last executing test programs: 3m16.950050892s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, 0x0) 3m14.320343419s ago: executing program 1 (id=143): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f00000001c0)) 3m11.870717888s ago: executing program 1 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000180), 0x1003) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x40240) ioctl$int_in(r3, 0x5452, &(0x7f0000000380)=0x4) 3m9.600522669s ago: executing program 1 (id=150): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000019640)=ANY=[@ANYBLOB="1201100100000020570700a3f0000000000109022400010000e0200904000002030004000921011006012206000905810310007d050b008f2cd9641451fadea6c180bd4f766ff37bf8701f52eaa8b7dc705c79dc333b276554cf704aec991b98159d3d8af06de8c8f686a50c191433f841e28306f4c745768f531362b764"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, 0x28, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x2, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x4000) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x130) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000003c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r7, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000019480)=0x40003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000194c0)) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000019540)={0x0, 0x0, &(0x7f0000019580)={&(0x7f00000195c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3m6.923680001s ago: executing program 1 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, 0x0, 0x0) capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/net/syz_tun/napi_defer_hard_irqs\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m4.439740884s ago: executing program 1 (id=156): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}}], 0x1, 0x20044034) r0 = open(0x0, 0x14d1c2, 0xf) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) pwritev2(r0, 0x0, 0x0, 0x6001800, 0x0, 0x0) close$binfmt(r0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(0x0, 0x169cc2, 0x108) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) personality(0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x672c4000) uname(&(0x7f0000000180)=""/224) r4 = socket(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/37, 0x25, 0x1, &(0x7f0000000100)}, &(0x7f0000000280)=0x40) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r6}, 0xc) 2m47.981765037s ago: executing program 32 (id=156): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}}], 0x1, 0x20044034) r0 = open(0x0, 0x14d1c2, 0xf) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) pwritev2(r0, 0x0, 0x0, 0x6001800, 0x0, 0x0) close$binfmt(r0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(0x0, 0x169cc2, 0x108) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) personality(0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x672c4000) uname(&(0x7f0000000180)=""/224) r4 = socket(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/37, 0x25, 0x1, &(0x7f0000000100)}, &(0x7f0000000280)=0x40) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r6}, 0xc) 1m52.15841926s ago: executing program 3 (id=241): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x1a1c00, 0x16f) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000640)={0x3, [0x9, 0x2, 0x7b, 0xc, 0x4, 0x328, 0x5, 0x0, 0x80, 0x1381, 0x6, 0x2, 0x300, 0x0, 0x7, 0x1c5, 0xbc, 0x0, 0x1, 0x5, 0x7, 0x3, 0x7, 0x4, 0x4, 0x0, 0x86b2, 0x2a5, 0x7, 0x6, 0x4, 0xd, 0xfff7, 0x7, 0x8, 0x4, 0x5, 0xffff, 0x2, 0xb, 0x2, 0x1, 0xc, 0x5, 0x40, 0x6, 0x4, 0x2], 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f0000000740)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000019780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000197c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000019800)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000019840)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r5, 0xffffffff}}, 0x48) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x4) finit_module(r0, 0x0, 0x0) r6 = userfaultfd(0x80001) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000c400600000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x133) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x200400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) 1m50.19153041s ago: executing program 3 (id=249): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000000800)=""/102392, 0x18ff8) mkdir(&(0x7f0000019900)='./cgroup/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000019a40)=0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000010000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x8}, 0x94) 1m46.245986541s ago: executing program 3 (id=255): r0 = memfd_create(&(0x7f0000002a00)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000002b00)=ANY=[@ANYBLOB="7f454c46060478a3060000000000000002003e00cd000000b8010000000000004000000000000000ec02002300000000000001000500380001000600b106040403000000ff0000000900000000000000f50f000000000000ff030000000000009b"], 0x78) execveat(r1, &(0x7f0000002b80)='\x00', 0x0, 0x0, 0x1000) 1m43.942665195s ago: executing program 3 (id=257): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x1a1c00, 0x16f) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000640)={0x3, [0x9, 0x2, 0x7b, 0xc, 0x4, 0x328, 0x5, 0x0, 0x80, 0x1381, 0x6, 0x2, 0x300, 0x0, 0x7, 0x1c5, 0xbc, 0x0, 0x1, 0x5, 0x7, 0x3, 0x7, 0x4, 0x4, 0x0, 0x86b2, 0x2a5, 0x7, 0x6, 0x4, 0xd, 0xfff7, 0x7, 0x8, 0x4, 0x5, 0xffff, 0x2, 0xb, 0x2, 0x1, 0xc, 0x5, 0x40, 0x6, 0x4, 0x2], 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f0000000740)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000019780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000197c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000019800)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000019840)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r5, 0xffffffff}}, 0x48) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x4) finit_module(r0, 0x0, 0x0) r6 = userfaultfd(0x80001) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000c400600000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x133) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x200400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) 1m41.624562111s ago: executing program 3 (id=260): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000196c0)=0x80000000000003) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20044084) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019840), 0x88b02, 0x0) socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000019880)={0x3, 0x40}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 1m38.999428488s ago: executing program 3 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xea2e1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.43397078s ago: executing program 33 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xea2e1000, 0x0, 0x0, 0x0, 0x0, 0x0) 34.559316518s ago: executing program 2 (id=329): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000070900010073797a30000000000900030073797a300000000048"], 0xbc}}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000640)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x141102) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000800)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000b00), 0x10) 33.283361228s ago: executing program 2 (id=331): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000196c0)=0x80000000000003) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x20044084) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019840), 0x88b02, 0x0) socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000019880)={0x3, 0x40}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 30.587477751s ago: executing program 4 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000019140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r4, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000019180), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000191c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x3, 0x1b1c, 0xc10, 0x0, 0x0, "0501"}}, 0x11a) nanosleep(&(0x7f0000019300)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = syz_open_dev$video(&(0x7f0000019380), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000193c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000019400)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000019440)}}) 24.724996667s ago: executing program 0 (id=338): clock_gettime(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000180), &(0x7f0000000280)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/139, &(0x7f00000004c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000700)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000780)=0xc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000007c0)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000800)=0x2f) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000840)=0xcf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000880)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000008c0)=0xc0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x30, 0x10, 0x804, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50188}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}]}, 0x30}}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a80)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES8, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYRES16], 0x0, 0x3fd, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 24.724868967s ago: executing program 4 (id=339): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x2, "1000"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 24.724710838s ago: executing program 2 (id=340): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019600)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, 0x0, &(0x7f0000019640)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000019680)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000019700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000019980)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) 22.883464415s ago: executing program 2 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x12c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0x7, 0xc}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x100, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xf4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xffd, 0x7374, 0x100, 0x0, [{0x6, 0x1, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x6, 0xb632, 0x9, 0x7fffffff}, {0x4, 0x7, 0x1, 0x6}, {0x9f33, 0x280000, 0x10, 0x3}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0x5, 0x0, 0x0, 0x3}, {0xfffffffe, 0x28, 0x6, 0x1}]}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 21.826068222s ago: executing program 5 (id=342): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f00000006c0), 0x2e9, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc000000160033060000000000000080e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d232010100000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000c000000000000000000000000000000050000000000000004000000000000000000000002000000020000000200041800000000000000000c000f00ee751328ffffffff9b7103b5a155ff1d1e391dba3ffd317272ee9f2931454501eb7b8a221fc4"], 0xfc}}, 0x0) syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000980)=ANY=[@ANYBLOB="1201100100000010820556014000010203010902960003010080060904000000010100000a2401000036000201020924060206010a00020c24020103020500ff016007092406040201020009052405010609240302000104042209040100001002"], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000009000000a8a4d3c4a97885524000010203010902240001011a0004090400060107010209090501020004090f00090582020004038003"], &(0x7f0000000a80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x110, 0x7f, 0x58, 0x0, 0x0, 0xdd}, 0x0, 0x0}) write$char_usb(r1, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r5, 0x8b2a, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000540)={0x2201000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) 17.768881685s ago: executing program 4 (id=343): socket$nl_generic(0x10, 0x3, 0x10) flock(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019b40)=0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) io_setup(0x3f, &(0x7f0000019b80)=0x0) r5 = timerfd_create(0x0, 0x0) io_submit(r4, 0x3, &(0x7f0000019bc0)=[&(0x7f0000019c00)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0]) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000019d00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) shutdown(r6, 0x1) semop(0x0, 0x0, 0x0) 15.787120536s ago: executing program 5 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c0002400000000000000001"], 0x60}}, 0x0) 15.64367517s ago: executing program 4 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000380)='./mnt\x00') symlink(&(0x7f0000000140)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 15.55373031s ago: executing program 5 (id=346): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x7) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)={[{@redirect_dir_off}, {@userxattr}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000440)='./sys/class/net/lo/dev_id\x00', r2, 0x4000, r2}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x8302) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x1000000000000244) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./gadget\x00', &(0x7f0000000800)='gadgetfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000840)='./sys\x00', &(0x7f0000000880)=""/106, 0x6a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000940)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/ep1in-bulk\x00', 0x2, 0x0) 14.471410299s ago: executing program 0 (id=347): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x963b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "add3f79e21516beba73438d5168a0754f6d0f6d1c7f04adc89c6223990973fbda59e477a600aca0c108601d8a16244ebf3d311d99db244b2f973dc671ac920f5", 0x21}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r5, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019640)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r1, 0x0) write(0xffffffffffffffff, &(0x7f00000196c0), 0x11000) r6 = fsopen(&(0x7f0000019700)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r6) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffef, 0x5, 0x1, 0x48, 0x1, 0xfb}]}) 12.237686816s ago: executing program 0 (id=348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) mount(&(0x7f000001a6c0)=@nullb, &(0x7f000001a700)='./cgroup\x00', &(0x7f000001a740)='btrfs\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) 11.453673376s ago: executing program 2 (id=349): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x1a1c00, 0x16f) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000640)={0x3, [0x9, 0x2, 0x7b, 0xc, 0x4, 0x328, 0x5, 0x0, 0x80, 0x1381, 0x6, 0x2, 0x300, 0x0, 0x7, 0x1c5, 0xbc, 0x0, 0x1, 0x5, 0x7, 0x3, 0x7, 0x4, 0x4, 0x0, 0x86b2, 0x2a5, 0x7, 0x6, 0x4, 0xd, 0xfff7, 0x7, 0x8, 0x4, 0x5, 0xffff, 0x2, 0xb, 0x2, 0x1, 0xc, 0x5, 0x40, 0x6, 0x4, 0x2], 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r4, &(0x7f0000000740)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000019780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000197c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000019800), 0x106, 0x1}}, 0x20) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x4) finit_module(r0, 0x0, 0x0) r6 = userfaultfd(0x80001) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000c400600000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x133) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x200400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) 9.622723762s ago: executing program 0 (id=350): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000000800)=""/102392, 0x18ff8) mkdir(&(0x7f0000019900)='./cgroup/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000019a40)=0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYBLOB="00000000000000116608000010000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xa, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x8}, 