428706][ T30] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.428745][ T30] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.428771][ T30] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.428796][ T30] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.428837][ T30] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.428864][ T30] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.428890][ T30] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.485432][ T30] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 181.616668][ T7655] futex_wake_op: syz.2.658 tries to shift op by 32; fix this program [ 181.617641][ T30] cp2112 0003:10C4:EA90.0003: error requesting version [ 181.647353][ T30] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 182.003583][ T5710] usb 3-1: USB disconnect, device number 17 [ 182.378625][ T13] IPVS: starting estimator thread 0... [ 182.460261][ T7710] IPVS: using max 27 ests per chain, 64800 per kthread [ 182.631214][ T5619] Bluetooth: hci2: command tx timeout [ 183.235097][ T7742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.235277][ T7742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.235372][ T7742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.437485][ T7741] AppArmor: change_hat: Invalid input '' [ 183.453631][ T31] audit: type=1326 audit(1790130382.773:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.491943][ T31] audit: type=1326 audit(1790130382.803:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.491999][ T31] audit: type=1326 audit(1790130382.803:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.492045][ T31] audit: type=1326 audit(1790130382.813:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.513603][ T31] audit: type=1326 audit(1790130382.813:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.513863][ T31] audit: type=1326 audit(1790130382.813:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.513977][ T31] audit: type=1326 audit(1790130382.813:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.514090][ T31] audit: type=1326 audit(1790130382.823:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.514205][ T31] audit: type=1326 audit(1790130382.823:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 183.514321][ T31] audit: type=1326 audit(1790130382.823:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.1.684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x7ffc0000 [ 184.492632][ T7773] netlink: 'syz.2.694': attribute type 11 has an invalid length. [ 184.650325][ T7778] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 184.798412][ T7778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.798972][ T7783] bond4: option tlb_dynamic_lb: unable to set because the bond device is up [ 184.831749][ T7785] syzkaller0: entered promiscuous mode [ 184.831765][ T7785] syzkaller0: entered allmulticast mode [ 184.842112][ T5710] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 184.990449][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 185.006435][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.006486][ T5710] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b [ 185.008127][ T5710] usb 5-1: config 14 has an invalid interface number: 226 but max is 0 [ 185.008163][ T5710] usb 5-1: config 14 has no interface number 0 [ 185.008203][ T5710] usb 5-1: config 14 interface 226 has no altsetting 0 [ 185.009347][ T5710] usb 5-1: language id specifier not provided by device, defaulting to English [ 185.060963][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.060993][ T5710] usb 5-1: Product: syz [ 185.061008][ T5710] usb 5-1: Manufacturer: 檮㙣꣒⪅暓衋汦﭅￸㈙峄˴柝吢㗳鋇䴡垦Ⅲ傀ᤌ良㐮釥炓᪎䱜乄홏쳸㥎ؾ隃ָ器헔萺폋톤窶庸䮻 [ 185.061032][ T5710] usb 5-1: SerialNumber: syz [ 185.328453][ T5710] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 185.366978][ T5710] usb 5-1: USB disconnect, device number 22 [ 185.408769][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 185.560257][ T30] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 185.607142][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 185.712112][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 185.712865][ T30] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ad.d0 [ 185.746690][ T30] usb 3-1: config 7 has an invalid interface number: 3 but max is 0 [ 185.746710][ T30] usb 3-1: config 7 has no interface number 0 [ 185.746739][ T30] usb 3-1: config 7 interface 3 has no altsetting 0 [ 185.780378][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.780491][ T30] usb 3-1: Product: syz [ 185.780503][ T30] usb 3-1: Manufacturer: syz [ 185.780513][ T30] usb 3-1: SerialNumber: syz [ 186.636401][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.771911][ T30] catc 3-1:7.3: Can't set altsetting 1. [ 186.771973][ T30] catc 3-1:7.3: probe with driver catc failed with error -5 [ 186.818904][ T30] usb 3-1: USB disconnect, device number 18 [ 187.032353][ T7827] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.083540][ T7828] syzkaller0: entered promiscuous mode [ 187.083558][ T7828] syzkaller0: entered allmulticast mode [ 187.116951][ T7817] tipc: Enabled bearer , priority 0 [ 187.150975][ T7816] tipc: Resetting bearer [ 187.184158][ T7830] fuse: Unknown parameter 'rotmode000000uier_id' [ 187.230363][ T4944] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.248565][ T7830] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 187.248592][ T7830] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.270908][ T7830] vhci_hcd vhci_hcd.0: Device attached [ 187.283470][ T7833] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 187.283543][ T7833] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.283680][ T7833] vhci_hcd vhci_hcd.0: Device attached [ 187.328186][ T7830] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 187.328212][ T7830] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.328260][ T7830] vhci_hcd vhci_hcd.0: Device attached [ 187.330176][ T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 187.364119][ T4944] usb 1-1: device descriptor read/64, error -71 [ 187.403350][ T7830] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 187.403379][ T7830] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.404757][ T7816] tipc: Disabling bearer [ 187.405972][ T7830] vhci_hcd vhci_hcd.0: Device attached [ 187.417477][ T7833] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 187.417503][ T7833] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.417575][ T7833] vhci_hcd vhci_hcd.0: Device attached [ 187.482612][ T30] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 187.489040][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.510183][ T5694] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 187.530205][ T7833] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(18) [ 187.530233][ T7833] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.530346][ T7833] vhci_hcd vhci_hcd.0: Device attached [ 187.545815][ T7830] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 187.545887][ T7830] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.546153][ T7830] vhci_hcd vhci_hcd.0: Device attached [ 187.590920][ T30] usb 3-1: config 0 descriptor?? [ 187.595282][ T30] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 187.620186][ T7848] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(20) [ 187.620219][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 187.621095][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 187.650927][ T4944] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 187.800579][ T4944] usb 1-1: device descriptor read/64, error -71 [ 187.803830][ T30] gp8psk: usb in 128 operation failed. [ 187.822046][ T30] gp8psk: usb in 137 operation failed. [ 187.822068][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.839856][ T30] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 187.839899][ T30] usb 3-1: media controller created [ 187.880555][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.913084][ T4944] usb usb1-port1: attempt power cycle [ 187.930216][ T30] gp8psk_fe: Frontend attached [ 187.930282][ T30] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 187.930778][ T30] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 188.041918][ T30] gp8psk: usb in 138 operation failed. [ 188.041938][ T30] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 188.041947][ T30] gp8psk: found Genpix USB device pID = 203 (hex) [ 188.046274][ T30] usb 3-1: USB disconnect, device number 19 [ 188.075467][ T7853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.713'. [ 188.122742][ T7845] vhci_hcd: connection closed [ 188.122911][ T7849] vhci_hcd: connection closed [ 188.124354][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.124773][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.129277][ T7841] vhci_hcd: connection closed [ 188.129834][ T7838] vhci_hcd: connection closed [ 188.129884][ T7836] vhci_hcd: connection closed [ 188.134962][ T7834] vhci_hcd: connection closed [ 188.135076][ T7831] vhci_hcd: connection reset by peer [ 188.137491][ T7844] vhci_hcd: connection closed [ 188.197042][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.199070][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.199087][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.199127][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.199549][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.199565][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.199604][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.253175][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.253200][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.253244][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.253778][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.253795][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.253835][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.293576][ T4944] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.293900][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.293918][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.293973][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.297520][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.297537][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.297583][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.310681][ T6369] vhci_hcd vhci_hcd.4: stop threads [ 188.310729][ T6369] vhci_hcd vhci_hcd.4: release socket [ 188.310863][ T6369] vhci_hcd vhci_hcd.4: disconnect device [ 188.325059][ T4944] usb 1-1: device descriptor read/8, error -71 [ 188.383393][ T30] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 188.478487][ T7855] tmpfs: Unknown parameter ',2`RA r7SA' [ 188.561235][ T4944] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 188.593454][ T4944] usb 1-1: device descriptor read/8, error -71 [ 188.700457][ T4944] usb usb1-port1: unable to enumerate USB device [ 188.760755][ T7861] tipc: Cannot configure node identity twice [ 189.001506][ T5701] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 189.161776][ T5701] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 189.163097][ T5701] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 189.165811][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.165835][ T5701] usb 4-1: Product: syz [ 189.165850][ T5701] usb 4-1: Manufacturer: syz [ 189.165865][ T5701] usb 4-1: SerialNumber: syz [ 189.563900][ T5701] usb 4-1: selecting invalid altsetting 1 [ 189.599033][ T5701] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 189.599166][ T5701] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 189.631344][ T5701] usb 4-1: USB disconnect, device number 14 [ 190.304224][ T7882] syzkaller0: entered promiscuous mode [ 190.304242][ T7882] syzkaller0: entered allmulticast mode [ 190.385083][ T7882] tipc: Enabled bearer , priority 0 [ 190.423694][ T7878] tipc: Resetting bearer [ 190.594123][ T30] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 190.597411][ T7878] tipc: Disabling bearer [ 190.740380][ T5701] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 190.750398][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 190.753097][ T30] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 190.775614][ T30] usb 1-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 190.775648][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 39284, setting to 64 [ 190.775666][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.825211][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.825232][ T30] usb 1-1: Product: syz [ 190.825243][ T30] usb 1-1: Manufacturer: syz [ 190.825261][ T30] usb 1-1: SerialNumber: syz [ 190.875814][ T30] usb 1-1: config 0 descriptor?? [ 190.890744][ T5701] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 190.895981][ T30] mcba_usb 1-1:0.0: Can't find endpoints [ 190.909336][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.909360][ T5701] usb 5-1: Product: syz [ 190.909376][ T5701] usb 5-1: Manufacturer: syz [ 190.909385][ T5701] usb 5-1: SerialNumber: syz [ 191.097675][ T5710] usb 1-1: USB disconnect, device number 19 [ 191.177068][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.730'. [ 191.291095][ T7895] loop3: detected capacity change from 0 to 36 [ 191.351276][ T7896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.455537][ T5701] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 191.455579][ T5701] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 191.621316][ T7889] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 191.673248][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 191.815440][ T7889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.885277][ T7889] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 191.960925][ T5701] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 191.960995][ T5701] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.003238][ T5701] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.032365][ T5701] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 192.054070][ T5701] usb 5-1: USB disconnect, device number 23 [ 192.097646][ T7904] veth0_to_bond: left allmulticast mode [ 192.097668][ T7904] veth0_to_bond: left promiscuous mode [ 192.097853][ T7904] bridge3: port 1(veth0_to_bond) entered disabled state [ 192.131568][ T7904] bridge4: port 1(veth0_to_bond) entered blocking state [ 192.131677][ T7904] bridge4: port 1(veth0_to_bond) entered disabled state [ 192.131815][ T7904] veth0_to_bond: entered allmulticast mode [ 192.134757][ T7904] veth0_to_bond: entered promiscuous mode [ 192.630706][ T5694] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 193.272333][ T5710] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 193.300111][ T4944] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.420402][ T5710] usb 5-1: device descriptor read/64, error -71 [ 193.460905][ T4944] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 193.462060][ T4944] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 193.462119][ T4944] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.467531][ T4944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.467558][ T4944] usb 1-1: Product: syz [ 193.467568][ T4944] usb 1-1: Manufacturer: syz [ 193.467577][ T4944] usb 1-1: SerialNumber: syz [ 193.535995][ T4944] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 193.690088][ T5710] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 193.820221][ T5710] usb 5-1: device descriptor read/64, error -71 [ 193.931500][ T5710] usb usb5-port1: attempt power cycle [ 193.971448][ T990] usb usb42-port8: attempt power cycle [ 194.245124][ T4944] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 194.281949][ T5710] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 194.306158][ T5710] usb 5-1: device descriptor read/8, error -71 [ 194.311242][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.320070][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.320129][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.403059][ T7936] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 194.403088][ T7936] ipvlan0: entered allmulticast mode [ 194.403099][ T7936] veth0_vlan: entered allmulticast mode [ 194.405300][ T4944] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 194.445588][ T7936] team0: Device ipvlan0 failed to register rx_handler [ 194.474197][ T4944] usb 1-1: USB disconnect, device number 20 [ 194.561675][ T5710] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 194.567713][ T990] usb usb42-port8: unable to enumerate USB device [ 194.589257][ T5710] usb 5-1: device descriptor