last executing test programs: 2m57.523716812s ago: executing program 3 (id=582): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8003, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x7, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x440400, 0x0) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000200)={0x1000, "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"}) r3 = socket(0x1e, 0xa, 0x7ff) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) fanotify_init(0x2, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000001240)={0xb}) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001280)='devices.deny\x00', 0x2, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f0000001300)={0x380000000000000, 0x0, 0x7f, 0x0, 0xb915, 0x2, 0x0, &(0x7f00000012c0)=[{0x0, 0x1ff, 0x4}, {0x1c, 0x1ff, 0xf}]}) write$UHID_CREATE2(r2, &(0x7f0000001340)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xa5, 0x0, 0x8, 0x6, 0xe, 0x3, "d2bb3721ea9a833e7af8862bab56f7f1e08647251b2ef58338844b55aca1a2fab7fc1d1b5d4eb494779048c0e3686337ce93c7e6509fb96c121ab78aebf4ba25dbdd0092a85289b93153bdfd4691887e1cbfa7441f91794e1c9ab595f269513d3993cd9f149213f9c89b8b1be4ad19e0bc0c47955056b27616dd233605eb3db7557d457eca901abc3e3f00a8c7d6f52a400651e6d4560440aed8c1938f70bded7a89cb8043"}}, 0x1bd) r5 = syz_open_dev$dvb_frontend(&(0x7f0000001500), 0xa5a, 0x801) ioctl$XFS_IOC_SET_RESBLKS(r5, 0xc0105872, &(0x7f0000001540)={0x0, 0x6}) pipe2$9p(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RXATTRCREATE(r7, &(0x7f00000015c0)={0x7, 0x21, 0x2}, 0x7) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001600)) ioctl$XFS_IOC_FSGETXATTRA(r8, 0x801c582d, &(0x7f0000001640)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000016c0)={0x2, [0x0, 0x0]}, &(0x7f0000001700)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001740)={0x0}, &(0x7f0000001780)=0xc) prlimit64(r9, 0x1, &(0x7f00000017c0)={0x7, 0x100000000000}, 0x0) writev(r5, &(0x7f0000001ac0)=[{&(0x7f0000001800)="739bf6a85fd44dfb64b5736e291500ff66176017eb80a935d608ee8d7c01084ff3c79d4bd0e756d36a1e8e2a7be12f791f91fc9d59620bac4dbda38107fb4efde7122f705de3fa3dd41dede6eb260b112cc066fee8c49d5ca7d254d6ce2f0f81f7b22d320fe7ef12a9f71d52690f98914d7b759e816d2633c835ad23fcb7f76279dde1cc1d58b27e7ef70e33c08ccc7be2852f292a5e1cda9e2369ba3aec6167e159e8e6b251118b256b196ec4389dfecacb6adf96fcd2c1c4a5e7739e5028b77fc24a5e8a0059b9fd8a8384c513a5a7c40424c39e701f92b60fc420efe09b29077293ed0f8f6cbb5f15c0182230d6801e94d14369", 0xf5}, {&(0x7f0000001900)="5260207bb446018d8f1401305bccc5733c30c49e2ed7b2e7211ef2ee993f5b95217fe468f1629a4c5413b90311a37dc6513457a322f4925110d62f01839e7a1ebababd48978efce6030b86b7c335400c3ef60f2d3b384e0cfa2da3b8ee79a3a282f3ae663408c1c0a71f29b83c22586afbbb6567d096ca9b9ddc5f4712cbf337a8fa4ecfc880ecbcc75267b356d7ea6bb293c6c7e03af7f70b40b4d7f65e5f0465524d13746f658d0f72f5ec17a5e7e75be1219b321dfcfcfcede29df4ae39fdbdf8eec8f704156c601c170c6ccd85dbb5cb6636e3f21a8c07a810c27893", 0xde}, {&(0x7f0000001a00)="f53eec7557568f1320387307253fd973c4a984a7340945f67174448ba9a37c3c7e62b9468bcf39b23c9b1eaabfd05cf78a099d6bb2a7abb5df8e40234e30d5bf2b87ed99a473659c8db132f5212a3f476235bfcb7c82bfbf60cb0c7f64637b83ad8dfd193c0624b2e2e4b319c18581bda43bf285b10be031e3c180c0ff51863759e76de79c2ec2a8f1d6038d3c750758f561d87c350728d807361538e5582f73", 0xa0}], 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c40)={r5, &(0x7f0000001b00)="4ec4f0c116628338295614cd", &(0x7f0000001b40)=@buf="093bb011baf09b33215239393a8081914d7570deb1b4028fbab0b8efcb419ff4af2a1ff184e4c0e2f5db4a58d8909562e8d6ba997992004e1162ef63eeda559369e9742e1b2b12437dae29fe7841d23914434a63d22300defcdc7ee370099cea9fde5727969c35c8e856ec27f1e48a99041c1c321b7c809501defea8ee946a276eff3d19407d072e6042af4d003f4c3769c05150a214b3e14e0c8325a067a58932534ddb9bec20c29144c5b02eefbd24b983254da612a0d8e1dd20f039863e9bf433131d4c85738db6fcf716449a844fe19adf6f42e9d197873c5e523a16", 0x1}, 0x20) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000001c80)=""/126, &(0x7f0000001d00)=0x7e) socket$inet6(0xa, 0x2, 0x7a) ioctl$NILFS_IOCTL_GET_SUINFO(r8, 0x80186e84, &(0x7f0000001d80)={&(0x7f0000001d40)=[{0x9, 0x6, 0x1}], 0x1, 0x10, 0xfff5, 0xaa4a}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001dc0)={[0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x38938046, 0x0, 0x1, 0x9, 0x8, 0x3c224e1e, 0x7, 0x8001, 0xffffffffffffffff, 0x2, 0x0, 0x10], 0x100000, 0x410}) fsetxattr$smack_xattr_label(r3, &(0x7f0000001e80)='security.SMACK64\x00', &(0x7f0000001ec0)={'@/-'}, 0x4, 0x1) 2m55.63582528s ago: executing program 3 (id=586): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b570024"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="02004d4a0e29a1b92752e9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 2m55.10186268s ago: executing program 3 (id=588): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf2502000000040038801000", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="02004d4a0e29a1b92752e9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x8044) 2m53.033349376s ago: executing program 3 (id=592): syz_usb_connect(0x2, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100193ac931040206582a3b50102030109024d0001027f400909040c07027b85530009058103030000000622023ed13729711a6e3f7ee9e3c2f767f89a2dee56136e3bbee236b084ecfe5b5c6c09059a"], 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='gadgetfs\x00', 0x0) r1 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x1) r2 = syz_io_uring_setup(0x10b8, &(0x7f0000000440)={0x0, 0x880e, 0x2, 0x2, 0x177}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000580)={0x1}, 0x0) fsmount(r1, 0x0, 0x76) 2m48.968224647s ago: executing program 3 (id=601): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = eventfd(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) readv(r4, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/222, 0xde}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r5, &(0x7f00000002c0)=""/185, 0xb9) unlinkat(r5, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000077a3000000000000fcffffff850000002e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) 2m47.4214596s ago: executing program 3 (id=604): rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() (async) sync() socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x9, 0x2}, 0x10}}, 0x4004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x8010, 0x5, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x43}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x8010, 0x5, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x43}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x20, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x572c, @loopback, 0x401}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000009) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000009) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f000007e000/0x2000)=nil, 0x2000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f000007e000/0x2000)=nil, 0x2000}, 0x5}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket(0x25, 0x3, 0x0) (async) socket(0x25, 0x3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) 2m31.024022841s ago: executing program 32 (id=604): rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() (async) sync() socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x9, 0x2}, 0x10}}, 0x4004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x8010, 0x5, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x43}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x8010, 0x5, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x43}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x20, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x572c, @loopback, 0x401}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000009) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000009) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f000007e000/0x2000)=nil, 0x2000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f000007e000/0x2000)=nil, 0x2000}, 0x5}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket(0x25, 0x3, 0x0) (async) socket(0x25, 0x3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) 1m43.459498522s ago: executing program 4 (id=730): inotify_init1(0x80800) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x4, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x1, 0x2}]}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002fc0)={'wlan0\x00'}) syz_clone3(&(0x7f0000000080)={0x2a614b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0xfffffffc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) madvise(&(0x7f0000baf000/0x4000)=nil, 0x4000, 0x15) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5fae, 0x4) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) 1m40.885781834s ago: executing program 4 (id=733): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 1m39.904899026s ago: executing program 4 (id=737): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b570024"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab9685", 0xc, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1m37.339722034s ago: executing program 4 (id=741): syz_emit_ethernet(0x8a, &(0x7f0000000040)=ANY=[@ANYBLOB="fffffffffeffbbbbbbbbbbbb080090780a010102ac1414aa01000000030490780100000047000000000000000011000000000000e0000002440c0001ac1414bb6e210000443c5901e000000100000000ac1414bb00000000ac14140000000000ac1414aa000000000000000000000000ac1e000100"/128], 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = accept4$tipc(r2, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000340)=0x5, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000140)='/dev/kvm\x00', 0x141801, 0x0, 0x100, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000001140)="7000000018002507b9409b14ffff00000204be040205fe050e0204094300080004000000060000000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66e", 0x70, 0x70, 0x0, 0x0) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @none, 0x80}, 0xa) 1m34.344049616s ago: executing program 4 (id=748): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a', @ANYRESHEX], 0x0) 1m27.6119726s ago: executing program 4 (id=757): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) sync() mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000008800), 0x2000, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x231687f, 0x1000, 0xc, 0x7ff, 0x58, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x3e, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r3, 0x80284504, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r2) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000000)={{r9}, "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"}) 1m10.05220103s ago: executing program 33 (id=757): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) sync() mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000008800), 0x2000, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x231687f, 0x1000, 0xc, 0x7ff, 0x58, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x3e, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r3, 0x80284504, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r2) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000000)={{r9}, "223942af236282865c874f9ae44976e524a46cae5528bc05a2918261ad24f06254021a71d0f91f83a8af7c78d86e90c9afa16e5aa3b9f86ebaed460721328e5d4ed4b7604e43246f180177ef9189c94bbce103b68250d3e67e4aac9cbf8b4a39c26b86f956ccae8bbb7b6df69d2c803e049a342d9509b037350b607b38f6692fccc5a1d853587b3fc21df43b113179ebd20a0d715300706ab61caf89b20be45e82e56cea35a75e2865184b2d7b5109325073aec33dd9ca56bf907f8dedb6c8186de3ec934e3f215903ecac34ec22a4e68a5dc9d448f40e28d50ce2ebadf1249deca08bed42f599886963c6b038a2487ca164d1cf86b59cc972d422dc15c012ce694fcdef06c0db4c5d07946002908cf247f80f2195c18ba5b1ab37300697229e6e5adb042ec1fdeae884c617faf54c2f650e2d53d893597cc582a9ec75ebead5e0b5072a0bc18352a1ad77aa0b674d1c0f3c144bdd3bff2fdc4f33279c93915d5ab721157dcee7da1afdb9fb5109e02f8e22ecf907a3f29c00f5a049fbed8ed121bd0d4d62a5da9fafd7a7d4ac928b9e6dccd20a13042aa69015fa77f87394704629dfc15a6071d638c6e4eed1e9e4082182a12ef99c68b5e5c1710c81134fc128598b14387e1b0c3725d21aea3cb6844b143ae6209289f81b9be8562bbf62faab3936336c4d95205514d6484e1a732052c2d23f7cc218c1f2367979a2e49ae8f36a612fc4bffa1eca0192d5f783b597ff5236be708f2ede89d54b4fa1341495e8a47325bd8f41dc485dea8a85c6ee260bc262eff72a1b528b8345ad03620f764cf14d5e1e92a1c7ed31a05280d1362a8cc1ded435d4f26606c9425b9e73ab6f5651eb38ae60c25cb72ce917701279b601c765763e3ad3896b9c5f6620426b3531a994bcf326279a4c7d6e78b88bb73d728f17b0075b13948df5dfc8073bf0da73252c204d377343a807058b01c2bf515249df62112d47ef20e563a37a1b22a674a77cf8fba828233153b80e390251535b5d87211de8b5501897a10a11536b8349edec8e3f9bd14b160fd7f988a5aa3505b8ab8934ddb84b3d049d88533379f505bead07e7daea7dda3d63f5cbab17ea5ba12d9f088f16b9ae498f7f8bc09b227bebe684fe91e832ca36093771451b9ff2b279bb1acbb717e92b48987baa63dac797afa5e490b384b551347d4f4cdfb0da1dc0d314ba5c149b0f0db61393a09f7a5ab1e59411204f6e9b2945eb2b65f367667381fa39057308ee5df0af93b0e711ddcb94383c25bb0d31b4595c6c72d1435ffd6d4f4ca2ec1cf669e464a26198f37aba22728aadb54204a0eb305558ff1688710a5c4c675092db2fa11e921f1a09745f5d30f80761eddae0b5ac5a4bb1c960a1839cee452919d19cb3fcc7d3731068aae9c6f7876428bf6c4e9d9df2d9501cf7ff93694162611087d06c1d16f15ee57905eaa5b4f11121f36e71383b9a78a7eda7a44f90d03f4b4ae4081a6d3f44e7b5651d249c4dde806379bb4245e637b5d20616878903cdb28c35f6d440c6d829e5e609afec0c2bbf7397b3efcbb59c99d72c67fd52a5ba2fcbd661ea34d21b3c4d85930ed826152ee40439c82a9ff2b0182274c3f0a925b9eacb7900c04e97db8c30103b164ed1f278e3b69db9bcaa74ccc3bf538eb03f52deb8bc6ce3bfc290be1bfff1138f1dbd49eab59acdee5ad14eeff764f1b47f845f3f5edcc5af5001c0206b1ea81e7c7bf2a0b3984921e16eeb9d98038273fe4c4100f8178f7d5a5e1c94aac38892a6874a553fb30546032719b144da8c145a0888748a8d7766fe7d3d453707ade96a669b88922b6e683a3e478a333194d4d675c46d8a94dfb042f59fe84fcc73c123f75a83e6596ec89dcb08d34ed275b4e5808b75cd27c68fd4244311a2e8d39f12a4ac15daa109467e83b319c3c1fa2911c948c7ca2ce4d0744aa1be06527a2ce21e24978278d5907348db5515a9c7866fa5ad70c4d4eba68ad83417b35df5badf2ef05c11959fb3001197a6fcc852007a198af48d1a7880535a1ab15472d8440273d02e049b1cbedc8364d2d55b05af9e2a735c7d553947480bb6e30117b45f4fa8ca4b6ac3cf2d15c382ba597092b00cda6ca233647f5afead0323dabdbf8fa5b2a69e6d6ae8d3dd57cb6ce04dafa5880f6baff8a04bf9c0bd4a8b3cf290ce19faf3b8cae28c8dee708799919f573fc59908ba1bb24577dd9a9c77833b9381afb72a70c8d646a910e3793bd694f58c92c0aa564bbacd7e3147b5cfcad5379d7352cf2812bf0016abcc24d67be34b35b099741832f093682bf8899ebf77b20c4a0438ba0006c75d7861f1460e9722b9782d022db1efb81a7729aef97ab1f7a607d21e69b30abb235b5cde4b9f3d60c26d6c64e730515b77dde6f7a055e8d57ebfeeb03de358d0151a2b8682aea7189374cd493118396d38fb2a09f7e1ae811add832fad25a8f42cf7612d2ba6f1c1da193a74444b2b126708a1f493f670bf63a385bd2340ec202acfcb70c277686efee2836a620a5129ab639b73cb5df4ddcc63d1fa2149c58fa5ca0fad41f02da60f53793a52958f92dd8faf90f2b83abdd4bbb839bb5264d427e6c837347b06ae91cef0b822885853a1072d7823fe5f269b14dd15ea0a5100d0a64af9faa956ea91a6fcc659b58a26ff93e9115bdd28cdb59b4c220744a159cea67283bccf534c88810e72c34fdfb60952184a4012815845b1d2b1e98720b855e67ffcfccbef66dc279248ec91799990479f6e813472dd736719823e893997dafb9000bb615011e64708b57a6ac829445fbce98dd428d3fbb19964ccaaeec9e180d77f1ea1a935f0c08bf3f481104e7f042c79e1889baca108099685d9ebdf12789f48f05b4970397c2d794b3db86d7484e97cc5354fad7071b2b26efd260f062ec76e482762a47bf7d62e7776830cd8b181f2ae59a48df6b81dc4a41664bca7a0116aea634aebcaae275a6c20d2bfd3d4e9ec11f13a955344748e258c712b30f8d39a5970ae05afab808c0d8b564ac08df1d635ec3a25048c9ab4903c421714701b82a3fa3567934ea3073dba8a19366842ea06f763d5fc3fac7f3b999588c7edcb5320d5080eeb065c29fca4549ee99d9b4ec6d2038dda2ef6bb5bab9290445c6b76e9657fa88d0ddc32b52f1ca1c3d2842ebf33145d5ceb7fc2b5813125a2a65002f724f7e24c28b4c616bb6208400a2fd0fad098503cc3def5a6fe3d34aadce378181ee95e190e6df0c7d73562bcf96f3f9ed930c730272d6b5da40ecd889f0a6b2a6c4de2213dbbe4cba86b5f0a3038bf50f7a97d81fe268353206baf033adfad99a01b7ea6312c6110d028ccc54995a4605b23ad8e506c4a9a5940fd8e9e45ac637a603978d7aed69877b61c8ecc6c9ef84d4e7a6881a5a1d6d31afc15cf3b33c663934a787dc6ed4920ce1fa6c3000e3addb80a234b885f5aa18fb100fe9f76650da6f5a3ecf7ce0893ec3690f465ee5280fca423c81c46344ea42445339695f81dbd9533d6f54f70e5d292242d6dc75411323544da2fe4775688ea48355541fe127f9ddf6b5e421195373a77baf09115797c3d931fd99e4d3673b8eebf062c9ce9367577cf0cca862097cd7b4a4b64ac8afc5cc63390ac79006f0f5e4cf92aa1efea170e38dda7d525ce532d4489973f53404894baa2878eb9714cdfe1b05660f92c993d0df21b05646febb430b3c135344cbd87b0c8b23bfbaf3b4565928600a9cb5c2abcc9b78853c7b581771a0be1b328d0aa2a8a1dd4bf86bc4b563ab5c55bf2c9723faf1d1859dff3ae97c2e98c6bf18a0296416b03aedd75c0b82eeb7285c883b94aa5f57f2c616286eaebb168a0a2f939187a1d5b79be1d2f638fbe5f0185ab50a3552ad18b9965b2360acc823243c121ce8b868bb3fde60240b010c18a79c584e8e16d9e0170bf528a205c3862e87bdd8bea99dba71dfe27420e11671e886743ef49d642a1d55c558a0ecdfe9f7610a36e8a687618b0dc2ae7c134c92c33896aa26545db96a232e2e27bb95db64c47028efa9328074b70fa7e4681bc36358d704881b842f0c2b1560fb2aa26f84a685d1c029819439819c897a8cbdf1f9366cbf5a18f89705e6c34b4a5305f3071fc835727275c96204f548ce245772e96490d660f55c53f1e91ed83158bac6ed873c899c3023d8409e32d8d445b8aa8e997bb2ff8523c2b7aa2bf565d8e46953257d32595404fc02aef00cb964f2cc8d91bd1e8ef139412964de99b01870cad7cee2cf6452bfdec87ae35ed69d030167cbb3ee8bbd4a659d2a3aa034eebee7a949c110c473b0e2db371bdf2018569df578c68d55af22cc8ddadf38c31619263c2ab2f5f367d24e6c61b90ec2006eabb34aae799befa4d49abd40998ae1646fc6277639a86dc9c6480eb68372379ccdd532bb260d10c286041c22bea105cfa3874c9ac49e6ceefb6a9b0715c3b4e945d6dc2376ae789b8b111146413fc5556db7c59995ba11b90f97fbcb82edf461f4a477f3461fffd4d2aea4e94dd242298b8772a04b0ed9d0f368bfe739eda7584d8081680bbb4c867ad70bd13e04e7a90d665714783e1334deb67bf0851dc5d3812f25d139cdd1d931675ac671bd77802549983465b05c3d21bcfe1a42450c7e2fe77ee2ddb135e85dcdf3545f7d7f63b21a17f528054be8383cf935cd8eec170b7fd4de7b602c7687090395ba9a36a250cd891a4e3f2b66cebe60d11824a9162170e134f85890708be4b78529ab9a2392d7c5679721f4aae4a2fad15baa970a0c0c2e65f450725de0d23d27688945cdbb45930b79cfaadb3465f690539fc777a839fb7b9f520286fc513ff3a7f2a3aed0a6e1130c1d25ea2698d3cfb2548c6818965e6fcffa17db1322b629f34e83dfc6c914a0e2ff42804989ae4ccdb5ee059ce45e7728568308ed1e8e20d2549006ece4166338353ce0cffc63855bbac2e99233d3066e8136ba3ab579c74ad813b8ea90e76b43bc439b4b466ca384a614fa7999ea6ea55b0cb03f1adbc65b9affc36bb714087f0de51e28ebf0cc28a52619f25b95dae4ad290eafe268fe9b9673457a30ed0737cf6518892609005f2f8d033fe28aa7993f687c80238d0a8130a563fde063b0995b086f3906c8065bc6be9b9b6e9bb3e3447c5a481eedab064a597eb355dd3f2a7801653917ee1c4770efe3b3340c205118f267591f453f6379b8fda3c2fcf17ef73450f36e0a3eb5a8614f521b555aaeebc1fa74d3e97d4aa3c8fc2e301c98083db3de1311e949ac3adb41b509743abdf3b1c88465bc6cfdc375919cd98f231595458e737825a3f4973dd5edc9079d11b0c0c7f1e142b4c5110020a157dd68c0804a364236810cb54f4a186d52943d7b33911639e02faa75d6dfa071ec3a356d8f2c0018fef205b3f2f34d53fd1f2fb3cb945fe524cd2ed1104e238049700e1907d207c52be2ee0c616a0464900216d509a8a68fe3ec7acdc6afb24cc826e057e57c9a397e4ddf5f9daec55b6cd33171df33563d3c5b2783db2a70b5a353c3b93f3ca4974144ab39e25164ee883448af46fe886e3cbd98a68e2330a14c4e5a5f8c7fb125c9e05d541c8fda7e9507e54a0f77c035bae333ea5fdbf4272782ec7c9396b6ad7fa53517d1bdd4f84ca600e87a8ba4a0503941c2e20896975804fe0a58cef62e7b06100cb53b1dcb98552e75182c41efa36bdd9698361e7ccedc13ba379af750c5a10519417928c6ffc79d52e85b5d690850744b392f10d17203872cbdb3ea9fe82ced5063ec6c94d053628"}) 