0x94) 8.334879353s ago: executing program 2 (id=351): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0xd, 0x0, 0x6, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x2, 0x1, 0x3, 0x4, 0x4}) 8.322586274s ago: executing program 5 (id=352): socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000197c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000019800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f00000198c0)={0x3c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000600)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000019680)='./config\x00', &(0x7f00000196c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) 6.913362228s ago: executing program 5 (id=353): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/4\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000c80)=0x10000000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000d40)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000d80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000dc0), 0x0, 0x0) read$msr(r4, &(0x7f0000000e00)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(&(0x7f0000019e00), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000019e40)={0x9, 0x7, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) 5.836615177s ago: executing program 4 (id=354): socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000197c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000019800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f00000198c0)={0x3c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019600)=0x7) mount(0x0, &(0x7f0000019680)='./config\x00', &(0x7f00000196c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000019740)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000019780)='./config/usb_gadget/g1/os_desc/c.1\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 4.258269398s ago: executing program 4 (id=355): socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000197c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000019800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f00000198c0)={0x3c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019600)=0x7) mount(0x0, &(0x7f0000019680)='./config\x00', &(0x7f00000196c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) symlinkat(&(0x7f0000019740)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000019780)='./config/usb_gadget/g1/os_desc/c.1\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$nl_netfilter(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) 3.698543595s ago: executing program 0 (id=356): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x963b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "add3f79e21516beba73438d5168a0754f6d0f6d1c7f04adc89c6223990973fbda59e477a600aca0c108601d8a16244ebf3d311d99db244b2f973dc671ac920f5", 0x21}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r5, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019640)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r1, 0x0) write(0xffffffffffffffff, &(0x7f00000196c0), 0x11000) r6 = fsopen(&(0x7f0000019700)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r6) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffef, 0x5, 0x1, 0x48, 0x1, 0xfb}]}) 1.910538636s ago: executing program 0 (id=357): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000070900010073797a30000000000900030073797a300000000048"], 0xbc}}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x141102) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000800)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000b00), 0x10) 0s ago: executing program 5 (id=358): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) kernel console output (not intermixed with test programs): 0: unexpected cc 0x1003 length: 249 > 9 [ 82.909346][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.915652][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.926922][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.929703][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.935197][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.945294][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.956792][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.958333][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.970546][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.974186][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.978889][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.986105][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.992902][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.010362][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.026163][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.033743][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.042677][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.051262][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.096812][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 83.114654][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 83.121399][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.132883][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.148004][ T5793] (null): rxe_set_mtu: Set mtu to 1024 [ 83.154798][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.161495][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.192345][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.276980][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 83.293791][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.524711][ T5785] infiniband rxe0: set active [ 83.533967][ T5785] infiniband rxe0: added rxe_eth0 [ 83.540638][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.632079][ T5785] RDS/IB: rxe0: added [ 83.636820][ T5785] smc: adding ib device rxe0 with port count 1 [ 83.645189][ T5785] smc: ib device rxe0 port 1 has pnetid [ 83.666887][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.674975][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 83.704765][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.825870][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 84.000883][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.008770][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.016207][ T5793] bridge_slave_0: entered allmulticast mode [ 84.025034][ T5793] bridge_slave_0: entered promiscuous mode [ 84.034756][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.055104][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.068614][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.078679][ T5793] bridge_slave_1: entered allmulticast mode [ 84.086559][ T5793] bridge_slave_1: entered promiscuous mode [ 84.133683][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.148418][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.155936][ T5784] bridge_slave_0: entered allmulticast mode [ 84.190555][ T5784] bridge_slave_0: entered promiscuous mode [ 84.207511][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.217784][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.225611][ T5784] bridge_slave_1: entered allmulticast mode [ 84.237047][ T5784] bridge_slave_1: entered promiscuous mode [ 84.295622][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.322055][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.338704][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.383800][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.399107][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.436311][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.507575][ T5793] team0: Port device team_slave_0 added [ 84.531644][ T5793] team0: Port device team_slave_1 added [ 84.643843][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.651237][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.677807][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.733394][ T5784] team0: Port device team_slave_0 added [ 84.753802][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.760932][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.789028][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.824825][ T5784] team0: Port device team_slave_1 added [ 84.920841][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.927857][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.957659][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.982292][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.989812][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.996992][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.018831][ T5786] bridge_slave_0: entered allmulticast mode [ 85.026286][ T5786] bridge_slave_0: entered promiscuous mode [ 85.044059][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.062135][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.069453][ T5786] bridge_slave_1: entered allmulticast mode [ 85.076956][ T5786] bridge_slave_1: entered promiscuous mode [ 85.102549][ T5094] Bluetooth: hci0: command tx timeout [ 85.102569][ T5795] Bluetooth: hci3: command tx timeout [ 85.110727][ T52] Bluetooth: hci1: command tx timeout [ 85.133150][ T5793] hsr_slave_0: entered promiscuous mode [ 85.140654][ T5793] hsr_slave_1: entered promiscuous mode [ 85.152567][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.160673][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.186839][ T52] Bluetooth: hci2: command tx timeout [ 85.193967][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.327852][ T5784] hsr_slave_0: entered promiscuous mode [ 85.338545][ T5784] hsr_slave_1: entered promiscuous mode [ 85.345026][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.353331][ T5784] Cannot create hsr debugfs directory [ 85.362017][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.378691][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.495617][ T5786] team0: Port device team_slave_0 added [ 85.509030][ T5786] team0: Port device team_slave_1 added [ 85.555705][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.562751][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.588746][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.607670][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.615209][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.641604][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.826366][ T5786] hsr_slave_0: entered promiscuous mode [ 85.833390][ T5786] hsr_slave_1: entered promiscuous mode [ 85.840058][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.847630][ T5786] Cannot create hsr debugfs directory [ 86.023330][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.044479][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.090371][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.104749][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.156381][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.214405][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.253764][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.264059][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.297151][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.341407][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.349188][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.356435][ T5785] bridge_slave_0: entered allmulticast mode [ 86.365940][ T5785] bridge_slave_0: entered promiscuous mode [ 86.376381][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.383799][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.391233][ T5785] bridge_slave_1: entered allmulticast mode [ 86.398816][ T5785] bridge_slave_1: entered promiscuous mode [ 86.453604][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.481984][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.494312][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.510753][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.526619][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.537742][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.590463][ T5785] team0: Port device team_slave_0 added [ 86.606990][ T5785] team0: Port device team_slave_1 added [ 86.655852][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.663091][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.689708][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.711518][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.720812][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.747409][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.855341][ T5785] hsr_slave_0: entered promiscuous mode [ 86.865472][ T5785] hsr_slave_1: entered promiscuous mode [ 86.873008][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.885908][ T5785] Cannot create hsr debugfs directory [ 87.024208][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.104210][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.117272][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.179059][ T52] Bluetooth: hci1: command tx timeout [ 87.179084][ T5795] Bluetooth: hci0: command tx timeout [ 87.184510][ T52] Bluetooth: hci3: command tx timeout [ 87.204355][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.211812][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.234277][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.258846][ T52] Bluetooth: hci2: command tx timeout [ 87.307889][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.315137][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.365067][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.440924][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.466242][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.473461][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.503026][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.510334][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.541300][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.548531][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.585613][ T5784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.601287][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.637969][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.645257][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.746398][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.789560][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.811700][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.847437][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.093635][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.180929][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.200015][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.247698][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.254917][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.297004][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.304256][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.421153][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.440205][ T5784] veth0_vlan: entered promiscuous mode [ 88.486280][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.514815][ T5784] veth1_vlan: entered promiscuous mode [ 88.630364][ T5786] veth0_vlan: entered promiscuous mode [ 88.637708][ T5793] veth0_vlan: entered promiscuous mode [ 88.672262][ T5786] veth1_vlan: entered promiscuous mode [ 88.684351][ T5784] veth0_macvtap: entered promiscuous mode [ 88.703541][ T5793] veth1_vlan: entered promiscuous mode [ 88.727364][ T5784] veth1_macvtap: entered promiscuous mode [ 88.806078][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.842499][ T5793] veth0_macvtap: entered promiscuous mode [ 88.864725][ T5786] veth0_macvtap: entered promiscuous mode [ 88.876845][ T5786] veth1_macvtap: entered promiscuous mode [ 88.885573][ T5793] veth1_macvtap: entered promiscuous mode [ 