read/8, error -71 [ 194.637543][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.691544][ T5710] usb usb5-port1: unable to enumerate USB device [ 194.810483][ T7939] tmpfs: Unknown parameter ',2`RA r7SA' [ 195.086731][ T5710] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 195.230803][ T5710] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 195.232153][ T5710] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 195.232184][ T5710] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 195.232210][ T5710] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.232236][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.232268][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.431611][ T5710] usb 3-1: config 0 descriptor?? [ 195.432512][ T7942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 195.730122][ T5677] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 195.885417][ T5677] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 195.887996][ T5677] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.888039][ T5677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 195.888066][ T5677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 195.899627][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.899690][ T5677] usb 1-1: Product: syz [ 195.899727][ T5677] usb 1-1: Manufacturer: syz [ 195.899765][ T5677] usb 1-1: SerialNumber: syz [ 195.975798][ T5677] usb 1-1: config 0 descriptor?? [ 195.992451][ T5710] hid-multitouch 0003:0EEF:72C4.0004: item 0 1 0 9 parsing failed [ 195.993398][ T5710] hid-multitouch 0003:0EEF:72C4.0004: probe with driver hid-multitouch failed with error -22 [ 196.002670][ T5694] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 196.115569][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 196.164081][ T5694] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 196.168876][ T5694] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 196.168903][ T5694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.168949][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.227032][ T5694] usb 4-1: config 0 descriptor?? [ 196.230370][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.265246][ T7958] syzkaller0: entered promiscuous mode [ 196.265266][ T5677] powermate: unknown product id 0240 [ 196.265268][ T7958] syzkaller0: entered allmulticast mode [ 196.265279][ T5677] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 196.265511][ T5677] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 196.268129][ T7958] tipc: Started in network mode [ 196.268157][ T7958] tipc: Node identity c6d00af794e7, cluster identity 4711 [ 196.315611][ T7958] tipc: Enabled bearer , priority 0 [ 196.333275][ T7957] tipc: Resetting bearer [ 196.348435][ T5677] usb 1-1: USB disconnect, device number 21 [ 196.416988][ T7957] tipc: Disabling bearer [ 196.441857][ T990] usb 4-1: USB disconnect, device number 15 [ 196.780315][ T5710] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 196.928424][ T7971] tmpfs: Unknown parameter ',2`RA r7SA' [ 197.148028][ T30] usb 3-1: USB disconnect, device number 20 [ 197.705456][ T7983] nvme nvme0: rdma_resolve_addr failed (-19). [ 197.852847][ T7991] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 198.099144][ T7995] syzkaller0: entered promiscuous mode [ 198.099162][ T7995] syzkaller0: entered allmulticast mode [ 198.142630][ T7995] tipc: Enabled bearer , priority 0 [ 198.162736][ T7994] tipc: Resetting bearer [ 198.245717][ T7994] tipc: Disabling bearer [ 198.509879][ T8004] tmpfs: Unknown parameter ',2`RA r7SA' [ 198.600205][ T30] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 198.762020][ T30] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 198.781740][ T8014] netlink: 'syz.3.772': attribute type 11 has an invalid length. [ 198.788355][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.788380][ T30] usb 3-1: Product: syz [ 198.788394][ T30] usb 3-1: Manufacturer: syz [ 198.788408][ T30] usb 3-1: SerialNumber: syz [ 198.821867][ T30] usb 3-1: config 0 descriptor?? [ 199.054230][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 199.088543][ T30] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 021 [ 199.141230][ T5677] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 199.224964][ T8021] x_tables: unsorted underflow at hook 1 [ 199.301568][ T5677] usb 1-1: Using ep0 maxpacket: 8 [ 199.302855][ T5677] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 199.305987][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.306010][ T5677] usb 1-1: Product: syz [ 199.306025][ T5677] usb 1-1: Manufacturer: syz [ 199.306040][ T5677] usb 1-1: SerialNumber: syz [ 199.351918][ T5677] usb 1-1: config 0 descriptor?? [ 199.370589][ T5677] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 199.538715][ T8034] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 199.626950][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 199.667243][ T8028] kvm [8027]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 199.703804][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.705686][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.768674][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 199.994171][ T8047] netlink: 72 bytes leftover after parsing attributes in process `syz.4.783'. [ 199.994201][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 199.994212][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 200.220268][ T8053] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 200.295588][ T1218] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.335686][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.440263][ T1218] usb 2-1: Using ep0 maxpacket: 8 [ 200.441170][ T1218] usb 2-1: New USB device found, idVendor=06cd, idProduct=0004, bcdDevice=92.d4 [ 200.442590][ T1218] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 200.442618][ T1218] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 200.442642][ T1218] usb 2-1: config 0 has no interface number 0 [ 200.442710][ T1218] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 200.442738][ T1218] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x84 has invalid maxpacket 49317, setting to 1024 [ 200.442767][ T1218] usb 2-1: config 0 interface 21 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 200.444179][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 200.444204][ T1218] usb 2-1: Product: syz [ 200.454872][ T1218] usb 2-1: config 0 descriptor?? [ 200.455909][ T8049] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 200.816960][ T8064] syzkaller0: entered promiscuous mode [ 200.816984][ T8064] syzkaller0: entered allmulticast mode [ 200.834409][ T8064] tipc: Enabled bearer , priority 0 [ 200.844144][ T8063] tipc: Resetting bearer [ 200.911613][ T8063] tipc: Disabling bearer [ 201.682035][ T8037] i2c i2c-1: failure sending STOP [ 201.721539][ T1218] usb 3-1: USB disconnect, device number 21 [ 201.872731][ T8010] fuse: Unknown parameter '_Gp4ob' [ 201.901978][ T5677] gspca_sonixj: reg_w1 err -71 [ 201.941313][ T5677] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 201.949874][ T5677] usb 1-1: USB disconnect, device number 22 [ 202.023368][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 202.412310][ T5615] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 202.570389][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 202.573035][ T5615] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 202.574505][ T5615] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 202.574529][ T5615] usb 5-1: config 2 has no interface number 0 [ 202.574568][ T5615] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 202.574594][ T5615] usb 5-1: config 2 interface 88 has no altsetting 0 [ 202.579282][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.579306][ T5615] usb 5-1: Product: syz [ 202.579320][ T5615] usb 5-1: Manufacturer: syz [ 202.579335][ T5615] usb 5-1: SerialNumber: syz [ 202.662855][ T8086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.887753][ T8086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.110749][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.111611][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.113598][ T5615] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 203.113829][ T5615] asix 5-1:2.88: probe