17.942812377s ago: executing program 1 (id=915): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 17.809782413s ago: executing program 0 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 15.560206536s ago: executing program 1 (id=919): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='-pids'], 0x6) 15.358588732s ago: executing program 0 (id=920): socket$key(0xf, 0x3, 0x2) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x1a3800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.816453527s ago: executing program 2 (id=924): socket$kcm(0x11, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) 14.6041671s ago: executing program 0 (id=925): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat(0xffffffffffffffff, 0x0, 0x414902, 0x80) 14.08005357s ago: executing program 2 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='new default trusted:syz 00000000000000000'], 0x44, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) 13.115742222s ago: executing program 5 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 13.02842097s ago: executing program 1 (id=929): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"bad71f18", 0x3, 0x3, 0x0, 0x9ba0, 0xb8d, "557ba0bb054fdcf1f6e8a60448a8e5", "4bbc841b", "deb109f9", "0e55175a", ["836dedab3c9c2e069f0daaee", "99eea02aa7d17ccd4c2889c2", "31dbde4b79fc1eb95c56db4d", "939b370cbcab705292e508b8"]}) 11.631959911s ago: executing program 2 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x80, r0, 0x0, 0x7}, 0x38) 10.470994527s ago: executing program 5 (id=932): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0xff0f000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) sendfile(r4, r4, 0x0, 0x23) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @start={0x5, 0x1}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.438290408s ago: executing program 0 (id=933): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 10.437625641s ago: executing program 1 (id=934): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) dup(r3) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 7.88419022s ago: executing program 0 (id=936): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r3, &(0x7f0000000040), 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0xfffffffe, 0x0, &(0x7f0000000040)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 7.868699751s ago: executing program 1 (id=937): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000400)=""/166, 0xa6) socket$nl_generic(0x10, 0x3, 0x10) 6.886522828s ago: executing program 6 (id=938): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 6.723241034s ago: executing program 2 (id=939): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000200, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.497539142s ago: executing program 6 (id=940): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) 5.429110043s ago: executing program 1 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 5.356652288s ago: executing program 5 (id=942): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) r2 = socket$inet(0x2, 0x3, 0x101) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x64, &(0x7f0000000140)=0xe2, 0x4) sendmsg$inet(r2, 0x0, 0x24008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$loop(0x0, 0x3af2, 0x5000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x1, 0x5, 0x0) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000500)={0x6000000d}) 4.947244383s ago: executing program 0 (id=943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/211, 0xd3}], 0xa}, 0x3}], 0x1, 0x10022, 0x0) 4.942019998s ago: executing program 2 (id=944): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.893302987s ago: executing program 6 (id=945): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x8080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xc) 3.30455792s ago: executing program 5 (id=946): r0 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x7f, 0x0, 0xb, 0x0, 0x54, 0xa}, 0x9c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$P9_RRENAME(r3, &(0x7f00000005c0)={0x7, 0x15, 0x1}, 0x7) 2.929131675s ago: executing program 2 (id=947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x5, 0x1, 0x5, 0x8, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.266371009s ago: executing program 6 (id=948): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x11d, 0x1b, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 653.844792ms ago: executing program 5 (id=949): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) 395.666943ms ago: executing program 6 (id=950): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10000}) close(0x3) 24.272745ms ago: executing program 6 (id=951): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x20040800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 0s ago: executing program 5 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0302) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r3 = timerfd_create(0x9, 0x80800) timerfd_gettime(r3, &(0x7f0000000040)) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x4, 0x4) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@any_dev={0x3, 0x753, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x140}}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x1, @empty, 0x2}, {0xa, 0x4e1f, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x7fffffff, 0x4, 0x0, 0x4063, "47c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) kernel console output (not intermixed with test programs): 14] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 256.651366][ T5614] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 256.651415][ T5614] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.652544][ T5614] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.652575][ T5614] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.652624][ T5614] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.652648][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.763938][ T5614] usbtmc 5-1:16.0: bulk endpoints not found [ 256.888467][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 257.571614][ T5614] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 257.654998][ T7310] 9p: Bad value for 'rfdno' [ 257.750255][ T5614] usb 3-1: unable to get BOS descriptor or descriptor too short [ 257.750843][ T5614] usb 3-1: not running at top speed; connect to a high speed hub [ 257.752447][ T5614] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 257.789250][ T5614] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 257.789270][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.789282][ T5614] usb 3-1: Product: syz [ 257.789289][ T5614] usb 3-1: Manufacturer: syz [ 257.789301][ T5614] usb 3-1: SerialNumber: syz [ 258.217907][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.221245][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.239763][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.240513][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.601586][ T5614] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 258.602439][ T5614] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 258.602616][ T5614] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 258.602637][ T5614] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 258.709495][ T5614] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 259.307322][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 259.428176][ T5612] usb 5-1: USB disconnect, device number 9 [ 259.454647][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 259.469412][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.469440][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.472883][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.472915][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.472935][ T5868] usb 2-1: Product: syz [ 259.472950][ T5868] usb 2-1: Manufacturer: syz [ 259.472964][ T5868] usb 2-1: SerialNumber: syz [ 260.159841][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.402'. [ 260.159896][ T7328] netlink: 'syz.4.402': attribute type 1 has an invalid length. [ 260.159910][ T7328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.402'. [ 260.166312][ T7330] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.403'. [ 260.210233][ T5868] usb 2-1: 0:2 : does not exist [ 260.256401][ T5614] usb 3-1: USB disconnect, device number 10 [ 260.263495][ T5868] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 260.578229][ T5868] usb 2-1: USB disconnect, device number 10 [ 261.868327][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 262.218409][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 262.502387][ T5868] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.620843][ T7351] veth0_virt_wifi: entered allmulticast mode [ 262.668314][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 262.678196][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.678227][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.711081][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.711115][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.711137][ T5868] usb 2-1: Product: syz [ 262.711152][ T5868] usb 2-1: Manufacturer: syz [ 262.711167][ T5868] usb 2-1: SerialNumber: syz [ 262.825352][ T7355] 9p: Bad value for 'rfdno' [ 262.847391][ T5868] usb 2-1: 0:2 : does not exist [ 263.029917][ T5868] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 263.079623][ T5868] usb 2-1: USB disconnect, device number 11 [ 263.104622][ T5745] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.260459][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 263.264494][ T5745] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 263.264528][ T5745] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 263.264573][ T5745] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.264586][ T5745] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.264599][ T5745] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 263.264625][ T5745] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.264637][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.375797][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.428459][ T5745] usbtmc 4-1:16.0: bulk endpoints not found [ 263.759370][ T5745] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 263.903837][ T5745] usb 3-1: Using ep0 maxpacket: 32 [ 263.922225][ T5745] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.928577][ T5745] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 263.928609][ T5745] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 263.928626][ T5745] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 263.928639][ T5745] usb 3-1: config 5 has no interface number 0 [ 263.928660][ T5745] usb 3-1: config 5 interface 4 has no altsetting 1 [ 263.952657][ T5745] usb 3-1: New USB device found, idVendor=134c, idProduct=1c16, bcdDevice=f0.53 [ 263.952693][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.952714][ T5745] usb 3-1: Product: syz [ 263.952727][ T5745] usb 3-1: Manufacturer: syz [ 263.952741][ T5745] usb 3-1: SerialNumber: syz [ 264.268287][ T5745] usb 3-1: USB disconnect, device number 11 [ 265.480726][ T5802] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 265.615264][ T5802] usb 3-1: device descriptor read/64, error -71 [ 265.761223][ T5614] usb 4-1: USB disconnect, device number 12 [ 265.853129][ T5802] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 265.983989][ T5802] usb 3-1: device descriptor read/64, error -71 [ 266.095311][ T5802] usb usb3-port1: attempt power cycle [ 266.185389][ T5745] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 266.351182][ T5745] usb 2-1: Using ep0 maxpacket: 8 [ 266.364438][ T5745] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.364475][ T5745] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.364501][ T5745] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.364528][ T5745] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.364574][ T5745] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.364596][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.522672][ T5802] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.544119][ T5802] usb 3-1: device descriptor read/8, error -71 [ 266.679540][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.680617][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.738020][ T5745] usb 2-1: usb_control_msg returned -32 [ 266.738072][ T5745] usbtmc 2-1:16.0: can't read capabilities [ 266.799342][ T5802] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 266.821576][ T5802] usb 3-1: device descriptor read/8, error -71 [ 266.921736][ T7394] can: request_module (can-proto-0) failed. [ 266.937655][ T5802] usb usb3-port1: unable to enumerate USB device [ 267.044001][ T7399] 9p: Bad value for 'rfdno' [ 267.089268][ T5802] usb 2-1: USB disconnect, device number 12 [ 269.433073][ T7414] FAULT_INJECTION: forcing a failure. [ 269.433073][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 269.433107][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 269.433125][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.433136][ T7414] Call Trace: [ 269.433142][ T7414] [ 269.433149][ T7414] dump_stack_lvl+0xe8/0x150 [ 269.433174][ T7414] should_fail_ex+0x467/0x600 [ 269.433201][ T7414] should_failslab+0xa8/0x100 [ 269.433222][ T7414] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 269.433239][ T7414] ? __alloc_skb+0x1d7/0x7a0 [ 269.433258][ T7414] ? lockdep_hardirqs_on+0x7a/0x110 [ 269.433283][ T7414] __alloc_skb+0x1d7/0x7a0 [ 269.433315][ T7414] netlink_sendmsg+0x5d4/0xb40 [ 269.433342][ T7414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.433366][ T7414] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.433381][ T7414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.433401][ T7414] ____sys_sendmsg+0x9a2/0xa10 [ 269.433422][ T7414] ? __might_fault+0xaf/0x130 [ 269.433443][ T7414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.433469][ T7414] ? import_iovec+0x73/0xa0 [ 269.433493][ T7414] ___sys_sendmsg+0x2a5/0x360 [ 269.433512][ T7414] ? __lock_acquire+0x683/0x2cc0 [ 269.433535][ T7414] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.433579][ T7414] ? __fget_files+0x2a/0x420 [ 269.433593][ T7414] ? __fget_files+0x3a8/0x420 [ 269.433616][ T7414] __x64_sys_sendmsg+0x1c3/0x2a0 [ 269.433638][ T7414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.433664][ T7414] ? __pfx_ksys_write+0x10/0x10 [ 269.433688][ T7414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.433703][ T7414] do_syscall_64+0x174/0x580 [ 269.433723][ T7414] ? trace_irq_disable+0x3b/0x140 [ 269.433741][ T7414] ? clear_bhb_loop+0x40/0x90 [ 269.433759][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.433773][ T7414] RIP: 0033:0x7f6d7c64ce59 [ 269.433788][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.433801][ T7414] RSP: 002b:00007f6d7a89e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.433817][ T7414] RAX: ffffffffffffffda RBX: 00007f6d7c8c5fa0 RCX: 00007f6d7c64ce59 [ 269.433827][ T7414] RDX: 0000000000000040 RSI: 0000200000001580 RDI: 0000000000000003 [ 269.433836][ T7414] RBP: 00007f6d7a89e090 R08: 0000000000000000 R09: 0000000000000000 [ 269.433845][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.433853][ T7414] R13: 00007f6d7c8c6038 R14: 00007f6d7c8c5fa0 R15: 00007ffeb7323488 [ 269.433875][ T7414] [ 270.911371][ T5868] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 271.066908][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 271.067225][ T7433] 9p: Bad value for 'rfdno' [ 271.101877][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.101938][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.101967][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.101990][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.102014][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.103165][ T5868] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.103195][ T5868] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.103216][ T5868] usb 3-1: Manufacturer: syz [ 271.192454][ T5868] usb 3-1: config 0 descriptor?? [ 272.330987][ T5868] rc_core: IR keymap rc-hauppauge not found [ 272.331014][ T5868] Registered IR keymap rc-empty [ 272.331188][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.358798][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.375153][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 272.392862][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 272.427681][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.471206][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.488155][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.507715][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.528740][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.547040][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.571728][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.588401][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.606447][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.625839][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.659893][ T5868] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 272.659974][ T5868] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 272.753843][ T5868] usb 3-1: USB disconnect, device number 16 [ 274.911180][ T5802] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 275.522696][ T5802] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 275.522758][ T5802] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.522784][ T5802] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.522827][ T5802] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.522849][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.631742][ T5802] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.632933][ T5802] usb 1-1: invalid MIDI out EP 0 [ 276.518658][ T36] kauditd_printk_skb: 113 callbacks suppressed [ 276.518678][ T36] audit: type=1400 audit(1781452821.267:165): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=x pid=7472 comm="syz.2.449" name="file1" dev="tmpfs" ino=448 [ 276.777785][ T5802] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 276.781228][ T5802] usb 1-1: USB disconnect, device number 11 [ 277.200263][ T7486] 9p: Bad value for 'rfdno' [ 277.782877][ T7492] Illegal XDP return value 4294967294 on prog (id 62) dev N/A, expect packet loss! [ 278.182840][ T7500] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.455'. [ 280.487470][ T5802] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 280.642765][ T5802] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 280.642824][ T5802] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.642848][ T5802] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.642891][ T5802] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.642913][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.727723][ T5802] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.743201][ T5802] usb 2-1: invalid MIDI out EP 0 [ 280.972583][ T7539] 9p: Bad value for 'rfdno' [ 281.631479][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 281.631548][ T7544] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 281.665397][ T7544] netlink: 80 bytes leftover after parsing attributes in process `syz.2.468'. [ 281.665442][ T7544] netlink: 'syz.2.468': attribute type 7 has an invalid length. [ 281.665458][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 281.696938][ T7544] usb usb7: usbfs: process 7544 (syz.2.468) did not claim interface 0 before use [ 281.930862][ T5802] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 281.957157][ T5802] usb 2-1: USB disconnect, device number 13 [ 282.375899][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 282.375943][ T7555] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 282.379449][ T7555] netlink: 80 bytes leftover after parsing attributes in process `syz.2.472'. [ 282.448866][ T7557] usb usb7: usbfs: process 7557 (syz.2.472) did not claim interface 0 before use [ 282.708969][ T7555] netlink: 'syz.2.472': attribute type 7 has an invalid length. [ 282.709004][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 286.065425][ T5896] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 286.229796][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 286.232770][ T5896] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 286.232803][ T5896] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 286.232823][ T5896] usb 1-1: config 3 has no interface number 0 [ 286.232870][ T5896] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.232899][ T5896] usb 1-1: config 3 interface 45 has no altsetting 0 [ 286.239963][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 286.240001][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.240278][ T5896] usb 1-1: Product: syz [ 286.240294][ T5896] usb 1-1: Manufacturer: syz [ 286.240309][ T5896] usb 1-1: SerialNumber: syz [ 286.407021][ T7586] 9p: Bad value for 'rfdno' [ 286.563111][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.175170][ T822] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 287.231607][ T5896] usb 1-1: USB disconnect, device number 12 [ 287.333926][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 287.345418][ T822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.345448][ T822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.403072][ T822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.403108][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.403129][ T822] usb 3-1: Product: syz [ 287.403143][ T822] usb 3-1: Manufacturer: syz [ 287.403407][ T822] usb 3-1: SerialNumber: syz [ 287.721643][ T5868] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.863901][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 287.870134][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.870198][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.870226][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.870239][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 287.870252][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.880021][ T5868] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 287.880051][ T5868] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 287.880071][ T5868] usb 4-1: Manufacturer: syz [ 288.061490][ T5868] usb 4-1: config 0 descriptor?? [ 288.296911][ T822] usb 3-1: 0:2 : does not exist [ 288.354512][ T822] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 288.487886][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.589600][ T822] usb 3-1: USB disconnect, device number 17 [ 288.689051][ T5868] rc_core: IR keymap rc-hauppauge not found [ 288.689074][ T5868] Registered IR keymap rc-empty [ 288.689228][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.696877][ T7605] comedi: valid board names for 8255 driver are: [ 288.696897][ T7605] 8255 [ 288.696904][ T7605] comedi: valid board names for vmk80xx driver are: [ 288.696914][ T7605] vmk80xx [ 288.696921][ T7605] comedi: valid board names for usbduxsigma driver are: [ 288.696930][ T7605] usbduxsigma [ 288.696936][ T7605] comedi: valid board names for usbduxfast driver are: [ 288.709199][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.719742][ T7605] usbduxfast [ 288.719757][ T7605] comedi: valid board names for usbdux driver are: [ 288.719769][ T7605] usbdux [ 288.719775][ T7605] comedi: valid board names for ni6501 driver are: [ 288.719798][ T7605] ni6501 [ 288.719806][ T7605] comedi: valid board names for dt9812 driver are: [ 288.719816][ T7605] dt9812 [ 288.719822][ T7605] comedi: valid board names for ni_labpc_cs driver are: [ 288.719832][ T7605] ni_labpc_cs [ 288.719839][ T7605] comedi: valid board names for ni_daq_700 driver are: [ 288.719849][ T7605] ni_daq_700 [ 288.719855][ T7605] comedi: valid board names for labpc_pci driver are: [ 288.719864][ T7605] labpc_pci [ 288.719871][ T7605] comedi: valid board names for adl_pci9118 driver are: [ 288.719880][ T7605] pci9118dg [ 288.719886][ T7605] pci9118hg [ 288.719893][ T7605] pci9118hr [ 288.719900][ T7605] comedi: valid board names for 8255_pci driver are: [ 288.719910][ T7605] 8255_pci [ 288.719916][ T7605] comedi: valid board names for s526 driver are: [ 288.719925][ T7605] s526 [ 288.719931][ T7605] comedi: valid board names for multiq3 driver are: [ 288.719940][ T7605] multiq3 [ 288.719945][ T7605] comedi: valid board names for pcmuio driver are: [ 288.719954][ T7605] pcmuio48 [ 288.719960][ T7605] pcmuio96 [ 288.719966][ T7605] comedi: valid board names for pcmmio driver are: [ 288.719974][ T7605] pcmmio [ 288.719980][ T7605] comedi: valid board names for pcmda12 driver are: [ 288.719989][ T7605] pcmda12 [ 288.719995][ T7605] comedi: valid board names for pcmad driver are: [ 288.720003][ T7605] pcmad12 [ 288.720010][ T7605] pcmad16 [ 288.720016][ T7605] comedi: valid board names for ni_labpc driver are: [ 288.720025][ T7605] lab-pc-1200 [ 288.720031][ T7605] lab-pc-1200ai [ 288.720038][ T7605] lab-pc+ [ 288.720043][ T7605] comedi: valid board names for atmio16 driver are: [ 288.720051][ T7605] atmio16 [ 288.720057][ T7605] atmio16d [ 288.720063][ T7605] comedi: valid board names for ni_at_ao driver are: [ 288.720072][ T7605] at-ao-6 [ 288.720078][ T7605] at-ao-10 [ 288.720085][ T7605] comedi: valid board names for ni_at_a2150 driver are: [ 288.720093][ T7605] ni_at_a2150 [ 288.720099][ T7605] comedi: valid board names for adq12b driver are: [ 288.720108][ T7605] adq12b [ 288.720114][ T7605] comedi: valid board names for mpc624 driver are: [ 288.720122][ T7605] mpc624 [ 288.720128][ T7605] comedi: valid board names for c6xdigio driver are: [ 288.720137][ T7605] c6xdigio [ 288.720143][ T7605] comedi: valid board names for aio_iiro_16 driver are: [ 288.720152][ T7605] aio_iiro_16 [ 288.720158][ T7605] comedi: valid board names for aio_aio12_8 driver are: [ 288.720167][ T7605] aio_aio12_8 [ 288.720173][ T7605] aio_ai12_8 [ 288.720179][ T7605] aio_ao12_4 [ 288.720185][ T7605] comedi: valid board names for fl512 driver are: [ 288.720193][ T7605] fl512 [ 288.720200][ T7605] comedi: valid board names for dmm32at driver are: [ 288.720208][ T7605] dmm32at [ 288.720214][ T7605] comedi: valid board names for dt282x driver are: [ 288.720223][ T7605] dt2821 [ 288.720229][ T7605] dt2821-f [ 288.720235][ T7605] dt2821-g [ 288.720242][ T7605] dt2823 [ 288.720248][ T7605] dt2824-pgh [ 288.720253][ T7605] dt2824-pgl [ 288.720259][ T7605] dt2825 [ 288.720265][ T7605] dt2827 [ 288.720271][ T7605] dt2828 [ 288.720277][ T7605] dt2829 [ 288.720283][ T7605] dt21-ez [ 288.720296][ T7605] dt23-ez [ 288.720303][ T7605] dt24-ez [ 288.720309][ T7605] dt24-ez-pgl [ 288.720315][ T7605] comedi: valid board names for dt2817 driver are: [ 288.720325][ T7605] dt2817 [ 288.720331][ T7605] comedi: valid board names for dt2815 driver are: [ 288.720341][ T7605] dt2815 [ 288.720347][ T7605] comedi: valid board names for dt2814 driver are: [ 288.720356][ T7605] dt2814 [ 288.720361][ T7605] comedi: valid board names for dt2811 driver are: [ 288.720371][ T7605] dt2811-pgh [ 288.720378][ T7605] dt2811-pgl [ 288.720385][ T7605] comedi: valid board names for dt2801 driver are: [ 288.720394][ T7605] dt2801 [ 288.720401][ T7605] comedi: valid board names for das6402 driver are: [ 288.720410][ T7605] das6402-12 [ 288.720417][ T7605] das6402-16 [ 288.720423][ T7605] comedi: valid board names for das1800 driver are: [ 288.720433][ T7605] das-1701st [ 288.720439][ T7605] das-1701st-da [ 288.720446][ T7605] das-1702st [ 288.720453][ T7605] das-1702st-da [ 288.720460][ T7605] das-1702hr [ 288.720466][ T7605] das-1702hr-da [ 288.720473][ T7605] das-1701ao [ 288.720479][ T7605] das-1702ao [ 288.720485][ T7605] das-1801st [ 288.720492][ T7605] das-1801st-da [ 288.720498][ T7605] das-1802st [ 288.720505][ T7605] das-1802st-da [ 288.720512][ T7605] das-1802hr [ 288.720519][ T7605] das-1802hr-da [ 288.720525][ T7605] das-1801hc [ 288.720533][ T7605] das-1802hc [ 288.720539][ T7605] das-1801ao [ 288.720545][ T7605] das-1802ao [ 288.720553][ T7605] comedi: valid board names for das800 driver are: [ 288.720561][ T7605] das-800 [ 288.720568][ T7605] cio-das800 [ 288.720574][ T7605] das-801 [ 288.720580][ T7605] cio-das801 [ 288.720586][ T7605] das-802 [ 288.720592][ T7605] cio-das802 [ 288.720598][ T7605] cio-das802/16 [ 288.720604][ T7605] comedi: valid board names for isa-das08 driver are: [ 288.720613][ T7605] isa-das08 [ 288.720620][ T7605] das08-pgm [ 288.720626][ T7605] das08-pgh [ 288.720631][ T7605] das08-pgl [ 288.720637][ T7605] das08-aoh [ 288.720644][ T7605] das08-aol [ 288.720650][ T7605] das08-aom [ 288.720656][ T7605] das08/jr-ao [ 288.720662][ T7605] das08jr-16-ao [ 288.720669][ T7605] pc104-das08 [ 288.720675][ T7605] das08jr/16 [ 288.720681][ T7605] comedi: valid board names for das16m1 driver are: [ 288.720689][ T7605] das16m1 [ 288.720696][ T7605] comedi: valid board names for dac02 driver are: [ 288.720704][ T7605] dac02 [ 288.720710][ T7605] comedi: valid board names for rti802 driver are: [ 288.720719][ T7605] rti802 [ 288.720725][ T7605] comedi: valid board names for rti800 driver are: [ 288.720733][ T7605] rti800 [ 288.720740][ T7605] rti815 [ 288.720746][ T7605] comedi: valid board names for pcm3724 driver are: [ 288.720755][ T7605] pcm3724 [ 288.720761][ T7605] comedi: valid board names for pcl818 driver are: [ 288.720769][ T7605] pcl818l [ 288.720775][ T7605] pcl818h [ 288.720781][ T7605] pcl818hd [ 288.720787][ T7605] pcl818hg [ 288.720793][ T7605] pcl818 [ 288.720799][ T7605] pcl718 [ 288.720804][ T7605] pcm3718 [ 288.720811][ T7605] comedi: valid board names for pcl816 driver are: [ 288.720819][ T7605] pcl816 [ 288.720825][ T7605] pcl814b [ 288.720831][ T7605] comedi: valid board names for pcl812 driver are: [ 288.720840][ T7605] pcl812 [ 288.720846][ T7605] pcl812pg [ 288.720852][ T7605] acl8112pg [ 288.720858][ T7605] acl8112dg [ 288.720864][ T7605] acl8112hg [ 288.720871][ T7605] a821pgl [ 288.720877][ T7605] a821pglnda [ 288.720882][ T7605] a821pgh [ 288.720888][ T7605] a822pgl [ 288.720894][ T7605] a822pgh [ 288.720900][ T7605] a823pgl [ 288.720906][ T7605] a823pgh [ 288.720912][ T7605] pcl813 [ 288.720918][ T7605] pcl813b [ 288.720924][ T7605] acl8113 [ 288.720930][ T7605] iso813 [ 288.720935][ T7605] acl8216 [ 288.720941][ T7605] a826pg [ 288.720948][ T7605] comedi: valid board names for pcl730 driver are: [ 288.720957][ T7605] pcl730 [ 288.720963][ T7605] iso730 [ 288.720968][ T7605] acl7130 [ 288.720975][ T7605] pcm3730 [ 288.720980][ T7605] pcl725 [ 288.720985][ T7605] p8r8dio [ 288.720992][ T7605] acl7225b [ 288.720998][ T7605] p16r16dio [ 288.721004][ T7605] pcl733 [ 288.721010][ T7605] pcl734 [ 288.721016][ T7605] opmm-1616-xt [ 288.721022][ T7605] pearl-mm-p [ 288.721028][ T7605] ir104-pbf [ 288.721034][ T7605] comedi: valid board names for pcl726 driver are: [ 288.721043][ T7605] pcl726 [ 288.721049][ T7605] pcl727 [ 288.721055][ T7605] pcl728 [ 288.721061][ T7605] acl6126 [ 288.721067][ T7605] acl6128 [ 288.721074][ T7605] comedi: valid board names for pcl724 driver are: [ 288.721082][ T7605] pcl724 [ 288.721088][ T7605] pcl722 [ 288.721094][ T7605] pcl731 [ 288.721100][ T7605] acl7122 [ 288.721106][ T7605] acl7124 [ 288.721112][ T7605] pet48dio [ 288.721118][ T7605] pcmio48 [ 288.721124][ T7605] onyx-mm-dio [ 288.721129][ T7605] comedi: valid board names for pcl711 driver are: [ 288.721137][ T7605] pcl711 [ 288.721143][ T7605] pcl711b [ 288.724873][ T7605] acl8112hg [ 288.724887][ T7605] acl8112dg [ 288.724895][ T7605] comedi: valid board names for amplc_pc263 driver are: [ 288.724907][ T7605] pc263 [ 288.724912][ T7605] comedi: valid board names for amplc_pc236 driver are: [ 288.724923][ T7605] pc36at [ 288.724928][ T7605] comedi: valid board names for amplc_dio200 driver are: [ 288.724939][ T7605] pc212e [ 288.724945][ T7605] pc214e [ 288.724952][ T7605] pc215e [ 288.724958][ T7605] pc218e [ 288.724964][ T7605] pc272e [ 288.724972][ T7605] comedi: valid board names for comedi_parport driver are: [ 288.724982][ T7605] comedi_parport [ 288.724989][ T7605] comedi: valid board names for comedi_test driver are: [ 288.724998][ T7605] comedi_test [ 288.725005][ T7605] comedi: valid board names for comedi_bond driver are: [ 288.725043][ T7605] comedi_bond [ 288.753699][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 288.767755][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 289.241522][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.261064][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.285467][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.301554][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.318420][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.340973][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.358661][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.382450][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.413254][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.431638][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 289.828250][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.832232][ T5868] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 289.832260][ T5868] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 289.907686][ T5868] usb 4-1: USB disconnect, device number 13 [ 291.015601][ T5617] Bluetooth: hci5: command 0xfc11 tx timeout [ 291.016079][ T5613] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 291.382568][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 291.672107][ T7634] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.497'. [ 291.697471][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'. [ 291.912565][ T5896] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 292.073404][ T5896] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 292.073439][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.073458][ T5896] usb 2-1: config 0 has no interface number 0 [ 292.073531][ T5896] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 292.073560][ T5896] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 292.073586][ T5896] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 292.073644][ T5896] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 292.073671][ T5896] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 292.073698][ T5896] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.291176][ T5896] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 292.291210][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.291229][ T5896] usb 2-1: Product: syz [ 292.291243][ T5896] usb 2-1: Manufacturer: syz [ 292.291258][ T5896] usb 2-1: SerialNumber: syz [ 292.305471][ T5896] usb 2-1: config 0 descriptor?? [ 292.306523][ T7626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.312232][ T5896] usb 2-1: can only deal with bulk endpoints; endpoint 2 is not bulk. [ 292.312260][ T5896] usb 2-1: couldn't find