88.902538][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.944465][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.953923][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963852][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.972851][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.990735][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.002734][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.014603][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.034659][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.053588][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.064704][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.076789][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.085483][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.099699][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.110617][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.121885][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.134502][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.147206][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.158618][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.168933][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.180693][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.192027][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.224479][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.233810][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.247326][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.264251][ T52] Bluetooth: hci0: command tx timeout [ 89.264288][ T5094] Bluetooth: hci1: command tx timeout [ 89.269830][ T5795] Bluetooth: hci3: command tx timeout [ 89.276988][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.295942][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.306410][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.316937][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.326855][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.338953][ T52] Bluetooth: hci2: command tx timeout [ 89.530708][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.541798][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.557134][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.577473][ T5785] veth0_vlan: entered promiscuous mode [ 89.580899][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.615127][ T5785] veth1_vlan: entered promiscuous mode [ 89.683292][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.696813][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.704895][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.720487][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.810464][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.827779][ T5785] veth0_macvtap: entered promiscuous mode [ 89.844060][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.862824][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.882489][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.894768][ T5785] veth1_macvtap: entered promiscuous mode [ 89.913925][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.006945][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.020459][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.031379][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.044405][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.064783][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.084611][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.105711][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.211617][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.260799][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.303718][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.313588][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.347794][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.396312][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.441090][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.453959][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.465970][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493517][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.525818][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.650652][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.388570][ T52] Bluetooth: hci0: command tx timeout [ 91.394048][ T52] Bluetooth: hci1: command tx timeout [ 91.400287][ T52] Bluetooth: hci3: command tx timeout [ 91.418452][ T5795] Bluetooth: hci2: command tx timeout [ 92.118221][ C0] sched: RT throttling activated [ 92.136914][ T9] cfg80211: failed to load regulatory.db [ 94.221730][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.229767][ T5901] netlink: 'syz.3.7': attribute type 3 has an invalid length. [ 94.237394][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.251141][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.258394][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.407976][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.449303][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.550639][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.696862][ T5912] FAULT_INJECTION: forcing a failure. [ 95.696862][ T5912] name fail_futex, interval 1, probability 0, space 0, times 1 [ 95.753859][ T5912] CPU: 0 PID: 5912 Comm: syz.3.10 Not tainted syzkaller #0 [ 95.761159][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.771307][ T5912] Call Trace: [ 95.774661][ T5912] [ 95.777653][ T5912] dump_stack_lvl+0x18c/0x250 [ 95.782540][ T5912] ? show_regs_print_info+0x20/0x20 [ 95.787893][ T5912] ? load_image+0x420/0x420 [ 95.792435][ T5912] ? put_pid+0xde/0x120 [ 95.796640][ T5912] ? netlink_sendmsg+0x90b/0xbf0 [ 95.801604][ T5912] should_fail_ex+0x394/0x4c0 [ 95.806320][ T5912] get_futex_key+0x136/0x1030 [ 95.811037][ T5912] ? apparmor_socket_sendmsg+0x8e/0x330 [ 95.816601][ T5912] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 95.821926][ T5912] ? futex_setup_timer+0xc0/0xc0 [ 95.826910][ T5912] ? ____sys_sendmsg+0x779/0x980 [ 95.831907][ T5912] futex_wait_setup+0xbc/0x270 [ 95.837526][ T5912] ? futex_wait_multiple+0x920/0x920 [ 95.837600][ T5914] ======================================================= [ 95.837600][ T5914] WARNING: The mand mount option has been deprecated and [ 95.837600][ T5914] and is ignored by this kernel. Remove the mand [ 95.837600][ T5914] option from the mount to silence this warning. [ 95.837600][ T5914] ======================================================= [ 95.842876][ T5912] futex_wait+0x1bc/0x5c0 [ 95.842911][ T5912] ? futex_setup_timer+0xc0/0xc0 [ 95.842938][ T5912] ? futex_wait_setup+0x270/0x270 [ 95.843031][ T5912] do_futex+0x2ff/0x3e0 [ 95.898569][ T5912] ? __ia32_sys_get_robust_list+0x110/0x110 [ 95.904543][ T5912] ? fput+0x154/0x1a0 [ 95.906178][ T5914] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.908620][ T5912] __se_sys_futex+0x3a9/0x440 [ 95.908660][ T5912] ? __x64_sys_futex+0xf0/0xf0 [ 95.908694][ T5912] ? __x64_sys_futex+0x21/0xf0 [ 95.908722][ T5912] do_syscall_64+0x55/0xb0 [ 95.908752][ T5912] ? clear_bhb_loop+0x40/0x90 [ 95.908785][ T5912] ? clear_bhb_loop+0x40/0x90 [ 95.908818][ T5912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.908859][ T5912] RIP: 0033:0x7f095799f559 [ 95.908888][ T5912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.908907][ T5912] RSP: 002b:00007f09588e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.908934][ T5912] RAX: ffffffffffffffda RBX: 00007f0957c25fa8 RCX: 00007f095799f559 [ 95.908952][ T5912] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0957c25fa8 [ 95.908968][ T5912] RBP: 00007f0957c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 95.908983][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.908998][ T5912] R13: 00007f0957c26038 R14: 00007ffd05980810 R15: 00007ffd059808f8 [ 95.909033][ T5912] [ 97.648695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.058354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.363626][ T5926] random: crng reseeded on system resumption [ 98.431833][ T5924] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 98.517480][ T5924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.208690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.560952][ T5937] xt_hashlimit: max too large, truncated to 1048576 [ 100.567830][ T5937] xt_hashlimit: overflow, rate too high: 0 [ 103.364770][ T5963] capability: warning: `syz.1.22' uses deprecated v2 capabilities in a way that may be insecure [ 105.328411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.217462][ T6001] FAULT_INJECTION: forcing a failure. [ 108.217462][ T6001] name failslab, interval 1, probability 0, space 0, times 1 [ 108.288422][ T6001] CPU: 0 PID: 6001 Comm: syz.0.29 Not tainted syzkaller #0 [ 108.295712][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.305875][ T6001] Call Trace: [ 108.309189][ T6001] [ 108.312142][ T6001] dump_stack_lvl+0x18c/0x250 [ 108.316841][ T6001] ? show_regs_print_info+0x20/0x20 [ 108.322058][ T6001] ? load_image+0x420/0x420 [ 108.326580][ T6001] ? __might_sleep+0xe0/0xe0 [ 108.331190][ T6001] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.336233][ T6001] should_fail_ex+0x394/0x4c0 [ 108.340952][ T6001] should_failslab+0x9/0x20 [ 108.345461][ T6001] slab_pre_alloc_hook+0x59/0x300 [ 108.350497][ T6001] ? vidtv_psi_pmt_stream_init+0x5a/0x430 [ 108.356236][ T6001] __kmem_cache_alloc_node+0x53/0x260 [ 108.361626][ T6001] ? vidtv_psi_pmt_stream_init+0x5a/0x430 [ 108.367364][ T6001] kmalloc_trace+0x2a/0xe0 [ 108.371804][ T6001] vidtv_psi_pmt_stream_init+0x5a/0x430 [ 108.377369][ T6001] vidtv_channel_s302m_init+0x24c/0x830 [ 108.382962][ T6001] ? vidtv_mux_init+0x3b1/0x1950 [ 108.387919][ T6001] vidtv_channels_init+0x45/0xa0 [ 108.392898][ T6001] vidtv_mux_init+0x4d4/0x1950 [ 108.397676][ T6001] ? rcu_is_watching+0x15/0xb0 [ 108.402464][ T6001] vidtv_start_feed+0x36c/0x590 [ 108.407341][ T6001] ? vidtv_i2c_func+0x10/0x10 [ 108.412036][ T6001] ? vidtv_stop_feed+0x260/0x260 [ 108.417011][ T6001] ? lock_chain_count+0x20/0x20 [ 108.421883][ T6001] ? _raw_spin_lock_irq+0xbb/0xf0 [ 108.426923][ T6001] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.432142][ T6001] dmx_section_feed_start_filtering+0x4f7/0x690 [ 108.438408][ T6001] dvb_dmxdev_filter_start+0xc9a/0x10a0 [ 108.443973][ T6001] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 108.449448][ T6001] dvb_demux_do_ioctl+0x467/0x530 [ 108.454519][ T6001] dvb_usercopy+0x195/0x2b0 [ 108.459049][ T6001] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 108.464611][ T6001] ? dvb_generic_ioctl+0xb0/0xb0 [ 108.469584][ T6001] ? dvb_demux_poll+0x210/0x210 [ 108.474546][ T6001] dvb_demux_ioctl+0x29/0x30 [ 108.479155][ T6001] __se_sys_ioctl+0xfd/0x170 [ 108.483810][ T6001] do_syscall_64+0x55/0xb0 [ 108.488251][ T6001] ? clear_bhb_loop+0x40/0x90 [ 108.492965][ T6001] ? clear_bhb_loop+0x40/0x90 [ 108.497656][ T6001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.503581][ T6001] RIP: 0033:0x7f4e0df9f559 [ 108.508050][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.527669][ T6001] RSP: 002b:00007f4e0ee36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.536096][ T6001] RAX: ffffffffffffffda RBX: 00007f4e0e225fa0 RCX: 00007f4e0df9f559 [ 108.544080][ T6001] RDX: 0000200000000300 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 108.552060][ T6001] RBP: 00007f4e0e036b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.560044][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.568022][ T6001] R13: 00007f4e0e226038 R14: 00007f4e0e225fa0 R15: 00007ffc466a6d78 [ 108.576020][ T6001] [ 108.644503][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 110.228655][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.465484][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.483835][ T5907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 110.506196][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.536937][ T5907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.552407][ T5907] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 110.648326][ T5907] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 110.687870][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.777849][ T6011] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.801188][ T5907] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 110.845729][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 110.881115][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 110.918080][ T5907] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 110.951384][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 110.967026][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 111.006544][ T5907] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 111.537954][ T5847] usb 4-1: USB disconnect, device number 2 [ 111.595066][ T5847] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 111.624883][ T5847] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 111.650276][ T5847] keyspan 4-1:1.0: device disconnected [ 113.018571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.578318][ T6030] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 115.978323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 117.409611][ T6034] netlink: 'syz.0.39': attribute type 12 has an invalid length. [ 118.248316][ T5907] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.440518][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.485443][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 118.568299][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 118.578124][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 118.640773][ T5907] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 118.696057][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.723806][ T6041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.749133][ T6041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.770874][ T5907] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 118.789008][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 118.818370][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 118.848600][ T5907] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 118.904015][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 118.943361][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 118.990738][ T5907] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 119.044659][ T5907] usb 1-1: USB disconnect, device number 2 [ 119.079618][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 119.132420][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 119.169325][ T5907] keyspan 1-1:1.0: device disconnected [ 123.248802][ T5849] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.478530][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 123.504567][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.535416][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.588520][ T5849] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 123.597754][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.638071][ T5849] usb 1-1: config 0 descriptor?? [ 124.283080][ T5849] usbhid 1-1:0.0: can't add hid device: -71 [ 124.336815][ T5849] usbhid: probe of 1-1:0.0 failed with error -71 [ 124.392428][ T5849] usb 1-1: USB disconnect, device number 3 [ 124.498449][ T5852] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.701955][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.721174][ T5852] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 124.745311][ T5852] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 124.766789][ T5852] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 124.796121][ T5852] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 124.825065][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.844939][ T6083] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.872805][ T6083] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.902843][ T5852] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 124.943976][ T5852] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 124.964161][ T5852] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 124.985234][ T5852] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 124.988623][ T5849] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.036150][ T5852] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 125.063008][ T5852] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 125.107457][ T5852] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 125.130178][ T6089] gadgetfs: bound to dummy_udc driver [ 125.173602][ T5852] usb 4-1: USB disconnect, device number 3 [ 125.198089][ T5852] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 125.236549][ T5852] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 125.267530][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.278842][ T5852] keyspan 4-1:1.0: device disconnected [ 125.314777][ T5849] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.352739][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.411014][ T5849] usb 3-1: config 0 descriptor?? [ 125.463533][ T5849] pwc: Askey VC010 type 2 USB webcam detected. [ 125.615535][ T28] audit: type=1800 audit(1793277958.037:2): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.55" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 126.048223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.108226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 126.118227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.218268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 128.290338][ T5849] pwc: recv_control_msg error -71 req 02 val 2b00 [ 128.318348][ T5849] pwc: recv_control_msg error -71 req 02 val 2700 [ 128.334777][ T5849] pwc: recv_control_msg error -71 req 02 val 2c00 [ 128.364295][ T5849] pwc: recv_control_msg error -71 req 04 val 1000 [ 128.486357][ T5849] pwc: recv_control_msg error -71 req 04 val 1300 [ 128.526510][ T5849] pwc: recv_control_msg error -71 req 04 val 1400 [ 129.550610][ T5849] pwc: recv_control_msg error -71 req 02 val 2000 [ 130.108322][ T5849] pwc: recv_control_msg error -71 req 02 val 2100 [ 130.116499][ T5849] pwc: recv_control_msg error -71 req 04 val 1500 [ 130.126999][ T5849] pwc: recv_control_msg error -71 req 02 val 2500 [ 130.145268][ T5849] pwc: recv_control_msg error -71 req 02 val 2400 [ 130.152391][ T5849] pwc: recv_control_msg error -71 req 02 val 2600 [ 130.159450][ T5849] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.166365][ T5849] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.173685][ T5849] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.180894][ T5849] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.208639][ T5849] pwc: Registered as video103. [ 130.238889][ T5849] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 130.271833][ T5849] usb 3-1: USB disconnect, device number 2 [ 130.378453][ T6106] bridge0: entered promiscuous mode [ 130.394599][ T6106] bridge0: entered allmulticast mode [ 131.941732][ T6118] netlink: 'syz.0.63': attribute type 21 has an invalid length. [ 133.219889][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.226972][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.918303][ T5847] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.140382][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.188422][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 134.223069][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 134.281268][ T5847] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 134.338304][ T5847] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 134.347423][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.595886][ T6128] nbd: must specify an index to disconnect [ 135.624867][ T6124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.709019][ T6124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.803420][ T177] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 135.849141][ T5847] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 135.860642][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 135.872240][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 135.884229][ T6131] ceph: No mds server is up or the cluster is laggy [ 135.898649][ T5847] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 135.943855][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 135.973209][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 136.038534][ T5847] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 136.153649][ T5847] usb 3-1: USB disconnect, device number 3 [ 136.189141][ T5847] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 136.227109][ T5847] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 136.285581][ T5847] keyspan 3-1:1.0: device disconnected [ 136.459663][ T28] audit: type=1800 audit(1793277968.867:3): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.68" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 136.760945][ T6141] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.764431][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 138.354745][ T6152] netlink: 'syz.0.72': attribute type 21 has an invalid length. [ 139.737125][ T6144] ALSA: mixer_oss: invalid OSS volume 'Ldev/ttyS3' [ 142.682213][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.75'. [ 148.606897][ T6174] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.044787][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 150.074378][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 150.983029][ T5847] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.572263][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.603492][ T5847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.718368][ T5847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 152.738429][ T5847] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 152.752326][ T5847] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 152.761499][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.785687][ T6187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.848596][ T6187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.883411][ T5847] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 154.106339][ T5847] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 155.168485][ T6197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.85'. [ 155.288584][ T5847] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 155.308987][ T5847] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 155.338947][ T5847] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 155.357999][ T5847] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 155.391908][ T5847] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 155.412349][ T5847] usb 1-1: USB disconnect, device number 4 [ 155.490426][ T5847] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 155.542073][ T5847] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 155.582165][ T5847] keyspan 1-1:1.0: device disconnected [ 156.811591][ T6208] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 158.229778][ T6217] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 158.263751][ T6219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 159.051209][ T6223] Zero length message leads to an empty skb [ 163.098671][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.310722][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.331396][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 163.364808][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 163.398243][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.435796][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 163.468274][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.498906][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.506409][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.536391][ T28] audit: type=1800 audit(1793277995.957:4): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.98" name="no_out_endpoint" dev="configfs" ino=9286 res=0 errno=0 [ 163.592910][ T8] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 163.639343][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 163.647136][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 163.669862][ T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 163.707856][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 163.737730][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 163.759073][ T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 163.840238][ T6249] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.965736][ T8] usb 4-1: USB disconnect, device number 4 [ 164.286397][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 164.622456][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 164.675840][ T8] keyspan 4-1:1.0: device disconnected [ 164.880472][ T6254] UBIFS error (pid: 6254): cannot open "./mnt", error -22 [ 166.957285][ T6261] FAULT_INJECTION: forcing a failure. [ 166.957285][ T6261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.028302][ T6261] CPU: 1 PID: 6261 Comm: syz.0.103 Not tainted syzkaller #0 [ 167.035854][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.045948][ T6261] Call Trace: [ 167.049265][ T6261] [ 167.052222][ T6261] dump_stack_lvl+0x18c/0x250 [ 167.057033][ T6261] ? show_regs_print_info+0x20/0x20 [ 167.062279][ T6261] ? load_image+0x420/0x420 [ 167.066827][ T6261] ? __lock_acquire+0x7eb0/0x7eb0 [ 167.071882][ T6261] ? dvb_demux_ioctl+0x29/0x30 [ 167.076689][ T6261] ? verify_lock_unused+0x140/0x140 [ 167.081957][ T6261] should_fail_ex+0x394/0x4c0 [ 167.086680][ T6261] prepare_alloc_pages+0x1e1/0x5b0 [ 167.091824][ T6261] __alloc_pages+0x134/0x460 [ 167.096531][ T6261] ? zone_statistics+0x170/0x170 [ 167.101506][ T6261] ? alloc_vmap_area+0x1c8b/0x1e50 [ 167.106661][ T6261] ? alloc_pages+0x4e1/0x740 [ 167.111285][ T6261] __get_free_pages+0xc/0x30 [ 167.115905][ T6261] kasan_populate_vmalloc+0x38/0x280 [ 167.121234][ T6261] ? do_raw_spin_unlock+0x121/0x230 [ 167.126471][ T6261] alloc_vmap_area+0x1d2d/0x1e50 [ 167.131494][ T6261] ? vm_map_ram+0xcf0/0xcf0 [ 167.136065][ T6261] ? rcu_is_watching+0x15/0xb0 [ 167.140868][ T6261] __get_vm_area_node+0x162/0x370 [ 167.145924][ T6261] ? __kasan_kmalloc+0x8f/0xa0 [ 167.150719][ T6261] __vmalloc_node_range+0x36f/0x1320 [ 167.156044][ T6261] ? vidtv_s302m_encoder_init+0x178/0x780 [ 167.161785][ T6261] ? __se_sys_ioctl+0xfd/0x170 [ 167.166577][ T6261] ? do_syscall_64+0x55/0xb0 [ 167.171192][ T6261] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.177313][ T6261] ? free_vm_area+0x50/0x50 [ 167.181863][ T6261] ? vidtv_s302m_encoder_init+0x178/0x780 [ 167.187630][ T6261] vzalloc+0x79/0x90 [ 167.191562][ T6261] ? vidtv_s302m_encoder_init+0x178/0x780 [ 167.197303][ T6261] vidtv_s302m_encoder_init+0x178/0x780 [ 167.202883][ T6261] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 167.208463][ T6261] ? rcu_is_watching+0x15/0xb0 [ 167.213260][ T6261] ? vidtv_psi_registration_desc_init+0x34/0x2a0 [ 167.219621][ T6261] ? __kmalloc+0xe5/0x240 [ 167.223992][ T6261] vidtv_channel_s302m_init+0x35b/0x830 [ 167.229578][ T6261] ? vidtv_mux_init+0x3b1/0x1950 [ 167.234555][ T6261] vidtv_channels_init+0x45/0xa0 [ 167.239523][ T6261] vidtv_mux_init+0x4d4/0x1950 [ 167.244312][ T6261] ? rcu_is_watching+0x15/0xb0 [ 167.249146][ T6261] vidtv_start_feed+0x36c/0x590 [ 167.254038][ T6261] ? vidtv_i2c_func+0x10/0x10 [ 167.258748][ T6261] ? vidtv_stop_feed+0x260/0x260 [ 167.263721][ T6261] ? lock_chain_count+0x20/0x20 [ 167.268608][ T6261] ? _raw_spin_lock_irq+0xbb/0xf0 [ 167.273668][ T6261] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.278903][ T6261] dmx_section_feed_start_filtering+0x4f7/0x690 [ 167.285204][ T6261] dvb_dmxdev_filter_start+0xc9a/0x10a0 [ 167.290790][ T6261] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 167.296284][ T6261] dvb_demux_do_ioctl+0x467/0x530 [ 167.301342][ T6261] dvb_usercopy+0x195/0x2b0 [ 167.305872][ T6261] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 167.311455][ T6261] ? dvb_generic_ioctl+0xb0/0xb0 [ 167.316444][ T6261] ? dvb_demux_poll+0x210/0x210 [ 167.321320][ T6261] dvb_demux_ioctl+0x29/0x30 [ 167.325964][ T6261] __se_sys_ioctl+0xfd/0x170 [ 167.330604][ T6261] do_syscall_64+0x55/0xb0 [ 167.335044][ T6261] ? clear_bhb_loop+0x40/0x90 [ 167.339748][ T6261] ? clear_bhb_loop+0x40/0x90 [ 167.344452][ T6261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.350554][ T6261] RIP: 0033:0x7f4e0df9f559 [ 167.355011][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.374644][ T6261] RSP: 002b:00007f4e0ee36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.383117][ T6261] RAX: ffffffffffffffda RBX: 00007f4e0e225fa0 RCX: 00007f4e0df9f559 [ 167.391142][ T6261] RDX: 0000200000000300 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 167.399233][ T6261] RBP: 00007f4e0e036b20 R08: 0000000000000000 R09: 0000000000000000 [ 167.407227][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.415220][ T6261] R13: 00007f4e0e226038 R14: 00007f4e0e225fa0 R15: 00007ffc466a6d78 [ 167.423237][ T6261] [ 167.538584][ T6261] syz.0.103: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 167.579672][ T6261] CPU: 1 PID: 6261 Comm: syz.0.103 Not tainted syzkaller #0 [ 167.587065][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.597161][ T6261] Call Trace: [ 167.600489][ T6261] [ 167.603492][ T6261] dump_stack_lvl+0x18c/0x250 [ 167.608229][ T6261] ? show_regs_print_info+0x20/0x20 [ 167.613487][ T6261] ? load_image+0x420/0x420 [ 167.618076][ T6261] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 167.624558][ T6261] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 167.631125][ T6261] warn_alloc+0x246/0x340 [ 167.635509][ T6261] ? slab_free_freelist_hook+0x154/0x240 [ 167.641636][ T6261] ? zone_watermark_ok_safe+0x230/0x230 [ 167.647239][ T6261] ? __get_vm_area_node+0x17b/0x370 [ 167.652505][ T6261] ? __get_vm_area_node+0x17b/0x370 [ 167.657777][ T6261] ? __kasan_kmalloc+0x8f/0xa0 [ 167.662635][ T6261] __vmalloc_node_range+0x394/0x1320 [ 167.667983][ T6261] ? __se_sys_ioctl+0xfd/0x170 [ 167.672802][ T6261] ? do_syscall_64+0x55/0xb0 [ 167.677445][ T6261] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.683602][ T6261] ? free_vm_area+0x50/0x50 [ 167.688173][ T6261] ? vidtv_s302m_encoder_init+0x178/0x780 [ 167.693950][ T6261] vzalloc+0x79/0x90 [ 167.697940][ T6261] ? vidtv_s302m_encoder_init+0x178/0x780 [ 167.703704][ T6261] vidtv_s302m_encoder_init+0x178/0x780 [ 167.709303][ T6261] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 167.715723][ T6261] ? rcu_is_watching+0x15/0xb0 [ 167.724596][ T6261] ? vidtv_psi_registration_desc_init+0x34/0x2a0 [ 167.732046][ T6261] ? __kmalloc+0xe5/0x240 [ 167.736466][ T6261] vidtv_channel_s302m_init+0x35b/0x830 [ 167.742053][ T6261] ? vidtv_mux_init+0x3b1/0x1950 [ 167.747029][ T6261] vidtv_channels_init+0x45/0xa0 [ 167.751999][ T6261] vidtv_mux_init+0x4d4/0x1950 [ 167.756896][ T6261] ? rcu_is_watching+0x15/0xb0 [ 167.761709][ T6261] vidtv_start_feed+0x36c/0x590 [ 167.766606][ T6261] ? vidtv_i2c_func+0x10/0x10 [ 167.771353][ T6261] ? vidtv_stop_feed+0x260/0x260 [ 167.776333][ T6261] ? lock_chain_count+0x20/0x20 [ 167.781215][ T6261] ? _raw_spin_lock_irq+0xbb/0xf0 [ 167.786289][ T6261] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.791528][ T6261] dmx_section_feed_start_filtering+0x4f7/0x690 [ 167.797827][ T6261] dvb_dmxdev_filter_start+0xc9a/0x10a0 [ 167.803417][ T6261] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 167.808917][ T6261] dvb_demux_do_ioctl+0x467/0x530 [ 167.813985][ T6261] dvb_usercopy+0x195/0x2b0 [ 167.818518][ T6261] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 167.824112][ T6261] ? dvb_generic_ioctl+0xb0/0xb0 [ 167.829098][ T6261] ? dvb_demux_poll+0x210/0x210 [ 167.833981][ T6261] dvb_demux_ioctl+0x29/0x30 [ 167.838614][ T6261] __se_sys_ioctl+0xfd/0x170 [ 167.843249][ T6261] do_syscall_64+0x55/0xb0 [ 167.847702][ T6261] ? clear_bhb_loop+0x40/0x90 [ 167.852411][ T6261] ? clear_bhb_loop+0x40/0x90 [ 167.857215][ T6261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.863142][ T6261] RIP: 0033:0x7f4e0df9f559 [ 167.867606][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.887270][ T6261] RSP: 002b:00007f4e0ee36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.895763][ T6261] RAX: ffffffffffffffda RBX: 00007f4e0e225fa0 RCX: 00007f4e0df9f559 [ 167.903793][ T6261] RDX: 0000200000000300 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 167.911794][ T6261] RBP: 00007f4e0e036b20 R08: 0000000000000000 