with driver asix failed with error -71 [ 203.168161][ T5615] usb 5-1: USB disconnect, device number 28 [ 203.215001][ T30] usb 2-1: USB disconnect, device number 21 [ 203.740288][ T30] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.890133][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 203.892795][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.892833][ T30] usb 2-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 203.898935][ T30] usb 2-1: config 1 has an invalid interface number: 237 but max is 0 [ 203.898957][ T30] usb 2-1: config 1 has no interface number 0 [ 203.899002][ T30] usb 2-1: config 1 interface 237 has no altsetting 0 [ 203.960925][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.960954][ T30] usb 2-1: Product: syz [ 203.960970][ T30] usb 2-1: Manufacturer: syz [ 203.960994][ T30] usb 2-1: SerialNumber: syz [ 204.716897][ T8119] netlink: 'syz.0.809': attribute type 11 has an invalid length. [ 204.960330][ T30] ipaq 2-1:1.237: PocketPC PDA converter detected [ 204.961652][ T30] ipaq 2-1:1.237: probe with driver ipaq failed with error -71 [ 205.003143][ T30] usb 2-1: USB disconnect, device number 22 [ 205.102255][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.102393][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.102495][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.102594][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.102692][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.102790][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.102888][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.102985][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.103095][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341228][ T8126] net_ratelimit: 641 callbacks suppressed [ 205.341247][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341321][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341433][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341526][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341621][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341720][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341785][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341879][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.341945][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.342007][ T8126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.487789][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 205.487810][ T31] audit: type=1326 audit(1790130404.803:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.4.812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4de79e159 code=0x0 [ 205.641295][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 205.803503][ T8135] syzkaller0: entered promiscuous mode [ 205.803528][ T8135] syzkaller0: entered allmulticast mode [ 205.828918][ T8135] tipc: Enabled bearer , priority 10 [ 205.845350][ T8132] tipc: Resetting bearer [ 205.947575][ T8132] tipc: Disabling bearer [ 205.949435][ T8139] loop3: detected capacity change from 0 to 7 [ 205.963623][ T8139] Dev loop3: unable to read RDB block 7 [ 205.963669][ T8139] loop3: unable to read partition table [ 205.963893][ T8139] loop3: partition table beyond EOD, truncated [ 205.963912][ T8139] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 206.721578][ T990] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 206.840378][ T5677] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.880616][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 206.881557][ T990] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 206.885372][ T990] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 206.885389][ T990] usb 1-1: config 1 has no interface number 0 [ 206.885416][ T990] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 206.885433][ T990] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 206.885449][ T990] usb 1-1: config 1 interface 105 has no altsetting 0 [ 206.891862][ T990] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 206.891923][ T990] usb 1-1: Product: syz [ 206.891964][ T990] usb 1-1: Manufacturer: syz [ 206.892005][ T990] usb 1-1: SerialNumber: syz [ 206.893367][ T5710] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 206.924670][ T8151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.925159][ T8151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.994520][ T5677] usb 3-1: Using ep0 maxpacket: 16 [ 207.002470][ T5677] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.002522][ T5677] usb 3-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 207.003533][ T5677] usb 3-1: config 1 has an invalid interface number: 237 but max is 0 [ 207.003557][ T5677] usb 3-1: config 1 has no interface number 0 [ 207.003600][ T5677] usb 3-1: config 1 interface 237 has no altsetting 0 [ 207.008421][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.008444][ T5677] usb 3-1: Product: syz [ 207.008459][ T5677] usb 3-1: Manufacturer: syz [ 207.008473][ T5677] usb 3-1: SerialNumber: syz [ 207.069246][ T5710] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.085268][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.085303][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.085326][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.085404][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.145678][ T5710] usb 2-1: config 0 descriptor?? [ 207.382654][ T8151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.382777][ T8151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.698378][ T5710] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 207.757749][ T5677] ipaq 3-1:1.237: PocketPC PDA converter detected [ 207.767614][ T5677] ipaq 3-1:1.237: probe with driver ipaq failed with error -71 [ 207.795745][ T31] audit: type=1326 audit(1790130407.113:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.795799][ T31] audit: type=1326 audit(1790130407.113:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.795842][ T31] audit: type=1326 audit(1790130407.113:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.797354][ T31] audit: type=1326 audit(1790130407.113:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.797389][ T31] audit: type=1326 audit(1790130407.113:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.797419][ T31] audit: type=1326 audit(1790130407.113:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.797447][ T31] audit: type=1326 audit(1790130407.113:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.805018][ T31] audit: type=1326 audit(1790130407.123:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.805209][ T31] audit: type=1326 audit(1790130407.123:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.0.822" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf9b9e159 code=0x7ffc0000 [ 207.836879][ T990] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 207.907083][ T5677] usb 3-1: USB disconnect, device number 22 [ 208.014883][ T30] usb 2-1: USB disconnect, device number 23 [ 208.159557][ T990] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 208.198758][ T990] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 208.225705][ T990] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 02:3d:30:ab:f2:7a [ 208.229209][ T990] usb 1-1: USB disconnect, device number 23 [ 208.253522][ T990] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 208.320954][ T8171] fido_id[8171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.441586][ T990] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 208.441717][ T990] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 208.441842][ T990] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 208.575754][ T8176] input: syz0 as /devices/virtual/input/input16 [ 208.818254][ T8182] tmpfs: Unknown parameter ',2`RA r7SA' [ 208.850275][ T5677] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.000099][ T5677] usb 4-1: Using ep0 maxpacket: 16 [ 209.000788][ T5677] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 209.005214][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.005239][ T5677] usb 4-1: Product: syz [ 209.005254][ T5677] usb 4-1: Manufacturer: syz [ 209.005269][ T5677] usb 4-1: SerialNumber: syz [ 209.008289][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 209.008310][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 