two input bulk endpoints. Bailing out. [ 292.979498][ T5622] usb 2-1: USB disconnect, device number 14 [ 295.308638][ T7670] comedi comedi0: Minor 3 could not be opened [ 295.750401][ T5745] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 296.553405][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 296.600603][ T5745] usb 4-1: Using ep0 maxpacket: 16 [ 296.602591][ T5745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.602649][ T5745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.602666][ T5745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 296.602679][ T5745] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 296.602692][ T5745] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.603757][ T5745] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 296.603785][ T5745] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.603806][ T5745] usb 4-1: Manufacturer: syz [ 296.610808][ T5745] usb 4-1: config 0 descriptor?? [ 296.954490][ T5745] rc_core: IR keymap rc-hauppauge not found [ 296.954514][ T5745] Registered IR keymap rc-empty [ 296.954810][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 296.987197][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.017762][ T5745] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 297.035755][ T5745] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 297.072669][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.094224][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.117119][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.141205][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.153587][ T7688] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.513'. [ 297.164369][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.179675][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.202843][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.222582][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.244025][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.265512][ T5745] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 297.295876][ T5745] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 297.295907][ T5745] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 297.637489][ T5622] usb 4-1: USB disconnect, device number 14 [ 300.414302][ T7727] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 300.612502][ T5622] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 300.817566][ T5622] usb 3-1: Using ep0 maxpacket: 8 [ 300.819561][ T5622] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 300.819591][ T5622] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 300.819639][ T5622] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.819652][ T5622] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.819665][ T5622] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.819690][ T5622] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.819703][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.827367][ T5622] usbtmc 3-1:16.0: bulk endpoints not found [ 301.209450][ T7739] Bluetooth: MGMT ver 1.23 [ 301.530074][ T822] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 301.701760][ T42] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 301.724749][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 301.737769][ T822] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.737800][ T822] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 301.737824][ T822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.740244][ T822] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 301.740273][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.740292][ T822] usb 1-1: Product: syz [ 301.740305][ T822] usb 1-1: Manufacturer: syz [ 301.740329][ T822] usb 1-1: SerialNumber: syz [ 301.754727][ T822] usb 1-1: config 0 descriptor?? [ 301.813011][ T5802] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 302.696752][ T5802] usb 2-1: Using ep0 maxpacket: 16 [ 302.699538][ T5802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.699598][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.699626][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 302.699650][ T5802] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 302.699674][ T5802] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.701487][ T5802] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 302.701517][ T5802] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 302.701539][ T5802] usb 2-1: Manufacturer: syz [ 302.776650][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 302.784418][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.784451][ T42] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.784526][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.789962][ T42] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.789994][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.790064][ T42] usb 4-1: Product: syz [ 302.790079][ T42] usb 4-1: Manufacturer: syz [ 302.790093][ T42] usb 4-1: SerialNumber: syz [ 302.854358][ T5802] usb 2-1: config 0 descriptor?? [ 302.875097][ T42] usb 4-1: config 0 descriptor?? [ 303.062352][ T822] gs_usb 1-1:0.0: Configuring for 158 interfaces [ 303.193891][ T5802] rc_core: IR keymap rc-hauppauge not found [ 303.193919][ T5802] Registered IR keymap rc-empty [ 303.194336][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.223160][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.240533][ T5802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 303.244616][ T5802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 303.337693][ T42] gs_usb 4-1:0.0: Configuring for 158 interfaces [ 303.338234][ T822] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 303.338390][ T822] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 303.341642][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.357949][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.255811][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.257060][ T42] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 304.257141][ T42] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 304.291692][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.307732][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.329307][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.350918][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.363365][ T822] usb 3-1: USB disconnect, device number 18 [ 304.372643][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.394327][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.415810][ T5802] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.442248][ T5802] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 304.442266][ T5802] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 304.469329][ T5802] usb 2-1: USB disconnect, device number 15 [ 305.217678][ T7773] netlink: 'syz.1.537': attribute type 2 has an invalid length. [ 305.269168][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 305.435041][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 305.827261][ T822] usb 1-1: USB disconnect, device number 13 [ 305.903957][ T5896] kernel write not supported for file /dsp1 (pid: 5896 comm: kworker/0:9) [ 306.010521][ T7791] mmap: syz.1.542 (7791) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 306.144474][ T822] usb 4-1: USB disconnect, device number 15 [ 306.474567][ T5612] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 306.580076][ T5614] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.833612][ T7798] comedi comedi1: 8255: I/O base address not correctly aligned [ 307.673032][ T5612] usb 1-1: Using ep0 maxpacket: 8 [ 307.675520][ T5612] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 307.675555][ T5612] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 307.675606][ T5612] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.675631][ T5612] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.675655][ T5612] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.675699][ T5612] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.675723][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.764986][ T5612] usbtmc 1-1:16.0: bulk endpoints not found [ 307.857087][ T5614] usb 5-1: Using ep0 maxpacket: 16 [ 307.860934][ T5614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.860967][ T5614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.863967][ T5614] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.864001][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.864020][ T5614] usb 5-1: Product: syz [ 307.864035][ T5614] usb 5-1: Manufacturer: syz [ 307.864049][ T5614] usb 5-1: SerialNumber: syz [ 307.954024][ T5614] usb 5-1: 0:2 : does not exist [ 308.165087][ T5614] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 308.182113][ T7808] bond0: entered promiscuous mode [ 308.182141][ T7808] bond_slave_0: entered promiscuous mode [ 308.183072][ T7808] bond_slave_1: entered promiscuous mode [ 308.298594][ T5614] usb 5-1: USB disconnect, device number 10 [ 308.622585][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.724720][ T5745] usb 1-1: USB disconnect, device number 14 [ 313.476478][ T7834] FAULT_INJECTION: forcing a failure. [ 313.476478][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 313.476518][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.4.553 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.476542][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.476554][ T7834] Call Trace: [ 313.476562][ T7834] [ 313.476571][ T7834] dump_stack_lvl+0xe8/0x150 [ 313.476603][ T7834] should_fail_ex+0x467/0x600 [ 313.476637][ T7834] should_failslab+0xa8/0x100 [ 313.476664][ T7834] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 313.476687][ T7834] ? __alloc_skb+0x1d7/0x7a0 [ 313.476711][ T7834] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.476746][ T7834] __alloc_skb+0x1d7/0x7a0 [ 313.476774][ T7834] netlink_sendmsg+0x5d4/0xb40 [ 313.476811][ T7834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.476845][ T7834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.476868][ T7834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.476894][ T7834] ____sys_sendmsg+0x9a2/0xa10 [ 313.476922][ T7834] ? __might_fault+0xaf/0x130 [ 313.476952][ T7834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.476983][ T7834] ? import_iovec+0x73/0xa0 [ 313.477013][ T7834] ___sys_sendmsg+0x2a5/0x360 [ 313.477037][ T7834] ? __lock_acquire+0x683/0x2cc0 [ 313.477064][ T7834] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.477117][ T7834] ? __fget_files+0x2a/0x420 [ 313.477133][ T7834] ? __fget_files+0x3a8/0x420 [ 313.477159][ T7834] __x64_sys_sendmsg+0x1c3/0x2a0 [ 313.477184][ T7834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.477216][ T7834] ? __pfx_ksys_write+0x10/0x10 [ 313.477247][ T7834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.477269][ T7834] do_syscall_64+0x174/0x580 [ 313.477297][ T7834] ? trace_irq_disable+0x3b/0x140 [ 313.477321][ T7834] ? clear_bhb_loop+0x40/0x90 [ 313.477347][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.477366][ T7834] RIP: 0033:0x7fd071cbce59 [ 313.477386][ T7834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.477402][ T7834] RSP: 002b:00007fd06ff0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.477431][ T7834] RAX: ffffffffffffffda RBX: 00007fd071f35fa0 RCX: 00007fd071cbce59 [ 313.477446][ T7834] RDX: 000000003000c81c RSI: 0000200000000340 RDI: 0000000000000003 [ 313.477459][ T7834] RBP: 00007fd06ff0e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.477471][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.477483][ T7834] R13: 00007fd071f36038 R14: 00007fd071f35fa0 R15: 00007ffca9500ff8 [ 313.477515][ T7834] [ 313.693794][ T5868] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 313.856857][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 313.861365][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 313.861399][ T5868] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 313.861425][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 313.875045][ T5868] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 313.875081][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.875101][ T5868] usb 1-1: Product: syz [ 313.875115][ T5868] usb 1-1: Manufacturer: syz [ 313.875130][ T5868] usb 1-1: SerialNumber: syz [ 313.924703][ T5868] usb 1-1: config 0 descriptor?? [ 314.401757][ T7846] comedi comedi1: 8255: I/O base address not correctly aligned [ 315.192008][ T5745] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 315.192642][ T5868] gs_usb 1-1:0.0: Couldn't send data format (err=-110) [ 315.193447][ T5868] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 315.374355][ T5745] usb 3-1: Using ep0 maxpacket: 32 [ 315.708449][ T7851] comedi comedi1: 8255: I/O base address not correctly aligned [ 316.555510][ T5745] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.555545][ T5745] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 316.555566][ T5745] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.586254][ T5745] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 316.586298][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.586317][ T5745] usb 3-1: Product: syz [ 316.586333][ T5745] usb 3-1: Manufacturer: syz [ 316.586347][ T5745] usb 3-1: SerialNumber: syz [ 316.599830][ T5745] usb 3-1: config 0 descriptor?? [ 316.798516][ T5868] usb 1-1: USB disconnect, device number 15 [ 317.084972][ T5745] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 317.257224][ T5896] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 317.473797][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 317.542587][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.542618][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.556695][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.557147][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.557169][ T5896] usb 4-1: Product: syz [ 317.557184][ T5896] usb 4-1: Manufacturer: syz [ 317.557198][ T5896] usb 4-1: SerialNumber: syz [ 317.883076][ T5896] usb 4-1: 0:2 : does not exist [ 317.917425][ T5896] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 318.592236][ T7842] nbd0: detected capacity change from 0 to 63 [ 318.698147][ T5745] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-ETIMEDOUT) [ 318.698459][ T5745] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 318.834648][ T5896] usb 4-1: USB disconnect, device number 16 [ 318.877734][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 319.092854][ T5613] block nbd0: Receive control failed (result -104) [ 319.191656][ T42] usb 3-1: USB disconnect, device number 19 [ 319.551143][ T5745] IPVS: starting estimator thread 0... [ 319.965080][ T7886] IPVS: using max 10 ests per chain, 24000 per kthread [ 321.905227][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.905302][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.867959][ T5614] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 323.200508][ T5614] usb 3-1: Using ep0 maxpacket: 8 [ 323.203276][ T5614] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 323.203308][ T5614] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 323.203357][ T5614] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.203380][ T5614] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.203403][ T5614] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 323.203448][ T5614] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.203471][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.237280][ T5614] usbtmc 3-1:16.0: bulk endpoints not found [ 327.861212][ T36] audit: type=1326 audit(1781452869.937:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 327.861458][ T36] audit: type=1326 audit(1781452869.937:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 327.864595][ T36] audit: type=1326 audit(1781452869.946:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 327.865072][ T36] audit: type=1326 audit(1781452869.946:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 327.865117][ T36] audit: type=1326 audit(1781452869.946:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 327.865498][ T36] audit: type=1326 audit(1781452869.946:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 327.880688][ T36] audit: type=1326 audit(1781452869.946:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 327.880768][ T36] audit: type=1326 audit(1781452869.955:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 328.119539][ T36] audit: type=1326 audit(1781452869.946:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 328.119854][ T36] audit: type=1326 audit(1781452870.177:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd071cbce59 code=0x7ffc0000 [ 328.199908][ T5612] usb 3-1: USB disconnect, device number 20 [ 328.760136][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 329.741220][ T7932] comedi comedi1: 8255: I/O base address not correctly aligned [ 333.407233][ T7954] comedi comedi1: 8255: I/O base address not correctly aligned [ 334.428102][ T7957] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.580'. [ 336.277745][ T5802] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 336.287956][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 336.548549][ T5802] usb 1-1: Using ep0 maxpacket: 32 [ 336.562053][ T5802] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 336.562087][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.562109][ T5802] usb 1-1: Product: syz [ 336.562124][ T5802] usb 1-1: Manufacturer: syz [ 336.562140][ T5802] usb 1-1: SerialNumber: syz [ 336.563718][ T7978] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.586'. [ 336.661843][ T5802] usb 1-1: config 0 descriptor?? [ 336.708878][ T5802] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 336.708995][ T5802] dvb-usb: bulk message failed: -22 (4/0) [ 336.709012][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 336.709134][ T5802] dvb-usb: bulk message failed: -22 (5/0) [ 336.709148][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 336.923569][ T5802] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.925100][ T5802] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 336.925155][ T5802] usb 1-1: media controller created [ 337.052451][ T5802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.088005][ T5802] usb 1-1: selecting invalid altsetting 3 [ 337.088033][ T5802] ttusb2: set interface to alts=3 failed [ 337.269813][ T5802] DVB: Unable to find symbol tda10086_attach() [ 337.269828][ T5802] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 337.270733][ T5802] dvb-usb: bulk message failed: -22 (4/0) [ 337.270749][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.270815][ T5802] dvb-usb: bulk message failed: -22 (5/0) [ 337.270823][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.270858][ T5802] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 337.341972][ T5802] usb 1-1: USB disconnect, device number 16 [ 339.244394][ T5802] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 340.761694][ T5802] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 341.579849][ T8034] comedi comedi1: 8255: I/O base address not correctly aligned [ 341.704970][ T5802] usb 4-1: config 2 has an invalid interface number: 12 but max is 0 [ 341.705004][ T5802] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 341.705024][ T5802] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 341.705043][ T5802] usb 4-1: config 2 has no interface number 0 [ 341.705090][ T5802] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.705118][ T5802] usb 4-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 341.705144][ T5802] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0 [ 341.705168][ T5802] usb 4-1: config 2 interface 12 has no altsetting 0 [ 341.746032][ T5802] usb 4-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 341.746068][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.746090][ T5802] usb 4-1: Product: syz [ 341.746104][ T5802] usb 4-1: Manufacturer: syz [ 341.746119][ T5802] usb 4-1: SerialNumber: syz [ 342.015724][ T8038] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.594'. [ 342.158349][ T5802] em28xx 4-1:2.12: New device syz syz @ 12 Mbps (2040:8265, interface 12, class 12) [ 342.158396][ T5802] em28xx 4-1:2.12: Device initialization failed. [ 342.158425][ T5802] em28xx 4-1:2.12: Device must be connected to a high-speed USB 2.0 port. [ 342.199044][ T5802] usb 4-1: USB disconnect, device number 17 [ 342.424805][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 342.469310][ T8047] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.598'. [ 342.527808][ T822] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 342.713266][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 342.715967][ T822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.715995][ T822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.718838][ T822] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.718871][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.718890][ T822] usb 2-1: Product: syz [ 342.718904][ T822] usb 2-1: Manufacturer: syz [ 342.718919][ T822] usb 2-1: SerialNumber: syz [ 342.829909][ T822] usb 2-1: 0:2 : does not exist [ 342.982736][ T5612] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 343.024114][ T822] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 343.170835][ T5612] usb 3-1: Using ep0 maxpacket: 16 [ 343.175833][ T5612] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.175866][ T5612] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.202442][ T5612] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.202475][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.202497][ T5612] usb 3-1: Product: syz [ 343.202510][ T5612] usb 3-1: Manufacturer: syz [ 343.202524][ T5612] usb 3-1: SerialNumber: syz [ 343.256503][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 343.455594][ T5612] usb 3-1: 0:2 : does not exist [ 343.509599][ T822] usb 2-1: USB disconnect, device number 16 [ 343.536450][ T5612] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 343.751738][ T5612] usb 3-1: USB disconnect, device number 21 [ 344.382189][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.569942][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 346.139277][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 346.268508][ T8083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 348.811569][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.930108][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 350.110050][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 350.114297][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 350.117699][ T5896] usb 3-1: config 8 has an invalid interface number: 254 but max is 0 [ 350.117732][ T5896] usb 3-1: config 8 has no interface number 0 [ 350.117815][ T5896] usb 3-1: config 8 interface 254 has no altsetting 0 [ 350.156446][ T5896] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 350.156486][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.156507][ T5896] usb 3-1: Product: syz [ 350.156522][ T5896] usb 3-1: Manufacturer: syz [ 350.156537][ T5896] usb 3-1: SerialNumber: syz [ 350.561164][ T5896] usb 3-1: USB disconnect, device number 22 [ 350.681123][ T6186] udevd[6186]: setting mode of /dev/bus/usb/003/022 to 020664 failed: No such file or directory [ 350.681297][ T6186] udevd[6186]: setting owner of /dev/bus/usb/003/022 to uid=0, gid=0 failed: No such file or directory [ 350.718325][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 351.549175][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.621'. [ 351.670150][ T11] block nbd0: Possible stuck request ffff888027030000: control (read@0,1024B). Runtime 30 seconds [ 351.674062][ T11] block nbd0: Possible stuck request ffff8880270301c0: control (read@1024,1024B). Runtime 30 seconds [ 351.674091][ T11] block nbd0: Possible stuck request ffff888027030380: control (read@2048,1024B). Runtime 30 seconds [ 351.674107][ T11] block nbd0: Possible stuck request ffff888027030540: control (read@3072,1024B). Runtime 30 seconds [ 352.352549][ T8142] bond0: entered promiscuous mode [ 352.352570][ T8142] bond_slave_0: entered promiscuous mode [ 352.352748][ T8142] bond_slave_1: entered promiscuous mode [ 353.685308][ T8151] comedi comedi1: 8255: I/O base address not correctly aligned [ 355.454798][ T8162] loop8: detected capacity change from 0 to 7 [ 355.522468][ T8162] Dev loop8: unable to read RDB block 7 [ 355.522570][ T8162] loop8: unable to read partition table [ 355.522804][ T8162] loop8: partition table beyond EOD, truncated [ 355.522838][ T8162] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà–ì) failed (rc=-5) [ 355.795136][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'. [ 356.208438][ T5896] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 356.396274][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 356.400019][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.400050][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.436165][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.436201][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.436221][ T5896] usb 1-1: Product: syz [ 356.436236][ T5896] usb 1-1: Manufacturer: syz [ 356.436251][ T5896] usb 1-1: SerialNumber: syz [ 356.499200][ T5896] usb 1-1: 0:2 : does not exist [ 356.705101][ T5896] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 356.799411][ T5896] usb 1-1: USB disconnect, device number 17 [ 357.869368][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.386714][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 360.972521][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 361.049881][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.096307][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.101620][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.116924][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.118156][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.401105][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.403062][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.403464][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.453017][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.455427][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.619368][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 361.619389][ T36] audit: type=1326 audit(1781452901.104:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.621146][ T36] audit: type=1326 audit(1781452901.104:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.621199][ T36] audit: type=1326 audit(1781452901.104:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.623173][ T36] audit: type=1326 audit(1781452901.104:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.623228][ T36] audit: type=1326 audit(1781452901.104:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.623268][ T36] audit: type=1326 audit(1781452901.104:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.623654][ T36] audit: type=1326 audit(1781452901.104:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.628693][ T36] audit: type=1326 audit(1781452901.113:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.631368][ T36] audit: type=1326 audit(1781452901.113:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.631680][ T36] audit: type=1326 audit(1781452901.113:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8223 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6d7c64ce59 code=0x7ffc0000 [ 361.656528][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 361.657083][ T8224] openvswitch: netlink: Duplicate key (type 6). [ 362.133118][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.652'. [ 362.505431][ T8233] comedi comedi1: 8255: I/O base address not correctly aligned [ 363.758487][ T5617] Bluetooth: hci5: command tx timeout [ 365.888207][ T8258] bond0: entered promiscuous mode [ 365.888237][ T8258] bond_slave_0: entered promiscuous mode [ 365.888484][ T8258] bond_slave_1: entered promiscuous mode [ 366.166949][ T5617] Bluetooth: hci5: command tx timeout [ 367.238106][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'. [ 367.476937][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.477068][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.477290][ T8213] bridge_slave_0: entered allmulticast mode [ 367.479566][ T8213] bridge_slave_0: entered promiscuous mode [ 367.487378][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.487583][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.487856][ T8213] bridge_slave_1: entered allmulticast mode [ 367.494643][ T8213] bridge_slave_1: entered promiscuous mode [ 367.553430][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.556896][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.594624][ T8213] team0: Port device team_slave_0 added [ 367.596904][ T8213] team0: Port device team_slave_1 added [ 367.625474][ T5614] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 367.652697][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.652717][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.652737][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.676717][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.676737][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.676778][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.866665][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 368.028141][ T5614] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 368.028180][ T5614] usb 3-1: config 0 interface 0 has no altsetting 0 [ 368.028227][ T5614] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= d.00 [ 368.028249][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.033605][ T5614] usb 3-1: config 0 descriptor?? [ 368.034806][ T8271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.123499][ T8285] FAULT_INJECTION: forcing a failure. [ 368.123499][ T8285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.123588][ T8285] CPU: 1 UID: 0 PID: 8285 Comm: syz.0.661 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.123612][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.123629][ T8285] Call Trace: [ 368.123637][ T8285] [ 368.123646][ T8285] dump_stack_lvl+0xe8/0x150 [ 368.123755][ T8285] should_fail_ex+0x467/0x600 [ 368.123920][ T8285] _copy_from_user+0x2d/0xb0 [ 368.124013][ T8285] memdup_user+0x5e/0xd0 [ 368.124092][ T8285] strndup_user+0x68/0xd0 [ 368.124111][ T8285] __se_sys_fsconfig+0x4d6/0x810 [ 368.124187][ T8285] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 368.124210][ T8285] ? ksys_write+0x248/0x270 [ 368.124278][ T8285] ? __x64_sys_fsconfig+0x20/0xc0 [ 368.124302][ T8285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.124338][ T8285] do_syscall_64+0x174/0x580 [ 368.124467][ T8285] ? clear_bhb_loop+0x40/0x90 [ 368.124492][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.124516][ T8285] RIP: 0033:0x7f6d7c64ce59 [ 368.124535][ T8285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.124552][ T8285] RSP: 002b:00007f6d7a85c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 368.124573][ T8285] RAX: ffffffffffffffda RBX: 00007f6d7c8c6180 RCX: 00007f6d7c64ce59 [ 368.124587][ T8285] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 0000000000000007 [ 368.124600][ T8285] RBP: 00007f6d7a85c090 R08: 0000000000000000 R09: 0000000000000000 [ 368.124612][ T8285] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 368.124624][ T8285] R13: 00007f6d7c8c6218 R14: 00007f6d7c8c6180 R15: 00007ffeb7323488 [ 368.124655][ T8285] [ 368.865816][ T5617] Bluetooth: hci5: command tx timeout [ 368.922393][ T8271] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.660'. [ 369.255672][ T8287] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 369.600202][ T5614] kye 0003:0458:501A.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 369.602149][ T5614] kye 0003:0458:501A.0002: unknown main item tag 0x2 [ 369.602196][ T5614] kye 0003:0458:501A.0002: unknown main item tag 0x6 [ 369.602972][ T5614] kye 0003:0458:501A.0002: ignoring exceeding usage max [ 369.604894][ T5614] kye 0003:0458:501A.0002: unknown main item tag 0x0 [ 369.604927][ T5614] kye 0003:0458:501A.0002: item fetching failed at offset 34/40 [ 369.606510][ T5614] kye 0003:0458:501A.0002: parse failed [ 369.606588][ T5614] kye 0003:0458:501A.0002: probe with driver kye failed with error -22 [ 369.894203][ T5896] usb 3-1: USB disconnect, device number 23 [ 370.066743][ T8213] hsr_slave_0: entered promiscuous mode [ 370.067669][ T8213] hsr_slave_1: entered promiscuous mode [ 370.068251][ T8213] debugfs: 'hsr0' already exists in 'hsr' [ 370.068268][ T8213] Cannot create hsr debugfs directory [ 370.111329][ T5614] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 370.289907][ T5614] usb 2-1: Using ep0 maxpacket: 16 [ 370.314997][ T5614] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.315059][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.315185][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.315217][ T5614] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 370.315265][ T5614] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.316501][ T5614] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.316531][ T5614] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.316552][ T5614] usb 2-1: Manufacturer: syz [ 370.329071][ T5614] usb 2-1: config 0 descriptor?? [ 372.288784][ T5617] Bluetooth: hci5: command tx timeout [ 372.510430][ T5614] rc_core: IR keymap rc-hauppauge not found [ 372.510457][ T5614] Registered IR keymap rc-empty [ 372.510888][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.542603][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.600833][ T5614] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 372.644800][ T5614] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 372.742640][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.767072][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.781606][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.803035][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.824746][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.846433][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.870656][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.889698][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.911315][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.932872][ T5614] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 372.985494][ T5614] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 372.985525][ T5614] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 373.263507][ T5802] usb 2-1: USB disconnect, device number 17 [ 374.641184][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'. [ 375.916384][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 376.149037][ T8213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.201011][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.202073][ T8213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.296687][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.300107][ T8213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.365439][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.365862][ T8332] hsr0: entered promiscuous mode [ 376.368337][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 376.615936][ T8213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 376.673957][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.096993][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.121467][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.133632][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.133850][ T7996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.237368][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.237450][ T7996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.245866][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 380.146798][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 381.385102][ T5614] IPVS: starting estimator thread 0... [ 381.482287][ T8376] IPVS: using max 17 ests per chain, 40800 per kthread [ 382.233779][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 