R09: 0000000000000000 [ 167.919798][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.927794][ T6261] R13: 00007f4e0e226038 R14: 00007f4e0e225fa0 R15: 00007ffc466a6d78 [ 167.935809][ T6261] [ 167.943485][ T6261] Mem-Info: [ 167.946675][ T6261] active_anon:19385 inactive_anon:17 isolated_anon:0 [ 167.946675][ T6261] active_file:11753 inactive_file:40041 isolated_file:0 [ 167.946675][ T6261] unevictable:768 dirty:150 writeback:0 [ 167.946675][ T6261] slab_reclaimable:11207 slab_unreclaimable:100477 [ 167.946675][ T6261] mapped:24324 shmem:15191 pagetables:514 [ 167.946675][ T6261] sec_pagetables:0 bounce:0 [ 167.946675][ T6261] kernel_misc_reclaimable:0 [ 167.946675][ T6261] free:1319772 free_pcp:16729 free_cma:0 [ 168.008638][ T6261] Node 0 active_anon:74092kB inactive_anon:68kB active_file:47032kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97316kB dirty:616kB writeback:0kB shmem:55772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10760kB pagetables:2108kB sec_pagetables:0kB all_unreclaimable? no [ 168.065896][ T6261] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 168.098716][ T6261] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.230958][ T6261] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 168.236813][ T6261] Node 0 DMA32 free:1387228kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:61504kB inactive_anon:0kB active_file:47224kB inactive_file:159048kB unevictable:1536kB writepending:440kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:40856kB local_pcp:21252kB free_cma:0kB [ 168.298514][ T6261] lowmem_reserve[]: 0 0 0 0 0 [ 168.303317][ T6261] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.376321][ T6261] lowmem_reserve[]: 0 0 0 0 0 [ 168.431219][ T6261] Node 1 Normal free:3894220kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24580kB local_pcp:11940kB free_cma:0kB [ 168.502773][ T6261] lowmem_reserve[]: 0 0 0 0 0 [ 168.507568][ T6261] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.548472][ T6261] Node 0 DMA32: 941*4kB (UM) 1658*8kB (UME) 865*16kB (UME) 430*32kB (UME) 187*64kB (UME) 311*128kB (UME) 128*256kB (UME) 102*512kB (ME) 54*1024kB (ME) 27*2048kB (ME) 273*4096kB (M) = 1410196kB [ 168.588268][ T6261] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 168.642506][ T6261] Node 1 Normal: 155*4kB (UME) 60*8kB (UME) 18*16kB (UME) 73*32kB (UME) 21*64kB (UE) 8*128kB (UME) 0*256kB 2*512kB (ME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894220kB [ 168.703683][ T6261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.738336][ T6261] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.768493][ T6261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.788293][ T6261] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.827128][ T6261] 56083 total pagecache pages [ 168.847385][ T6261] 13 pages in swap cache [ 168.858219][ T6261] Free swap = 124728kB [ 168.870925][ T6261] Total swap = 124996kB [ 168.875122][ T6261] 2097051 pages RAM [ 168.888364][ T6261] 0 pages HighMem/MovableOnly [ 168.903318][ T6261] 421729 pages reserved [ 168.907516][ T6261] 0 pages cma reserved [ 173.448752][ T177] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.638508][ T177] usb 3-1: Using ep0 maxpacket: 32 [ 173.647801][ T177] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 173.661943][ T177] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 173.675391][ T177] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 173.687655][ T177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.706224][ T177] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.716365][ T177] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.738333][ T177] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 173.747437][ T177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.763202][ T177] usb 3-1: config 0 descriptor?? [ 174.018908][ T177] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.262426][ T28] audit: type=1326 audit(1793278006.687:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 174.295244][ T28] audit: type=1326 audit(1793278006.707:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 174.325826][ T28] audit: type=1326 audit(1793278006.717:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 174.358757][ C0] usblp0: nonzero read bulk status received: -71 [ 174.364049][ T5847] usb 3-1: USB disconnect, device number 4 [ 174.389424][ T5847] usblp0: removed [ 174.403281][ T28] audit: type=1326 audit(1793278006.717:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 174.448646][ T177] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 174.482364][ T28] audit: type=1326 audit(1793278006.717:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 174.514873][ T28] audit: type=1326 audit(1793278006.717:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 174.553210][ T28] audit: type=1326 audit(1793278006.807:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 174.584249][ T28] audit: type=1326 audit(1793278006.807:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aed9f559 code=0x7ffc0000 [ 175.871394][ T177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.888513][ T177] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 175.901945][ T177] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 175.911866][ T177] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 175.930978][ T177] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 175.941457][ T177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.986677][ T6294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.008887][ T6294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.040056][ T177] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 176.055159][ T177] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 176.082118][ T177] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 176.119858][ T177] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 176.169841][ T177] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 176.177639][ T177] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 176.219092][ T177] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 176.256324][ T177] usb 2-1: USB disconnect, device number 2 [ 176.289130][ T177] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 176.340783][ T177] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 176.369893][ T177] keyspan 2-1:1.0: device disconnected [ 177.658311][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.723307][ T6312] Bluetooth: MGMT ver 1.22 [ 177.869088][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.890704][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 178.858551][ T5907] usb 2-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 178.878912][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.942908][ T6318] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 178.975762][ T52] Bluetooth: hci4: urb ffff888031bfa900 submission failed (90) [ 179.021214][ T52] Bluetooth: hci0: unexpected event for opcode 0x041c [ 180.701427][ T177] usb 2-1: USB disconnect, device number 3 [ 181.778497][ T5852] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 183.120643][ T5852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.138623][ T5852] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 183.149138][ T5852] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 183.160915][ T5852] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 183.174527][ T5852] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 183.184006][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.197310][ T6328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.208383][ T6328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.235627][ T5852] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 183.267743][ T5852] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 183.293679][ T5852] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 183.313817][ T5852] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 183.334257][ T5852] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 183.361874][ T5852] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 183.384124][ T5852] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 186.054566][ T8] usb 1-1: USB disconnect, device number 5 [ 186.090347][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 186.140521][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 186.180086][ T8] keyspan 1-1:1.0: device disconnected [ 187.391984][ T6360] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 193.368297][ T5852] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.569031][ T5852] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 193.578605][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.608072][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.638380][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.650384][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.678305][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.708332][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.729342][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.757961][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.788377][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.796852][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.808072][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.838451][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.857245][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.866874][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.898716][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.910259][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.919894][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.948921][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.977795][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.291634][ T6392] can0: slcan on ttyS3. [ 194.360270][ T6392] can0 (unregistered): slcan off ttyS3. [ 194.368422][ T6393] capability: warning: `syz.2.138' uses 32-bit capabilities (legacy support in use) [ 194.393850][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.471386][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.988565][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.001054][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.028472][ T52] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 195.039012][ T5852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.056733][ T5852] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.073903][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.084730][ T5852] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 195.108235][ T5852] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 195.116663][ T5852] usb 4-1: Product: syz [ 195.121047][ T5852] usb 4-1: Manufacturer: syz [ 195.125732][ T5852] usb 4-1: SerialNumber: syz [ 195.133947][ T5852] usb 4-1: config 0 descriptor?? [ 195.180996][ T5852] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 195.482705][ T177] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 195.499868][ T6401] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 197.683321][ T177] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.696571][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 197.710951][ T177] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 197.728275][ T177] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 197.746744][ T177] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 197.771439][ T8] usb 4-1: USB disconnect, device number 5 [ 197.786266][ T8] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 197.795015][ T177] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 197.815172][ T177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.830739][ T6397] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.838422][ T6397] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.855690][ T177] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 197.877691][ T177] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 197.918332][ T177] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 197.957939][ T177] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 197.990095][ T177] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 197.997976][ T177] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 198.056914][ T177] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 199.364552][ T177] usb 1-1: USB disconnect, device number 6 [ 199.641228][ T177] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 199.752172][ T177] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 199.906750][ T177] keyspan 1-1:1.0: device disconnected [ 202.912651][ T6430] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 205.497041][ T28] audit: type=1800 audit(1793278037.797:13): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 206.174675][ T6446] syz.2.151 (6446) used greatest stack depth: 20008 bytes left [ 207.748641][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 207.755737][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 207.820997][ T5871] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 208.604554][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.103692][ T5871] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 210.114091][ T5871] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 210.124185][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 210.137438][ T5871] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 210.146929][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.254739][ T5871] usb 3-1: can't set config #1, error -71 [ 210.283073][ T5871] usb 3-1: USB disconnect, device number 5 [ 210.313220][ T5907] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 210.538862][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.578253][ T5907] usb 4-1: config 0 has no interfaces? [ 210.587024][ T5907] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 210.628578][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.647328][ T5907] usb 4-1: Product: syz [ 210.668306][ T5907] usb 4-1: Manufacturer: syz [ 210.673295][ T5907] usb 4-1: SerialNumber: syz [ 210.691085][ T5907] usb 4-1: config 0 descriptor?? [ 210.724860][ T6476] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 211.009280][ T5871] usb 4-1: USB disconnect, device number 6 [ 212.795006][ T6487] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 213.971197][ T6485] FAULT_INJECTION: forcing a failure. [ 213.971197][ T6485] name failslab, interval 1, probability 0, space 0, times 0 [ 214.078330][ T6485] CPU: 1 PID: 6485 Comm: syz.3.164 Not tainted syzkaller #0 [ 214.086000][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 214.096090][ T6485] Call Trace: [ 214.099408][ T6485] [ 214.102367][ T6485] dump_stack_lvl+0x18c/0x250 [ 214.107100][ T6485] ? show_regs_print_info+0x20/0x20 [ 214.112338][ T6485] ? load_image+0x420/0x420 [ 214.116876][ T6485] ? __might_sleep+0xe0/0xe0 [ 214.121498][ T6485] ? __lock_acquire+0x7eb0/0x7eb0 [ 214.126547][ T6485] should_fail_ex+0x394/0x4c0 [ 214.131255][ T6485] should_failslab+0x9/0x20 [ 214.135784][ T6485] slab_pre_alloc_hook+0x59/0x300 [ 214.140832][ T6485] ? rcu_read_lock_any_held+0xb4/0x140 [ 214.146336][ T6485] ? ipv6_flowlabel_opt+0x16cc/0x24a0 [ 214.151741][ T6485] __kmem_cache_alloc_node+0x53/0x260 [ 214.157157][ T6485] ? ipv6_flowlabel_opt+0x16cc/0x24a0 [ 214.162565][ T6485] kmalloc_trace+0x2a/0xe0 [ 214.167031][ T6485] ipv6_flowlabel_opt+0x16cc/0x24a0 [ 214.172281][ T6485] ? ipv6_flowlabel_opt_get+0x900/0x900 [ 214.177972][ T6485] ? mark_lock+0x94/0x320 [ 214.182349][ T6485] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 214.188376][ T6485] ? lock_chain_count+0x20/0x20 [ 214.193263][ T6485] ? __local_bh_enable_ip+0x13a/0x1c0 [ 214.198663][ T6485] ? lockdep_hardirqs_on+0x98/0x150 [ 214.203897][ T6485] ? _local_bh_enable+0xa0/0xa0 [ 214.208784][ T6485] do_ipv6_setsockopt+0x12ac/0x3290 [ 214.214024][ T6485] ? sk_dst_reset+0xa0/0xa0 [ 214.218559][ T6485] ? futex_unqueue+0xcb/0xf0 [ 214.223170][ T6485] ? aa_label_sk_perm+0x500/0x6a0 [ 214.228232][ T6485] ? aa_sk_perm+0x8e0/0x8e0 [ 