209.015508][ T5677] usb 4-1: config 0 descriptor?? [ 209.210160][ T990] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 209.291554][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 209.319568][ T8202] veth0_to_bond: left allmulticast mode [ 209.319618][ T8202] veth0_to_bond: left promiscuous mode [ 209.319800][ T8202] bridge1: port 1(veth0_to_bond) entered disabled state [ 209.340993][ T8202] bridge2: port 1(veth0_to_bond) entered blocking state [ 209.341100][ T8202] bridge2: port 1(veth0_to_bond) entered disabled state [ 209.341187][ T8202] veth0_to_bond: entered allmulticast mode [ 209.342591][ T8202] veth0_to_bond: entered promiscuous mode [ 209.343922][ T8202] bridge2: port 1(veth0_to_bond) entered blocking state [ 209.344231][ T8202] bridge2: port 1(veth0_to_bond) entered forwarding state [ 209.390858][ T990] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 209.391932][ T990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 209.391962][ T990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 209.391996][ T990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 209.396218][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.396241][ T990] usb 5-1: Product: syz [ 209.396257][ T990] usb 5-1: Manufacturer: syz [ 209.396271][ T990] usb 5-1: SerialNumber: syz [ 209.411584][ T30] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 209.432834][ T990] usb 5-1: config 0 descriptor?? [ 209.443446][ T8188] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 209.443582][ T8188] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 209.453749][ T5677] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 209.516966][ T990] usb 5-1: ucan: probing device on interface #0 [ 209.518547][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.525708][ T5677] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 209.525837][ T5677] usb 4-1: media controller created [ 209.560181][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 209.565962][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 209.566010][ T30] usb 1-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 209.567227][ T30] usb 1-1: config 1 has an invalid interface number: 237 but max is 0 [ 209.567253][ T30] usb 1-1: config 1 has no interface number 0 [ 209.567307][ T30] usb 1-1: config 1 interface 237 has no altsetting 0 [ 209.569657][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.569680][ T30] usb 1-1: Product: syz [ 209.569695][ T30] usb 1-1: Manufacturer: syz [ 209.569709][ T30] usb 1-1: SerialNumber: syz [ 209.578893][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.656828][ T8176] dtv5100: wlen = 0, aborting. [ 209.680051][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 209.680737][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 209.931034][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.956004][ T5677] zl10353_read_register: readreg error (reg=127, ret==0) [ 209.956063][ T5677] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 209.956130][ T5677] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 209.995774][ T5677] usb 4-1: USB disconnect, device number 16 [ 210.096422][ T990] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 210.218572][ T5677] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 210.326256][ T990] usb 5-1: USB disconnect, device number 29 [ 210.497444][ T30] ipaq 1-1:1.237: PocketPC PDA converter detected [ 210.499494][ T30] ipaq 1-1:1.237: probe with driver ipaq failed with error -71 [ 210.521257][ T30] usb 1-1: USB disconnect, device number 24 [ 210.821088][ T13] IPVS: starting estimator thread 0... [ 210.910323][ T8227] IPVS: using max 31 ests per chain, 74400 per kthread [ 211.113823][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 211.319303][ T8248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.357379][ T8249] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 211.465486][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 211.465507][ T31] audit: type=1326 audit(1790130410.783:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.1.853" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfea39e159 code=0x0 [ 211.580970][ T8258] net_ratelimit: 367 callbacks suppressed [ 211.580985][ T8258] ip_tables: iptables: counters copy to user failed while replacing table [ 211.836800][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 211.926407][ T8237] syz.4.848 (8237): drop_caches: 2 [ 212.137915][ T8275] FAULT_INJECTION: forcing a failure. [ 212.137915][ T8275] name failslab, interval 1, probability 0, space 0, times 1 [ 212.137947][ T8275] CPU: 0 UID: 0 PID: 8275 Comm: syz.4.858 Not tainted syzkaller #0 PREEMPT(full) [ 212.137969][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.137982][ T8275] Call Trace: [ 212.137990][ T8275] [ 212.137998][ T8275] dump_stack_lvl+0xe8/0x150 [ 212.138031][ T8275] should_fail_ex+0x410/0x560 [ 212.138058][ T8275] should_failslab+0xa8/0x100 [ 212.138083][ T8275] __kmalloc_noprof+0xfe/0x720 [ 212.138102][ T8275] ? tomoyo_encode+0x2ad/0x570 [ 212.138125][ T8275] ? tomoyo_encode+0x2ad/0x570 [ 212.138155][ T8275] tomoyo_encode+0x2ad/0x570 [ 212.138185][ T8275] tomoyo_realpath_from_path+0x5fa/0x640 [ 212.138222][ T8275] ? tomoyo_path_number_perm+0x219/0x5f0 [ 212.138246][ T8275] tomoyo_path_number_perm+0x246/0x5f0 [ 212.138271][ T8275] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.138294][ T8275] ? __lock_acquire+0x747/0x2de0 [ 212.138331][ T8275] ? hook_file_ioctl+0x1f2/0x600 [ 212.138374][ T8275] ? __fget_files+0x2a/0x420 [ 212.138413][ T8275] ? __fget_files+0x2a/0x420 [ 212.138439][ T8275] ? __fget_files+0x3a2/0x420 [ 212.138466][ T8275] ? __fget_files+0x2a/0x420 [ 212.138498][ T8275] security_file_ioctl+0xc3/0x2a0 [ 212.138523][ T8275] __se_sys_ioctl+0x47/0x170 [ 212.138547][ T8275] do_syscall_64+0x166/0x520 [ 212.138572][ T8275] ? trace_irq_disable+0x3b/0x140 [ 212.138592][ T8275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.138613][ T8275] ? clear_bhb_loop+0x70/0xc0 [ 212.138638][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.138658][ T8275] RIP: 0033:0x7fe4de79e159 [ 212.138678][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.138695][ T8275] RSP: 002b:00007fe4df5ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.138718][ T8275] RAX: ffffffffffffffda RBX: 00007fe4dea25fa0 RCX: 00007fe4de79e159 [ 212.138733][ T8275] RDX: 0000200000000180 RSI: 00000000000007b0 RDI: 0000000000000005 [ 212.138747][ T8275] RBP: 00007fe4df5ab090 R08: 0000000000000000 R09: 0000000000000000 [ 212.138773][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.138785][ T8275] R13: 00007fe4dea26038 R14: 00007fe4dea25fa0 R15: 00007fe4deb4fa48 [ 212.138817][ T8275] [ 212.155828][ T8275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.177299][ T8275] tmpfs: Unknown parameter ',2`RA r7SA' [ 212.794302][ T8290] netlink: 52 bytes leftover after parsing attributes in process `syz.2.865'. [ 212.879546][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 212.879570][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 212.911310][ T30] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 213.066549][ T30] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 213.086395][ T30] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 213.086414][ T30] usb 2-1: Product: syz [ 213.086424][ T30] usb 2-1: SerialNumber: syz [ 213.126213][ T30] usb 2-1: config 0 descriptor?? [ 213.210238][ T8309] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 213.281599][ T8309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 213.336958][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.337635][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.361266][ T1218] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 213.418869][ T30] usb 2-1: USB disconnect, device number 24 [ 213.517016][ T1218] usb 1-1: Using ep0 maxpacket: 8 [ 213.536528][ T1218] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.536571][ T1218] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 213.541977][ T1218] usb 1-1: config 4 interface 0 has no altsetting 0 [ 213.582881][ T1218] usb 1-1: string descriptor 0 read error: -22 [ 213.582972][ T1218] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 213.651423][ T1218] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 