382.555618][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.781254][ T8401] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.688'. [ 384.071604][ T8213] veth0_vlan: entered promiscuous mode [ 384.087738][ T8213] veth1_vlan: entered promiscuous mode [ 384.246768][ T8213] veth0_macvtap: entered promiscuous mode [ 384.260075][ T8213] veth1_macvtap: entered promiscuous mode [ 384.284788][ T11] block nbd0: Possible stuck request ffff888027030000: control (read@0,1024B). Runtime 60 seconds [ 384.284837][ T11] block nbd0: Possible stuck request ffff8880270301c0: control (read@1024,1024B). Runtime 60 seconds [ 384.284865][ T11] block nbd0: Possible stuck request ffff888027030380: control (read@2048,1024B). Runtime 60 seconds [ 384.284891][ T11] block nbd0: Possible stuck request ffff888027030540: control (read@3072,1024B). Runtime 60 seconds [ 384.355417][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.375730][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.552972][ T8003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.566822][ T8003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.572646][ T8003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.947740][ T8003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.203136][ T4970] udevd[4970]: worker [6185] /devices/virtual/block/nbd0 is taking a long time [ 391.813851][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.813927][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.878682][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 393.906267][ T8003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.906292][ T8003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.639958][ T5896] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 394.714142][ T8004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.714167][ T8004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.813354][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 394.815714][ T5896] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 394.815753][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 394.815785][ T5896] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 394.815808][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.843882][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 394.843904][ T36] audit: type=1326 audit(1781452931.782:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.2.699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b03c6ce59 code=0x0 [ 394.914891][ T5896] usb 2-1: config 0 descriptor?? [ 395.506844][ T8450] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.701'. [ 395.817106][ T8452] comedi comedi1: 8255: I/O base address not correctly aligned [ 396.879620][ T8457] bond0: entered promiscuous mode [ 396.879651][ T8457] bond_slave_0: entered promiscuous mode [ 396.879976][ T8457] bond_slave_1: entered promiscuous mode [ 397.133538][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.134739][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.140602][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.141860][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.633064][ T5896] usbhid 2-1:0.0: can't add hid device: -71 [ 400.633207][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 400.672802][ T5896] usb 2-1: USB disconnect, device number 18 [ 400.864177][ T8480] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.709'. [ 401.215003][ T5614] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 401.237926][ T5896] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 401.262563][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.714'. [ 401.376921][ T8495] bond1: (slave bond_slave_1): Device is not our slave [ 401.376950][ T8495] bond1: option active_slave: invalid value (bond_slave_1) [ 401.396994][ T5614] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 401.397027][ T5614] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 401.397046][ T5614] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 401.397065][ T5614] usb 5-1: config 8 has no interface number 0 [ 401.397109][ T5614] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.399008][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 401.433768][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.433801][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.439868][ T5896] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.439904][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.439925][ T5896] usb 2-1: Product: syz [ 401.439939][ T5896] usb 2-1: Manufacturer: syz [ 401.439953][ T5896] usb 2-1: SerialNumber: syz [ 401.498504][ T5614] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 401.498539][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.498559][ T5614] usb 5-1: Product: syz [ 401.498574][ T5614] usb 5-1: Manufacturer: syz [ 401.498588][ T5614] usb 5-1: SerialNumber: syz [ 401.607674][ T5896] usb 2-1: 0:2 : does not exist [ 401.830230][ T8495] bond1 (unregistering): Released all slaves [ 401.868415][ T5896] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 402.255206][ T5896] usb 2-1: USB disconnect, device number 19 [ 402.695675][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.420129][ T5614] usb 5-1: USB disconnect, device number 11 [ 405.859625][ T8521] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 405.860236][ T8521] overlayfs: overlapping lowerdir path [ 406.524458][ T5868] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 406.967113][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 407.434655][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.434687][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.469283][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.469322][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.469349][ T5868] usb 2-1: Product: syz [ 407.469362][ T5868] usb 2-1: Manufacturer: syz [ 407.469377][ T5868] usb 2-1: SerialNumber: syz [ 407.810368][ T5868] usb 2-1: 0:2 : does not exist [ 407.860578][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 407.908699][ T5868] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 408.086947][ T5868] usb 2-1: USB disconnect, device number 20 [ 408.789775][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.318710][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.739'. [ 414.318811][ T8596] openvswitch: netlink: Flow actions attr not present in new flow. [ 414.668262][ T5622] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 414.809009][ T5622] usb 6-1: device descriptor read/64, error -71 [ 415.092591][ T5622] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 415.371848][ T8613] comedi comedi1: 8255: I/O base address not correctly aligned [ 416.156932][ T5802] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 416.315747][ T5622] usb 6-1: device descriptor read/64, error -71 [ 416.371041][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 416.373430][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.373459][ T5802] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.381893][ T5802] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.381926][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.381946][ T5802] usb 1-1: Product: syz [ 416.381959][ T5802] usb 1-1: Manufacturer: syz [ 416.381973][ T5802] usb 1-1: SerialNumber: syz [ 416.405662][ T5802] usb 1-1: 0:2 : does not exist [ 416.447648][ T5622] usb usb6-port1: attempt power cycle [ 416.764571][ T5802] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 416.819831][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 416.880593][ T5622] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 416.899823][ T11] block nbd0: Possible stuck request ffff888027030000: control (read@0,1024B). Runtime 90 seconds [ 416.899873][ T11] block nbd0: Possible stuck request ffff8880270301c0: control (read@1024,1024B). Runtime 90 seconds [ 416.899902][ T11] block nbd0: Possible stuck request ffff888027030380: control (read@2048,1024B). Runtime 90 seconds [ 416.899929][ T11] block nbd0: Possible stuck request ffff888027030540: control (read@3072,1024B). Runtime 90 seconds [ 416.908212][ T5622] usb 6-1: device descriptor read/8, error -71 [ 417.184658][ T5802] usb 1-1: USB disconnect, device number 18 [ 417.207878][ T5622] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 417.250280][ T5622] usb 6-1: device descriptor read/8, error -71 [ 417.365848][ T5622] usb usb6-port1: unable to enumerate USB device [ 417.437761][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.975351][ T8632] comedi comedi1: 8255: I/O base address not correctly aligned [ 419.141178][ T5868] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 423.593584][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 424.017536][ T5868] usb 5-1: device descriptor read/all, error -71 [ 424.443687][ T8657] comedi comedi1: 8255: I/O base address not correctly aligned [ 427.432030][ T8681] comedi comedi1: 8255: I/O base address not correctly aligned [ 428.189448][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 430.801230][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 431.642628][ T8711] comedi comedi1: 8255: I/O base address not correctly aligned [ 432.489452][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 432.613466][ T8716] can0: slcan on ttyS3. [ 433.235684][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 433.409637][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 433.409675][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.409693][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.409718][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.409731][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.571947][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.573004][ T10] usb 3-1: invalid MIDI out EP 0 [ 433.946938][ T8725] can0 (unregistered): slcan off ttyS3. [ 434.844592][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 434.854567][ T10] usb 3-1: USB disconnect, device number 24 [ 437.890013][ T8754] comedi comedi1: 8255: I/O base address not correctly aligned [ 442.880920][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 442.906365][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 442.922877][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 442.923986][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 442.944669][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 443.365774][ T8788] netlink: 830 bytes leftover after parsing attributes in process `syz.2.793'. [ 444.444242][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.795'. [ 444.651724][ T5622] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 445.394821][ T5617] Bluetooth: hci6: command tx timeout [ 445.517318][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 445.519819][ T5622] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.519849][ T5622] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.523405][ T5622] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.523441][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.523460][ T5622] usb 1-1: Product: syz [ 445.523474][ T5622] usb 1-1: Manufacturer: syz [ 445.523488][ T5622] usb 1-1: SerialNumber: syz [ 445.636227][ T5622] usb 1-1: 0:2 : does not exist [ 445.851514][ T5622] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 446.198382][ T5622] usb 1-1: USB disconnect, device number 19 [ 447.671262][ T5617] Bluetooth: hci6: command tx timeout [ 448.104152][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.104553][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.104679][ T8779] bridge_slave_0: entered allmulticast mode [ 448.107630][ T8779] bridge_slave_0: entered promiscuous mode [ 448.111021][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.111248][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.111431][ T8779] bridge_slave_1: entered allmulticast mode [ 448.113990][ T8779] bridge_slave_1: entered promiscuous mode [ 448.209307][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.255293][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.268669][ T5614] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 448.413541][ T8779] team0: Port device team_slave_0 added [ 448.431189][ T5614] usb 3-1: Using ep0 maxpacket: 16 [ 448.448222][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.448259][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.448276][ T5614] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 448.448302][ T5614] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 448.448315][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.450662][ T8779] team0: Port device team_slave_1 added [ 448.496467][ T5614] usb 3-1: config 0 descriptor?? [ 449.199178][ T5614] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 449.199220][ T5614] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 449.199236][ T5614] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 449.223156][ T5614] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 449.223182][ T5614] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 449.223200][ T5614] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 449.254634][ T5614] microsoft 0003:045E:07DA.0003: implement() called with n (56) > 32! (kworker/1:5) [ 449.608661][ T5614] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 449.608703][ T5614] microsoft 0003:045E:07DA.0003: no inputs found [ 449.608712][ T5614] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 449.701644][ T5614] usb 3-1: USB disconnect, device number 25 [ 449.894136][ T5617] Bluetooth: hci6: command tx timeout [ 449.940138][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.940159][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.940187][ T8779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.944475][ T8842] fido_id[8842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 450.110208][ T11] block nbd0: Possible stuck request ffff888027030000: control (read@0,1024B). Runtime 120 seconds [ 450.110260][ T11] block nbd0: Possible stuck request ffff8880270301c0: control (read@1024,1024B). Runtime 120 seconds [ 450.110294][ T11] block nbd0: Possible stuck request ffff888027030380: control (read@2048,1024B). Runtime 120 seconds [ 450.110309][ T11] block nbd0: Possible stuck request ffff888027030540: control (read@3072,1024B). Runtime 120 seconds [ 450.335636][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.335652][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.335668][ T8779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.481550][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 450.674560][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.674597][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.674619][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.674662][ T42] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.674687][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.730850][ T42] usb 6-1: config 0 descriptor?? [ 450.944906][ T8855] netlink: 48 bytes leftover after parsing attributes in process `syz.0.810'. [ 451.198020][ T8857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'. [ 451.233129][ T8845] comedi comedi3: 8255: I/O base address not correctly aligned [ 451.520587][ T8779] hsr_slave_0: entered promiscuous mode [ 451.553834][ T8779] hsr_slave_1: entered promiscuous mode [ 451.623141][ T8779] debugfs: 'hsr0' already exists in 'hsr' [ 451.623175][ T8779] Cannot create hsr debugfs directory [ 451.722067][ T42] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 451.774692][ T42] usb 6-1: USB disconnect, device number 6 [ 451.912001][ T8860] fido_id[8860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 452.146918][ T5617] Bluetooth: hci6: command tx timeout [ 453.175492][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 453.344417][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 453.402224][ T42] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 453.402259][ T42] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 453.402280][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 453.402301][ T42] usb 6-1: config 1 has no interface number 0 [ 453.402380][ T42] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.402402][ T42] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 453.402441][ T42] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 453.402463][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.476903][ T42] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 453.565632][ T8779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 453.687825][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.922635][ T8779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 453.949632][ T42] snd_usb_pod 6-1:1.1: invalid control EP [ 453.949658][ T42] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 453.969177][ T42] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 453.970155][ T42] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 454.067623][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.069317][ T8779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 454.135887][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.136976][ T8779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 454.195402][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.399517][ T5802] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 454.625652][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 454.630660][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.655038][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.655071][ T5802] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.657247][ T8779] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.672862][ T5802] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.672898][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.672918][ T5802] usb 1-1: Product: syz [ 454.672933][ T5802] usb 1-1: Manufacturer: syz [ 454.672948][ T5802] usb 1-1: SerialNumber: syz [ 454.716418][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.716628][ T7997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.730450][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.730662][ T7997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.815330][ T5802] usb 1-1: 0:2 : does not exist [ 455.123810][ T5802] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 455.215755][ T5802] usb 1-1: USB disconnect, device number 20 [ 455.472240][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.698757][ T5802] usb 6-1: USB disconnect, device number 7 [ 456.081342][ T8914] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 456.091818][ T8914] netlink: 120 bytes leftover after parsing attributes in process `syz.5.826'. [ 456.091857][ T8914] netlink: 'syz.5.826': attribute type 1 has an invalid length. [ 456.091870][ T8914] netlink: 64 bytes leftover after parsing attributes in process `syz.5.826'. [ 456.136191][ T5745] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 456.357838][ T5745] usb 3-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 456.357876][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.357897][ T5745] usb 3-1: Product: â‘” [ 456.357912][ T5745] usb 3-1: Manufacturer: Ñ™ [ 456.357927][ T5745] usb 3-1: SerialNumber: Ћ [ 456.563154][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.491077][ T8779] veth0_vlan: entered promiscuous mode [ 457.567329][ T8942] FAULT_INJECTION: forcing a failure. [ 457.567329][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 457.567369][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.0.831 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 457.567390][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.567402][ T8942] Call Trace: [ 457.567410][ T8942] [ 457.567418][ T8942] dump_stack_lvl+0xe8/0x150 [ 457.567451][ T8942] should_fail_ex+0x467/0x600 [ 457.567486][ T8942] should_failslab+0xa8/0x100 [ 457.567623][ T8942] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 457.567682][ T8942] ? __alloc_skb+0x1d7/0x7a0 [ 457.567846][ T8942] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.567916][ T8942] __alloc_skb+0x1d7/0x7a0 [ 457.567941][ T8942] netlink_sendmsg+0x5d4/0xb40 [ 457.568028][ T8942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.568059][ T8942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.568127][ T8942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.568152][ T8942] ____sys_sendmsg+0x9a2/0xa10 [ 457.568209][ T8942] ? __might_fault+0xaf/0x130 [ 457.568266][ T8942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.568299][ T8942] ? import_iovec+0x73/0xa0 [ 457.568367][ T8942] ___sys_sendmsg+0x2a5/0x360 [ 457.568390][ T8942] ? __lock_acquire+0x683/0x2cc0 [ 457.568489][ T8942] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.568544][ T8942] ? __fget_files+0x2a/0x420 [ 457.568591][ T8942] ? __fget_files+0x3a8/0x420 [ 457.568614][ T8942] __x64_sys_sendmsg+0x1c3/0x2a0 [ 457.568640][ T8942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.568673][ T8942] ? __pfx_ksys_write+0x10/0x10 [ 457.568704][ T8942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.568727][ T8942] do_syscall_64+0x174/0x580 [ 457.568753][ T8942] ? trace_irq_disable+0x3b/0x140 [ 457.568817][ T8942] ? clear_bhb_loop+0x40/0x90 [ 457.568840][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.568859][ T8942] RIP: 0033:0x7f6d7c64ce59 [ 457.568879][ T8942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.568895][ T8942] RSP: 002b:00007f6d7a89e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.568914][ T8942] RAX: ffffffffffffffda RBX: 00007f6d7c8c5fa0 RCX: 00007f6d7c64ce59 [ 457.568927][ T8942] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 457.568939][ T8942] RBP: 00007f6d7a89e090 R08: 0000000000000000 R09: 0000000000000000 [ 457.568950][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.568971][ T8942] R13: 00007f6d7c8c6038 R14: 00007f6d7c8c5fa0 R15: 00007ffeb7323488 [ 457.568999][ T8942] [ 457.583462][ T8779] veth1_vlan: entered promiscuous mode [ 457.777583][ T8779] veth0_macvtap: entered promiscuous mode [ 457.798264][ T8779] veth1_macvtap: entered promiscuous mode [ 457.859561][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.926216][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.982451][ T7996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.983092][ T7996] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.987963][ T7996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.992030][ T7996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.563664][ T5745] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 459.563873][ T5745] gspca_stv06xx: st6422 sensor detected [ 459.850890][ T5745] STV06xx 3-1:1.0: probe with driver STV06xx failed with error -71 [ 459.851930][ T5745] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 459.861972][ T5745] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 459.864966][ T5745] usb 3-1: unit 4 not found! [ 459.905623][ T8004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.905646][ T8004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.058226][ T5745] usb 3-1: USB disconnect, device number 26 [ 460.209256][ T8957] netlink: 168 bytes leftover after parsing attributes in process `syz.2.836'. [ 460.209330][ T8957] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 460.480670][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.480750][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.536599][ T5959] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 460.671957][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.720706][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 460.736525][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.736587][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.736616][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 460.736637][ T5959] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 460.736660][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.859151][ T5959] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 460.859187][ T5959] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 460.859206][ T5959] usb 2-1: Manufacturer: syz [ 460.890683][ T5959] usb 2-1: config 0 descriptor?? [ 461.119378][ T7996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.119404][ T7996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.323414][ T5959] rc_core: IR keymap rc-hauppauge not found [ 461.323437][ T5959] Registered IR keymap rc-empty [ 461.323594][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.367203][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.414350][ T5959] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 461.460435][ T5959] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 461.514842][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.527102][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.551211][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.570295][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.592640][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.634080][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.654335][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.671301][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.697068][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.711896][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 461.745647][ T5959] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 461.745728][ T5959] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 462.859884][ T821] usb 2-1: USB disconnect, device number 21 [ 463.641203][ T8982] 9p: Bad value for 'rfdno' [ 463.789482][ T8984] FAULT_INJECTION: forcing a failure. [ 463.789482][ T8984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.789524][ T8984] CPU: 1 UID: 0 PID: 8984 Comm: syz.1.845 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.789546][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.789558][ T8984] Call Trace: [ 463.789566][ T8984] [ 463.789574][ T8984] dump_stack_lvl+0xe8/0x150 [ 463.789604][ T8984] should_fail_ex+0x467/0x600 [ 463.789639][ T8984] _copy_from_iter+0x1d3/0x1660 [ 463.789666][ T8984] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 463.789832][ T8984] ? __pfx_policy_nodemask+0x10/0x10 [ 463.789884][ T8984] ? unwind_next_frame+0x8f/0x2550 [ 463.789928][ T8984] ? __pfx__copy_from_iter+0x10/0x10 [ 463.789957][ T8984] ? alloc_pages_mpol+0x115/0x280 [ 463.789987][ T8984] copy_page_from_iter+0x219/0x2d0 [ 463.790018][ T8984] tun_get_user+0x1bd0/0x4370 [ 463.790099][ T8984] ? is_bpf_text_address+0x292/0x2b0 [ 463.790160][ T8984] ? tun_get_user+0x718/0x4370 [ 463.790187][ T8984] ? orc_sort_swap+0xd0/0x130 [ 463.790216][ T8984] ? __lock_acquire+0x683/0x2cc0 [ 463.790243][ T8984] ? __pfx_tun_get_user+0x10/0x10 [ 463.790271][ T8984] ? __lock_acquire+0x683/0x2cc0 [ 463.790311][ T8984] ? ref_tracker_alloc+0x353/0x4c0 [ 463.790379][ T8984] ? get_pid_task+0x20/0x1f0 [ 463.790416][ T8984] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 463.790443][ T8984] ? tun_get+0x1c/0x2f0 [ 463.790468][ T8984] ? tun_get+0x1c/0x2f0 [ 463.790497][ T8984] ? tun_get+0x1c/0x2f0 [ 463.790521][ T8984] ? tun_get+0x1c/0x2f0 [ 463.790546][ T8984] tun_chr_write_iter+0x119/0x200 [ 463.790572][ T8984] vfs_write+0x61e/0xbb0 [ 463.790601][ T8984] ? __pfx_vfs_write+0x10/0x10 [ 463.790628][ T8984] ? __fget_files+0x2a/0x420 [ 463.790651][ T8984] ksys_write+0x156/0x270 [ 463.790672][ T8984] ? __pfx_ksys_write+0x10/0x10 [ 463.790704][ T8984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.790723][ T8984] do_syscall_64+0x174/0x580 [ 463.790749][ T8984] ? trace_irq_disable+0x3b/0x140 [ 463.790770][ T8984] ? clear_bhb_loop+0x40/0x90 [ 463.790791][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.790810][ T8984] RIP: 0033:0x7f928957d68e [ 463.790826][ T8984] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.790841][ T8984] RSP: 002b:00007f9287815fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.790860][ T8984] RAX: ffffffffffffffda RBX: 00007f92878166c0 RCX: 00007f928957d68e [ 463.790871][ T8984] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 463.790883][ T8984] RBP: 00007f9287816090 R08: 0000000000000000 R09: 0000000000000000 [ 463.790894][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.790905][ T8984] R13: 00007f9289836038 R14: 00007f9289835fa0 R15: 00007ffec684c1e8 [ 463.790934][ T8984] [ 464.884198][ T5622] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 465.714926][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 465.803325][ T5622] usb 6-1: Using ep0 maxpacket: 16 [ 465.890966][ T5622] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.890999][ T5622] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.897745][ T5622] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.897780][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.897801][ T5622] usb 6-1: Product: syz [ 465.897816][ T5622] usb 6-1: Manufacturer: syz [ 465.897828][ T5622] usb 6-1: SerialNumber: syz [ 466.040488][ T5622] usb 6-1: 0:2 : does not exist [ 466.266868][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 466.371750][ T5622] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 466.575804][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 466.577568][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.577587][ T42] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.610610][ T42] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.610631][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.610643][ T42] usb 7-1: Product: syz [ 466.610651][ T42] usb 7-1: Manufacturer: syz [ 466.610659][ T42] usb 7-1: SerialNumber: syz [ 466.676720][ T42] usb 7-1: 0:2 : does not exist [ 466.736051][ T5622] usb 6-1: USB disconnect, device number 8 [ 466.969018][ T42] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 467.082029][ T42] usb 7-1: USB disconnect, device number 2 [ 467.342304][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.440290][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 468.084925][ T9013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.851'. [ 469.243491][ T9011] XFS (nullb0): Invalid superblock magic number [ 472.729234][ T9008] uprobe: syz.0.851:9008 failed to unregister, leaking uprobe [ 472.732964][ T9008] uprobe: syz.0.851:9008 failed to unregister, leaking uprobe [ 474.490488][ T821] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 474.654554][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 474.656994][ T821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.657052][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.657081][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 474.657103][ T821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 474.657127][ T821] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.658608][ T821] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.658637][ T821] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.658658][ T821] usb 3-1: Manufacturer: syz [ 474.764637][ T821] usb 3-1: config 0 descriptor?? [ 475.173506][ T9047] 9p: Bad value for 'rfdno' [ 475.188642][ T821] rc_core: IR keymap rc-hauppauge not found [ 475.188802][ T821] Registered IR keymap rc-empty [ 475.188962][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.219485][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.234042][ T821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 475.236741][ T821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 475.291711][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.308341][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.332671][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.350163][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.376308][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.393084][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.414428][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.436119][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.457573][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.481043][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 475.541251][ T821] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 475.541283][ T821] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 476.348439][ T5802] usb 3-1: USB disconnect, device number 27 [ 476.374041][ T5622] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 476.537404][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 476.539244][ T5622] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.539276][ T5622] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.574148][ T5622] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.574184][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.574202][ T5622] usb 1-1: Product: syz [ 476.574216][ T5622] usb 1-1: Manufacturer: syz [ 476.574229][ T5622] usb 1-1: SerialNumber: syz [ 476.628420][ T5622] usb 1-1: 0:2 : does not exist [ 476.819371][ T5622] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 476.944970][ T9059] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 476.998024][ T5622] usb 1-1: USB disconnect, device number 21 [ 477.315990][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.463829][ T9067] comedi comedi1: 8255: I/O base address not correctly aligned [ 479.921368][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.870'. [ 480.300321][ T36] audit: type=1326 audit(1781453011.507:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.308612][ T36] audit: type=1326 audit(1781453011.517:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.355364][ T36] audit: type=1326 audit(1781453011.565:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.356310][ T36] audit: type=1326 audit(1781453011.565:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.356359][ T36] audit: type=1326 audit(1781453011.565:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.356399][ T36] audit: type=1326 audit(1781453011.565:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.362117][ T36] audit: type=1326 audit(1781453011.565:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.362175][ T36] audit: type=1326 audit(1781453011.565:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.362215][ T36] audit: type=1326 audit(1781453011.565:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 480.365584][ T36] audit: type=1326 audit(1781453011.565:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.2.875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b03c6ce59 code=0x7ffc0000 [ 481.732726][ T11] block nbd0: Possible stuck request ffff888027030000: control (read@0,1024B). Runtime 150 seconds [ 481.732779][ T11] block nbd0: Possible stuck request ffff8880270301c0: control (read@1024,1024B). Runtime 150 seconds [ 481.732808][ T11] block nbd0: Possible stuck request ffff888027030380: control (read@2048,1024B). Runtime 150 seconds [ 481.732837][ T11] block nbd0: Possible stuck request ffff888027030540: control (read@3072,1024B). Runtime 150 seconds [ 481.865456][ T9111] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 485.237971][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 490.171106][ T9167] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 491.231293][ T5745] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 491.400075][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.400142][ T5745] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 491.400181][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.417902][ T5745] usb 3-1: config 0 descriptor?? [ 491.743210][ T5745] usbhid 3-1:0.0: can't add hid device: -71 [ 491.743350][ T5745] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 491.877467][ T9196] process 'syz.6.906' launched './file0' with NULL argv: empty string added [ 492.862839][ T5745] usb 3-1: USB disconnect, device number 28 [ 492.880504][ T9201] tipc: Enabling of bearer rejected, failed to enable media [ 493.512835][ T5745] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 493.678308][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.678365][ T5745] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 493.678429][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.682871][ T5745] usb 