214.232785][ T6485] ? futex_wait_setup+0x270/0x270 [ 214.237867][ T6485] ipv6_setsockopt+0x59/0x190 [ 214.242584][ T6485] rawv6_setsockopt+0x276/0x5d0 [ 214.247471][ T6485] ? raw6_destroy+0x30/0x30 [ 214.252032][ T6485] ? __fget_files+0x28/0x460 [ 214.256656][ T6485] ? aa_sock_opt_perm+0x74/0x100 [ 214.261624][ T6485] ? sock_common_setsockopt+0x36/0xc0 [ 214.267034][ T6485] ? sock_common_recvmsg+0x190/0x190 [ 214.272366][ T6485] do_sock_setsockopt+0x175/0x1a0 [ 214.277523][ T6485] ? __fdget+0x180/0x210 [ 214.281815][ T6485] __x64_sys_setsockopt+0x182/0x200 [ 214.287054][ T6485] do_syscall_64+0x55/0xb0 [ 214.291502][ T6485] ? clear_bhb_loop+0x40/0x90 [ 214.296240][ T6485] ? clear_bhb_loop+0x40/0x90 [ 214.301043][ T6485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.306971][ T6485] RIP: 0033:0x7f095799f559 [ 214.311432][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.331331][ T6485] RSP: 002b:00007f09588e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.339801][ T6485] RAX: ffffffffffffffda RBX: 00007f0957c25fa0 RCX: 00007f095799f559 [ 214.347826][ T6485] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 214.355852][ T6485] RBP: 00007f0957a36b20 R08: 0000000000000020 R09: 0000000000000000 [ 214.363858][ T6485] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 214.371851][ T6485] R13: 00007f0957c26038 R14: 00007f0957c25fa0 R15: 00007ffd059808f8 [ 214.379878][ T6485] [ 219.448481][ T5871] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 219.678443][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.711116][ T5871] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 219.734491][ T5871] usb 1-1: config 0 has no interface number 0 [ 219.754868][ T5871] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 219.795574][ T5871] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.829404][ T5871] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 219.838723][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.856890][ T5871] usb 1-1: Product: syz [ 219.861455][ T5871] usb 1-1: Manufacturer: syz [ 219.868546][ T5871] usb 1-1: SerialNumber: syz [ 219.897978][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.916197][ T5871] usb 1-1: config 0 descriptor?? [ 219.929000][ T6502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.936249][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 219.958272][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 219.969292][ T5871] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 219.998273][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 220.023842][ T5871] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 220.036897][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 220.072224][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.113643][ T6506] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.131043][ T6506] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.169783][ T8] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 220.207790][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 220.227373][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 220.270853][ T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 220.357403][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 220.379438][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 220.394777][ T5871] usb 1-1: USB disconnect, device number 7 [ 220.402983][ T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 220.460582][ T5871] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 220.471566][ T8] usb 4-1: USB disconnect, device number 7 [ 220.541370][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 220.554514][ T5871] cyberjack 1-1:0.69: device disconnected [ 220.582891][ T8] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 220.610099][ T8] keyspan 4-1:1.0: device disconnected [ 222.499387][ T6516] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 225.482527][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.499131][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.513280][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.530349][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.556601][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.568245][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.205817][ T6529] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.460466][ T5907] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 227.676285][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.688090][ T5907] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 227.731304][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.794812][ T5907] usb 4-1: config 0 descriptor?? [ 227.854255][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 227.881860][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.898712][ T52] Bluetooth: hci4: command tx timeout [ 228.077117][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 228.309440][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 228.343006][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 228.361401][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.285862][ T5907] pwc: recv_control_msg error -71 req 04 val 1300 [ 229.300086][ T5907] pwc: recv_control_msg error -71 req 04 val 1400 [ 229.310595][ T5907] pwc: recv_control_msg error -71 req 02 val 2000 [ 229.317539][ T5907] pwc: recv_control_msg error -71 req 02 val 2100 [ 229.343999][ T5907] pwc: recv_control_msg error -71 req 04 val 1500 [ 229.381339][ T5907] pwc: recv_control_msg error -71 req 02 val 2500 [ 229.409331][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.428354][ T5907] pwc: recv_control_msg error -71 req 02 val 2400 [ 229.448681][ T5907] pwc: recv_control_msg error -71 req 02 val 2600 [ 229.501448][ T5907] pwc: recv_control_msg error -71 req 02 val 2900 [ 229.558405][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 229.582806][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 229.599138][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 229.608483][ T5907] pwc: Registered as video103. [ 229.615372][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 229.630988][ T5907] usb 4-1: USB disconnect, device number 8 [ 230.058331][ T52] Bluetooth: hci4: command tx timeout [ 231.109334][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.778621][ T52] Bluetooth: hci4: command tx timeout [ 235.319695][ T52] Bluetooth: hci4: command tx timeout [ 235.327552][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.419632][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.427050][ T6529] bridge_slave_0: entered allmulticast mode [ 235.499891][ T6529] bridge_slave_0: entered promiscuous mode [ 235.571037][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.588755][ T6567] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 235.590873][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.614423][ T6529] bridge_slave_1: entered allmulticast mode [ 235.631362][ T6529] bridge_slave_1: entered promiscuous mode [ 235.638785][ T57] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 237.364282][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.472142][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.511582][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.590629][ T6529] team0: Port device team_slave_0 added [ 237.610059][ T6529] team0: Port device team_slave_1 added [ 237.685688][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.698232][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.753828][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.795733][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.821705][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.868315][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.256991][ T6529] hsr_slave_0: entered promiscuous mode [ 238.309025][ T6529] hsr_slave_1: entered promiscuous mode [ 238.338455][ T6529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.347143][ T6529] Cannot create hsr debugfs directory [ 239.264203][ T5795] Bluetooth: hci2: unexpected event for opcode 0x041c [ 240.740313][ T6529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.794229][ T6592] syz.0.185 uses obsolete (PF_INET,SOCK_PACKET) [ 240.923560][ T6593] kernel profiling enabled (shift: 7) [ 241.028259][ T5907] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.420402][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.908307][ T5907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 241.918294][ T5907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 241.918366][ T6529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.928045][ T5907] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 241.948642][ T5907] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 241.957734][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.982650][ T6590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.996743][ T6529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.013707][ T6590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.044704][ T5907] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 242.630069][ T6598] syz.2.186[6598]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 243.872588][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 243.898341][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 243.907746][ T5907] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 243.937275][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 244.004770][ T5907] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 244.050329][ T5907] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 244.122466][ T5907] usb 4-1: USB disconnect, device number 9 [ 244.138568][ T6529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.172332][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 244.275219][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 244.436368][ T5907] keyspan 4-1:1.0: device disconnected [ 249.182453][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.296904][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.377823][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.386019][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.545646][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.553216][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.808577][ T42] hsr_slave_0: left promiscuous mode [ 251.575369][ T42] hsr_slave_1: left promiscuous mode [ 251.662147][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.720011][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.748284][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.844428][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.904544][ T42] bridge_slave_1: left allmulticast mode [ 252.934628][ T42] bridge_slave_1: left promiscuous mode [ 252.980198][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.061745][ T42] bridge_slave_0: left allmulticast mode [ 253.108340][ T42] bridge_slave_0: left promiscuous mode [ 253.114294][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.220438][ T6633] tmpfs: Unknown parameter 'grpquota_b' [ 254.734753][ T5871] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 255.012909][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.078490][ T5871] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 255.113911][ T5871] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 255.282652][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 255.463543][ T5871] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 255.543304][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.614941][ T42] veth1_macvtap: left promiscuous mode [ 255.623753][ T42] veth0_macvtap: left promiscuous mode [ 255.630080][ T42] veth1_vlan: left promiscuous mode [ 255.635912][ T42] veth0_vlan: left promiscuous mode [ 255.648695][ T6640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.666345][ T6640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.694764][ T5871] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 256.548217][ T6649] trusted_key: encrypted_key: insufficient parameters specified [ 257.410342][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.416683][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.465816][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 257.473874][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 257.486581][ T5871] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 257.508819][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 257.521696][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 257.557559][ T5871] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 257.610457][ T5871] usb 4-1: USB disconnect, device number 10 [ 257.639072][ T5871] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 257.672715][ T5871] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 257.697760][ T5871] keyspan 4-1:1.0: device disconnected [ 257.923464][ T42] bond1 (unregistering): Released all slaves [ 258.957251][ T42] team0 (unregistering): Port device team_slave_1 removed [ 260.111530][ T42] team0 (unregistering): Port device team_slave_0 removed [ 260.190866][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.251406][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.605015][ T42] bond0 (unregistering): Released all slaves [ 260.901279][ T6663] netlink: 'syz.3.200': attribute type 21 has an invalid length. [ 261.556855][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.300484][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 263.368285][ T5907] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.719361][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.758285][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 263.818236][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 263.848319][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 263.890651][ T5907] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 263.929834][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.984459][ T6685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.013473][ T6685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.054200][ T5907] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 264.099209][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 264.125482][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 264.157731][ T5907] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 264.196140][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 264.211248][ T6529] veth0_vlan: entered promiscuous mode [ 264.238216][ T5907] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 264.271000][ T6529] veth1_vlan: entered promiscuous mode [ 264.288716][ T5907] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 264.391084][ T6529] veth0_macvtap: entered promiscuous mode [ 264.425830][ T6529] veth1_macvtap: entered promiscuous mode [ 264.498762][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.568187][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.578107][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.614904][ T177] usb 1-1: USB disconnect, device number 8 [ 264.636055][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.661856][ T177] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 264.671998][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.704837][ T177] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 264.714641][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.739792][ T177] keyspan 1-1:1.0: device disconnected [ 264.749513][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.783658][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.828222][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.022515][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.141170][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.292427][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.473206][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.699903][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.747077][ T6529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.785364][ T6529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.794988][ T6529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.803816][ T6529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.073574][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.112585][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.203110][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.425729][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.863182][ T6721] netlink: 'syz.0.209': attribute type 21 has an invalid length. [ 267.992028][ T6725] process 'syz.4.172' launched '/dev/fd/7' with NULL argv: empty string added [ 268.403048][ T6736] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 269.931717][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 270.224502][ T6761] netlink: 'syz.3.218': attribute type 21 has an invalid length. [ 270.310964][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.369113][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 270.379541][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 270.389933][ T5847] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 270.405972][ T5847] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 270.415657][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.460388][ T6748] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.609781][ T6748] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.760091][ T5847] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 270.869119][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 270.876886][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 270.934824][ T5847] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 270.987449][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 271.031420][ T5847] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 271.112281][ T6768] FAULT_INJECTION: forcing a failure. [ 271.112281][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 271.130586][ T5847] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 271.173037][ T6768] CPU: 1 PID: 6768 Comm: syz.0.220 Not tainted syzkaller #0 [ 271.180411][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 271.190503][ T6768] Call Trace: [ 271.193792][ T6768] [ 271.196747][ T6768] dump_stack_lvl+0x18c/0x250 [ 271.201534][ T6768] ? show_regs_print_info+0x20/0x20 [ 271.206746][ T6768] ? load_image+0x420/0x420 [ 271.211280][ T6768] ? __might_sleep+0xe0/0xe0 [ 271.215909][ T6768] ? __lock_acquire+0x7eb0/0x7eb0 [ 271.220978][ T6768] should_fail_ex+0x394/0x4c0 [ 271.225687][ T6768] should_failslab+0x9/0x20 [ 271.230209][ T6768] slab_pre_alloc_hook+0x59/0x300 [ 271.235253][ T6768] ? bpf_int_jit_compile+0x1e3/0x1240 [ 271.240659][ T6768] __kmem_cache_alloc_node+0x53/0x260 [ 271.246099][ T6768] ? bpf_int_jit_compile+0x1e3/0x1240 [ 271.251507][ T6768] kmalloc_trace+0x2a/0xe0 [ 271.255956][ T6768] bpf_int_jit_compile+0x1e3/0x1240 [ 271.261203][ T6768] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.267198][ T6768] ? __lock_acquire+0x7eb0/0x7eb0 [ 271.272261][ T6768] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 271.278533][ T6768] ? emit_bpf_dispatcher+0x1060/0x1060 [ 271.284294][ T6768] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 271.290568][ T6768] ? do_raw_spin_unlock+0x121/0x230 [ 271.295799][ T6768] bpf_prog_select_runtime+0x499/0x800 [ 271.301283][ T6768] ? bpf_obj_name_cpy+0x194/0x1e0 [ 271.306344][ T6768] bpf_prog_load+0x1125/0x1610 [ 271.311146][ T6768] ? map_freeze+0x420/0x420 [ 271.315702][ T6768] ? __might_fault+0xaa/0x120 [ 271.320451][ T6768] ? __might_fault+0xc6/0x120 [ 271.325184][ T6768] ? __might_fault+0xaa/0x120 [ 271.329903][ T6768] ? bpf_lsm_bpf+0x9/0x10 [ 271.334247][ T6768] ? security_bpf+0x7e/0xa0 [ 271.338781][ T6768] __sys_bpf+0x5ba/0x890 [ 271.343062][ T6768] ? bpf_link_show_fdinfo+0x560/0x560 [ 271.348460][ T6768] ? lock_chain_count+0x20/0x20 [ 271.353340][ T6768] __x64_sys_bpf+0x7c/0x90 [ 271.357772][ T6768] do_syscall_64+0x55/0xb0 [ 271.362218][ T6768] ? clear_bhb_loop+0x40/0x90 [ 271.366923][ T6768] ? clear_bhb_loop+0x40/0x90 [ 271.371713][ T6768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.377624][ T6768] RIP: 0033:0x7f4e0df9f559 [ 271.382053][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.401693][ T6768] RSP: 002b:00007f4e0ee36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.410129][ T6768] RAX: ffffffffffffffda RBX: 00007f4e0e225fa0 RCX: 00007f4e0df9f559 [ 271.418172][ T6768] RDX: 0000000000000094 RSI: 0000200000001180 RDI: 0000000000000005 [ 271.426186][ T6768] RBP: 00007f4e0e036b20 R08: 0000000000000000 R09: 0000000000000000 [ 271.434179][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.442430][ T6768] R13: 00007f4e0e226038 R14: 00007f4e0e225fa0 R15: 00007ffc466a6d78 [ 271.450444][ T6768] [ 271.831953][ T5907] usb 3-1: USB disconnect, device number 7 [ 271.866998][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 271.906316][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 271.940904][ T5907] keyspan 3-1:1.0: device disconnected [ 272.443787][ T6792] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 275.713826][ T6805] netlink: 'syz.3.229': attribute type 21 has an invalid length. [ 276.688422][ T5871] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 276.891626][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.004717][ T5871] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 277.034013][ T5871] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 277.068849][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 277.128311][ T5871] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 277.148839][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.164236][ T6825] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.173784][ T6825] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.208942][ T5871] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 277.247179][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 277.291740][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 277.303624][ T5871] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 277.315851][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 277.323868][ T5871] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 277.340643][ T5871] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 277.708675][ T5907] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 278.029591][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.063151][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 278.103514][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 278.153687][ T5871] usb 4-1: USB disconnect, device number 11 [ 278.157662][ T5907] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 278.188254][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.209104][ T5871] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 278.257939][ T5907] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 278.274062][ T5871] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 278.311615][ T5871] keyspan 4-1:1.0: device disconnected [ 278.668495][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 278.828484][ T5907] usb 3-1: device descriptor read/64, error -71 [ 279.118584][ T5907] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 279.390367][ T5907] usb 3-1: device descriptor read/64, error -71 [ 279.532282][ T5907] usb usb3-port1: attempt power cycle [ 279.950267][ T5907] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 280.019102][ T5907] usb 3-1: device descriptor read/8, error -71 [ 280.303861][ T5907] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 280.373247][ T8] usb 1-1: USB disconnect, device number 9 [ 280.377781][ T5907] usb 3-1: device descriptor read/8, error -71 [ 280.572083][ T5907] usb usb3-port1: unable to enumerate USB device [ 281.521060][ T6877] netlink: 'syz.3.241': attribute type 21 has an invalid length. [ 282.035736][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 285.748307][ T5849] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 285.928364][ T5849] usb 1-1: device descriptor read/64, error -71 [ 286.340426][ T5849] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 288.079780][ T5849] usb 1-1: device descriptor read/64, error -71 [ 288.243623][ T5849] usb usb1-port1: attempt power cycle [ 288.848743][ T5849] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 289.188328][ T5849] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.279524][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 289.761705][ T5849] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 289.781842][ T5849] usb 1-1: config 0 has no interface number 0 [ 289.797604][ T5849] usb 1-1: config 0 interface 184 has no altsetting 0 [ 289.916648][ T5849] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 289.928324][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.936898][ T5849] usb 1-1: Product: syz [ 289.948259][ T5849] usb 1-1: Manufacturer: syz [ 289.954518][ T5849] usb 1-1: SerialNumber: syz [ 289.981226][ T5849] usb 1-1: config 0 descriptor?? [ 289.996692][ T5849] smsc75xx v1.0.0 [ 290.064049][ T6947] netlink: 'syz.3.257': attribute type 21 has an invalid length. [ 290.614569][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 290.815240][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.292695][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 293.338207][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 293.347970][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 293.399178][ T5849] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 293.432263][ T5849] usb 1-1: USB disconnect, device number 13 [ 294.078422][ T6117] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 294.321477][ T57] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 294.508210][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 294.528387][ T6117] usb 3-1: device descriptor read/64, error -71 [ 294.547864][ T57] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.597287][ T57] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 294.647010][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.668088][ T57] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 294.698201][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.730586][ T57] usb 1-1: config 0 descriptor?? [ 294.818374][ T6117] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 294.878298][ T6991] netlink: 'syz.4.268': attribute type 21 has an invalid length. [ 294.998349][ T6117] usb 3-1: device descriptor read/64, error -71 [ 295.158535][ T6117] usb usb3-port1: attempt power cycle [ 295.258785][ T57] input: HID 1038:12b6 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1038:12B6.0001/input/input7 [ 295.462324][ T57] steelseries 0003:1038:12B6.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 295.608759][ T6117] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 295.640649][ T57] steelseries 0003:1038:12B6.0001: hid_hw_raw_request() failed with -71 [ 295.718589][ T6117] usb 3-1: device descriptor read/8, error -71 [ 295.727415][ T57] usb 1-1: USB disconnect, device number 14 [ 296.008307][ T6117] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 296.043529][ T7003] fido_id[7003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 296.087119][ T6117] usb 3-1: device descriptor read/8, error -71 [ 296.219048][ T6117] usb usb3-port1: unable to enumerate USB device [ 297.337015][ T28] audit: type=1800 audit(1793278385.757:14): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.272" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 306.125353][ T7073] warning: `syz.4.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 306.778344][ T5853] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 307.038562][ T5853] usb 3-1: device descriptor read/64, error -71 [ 307.308244][ T5853] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 307.480538][ T5853] usb 3-1: device descriptor read/64, error -71 [ 307.623056][ T5853] usb usb3-port1: attempt power cycle [ 308.098355][ T5853] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 308.168974][ T5853] usb 3-1: device descriptor read/8, error -71 [ 308.601441][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 308.708297][ T5853] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 308.755867][ T5853] usb 3-1: device descriptor read/8, error -71 [ 308.879168][ T5853] usb usb3-port1: unable to enumerate USB device [ 309.679401][ T7124] Bluetooth: (null): Invalid header checksum [ 311.693705][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.706380][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.731050][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.753555][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.763288][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 311.774025][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.848457][ T7134] 9pnet_fd: Insufficient options for proto=fd [ 314.113055][ T52] Bluetooth: hci1: command tx timeout [ 314.282098][ T7126] rxe_eth0 speed is unknown, defaulting to 1000 [ 316.442531][ T5795] Bluetooth: hci1: command tx timeout [ 316.530531][ T7141] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 317.262636][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269161][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.743978][ T52] Bluetooth: hci1: command tx timeout [ 319.712763][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 320.720930][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.738454][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.757275][ T7126] bridge_slave_0: entered allmulticast mode [ 320.798288][ T52] Bluetooth: hci1: command tx timeout [ 320.805724][ T7126] bridge_slave_0: entered promiscuous mode [ 320.845892][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.108394][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.116374][ T7126] bridge_slave_1: entered allmulticast mode [ 322.212088][ T7126] bridge_slave_1: entered promiscuous mode [ 322.415663][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.487139][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.697042][ T7126] team0: Port device team_slave_0 added [ 323.802458][ T7126] team0: Port device team_slave_1 added [ 324.953635][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.303590][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.410811][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.417828][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.520762][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.590696][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.649798][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.657651][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.751348][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.511564][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.670225][ T7126] hsr_slave_0: entered promiscuous mode [ 328.683272][ T7126] hsr_slave_1: entered promiscuous mode [ 328.692982][ T7126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.718158][ T7126] Cannot create hsr debugfs directory [ 329.609614][ T7126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.632515][ T7126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.769276][ T7126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.806933][ T7126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.212246][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.379499][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.399425][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.406628][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.437124][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.444380][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.648239][ T6117] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 330.838226][ T6117] usb 1-1: device descriptor read/64, error -71 [ 330.907913][ T11] hsr_slave_0: left promiscuous mode [ 330.924353][ T11] hsr_slave_1: left promiscuous mode [ 330.931252][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.942107][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.954805][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.963664][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.972042][ T11] bridge_slave_1: left allmulticast mode [ 330.977889][ T11] bridge_slave_1: left promiscuous mode [ 330.984761][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.995356][ T11] bridge_slave_0: left allmulticast mode [ 331.002035][ T11] bridge_slave_0: left promiscuous mode [ 331.007985][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.108198][ T6117] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 331.428411][ T6117] usb 1-1: device descriptor read/64, error -71 [ 331.644919][ T6117] usb usb1-port1: attempt power cycle [ 331.797820][ T11] veth1_macvtap: left promiscuous mode [ 331.803773][ T11] veth0_macvtap: left promiscuous mode [ 331.809707][ T11] veth1_vlan: left promiscuous mode [ 331.815195][ T11] veth0_vlan: left promiscuous mode [ 332.929407][ T6117] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 332.988933][ T6117] usb 1-1: device descriptor read/8, error -71 [ 333.283347][ T6117] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 333.329249][ T6117] usb 1-1: device descriptor read/8, error -71 [ 333.368367][ T5849] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 333.463428][ T6117] usb usb1-port1: unable to enumerate USB device [ 335.292518][ T5849] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 335.323358][ T5849] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 335.348638][ T5849] usb 3-1: Product: syz [ 335.353060][ T5849] usb 3-1: Manufacturer: syz [ 335.357694][ T5849] usb 3-1: SerialNumber: syz [ 335.380735][ T5849] usb 3-1: config 0 descriptor?? [ 335.388517][ T5849] ch341 3-1:0.0: ch341-uart converter detected [ 335.820798][ T11] team0 (unregistering): Port device team_slave_1 removed [ 335.880327][ T11] team0 (unregistering): Port device team_slave_0 removed [ 335.936845][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.994629][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.188315][ T7279] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 336.408231][ T5849] ch341-uart ttyUSB0: failed to read break control: -71 [ 337.071970][ T5849] ch341-uart: probe of ttyUSB0 failed with error -71 [ 337.099837][ T5849] usb 3-1: USB disconnect, device number 20 [ 337.107754][ T5849] ch341 3-1:0.0: device disconnected [ 338.934355][ T11] bond0 (unregistering): Released all slaves [ 339.858970][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.637365][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.313'. [ 341.662969][ T7304] jffs2: notice: (7304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.156894][ T7126] veth0_vlan: entered promiscuous mode [ 344.222163][ T7126] veth1_vlan: entered promiscuous mode [ 344.331872][ T7126] veth0_macvtap: entered promiscuous mode [ 344.371649][ T7126] veth1_macvtap: entered promiscuous mode [ 344.464279][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.508233][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.535804][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.568174][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.598249][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.253889][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.299972][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.357250][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.414892][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.459868][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.508172][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.538423][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.568173][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.590433][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.640909][ T7126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.668179][ T7126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.676947][ T7126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.708154][ T7126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.948848][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.956748][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.058662][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.066640][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.207482][ T5907] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 348.922081][ T5907] usb 1-1: device descriptor read/64, error -71 [ 349.208273][ T5907] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 349.258406][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 349.368395][ T5907] usb 1-1: device descriptor read/64, error -71 [ 349.453351][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.468857][ T57] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 349.492372][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 349.505913][ T5907] usb usb1-port1: attempt power cycle [ 349.522730][ T57] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 349.532989][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.928240][ T5907] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 349.981595][ T57] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 350.000083][ T5907] usb 1-1: device descriptor read/8, error -71 [ 350.016723][ T57] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 350.047101][ T57] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 350.087092][ T57] cxacru: probe of 6-1:1.0 failed with error -71 [ 350.136350][ T57] usb 6-1: USB disconnect, device number 2 [ 351.327300][ T5795] Bluetooth: hci4: command 0x0406 tx timeout [ 352.289842][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.321'. [ 354.191335][ T9] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 354.526180][ T9] corsair-cpro: probe of 0003:1B1C:0C10.0002 failed with error -110 [ 355.035050][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 357.336377][ T7410] Bluetooth: (null): Invalid header checksum [ 364.653988][ T5774] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 365.004933][ T5774] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -110 [ 367.352633][ T7465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.332'. [ 370.558047][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.342'. [ 370.849143][ T5847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 371.108750][ T5847] usb 6-1: Using ep0 maxpacket: 16 [ 371.215442][ T5847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.360009][ T5847] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 371.510551][ T5847] usb 6-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 371.622526][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.737145][ T5847] usb 6-1: Product: syz [ 371.806323][ T5847] usb 6-1: Manufacturer: syz [ 371.866620][ T5847] usb 6-1: SerialNumber: syz [ 372.282745][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.294864][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.657618][ T5847] usb 6-1: 0:2 : does not exist [ 376.642295][ T5847] usb 6-1: USB disconnect, device number 3 [ 376.697584][ T7485] udevd[7485]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.784008][ T7511] Bluetooth: (null): Invalid header checksum [ 377.770634][ T7513] overlayfs: conflicting options: userxattr,redirect_dir=on [ 377.953269][ T7520] gadgetfs: bound to dummy_udc driver [ 378.250800][ T5907] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 378.336532][ C1] gadgetfs: connected [ 379.945253][ T5907] gadgetfs: disconnected [ 379.950798][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.957537][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.551462][ C1] gadgetfs: connected [ 380.585687][ T5907] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 380.705090][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 380.779602][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.800677][ T7512] gadgetfs: suspended from state 3 [ 380.834680][ T7512] gadgetfs: disconnected [ 382.821202][ T7529] netlink: 'syz.2.349': attribute type 21 has an invalid length. [ 383.845554][ T5907] usb 1-1: can't set config #1, error -71 [ 383.859770][ T5907] usb 1-1: USB disconnect, device number 23 [ 392.538350][ T5852] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 392.731381][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 392.750224][ T5852] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 392.768135][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.799924][ T5852] usb 3-1: config 0 descriptor?? [ 392.838025][ T5852] as10x_usb: device has been detected [ 392.844851][ T5852] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 392.961068][ T5852] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 393.017663][ T7580] ------------[ cut here ]------------ [ 393.023732][ T7580] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 393.048394][ T7580] WARNING: CPU: 0 PID: 7580 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80 [ 393.063823][ T7580] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 393.067785][ T7580] CPU: 0 PID: 7580 Comm: syz.2.351 Not tainted syzkaller #0 [ 393.075954][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 393.086711][ T7580] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 393.092485][ T7580] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 64 ee 04 00 0f 85 d1 f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 08 d9 b1 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 393.112320][ T7580] RSP: 0018:ffffc90003c3fac0 EFLAGS: 00010246 [ 393.118496][ T7580] RAX: a256b8e8baea6800 RBX: ffff88802b0d8ce0 RCX: 0000000000080000 [ 393.126520][ T7580] RDX: ffffc9000d28a000 RSI: 0000000000002a22 RDI: 0000000000002a23 [ 393.135046][ T7580] RBP: ffffc90003c3fc20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 393.143111][ T7580] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000787f68 [ 393.151182][ T7580] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 393.159267][ T7580] FS: 00007fa3afbf46c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 393.168333][ T7580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.175715][ T7580] CR2: 000000110c2be1eb CR3: 00000000203c8000 CR4: 00000000003506f0 [ 393.183861][ T7580] Call Trace: [ 393.187327][ T7580] [ 393.190453][ T7580] ? __mutex_lock+0x30d/0xc80 [ 393.195353][ T7580] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 393.201196][ T7580] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 393.206892][ T7580] ? mutex_lock_nested+0x20/0x20 [ 393.211949][ T7580] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 393.218271][ T7580] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 393.224288][ T7580] ? mutex_unlock+0x10/0x10 [ 393.228885][ T7580] ? mutex_lock_nested+0x20/0x20 [ 393.233892][ T7580] ? _raw_spin_lock_irq+0xbb/0xf0 [ 393.239017][ T7580] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.244268][ T7580] as102_dvb_dmx_start_feed+0x70/0x280 [ 393.249839][ T7580] dmx_ts_feed_start_filtering+0x120/0x220 [ 393.255701][ T7580] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 393.261819][ T7580] dvb_dmxdev_filter_start+0x422/0x10a0 [ 393.267422][ T7580] dvb_demux_do_ioctl+0x482/0x530 [ 393.272522][ T7580] dvb_usercopy+0x195/0x2b0 [ 393.277831][ T7580] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 393.283565][ T7580] ? dvb_generic_ioctl+0xb0/0xb0 [ 393.288624][ T7580] ? dvb_demux_poll+0x210/0x210 [ 393.293527][ T7580] dvb_demux_ioctl+0x29/0x30 [ 393.298221][ T7580] __se_sys_ioctl+0xfd/0x170 [ 393.302922][ T7580] do_syscall_64+0x55/0xb0 [ 393.307444][ T7580] ? clear_bhb_loop+0x40/0x90 [ 393.312279][ T7580] ? clear_bhb_loop+0x40/0x90 [ 393.317432][ T7580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.323432][ T7580] RIP: 0033:0x7fa3aed9f559 [ 393.328598][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.348295][ T7580] RSP: 002b:00007fa3afbf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.356791][ T7580] RAX: ffffffffffffffda RBX: 00007fa3af025fa0 RCX: 00007fa3aed9f559 [ 393.364931][ T7580] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 393.372982][ T7580] RBP: 00007fa3aee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 393.381855][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.390020][ T7580] R13: 00007fa3af026038 R14: 00007fa3af025fa0 R15: 00007ffc36c28c98 [ 393.398093][ T7580] [ 393.401204][ T7580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 393.408525][ T7580] CPU: 0 PID: 7580 Comm: syz.2.351 Not tainted syzkaller #0 [ 393.415851][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 393.426059][ T7580] Call Trace: [ 393.429365][ T7580] [ 393.432370][ T7580] dump_stack_lvl+0x18c/0x250 [ 393.437094][ T7580] ? show_regs_print_info+0x20/0x20 [ 393.442345][ T7580] ? load_image+0x420/0x420 [ 393.446940][ T7580] panic+0x2ca/0x720 [ 393.450877][ T7580] ? bpf_jit_dump+0xd0/0xd0 [ 393.455438][ T7580] __warn+0x2e0/0x470 [ 393.459463][ T7580] ? __mutex_lock+0xb48/0xc80 [ 393.464224][ T7580] ? __mutex_lock+0xb48/0xc80 [ 393.469058][ T7580] report_bug+0x2be/0x4f0 [ 393.473520][ T7580] ? __mutex_lock+0xb48/0xc80 [ 393.478246][ T7580] ? __mutex_lock+0xb48/0xc80 [ 393.482965][ T7580] ? __mutex_lock+0xb4a/0xc80 [ 393.487676][ T7580] handle_bug+0xcf/0x120 [ 393.492020][ T7580] exc_invalid_op+0x1a/0x50 [ 393.496556][ T7580] asm_exc_invalid_op+0x1a/0x20 [ 393.501434][ T7580] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 393.506759][ T7580] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 64 ee 04 00 0f 85 d1 f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 08 d9 b1 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 393.526389][ T7580] RSP: 0018:ffffc90003c3fac0 EFLAGS: 00010246 [ 393.532483][ T7580] RAX: a256b8e8baea6800 RBX: ffff88802b0d8ce0 RCX: 0000000000080000 [ 393.540650][ T7580] RDX: ffffc9000d28a000 RSI: 0000000000002a22 RDI: 0000000000002a23 [ 393.548726][ T7580] RBP: ffffc90003c3fc20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 393.556726][ T7580] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000787f68 [ 393.564721][ T7580] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 393.572728][ T7580] ? __mutex_lock+0x30d/0xc80 [ 393.577446][ T7580] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 393.583123][ T7580] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 393.588806][ T7580] ? mutex_lock_nested+0x20/0x20 [ 393.593803][ T7580] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 393.599816][ T7580] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 393.605751][ T7580] ? mutex_unlock+0x10/0x10 [ 393.610286][ T7580] ? mutex_lock_nested+0x20/0x20 [ 393.615261][ T7580] ? _raw_spin_lock_irq+0xbb/0xf0 [ 393.620323][ T7580] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.625555][ T7580] as102_dvb_dmx_start_feed+0x70/0x280 [ 393.631047][ T7580] dmx_ts_feed_start_filtering+0x120/0x220 [ 393.636883][ T7580] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 393.642835][ T7580] dvb_dmxdev_filter_start+0x422/0x10a0 [ 393.648416][ T7580] dvb_demux_do_ioctl+0x482/0x530 [ 393.653470][ T7580] dvb_usercopy+0x195/0x2b0 [ 393.658010][ T7580] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 393.663591][ T7580] ? dvb_generic_ioctl+0xb0/0xb0 [ 393.668574][ T7580] ? dvb_demux_poll+0x210/0x210 [ 393.673462][ T7580] dvb_demux_ioctl+0x29/0x30 [ 393.678096][ T7580] __se_sys_ioctl+0xfd/0x170 [ 393.682734][ T7580] do_syscall_64+0x55/0xb0 [ 393.687183][ T7580] ? clear_bhb_loop+0x40/0x90 [ 393.692944][ T7580] ? clear_bhb_loop+0x40/0x90 [ 393.697660][ T7580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.703594][ T7580] RIP: 0033:0x7fa3aed9f559 [ 393.708134][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.727775][ T7580] RSP: 002b:00007fa3afbf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.737149][ T7580] RAX: ffffffffffffffda RBX: 00007fa3af025fa0 RCX: 00007fa3aed9f559 [ 393.745152][ T7580] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 393.753158][ T7580] RBP: 00007fa3aee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 393.761169][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.769250][ T7580] R13: 00007fa3af026038 R14: 00007fa3af025fa0 R15: 00007ffc36c28c98 [ 393.777270][ T7580] [ 393.780882][ T7580] Kernel Offset: disabled [ 393.785217][ T7580] Rebooting in 86400 seconds..