213.685634][ T8319] x_tables: unsorted underflow at hook 1 [ 213.712229][ T1218] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 213.713805][ T1218] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 213.714090][ T1218] usb 1-1: media controller created [ 213.822337][ T1218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.285718][ T8296] kvm: pic: single mode not supported [ 214.494988][ T1218] usb 1-1: USB disconnect, device number 25 [ 215.139933][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 215.149506][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 215.441219][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.800678][ T5615] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 215.950471][ T5615] usb 5-1: device descriptor read/64, error -71 [ 216.200077][ T5615] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 216.230681][ T990] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 216.331326][ T5615] usb 5-1: device descriptor read/64, error -71 [ 216.360387][ T990] usb 2-1: device descriptor read/64, error -71 [ 216.367113][ T8376] FAULT_INJECTION: forcing a failure. [ 216.367113][ T8376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.367144][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.2.890 Not tainted syzkaller #0 PREEMPT(full) [ 216.367167][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.367180][ T8376] Call Trace: [ 216.367188][ T8376] [ 216.367196][ T8376] dump_stack_lvl+0xe8/0x150 [ 216.367232][ T8376] should_fail_ex+0x410/0x560 [ 216.367260][ T8376] _copy_from_user+0x2d/0xb0 [ 216.367290][ T8376] vmci_host_unlocked_ioctl+0xa50/0x2850 [ 216.367331][ T8376] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 216.367389][ T8376] ? kasan_quarantine_put+0xbb/0x1f0 [ 216.367422][ T8376] ? tomoyo_path_number_perm+0x219/0x5f0 [ 216.367449][ T8376] ? tomoyo_path_number_perm+0x219/0x5f0 [ 216.367487][ T8376] ? do_vfs_ioctl+0x116f/0x1530 [ 216.367514][ T8376] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 216.367550][ T8376] ? hook_file_ioctl+0x1f2/0x600 [ 216.367596][ T8376] ? __fget_files+0x2a/0x420 [ 216.367629][ T8376] ? __fget_files+0x2a/0x420 [ 216.367667][ T8376] ? __fget_files+0x3a2/0x420 [ 216.367693][ T8376] ? __fget_files+0x2a/0x420 [ 216.367723][ T8376] ? bpf_lsm_file_ioctl+0x9/0x20 [ 216.367752][ T8376] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 216.367785][ T8376] __se_sys_ioctl+0xfc/0x170 [ 216.367809][ T8376] do_syscall_64+0x166/0x520 [ 216.367833][ T8376] ? trace_irq_disable+0x3b/0x140 [ 216.367854][ T8376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.367875][ T8376] ? clear_bhb_loop+0x70/0xc0 [ 216.367898][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.367918][ T8376] RIP: 0033:0x7f2a1f99e159 [ 216.367937][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.367954][ T8376] RSP: 002b:00007f2a208c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.367977][ T8376] RAX: ffffffffffffffda RBX: 00007f2a1fc25fa0 RCX: 00007f2a1f99e159 [ 216.367992][ T8376] RDX: 0000200000000180 RSI: 00000000000007b0 RDI: 0000000000000005 [ 216.368006][ T8376] RBP: 00007f2a208c6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.368019][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.368031][ T8376] R13: 00007f2a1fc26038 R14: 00007f2a1fc25fa0 R15: 00007f2a1fd4fa48 [ 216.368061][ T8376] [ 216.369363][ T8376] tmpfs: Unknown parameter ',2`RA r7SA' [ 216.445703][ T5615] usb usb5-port1: attempt power cycle [ 216.660130][ T990] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 216.793294][ T990] usb 2-1: device descriptor read/64, error -71 [ 216.890459][ T5615] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 216.911038][ T990] usb usb2-port1: attempt power cycle [ 216.912344][ T5615] usb 5-1: device descriptor read/8, error -71 [ 216.971191][ T8386] netlink: 52 bytes leftover after parsing attributes in process `syz.0.894'. [ 217.133155][ T8391] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5632] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[8391] [ 217.170407][ T5615] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 217.201671][ T5615] usb 5-1: device descriptor read/8, error -71 [ 217.270228][ T990] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 217.291313][ T990] usb 2-1: device descriptor read/8, error -71 [ 217.310829][ T5615] usb usb5-port1: unable to enumerate USB device [ 217.317638][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 217.540115][ T990] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 217.560960][ T990] usb 2-1: device descriptor read/8, error -71 [ 217.671067][ T990] usb usb2-port1: unable to enumerate USB device [ 218.054948][ T8407] x_tables: unsorted underflow at hook 1 [ 218.148551][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 218.340103][ T5677] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 218.491123][ T5677] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 218.493806][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.493854][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.493893][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.497483][ T5677] usb 3-1: config 0 descriptor?? [ 218.596363][ T8418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.906'. [ 218.920309][ T5677] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 218.920345][ T5677] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 218.920371][ T5677] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 218.920395][ T5677] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 218.920420][ T5677] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 218.920444][ T5677] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 218.920468][ T5677] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 218.926324][ T5677] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 219.119620][ T5677] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 219.119685][ T5677] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 219.143064][ T5677] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -32 [ 219.245848][ T8433] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 219.507493][ T8440] syzkaller0: entered promiscuous mode [ 219.507519][ T8440] syzkaller0: entered allmulticast mode [ 219.550442][ T8440] tipc: Enabled bearer , priority 0 [ 219.593146][ T8439] tipc: Resetting bearer [ 219.660245][ T8439] tipc: Disabling bearer [ 219.916743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.942344][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.966708][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 220.279211][ T8463] netlink: 'syz.4.916': attribute type 10 has an invalid length. [ 220.279247][ T8463] ipvlan0: entered allmulticast mode [ 220.279265][ T8463] veth0_vlan: entered allmulticast mode [ 220.306812][ T8463] team0: Device ipvlan0 failed to register rx_handler [ 220.888036][ T8468] bond0: (slave bond_slave_1): Releasing backup interface [ 221.771982][ T8488] FAULT_INJECTION: forcing a failure. [ 221.771982][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.772015][ T8488] CPU: 0 UID: 0 PID: 8488 Comm: syz.3.923 Not tainted syzkaller #0 PREEMPT(full) [ 221.772037][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.772049][ T8488] Call Trace: [ 221.772057][ T8488] [ 221.772066][ T8488] dump_stack_lvl+0xe8/0x150 [ 221.772099][ T8488] should_fail_ex+0x410/0x560 [ 221.772128][ T8488] _copy_to_user+0x31/0xb0 [ 221.772157][ T8488] simple_read_from_buffer+0xe1/0x170 [ 221.772191][ T8488] proc_fail_nth_read+0x1bb/0x230 [ 221.772210][ T8488] ? common_file_perm+0x20e/0x2b0 [ 221.772238][ T8488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.772280][ T8488] ? rw_verify_area+0x24a/0x4c0 [ 221.772311][ T8488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.772360][ T8488] vfs_read+0x213/0xa80 [ 221.772399][ T8488] ? __pfx___mutex_lock+0x10/0x10 [ 221.772437][ T8488] ? __pfx_vfs_read+0x10/0x10 [ 221.772473][ T8488] ? __fget_files+0x2a/0x420 [ 221.772509][ T8488] ? __fget_files+0x3a2/0x420 [ 221.772538][ T8488] ? __fget_files+0x2a/0x420 [ 221.772578][ T8488] ksys_read+0x150/0x270 [ 221.772614][ T8488] ? __pfx_ksys_read+0x10/0x10 [ 221.772647][ T8488] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 221.772694][ T8488] do_syscall_64+0x166/0x520 [ 221.772721][ T8488] ? trace_irq_disable+0x3b/0x140 [ 221.772744][ T8488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.772767][ T8488] ? clear_bhb_loop+0x70/0xc0 [ 221.772795][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.772818][ T8488] RIP: 0033:0x7fc03655e98e [ 221.772839][ T8488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.772858][ T8488] RSP: 002b:00007fc0373befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.772883][ T8488] RAX: ffffffffffffffda RBX: 00007fc0373bf6c0 RCX: 00007fc03655e98e [ 221.772900][ T8488] RDX: 000000000000000f RSI: 00007fc0373bf0a0 RDI: 000000000000000a [ 221.772915][ T8488] RBP: 00007fc0373bf090 R08: 0000000000000000 R09: 0000000000000000 [ 221.772930][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.772943][ T8488] R13: 00007fc036826038 R14: 00007fc036825fa0 R15: 00007fc03694fa48 [ 221.772980][ T8488] [ 222.202531][ T8498] netlink: 52 bytes leftover after parsing attributes in process `syz.3.927'. [ 222.329783][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 222.464888][ T990] usb 3-1: USB disconnect, device number 23 [ 222.632639][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 222.632656][ T8499] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.926'. [ 222.632665][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 223.198950][ T8516] syzkaller0: entered promiscuous mode [ 223.198974][ T8516] syzkaller0: entered allmulticast mode [ 223.217191][ T8516] tipc: Enabled bearer , priority 0 [ 223.227357][ T8514] tipc: Resetting bearer [ 223.304652][ T8514] tipc: Disabling bearer [ 223.416037][ T8433] syz.1.910 (8433): drop_caches: 1 [ 223.445065][ T8434] syz.1.910 (8434): drop_caches: 1 [ 223.480303][ T1218] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 223.630649][ T1218] usb 1-1: Using ep0 maxpacket: 8 [ 223.641248][ T1218] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.641380][ T1218] usb 1-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 223.644252][ T1218] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 223.644316][ T1218] usb 1-1: config 10 has no interface number 0 [ 223.644398][ T1218] usb 1-1: config 10 interface 91 has no altsetting 0 [ 223.675862][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.675928][ T1218] usb 1-1: Product: syz [ 223.675965][ T1218] usb 1-1: Manufacturer: syz [ 223.676003][ T1218] usb 1-1: SerialNumber: syz [ 223.728528][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 224.491925][ T5677] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 224.663572][ T5677] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.667785][ T5677] usb 5-1: not running at top speed; connect to a high speed hub [ 224.667821][ T5677] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 224.700589][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.700618][ T5677] usb 5-1: Product: syz [ 224.700634][ T5677] usb 5-1: Manufacturer: syz [ 224.700650][ T5677] usb 5-1: SerialNumber: syz [ 224.844748][ T8544] syzkaller0: entered promiscuous mode [ 224.844806][ T8544] syzkaller0: entered allmulticast mode [ 224.894761][ T8544] tipc: Enabled bearer , priority 0 [ 224.907137][ T8543] tipc: Resetting bearer [ 225.027191][ T5677] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.052274][ T5677] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 225.059949][ T8543] tipc: Disabling bearer [ 225.086161][ T5677] usb 5-1: USB disconnect, device number 34 [ 225.387658][ T1218] uvcvideo 1-1:10.91: Found Unit with invalid ID 0 [ 225.388416][ T1218] uvcvideo 1-1:10.91: Found UVC 0.40 device syz (097b:61f6) [ 225.389816][ T1218] uvcvideo 1-1:10.91: Entity type for entity Output 32771 was not initialized! [ 225.402495][ T1218] uvcvideo 1-1:10.91: Entity type for entity Media 2 was not initialized! [ 225.429866][ T1218] usb 1-1: USB disconnect, device number 26 [ 226.576676][ T8570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 226.950322][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 227.731996][ T8602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.798769][ T8597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.799152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.182629][ T8614] ip6tnl0: entered allmulticast mode [ 228.895326][ T8624] binder: 8609:8624 ioctl c0306201 0 returned -14 [ 228.897363][ T8624] binder: 8609:8624 ioctl c0306201 0 returned -14 [ 229.520993][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.526288][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.532872][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.971735][ T8630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.971951][ T8630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.972126][ T8630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.972188][ T8630] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 230.028906][ T8630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.029103][ T8630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.029171][ T8630] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 230.075412][ T8630] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 230.148643][ T5626] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 230.160617][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.418562][ T13] IPVS: starting estimator thread 0... [ 230.500224][ T8661] IPVS: using max 28 ests per chain, 67200 per kthread [ 231.191037][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.991640][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.991649][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.070306][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.070360][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.083068][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.151445][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.850878][ T8728] atomic_op ffff88807b4621e0 conn xmit_atomic 0000000000000000 [ 236.230168][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.957723][ T8749] atomic_op ffff88807a0ce9e0 conn xmit_atomic 0000000000000000 [ 239.683211][ T8770] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1015'. [ 239.750288][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.750315][ C1] bridge0: topology change detected, propagating [ 239.750757][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.750774][ C1] bridge0: topology change detected, propagating [ 241.110184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.851837][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.883496][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.496009][ T31] audit: type=1326 audit(1790130443.813:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1023" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1f99e159 code=0x7ffc0000 [ 244.532267][ T31] audit: type=1326 audit(1790130443.853:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1023" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2a1f99e159 code=0x7ffc0000 [ 244.532318][ T31] audit: type=1326 audit(1790130443.853:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1023" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2a1f99e159 code=0x7ffc0000 [ 244.539620][ T31] audit: type=1326 audit(1790130443.813:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1023" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1f99e159 code=0x7ffc0000 [ 244.957310][ T8804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1027'. [ 247.838279][ T31] audit: type=1800 audit(1790130447.153:291): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1035" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 248.264701][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1039'. [ 248.265035][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1039'. [ 251.134959][ T8867] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.182780][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 251.340224][ T1218] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 251.404427][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.723627][ T1218] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 251.791700][ T1218] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 251.791765][ T1218] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.799686][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.799703][ T1218] usb 3-1: Product: syz [ 251.799713][ T1218] usb 3-1: Manufacturer: syz [ 251.799723][ T1218] usb 3-1: SerialNumber: syz [ 252.493821][ T1218] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 252.631380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 253.430990][ T8876] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 254.032743][ T1218] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 254.428447][ T1218] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 254.479364][ T8792] udevd[8792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.502616][ T1218] usb 3-1: USB disconnect, device number 24 [ 254.675405][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 254.675764][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 254.975718][ T8894] netlink: 'syz.2.1051': attribute type 18 has an invalid length. [ 254.975741][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 255.002858][ T8894] netlink: 'syz.2.1051': attribute type 18 has an invalid length. [ 255.002880][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 255.227319][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 255.895577][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.895635][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.753942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 257.334981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 258.445977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 259.015482][ T8918] binder: 8908:8918 ioctl c018620c 200000000000 returned -22 [ 259.019003][ T8917] binder: 8908:8917 ioctl c018620c 200000000000 returned -22 [ 259.365499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 259.772719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 259.840949][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 259.841253][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 260.054335][ T1218] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 260.430344][ T1218] usb 3-1: Using ep0 maxpacket: 32 [ 260.433466][ T1218] usb 3-1: unable to get BOS descriptor or descriptor too short [ 260.433520][ T1218] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 260.479992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 260.610769][ T1218] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 102, changing to 7 [ 260.610814][ T1218] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.613779][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.613801][ T1218] usb 3-1: Product: syz [ 260.613815][ T1218] usb 3-1: Manufacturer: syz [ 260.613828][ T1218] usb 3-1: SerialNumber: syz [ 260.901383][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.925628][ T8939] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1065'. [ 260.974460][ T8928] tmpfs: Unknown parameter ',2`RA r7SA' [ 261.047911][ T1218] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.048205][ T1218] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 261.090348][ T1218] usb 3-1: USB disconnect, device number 25 [ 266.372190][ T8955] syzkaller0: entered promiscuous mode [ 266.372214][ T8955] syzkaller0: entered allmulticast mode [ 266.418357][ T8958] tipc: Enabled bearer , priority 0 [ 266.539842][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 266.561494][ T8952] tipc: Resetting bearer [ 271.150674][ C1] sched: DL replenish lagged too much [ 281.357462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.284765][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.404525][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.600492][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.327237][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.860790][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.872910][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.336349][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.479678][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.784687][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.749106][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.152063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.177319][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.212478][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.352834][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.953880][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.962126][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.446517][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.827372][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.773273][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.808930][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.280581][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.891795][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.472692][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 416.374470][ T7617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.467941][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.713513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.001165][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.351364][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.416886][ T32] INFO: task kworker/1:2:1218 blocked for more than 145 seconds. [ 432.416914][ T32] Not tainted syzkaller #0 [ 432.416926][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.416936][ T32] task:kworker/1:2 state:D stack:21560 pid:1218 tgid:1218 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 432.416998][ T32] Workqueue: events tipc_net_finalize_work [ 432.417051][ T32] Call Trace: [ 432.417063][ T32] [ 432.417077][ T32] __schedule+0x17db/0x58f0 [ 432.417124][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 432.417162][ T32] ? __pfx___schedule+0x10/0x10 [ 432.417195][ T32] ? schedule+0x90/0x2b0 [ 432.417222][ T32] schedule+0x164/0x2b0 [ 432.417249][ T32] schedule_preempt_disabled+0x13/0x30 [ 432.417273][ T32] __mutex_lock+0x7c1/0x1550 [ 432.417306][ T32] ? __mutex_lock+0x5d4/0x1550 [ 432.417337][ T32] ? tipc_net_finalize_work+0x1e/0x90 [ 432.417372][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 432.417416][ T32] ? rcu_is_watching+0x16/0xb0 [ 432.417440][ T32] ? process_scheduled_works+0x97a/0x1630 [ 432.417470][ T32] tipc_net_finalize_work+0x1e/0x90 [ 432.417504][ T32] process_scheduled_works+0xc3d/0x1630 [ 432.417573][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.417608][ T32] ? assign_work+0x3cf/0x5d0 [ 432.417640][ T32] worker_thread+0xa47/0xfb0 [ 432.417681][ T32] ? __kthread_parkme+0x71/0x1f0 [ 432.417721][ T32] kthread+0x38b/0x480 [ 432.417741][ T32] ? __pfx_worker_thread+0x10/0x10 [ 432.417775][ T32] ? __pfx_kthread+0x10/0x10 [ 432.417796][ T32] ret_from_fork+0x514/0xb70 [ 432.417820][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 432.417840][ T32] ? __switch_to+0xc89/0x1420 [ 432.417871][ T32] ? __pfx_kthread+0x10/0x10 [ 432.417893][ T32] ret_from_fork_asm+0x1a/0x30 [ 432.417940][ T32] [ 432.418042][ T32] INFO: task kworker/u8:15:6369 blocked for more than 145 seconds. [ 432.418058][ T32] Not tainted syzkaller #0 [ 432.418068][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.418078][ T32] task:kworker/u8:15 state:D stack:23624 pid:6369 tgid:6369 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 432.418134][ T32] Workqueue: events_unbound linkwatch_event [ 432.418154][ T32] Call Trace: [ 432.418160][ T32] [ 432.418172][ T32] __schedule+0x17db/0x58f0 [ 432.418223][ T32] ? __pfx___schedule+0x10/0x10 [ 432.418254][ T32] ? schedule+0x90/0x2b0 [ 432.418280][ T32] schedule+0x164/0x2b0 [ 432.418306][ T32] schedule_preempt_disabled+0x13/0x30 [ 432.418329][ T32] __mutex_lock+0x7c1/0x1550 [ 432.418360][ T32] ? __mutex_lock+0x5d4/0x1550 [ 432.418389][ T32] ? linkwatch_event+0xe/0x60 [ 432.418410][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 432.418437][ T32] ? lock_acquire+0x115/0x350 [ 432.418466][ T32] ? rcu_is_watching+0x16/0xb0 [ 432.418492][ T32] ? process_scheduled_works+0x97a/0x1630 [ 432.418520][ T32] linkwatch_event+0xe/0x60 [ 432.418539][ T32] process_scheduled_works+0xc3d/0x1630 [ 432.418597][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.418632][ T32] ? assign_work+0x3cf/0x5d0 [ 432.418664][ T32] worker_thread+0xa47/0xfb0 [ 432.418719][ T32] kthread+0x38b/0x480