3-1: config 0 descriptor?? [ 495.019828][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 495.129944][ T5745] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 495.190386][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.191002][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.198093][ T5745] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 495.554748][ T9239] ======================================================= [ 495.554748][ T9239] WARNING: The mand mount option has been deprecated and [ 495.554748][ T9239] and is ignored by this kernel. Remove the mand [ 495.554748][ T9239] option from the mount to silence this warning. [ 495.554748][ T9239] ======================================================= [ 496.486492][ T5622] usb 3-1: USB disconnect, device number 29 [ 496.492367][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 498.957444][ T9265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.310249][ T9269] trusted_key: encrypted_key: insufficient parameters specified [ 505.679536][ T9309] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 511.617648][ T9365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.951850][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.951'. [ 512.780605][ T37] INFO: task syz.3.604:8071 blocked for more than 143 seconds. [ 512.780644][ T37] Not tainted syzkaller #0 [ 512.780655][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.780708][ T37] task:syz.3.604 state:D stack:27192 pid:8071 tgid:8066 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 512.780880][ T37] Call Trace: [ 512.780888][ T37] [ 512.780903][ T37] __schedule+0x16d8/0x55e0 [ 512.781056][ T37] ? __pfx___schedule+0x10/0x10 [ 512.781099][ T37] rt_mutex_schedule+0x76/0xf0 [ 512.781243][ T37] rt_mutex_slowlock_block+0x55f/0x690 [ 512.781993][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 512.782072][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 512.782096][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 512.782129][ T37] ? sync_bdevs+0x276/0x470 [ 512.782449][ T37] ? sync_bdevs+0x276/0x470 [ 512.782503][ T37] mutex_lock_nested+0x168/0x1d0 [ 512.782564][ T37] sync_bdevs+0x276/0x470 [ 512.782621][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.782962][ T37] __ia32_sys_sync+0xc5/0x120 [ 512.783201][ T37] ? __pfx___ia32_sys_sync+0x10/0x10 [ 512.783271][ T37] ? __secure_computing+0xe7/0x2b0 [ 512.783343][ T37] do_syscall_64+0x174/0x580 [ 512.783382][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.783433][ T37] ? clear_bhb_loop+0x40/0x90 [ 512.783459][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.783513][ T37] RIP: 0033:0x7fb744ebce59 [ 512.783534][ T37] RSP: 002b:00007fb7430ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 512.783589][ T37] RAX: ffffffffffffffda RBX: 00007fb745136090 RCX: 00007fb744ebce59 [ 512.783635][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.783648][ T37] RBP: 00007fb745136090 R08: 0000000000000000 R09: 0000000000000000 [ 512.783660][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.783672][ T37] R13: 00007fb745136128 R14: 00007fb745136090 R15: 00007ffcd74abb78 [ 512.783784][ T37] [ 512.783796][ T37] INFO: task syz.3.604:8072 blocked for more than 143 seconds. [ 512.783813][ T37] Not tainted syzkaller #0 [ 512.783822][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.783862][ T37] task:syz.3.604 state:D stack:26832 pid:8072 tgid:8066 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 512.784147][ T37] Call Trace: [ 512.784155][ T37] [ 512.784206][ T37] __schedule+0x16d8/0x55e0 [ 512.784432][ T37] ? __pfx___schedule+0x10/0x10 [ 512.784493][ T37] ? rt_mutex_slowlock_block+0x33a/0x690 [ 512.784611][ T37] rt_mutex_schedule+0x76/0xf0 [ 512.784656][ T37] rt_mutex_slowlock_block+0x55f/0x690 [ 512.784723][ T37] ? rt_mutex_slowlock_block+0x33a/0x690 [ 512.784781][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 512.784825][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 512.784879][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 512.785003][ T37] ? sync_bdevs+0x276/0x470 [ 512.785108][ T37] ? sync_bdevs+0x276/0x470 [ 512.785150][ T37] mutex_lock_nested+0x168/0x1d0 [ 512.785205][ T37] sync_bdevs+0x276/0x470 [ 512.785417][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.785587][ T37] __ia32_sys_sync+0xc5/0x120 [ 512.785651][ T37] ? __pfx___ia32_sys_sync+0x10/0x10 [ 512.785723][ T37] ? __secure_computing+0xe7/0x2b0 [ 512.785789][ T37] do_syscall_64+0x174/0x580 [ 512.785851][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.785905][ T37] ? clear_bhb_loop+0x40/0x90 [ 512.785971][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.786024][ T37] RIP: 0033:0x7fb744ebce59 [ 512.786074][ T37] RSP: 002b:00007fb7430cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 512.786142][ T37] RAX: ffffffffffffffda RBX: 00007fb745136180 RCX: 00007fb744ebce59 [ 512.786158][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.786201][ T37] RBP: 00007fb745136180 R08: 0000000000000000 R09: 0000000000000000 [ 512.786214][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.786256][ T37] R13: 00007fb745136218 R14: 00007fb745136180 R15: 00007ffcd74abb78 [ 512.786334][ T37] [ 512.786589][ T37] [ 512.786589][ T37] Showing all locks held in the system: [ 512.786646][ T37] 1 lock held by khungtaskd/37: [ 512.786693][ T37] #0: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 512.787141][ T37] 6 locks held by kworker/u8:5/144: [ 512.787185][ T37] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.787320][ T37] #1: ffffc900039dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.787432][ T37] #2: ffff8880345d8310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 512.787575][ T37] #3: ffff88802a693520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 512.787691][ T37] #4: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 512.787935][ T37] #5: ffff88813fe05d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 512.788513][ T37] 2 locks held by getty/5359: [ 512.788598][ T37] #0: ffff8880291000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 512.788716][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1390 [ 512.790463][ T37] 5 locks held by udevd/5814: [ 512.790512][ T37] #0: ffff88802b8fa480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 512.790824][ T37] #1: ffff88803363c6c0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb6c/0x38d0 [ 512.790951][ T37] #2: ffffffff8e4e8c78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 512.791223][ T37] #3: ffffffff8df08fb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 512.798323][ T37] #4: ffff88813fe05d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 512.798493][ T37] 2 locks held by kworker/1:2H/5833: [ 512.798509][ T37] 1 lock held by udevd/6185: [ 512.798520][ T37] #0: ffff888026fd54c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 512.798606][ T37] 6 locks held by kworker/u8:31/7992: [ 512.798653][ T37] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.798867][ T37] #1: ffffc9001d9cfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.799049][ T37] #2: ffff88801175e310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 512.799183][ T37] #3: ffff8880380b0120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 512.799912][ T37] #4: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 512.799966][ T37] #5: ffff88813fe05d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 512.800181][ T37] 6 locks held by kworker/u8:32/7993: [ 512.800195][ T37] 6 locks held by kworker/u8:34/7995: [ 512.800260][ T37] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.800344][ T37] #1: ffffc9001db8fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.800484][ T37] #2: ffff88803bdde310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 512.800563][ T37] #3: ffff88803419a120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 512.800947][ T37] #4: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 512.801046][ T37] #5: ffff88813fe05d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 512.801613][ T37] 4 locks held by kworker/u8:37/7998: [ 512.801660][ T37] 6 locks held by kworker/u8:39/8000: [ 512.801671][ T37] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.801765][ T37] #1: ffffc9001d95fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.802228][ T37] #2: ffff888020ffe310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 512.802349][ T37] #3: ffff888029e9d920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 512.802465][ T37] #4: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 512.802602][ T37] #5: ffff88813fe05d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 512.802795][ T37] 6 locks held by kworker/u8:42/8003: [ 512.802807][ T37] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.802982][ T37] #1: ffffc9001db5fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.803099][ T37] #2: ffff88803b76e310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 512.803558][ T37] #3: ffff888036228d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 512.808147][ T37] #4: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 512.808217][ T37] #5: ffff88813fe05d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 512.808394][ T37] 3 locks held by kworker/u8:43/8004: [ 512.808454][ T37] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.808579][ T37] #1: ffffc9001db3fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.808703][ T37] #2: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 512.808966][ T37] 1 lock held by syz.3.604/8071: [ 512.808978][ T37] #0: ffff888026fd54c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 512.809508][ T37] 1 lock held by syz.3.604/8072: [ 512.809522][ T37] #0: ffff888026fd54c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 512.809622][ T37] 1 lock held by syz.4.757/8670: [ 512.809632][ T37] #0: ffff888026fd54c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 512.809677][ T37] 1 lock held by syz.0.943/9320: [ 512.809688][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 512.809741][ T37] 1 lock held by syz.1.941/9327: [ 512.809752][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 [ 512.809803][ T37] 1 lock held by syz.1.941/9331: [ 512.809814][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 512.809876][ T37] 2 locks held by syz.1.941/9334: [ 512.809885][ T37] #0: ffff888031c7c928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 512.847896][ T37] #1: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 512.848157][ T37] 1 lock held by syz.1.941/9335: [ 512.848218][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 512.848483][ T37] 1 lock held by syz.2.947/9338: [ 512.848495][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 [ 512.848663][ T37] 1 lock held by syz.2.947/9340: [ 512.848675][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 512.869768][ T37] 3 locks held by syz.2.947/9341: [ 512.869933][ T37] #0: ffffffff8f1b83c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.870175][ T37] #1: ffffffff8f1b81d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 512.870512][ T37] #2: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x22a/0x650 [ 512.870679][ T37] 1 lock held by syz.2.947/9342: [ 512.870721][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 512.870865][ T37] 1 lock held by syz.2.947/9345: [ 512.870928][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 512.871034][ T37] 1 lock held by syz.2.947/9347: [ 512.871048][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 512.871424][ T37] 1 lock held by syz.2.947/9352: [ 512.871436][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 512.871713][ T37] 2 locks held by syz.6.951/9366: [ 512.871725][ T37] #0: ffff888033e9e7f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 512.871884][ T37] #1: ffff88803fa3e358 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x930 [ 512.872023][ T37] 1 lock held by syz.6.951/9367: [ 512.872035][ T37] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 512.872155][ T37] 1 lock held by syz.5.952/9369: [ 512.872167][ T37] #0: ffff888032bdac90 (&substream->lock){+.+.}-{3:3}, at: remove_wait_queue+0x23/0x110 [ 512.883711][ T37] [ 512.883761][ T37] ============================================= [ 512.883761][ T37] [ 512.883771][ T37] NMI backtrace for cpu 0 [ 512.883791][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 512.883813][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.883824][ T37] Call Trace: [ 512.883833][ T37] [ 512.883841][ T37] dump_stack_lvl+0xe8/0x150 [ 512.883873][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 512.883987][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.884012][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 512.884036][ T37] sys_info+0x135/0x170 [ 512.884054][ T37] watchdog+0xfd7/0x1030 [ 512.884083][ T37] ? watchdog+0x1c7/0x1030 [ 512.884111][ T37] kthread+0x388/0x470 [ 512.884138][ T37] ? __pfx_watchdog+0x10/0x10 [ 512.884160][ T37] ? __pfx_kthread+0x10/0x10 [ 512.884185][ T37] ret_from_fork+0x514/0xb70 [ 512.884231][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 512.884252][ T37] ? __switch_to+0xc89/0x1420 [ 512.884284][ T37] ? __pfx_kthread+0x10/0x10 [ 512.884310][ T37] ret_from_fork_asm+0x1a/0x30 [ 512.884349][ T37] [ 512.884375][ T37] Sending NMI from CPU 0 to CPUs 1: [ 512.884407][ C1] NMI backtrace for cpu 1 [ 512.884429][ C1] CPU: 1 UID: 0 PID: 9369 Comm: syz.5.952 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 512.884449][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.884459][ C1] RIP: 0010:lock_release+0x67/0x3c0 [ 512.884485][ C1] Code: 0f a3 05 cc b2 c7 0d 73 0d e8 a5 06 09 00 84 c0 0f 84 94 02 00 00 83 3d e6 c5 c7 0d 00 0f 84 1c 02 00 00 65 8b 05 a9 1f a8 10 <85> c0 0f 85 0d 02 00 00 65 4c 8b 3d b1 d8 a7 10 41 83 bf f4 0b 00 [ 512.884499][ C1] RSP: 0018:ffffc900079a7688 EFLAGS: 00000002 [ 512.884515][ C1] RAX: 0000000000000000 RBX: ffff88801db2c858 RCX: 0000000080000003 [ 512.884527][ C1] RDX: 0000000000000000 RSI: ffffffff8b873b80 RDI: ffffffff8b873b40 [ 512.884538][ C1] RBP: ffffc900079a7950 R08: ffff8880b883ba4b R09: 1ffff11017107749 [ 512.884551][ C1] R10: dffffc0000000000 R11: ffffed101710774a R12: ffff88801db2bd80 [ 512.884563][ C1] R13: ffffffff8b19bd13 R14: ffff88801db2c870 R15: ffff8880288b2c58 [ 512.884576][ C1] FS: 00007f12453066c0(0000) GS:ffff8881264a1000(0000) knlGS:0000000000000000 [ 512.884590][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.884601][ C1] CR2: 0000200000001000 CR3: 000000003e2ae000 CR4: 00000000003526f0 [ 512.884616][ C1] Call Trace: [ 512.884622][ C1] [ 512.884633][ C1] _raw_spin_unlock+0x16/0x50 [ 512.884656][ C1] rtlock_slowlock_locked+0x2f13/0x3c20 [ 512.884674][ C1] ? __lock_acquire+0x683/0x2cc0 [ 512.884704][ C1] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 512.884721][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 512.884739][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 512.884760][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 512.884786][ C1] ? rcu_is_watching+0x15/0xb0 [ 512.884875][ C1] rt_spin_lock+0x165/0x400 [ 512.884895][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 512.884911][ C1] ? __pfx_process_timeout+0x10/0x10 [ 512.884966][ C1] ? rt_spin_unlock+0x14f/0x200 [ 512.884984][ C1] ? snd_rawmidi_write+0x366/0xbc0 [ 512.885067][ C1] remove_wait_queue+0x23/0x110 [ 512.885089][ C1] ? snd_rawmidi_write+0x366/0xbc0 [ 512.885110][ C1] snd_rawmidi_write+0x3cf/0xbc0 [ 512.885140][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 512.885161][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 512.885186][ C1] ? __import_iovec+0x40b/0x7e0 [ 512.885216][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 512.885261][ C1] ? security_file_permission+0x75/0x260 [ 512.885342][ C1] ? rw_verify_area+0x209/0x4d0 [ 512.885365][ C1] vfs_writev+0x4c4/0x990 [ 512.885416][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 512.885447][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 512.885475][ C1] ? __fget_files+0x2a/0x420 [ 512.885493][ C1] ? __fget_files+0x3a8/0x420 [ 512.885507][ C1] ? __fget_files+0x2a/0x420 [ 512.885544][ C1] do_writev+0x15a/0x2e0 [ 512.885567][ C1] ? __pfx_do_writev+0x10/0x10 [ 512.885593][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.885612][ C1] do_syscall_64+0x174/0x580 [ 512.885634][ C1] ? trace_irq_disable+0x3b/0x140 [ 512.885654][ C1] ? clear_bhb_loop+0x40/0x90 [ 512.885673][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.885689][ C1] RIP: 0033:0x7f12470ace59 [ 512.885704][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.885717][ C1] RSP: 002b:00007f1245306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 512.885734][ C1] RAX: ffffffffffffffda RBX: 00007f1247325fa0 RCX: 00007f12470ace59 [ 512.885746][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 512.885756][ C1] RBP: 00007f1247142d6f R08: 0000000000000000 R09: 0000000000000000 [ 512.885766][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.885776][ C1] R13: 00007f1247326038 R14: 00007f1247325fa0 R15: 00007fff4fdc86a8 [ 512.885801][ C1] [ 512.944726][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 512.944753][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 512.944779][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.944791][ T37] Call Trace: [ 512.944799][ T37] [ 512.944807][ T37] vpanic+0x56c/0xa60 [ 512.944842][ T37] ? __pfx_vpanic+0x10/0x10 [ 512.944866][ T37] ? irqentry_exit+0x218/0x8e0 [ 512.944903][ T37] panic+0xc5/0xd0 [ 512.944931][ T37] ? __pfx_panic+0x10/0x10 [ 512.944967][ T37] watchdog+0x1030/0x1030 [ 512.944998][ T37] ? watchdog+0x1c7/0x1030 [ 512.945025][ T37] kthread+0x388/0x470 [ 512.945052][ T37] ? __pfx_watchdog+0x10/0x10 [ 512.945070][ T37] ? __pfx_kthread+0x10/0x10 [ 512.945095][ T37] ret_from_fork+0x514/0xb70 [ 512.945120][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 512.945141][ T37] ? __switch_to+0xc89/0x1420 [ 512.945173][ T37] ? __pfx_kthread+0x10/0x10 [ 512.945198][ T37] ret_from_fork_asm+0x1a/0x30 [ 512.945238][ T37] [ 512.945529][ T37] Kernel Offset: disabled